This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

$ rpki-client -vvf repo-rpki.idnic.net/repo/5ebbadb3-9ac8-46df-ab91-bf39dfee1bd0/0/58D7A2E054D4F6B835578031386896062B0B0CED.mft
File: 58D7A2E054D4F6B835578031386896062B0B0CED.mft (raw, json)
Hash identifier: m300tiQXJZrnwSpUIJ+dbRW5zOOkG/Qr7VIS/0E28xg=
Subject key identifier: 12:4B:CD:75:C0:AD:60:F9:F9:DF:77:E5:04:63:49:14:F6:1A:92:54
Authority key identifier: 58:D7:A2:E0:54:D4:F6:B8:35:57:80:31:38:68:96:06:2B:0B:0C:ED
Certificate issuer: /CN=58D7A2E054D4F6B835578031386896062B0B0CED
Certificate serial: 30EDA3E3DDAD2235BB7E8C8081F9C0E79A941F9E
Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/58D7A2E054D4F6B835578031386896062B0B0CED.cer
Subject info access: rsync://repo-rpki.idnic.net/repo/5ebbadb3-9ac8-46df-ab91-bf39dfee1bd0/0/58D7A2E054D4F6B835578031386896062B0B0CED.mft
Manifest number: 0516
Signing time: Mon 02 Feb 2026 05:52:01 +0000
Manifest this update: Mon 02 Feb 2026 05:47:01 +0000
Manifest next update: Thu 05 Feb 2026 09:04:01 +0000
Files and hashes: 1: 58D7A2E054D4F6B835578031386896062B0B0CED.crl (hash: 8k7yB7hmgllgBL+WcAuL+iMxR5EjBEv0dA42zP/Icjs=)
2: 3130332e39382e3132312e302f32342d3234203d3e20313335363336.roa (hash: OexevG3DSt6IOIQ8TDJTohgp2mw8T+QrRti2PWdRftM=)
3: 3130332e3130332e3137352e302f32342d3234203d3e20313335363336.roa (hash: lXDC34Tc//RCk/Qkq64mSBed2Qu8SClw4SKY3H86P70=)
4: 3130332e3130332e3139322e302f32342d3234203d3e20313335363336.roa (hash: ZWBY3WXKjlvHg1FOOk4HRgnKTIvP5SNRhqskNyIgs+A=)
5: 3130332e3130332e3139332e302f32342d3234203d3e20313335363336.roa (hash: GJUhrLI0oWXDf6ZROGFSjUwnXXl9dUvh1pZu6x2DLeU=)
Validation: OK
Signature path: rsync://repo-rpki.idnic.net/repo/5ebbadb3-9ac8-46df-ab91-bf39dfee1bd0/0/58D7A2E054D4F6B835578031386896062B0B0CED.crl
rsync://repo-rpki.idnic.net/repo/5ebbadb3-9ac8-46df-ab91-bf39dfee1bd0/0/58D7A2E054D4F6B835578031386896062B0B0CED.mft
rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/58D7A2E054D4F6B835578031386896062B0B0CED.cer
rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl
rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Thu 05 Feb 2026 05:24:03 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
30:ed:a3:e3:dd:ad:22:35:bb:7e:8c:80:81:f9:c0:e7:9a:94:1f:9e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=58D7A2E054D4F6B835578031386896062B0B0CED
Validity
Not Before: Feb 2 05:47:01 2026 GMT
Not After : Feb 5 09:04:01 2026 GMT
Subject: CN=124BCD75C0AD60F9F9DF77E504634914F61A9254
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b9:10:ed:02:ae:ba:b2:89:dd:fd:d7:7f:51:2f:
14:04:4f:29:5a:07:b0:d4:50:c1:05:04:52:a4:24:
03:c4:04:46:56:08:e7:57:18:b8:57:39:5a:25:c1:
2b:70:87:a1:09:b3:a8:c2:9e:18:9e:69:63:19:83:
25:69:ea:a7:c0:06:2f:f6:f7:9a:fe:cd:fd:db:66:
30:8c:4b:c3:80:96:56:e1:ac:06:1d:c5:55:c5:d9:
79:f6:9d:26:89:c9:5d:04:c7:c5:71:eb:be:52:a9:
7e:31:14:3d:1b:b8:c8:52:26:15:91:25:a9:59:27:
ab:75:71:53:94:c7:cf:19:66:fc:c8:7f:b4:f3:69:
4d:9b:fd:71:da:c9:fe:d9:0b:da:a4:6a:db:04:84:
b2:2b:37:5f:80:d5:0c:68:01:f0:06:4f:c0:b3:ca:
b6:75:19:95:37:a1:e3:1a:ea:b0:84:88:3c:8a:54:
98:e2:0c:6c:e9:bc:58:e2:31:2e:d4:76:61:33:6a:
dc:45:6c:9c:94:e0:24:24:05:b2:2d:f4:73:eb:cb:
33:cf:2a:36:2b:c4:85:fa:67:50:63:5f:5b:32:08:
75:c3:3a:04:ab:36:3b:75:2f:6f:16:ca:4b:a0:8a:
f5:8a:b5:08:f1:bd:64:78:f4:a2:28:21:e5:8c:ad:
9a:01
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
12:4B:CD:75:C0:AD:60:F9:F9:DF:77:E5:04:63:49:14:F6:1A:92:54
X509v3 Authority Key Identifier:
keyid:58:D7:A2:E0:54:D4:F6:B8:35:57:80:31:38:68:96:06:2B:0B:0C:ED
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://repo-rpki.idnic.net/repo/5ebbadb3-9ac8-46df-ab91-bf39dfee1bd0/0/58D7A2E054D4F6B835578031386896062B0B0CED.crl
Authority Information Access:
CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/58D7A2E054D4F6B835578031386896062B0B0CED.cer
Subject Information Access:
Signed Object - URI:rsync://repo-rpki.idnic.net/repo/5ebbadb3-9ac8-46df-ab91-bf39dfee1bd0/0/58D7A2E054D4F6B835578031386896062B0B0CED.mft
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
9c:a1:21:c4:6e:19:6f:48:2b:c5:da:de:1b:14:d0:dd:c3:57:
66:2f:ad:55:b7:59:f0:8b:e5:57:ec:0f:1a:db:52:c7:1e:56:
d8:01:61:e6:cc:d4:1b:cc:a5:5d:d6:a6:5d:a6:f2:29:6b:cd:
52:02:4b:d8:1c:8b:fb:5d:e6:d1:75:08:3b:09:7f:b9:19:ad:
6d:17:45:f0:7f:49:67:a6:01:3e:d2:47:ed:3e:dd:a4:05:f0:
b8:ce:c5:b2:66:eb:60:f7:76:b4:08:8c:90:61:20:fe:99:9a:
9e:e6:f2:92:e6:aa:cb:59:12:7b:8d:54:f1:f7:43:3a:bc:c9:
09:89:0e:8d:25:3b:3b:2f:b1:ba:dd:8d:e1:d8:81:ce:6b:11:
51:54:5e:13:2f:2f:a0:71:6e:c0:1f:6c:2e:34:bd:5f:2d:b1:
3e:65:b3:93:53:a9:5f:ca:db:e3:3c:66:aa:30:12:7b:b2:10:
80:02:a3:0d:ab:95:46:52:4a:98:24:f5:a7:4a:69:e6:0b:5d:
ad:0b:23:b0:d7:95:c4:58:05:2c:fd:9e:74:84:66:de:ad:c9:
56:83:45:38:44:11:24:f2:89:c7:0b:c7:0d:2d:87:b6:09:bb:
d9:bc:62:49:bd:b3:cb:e7:0b:90:52:f7:8c:d2:eb:ad:ab:a0:
b1:ef:37:12
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Feb 2 09:43:55 2026 by rpki-client