This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf repo-rpki.idnic.net/repo/82fa3a39-e0ec-4fc1-9b54-353e07f005dd/0/58D7DC530F3BA4ACD0488062170E1581B67D61EA.mft File: 58D7DC530F3BA4ACD0488062170E1581B67D61EA.mft (raw, json) Hash identifier: A/qA7FoCMVjPu9dCe0F5zG0KqVlBZR5wGKTOW5TIgDo= Subject key identifier: 3E:9C:55:FE:09:8B:39:96:95:C9:A2:9B:85:25:00:40:5A:66:A7:88 Authority key identifier: 58:D7:DC:53:0F:3B:A4:AC:D0:48:80:62:17:0E:15:81:B6:7D:61:EA Certificate issuer: /CN=58D7DC530F3BA4ACD0488062170E1581B67D61EA Certificate serial: 0F8F1F9008C6C9FDADC77DFB724F3AADF647BAF2 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/58D7DC530F3BA4ACD0488062170E1581B67D61EA.cer Subject info access: rsync://repo-rpki.idnic.net/repo/82fa3a39-e0ec-4fc1-9b54-353e07f005dd/0/58D7DC530F3BA4ACD0488062170E1581B67D61EA.mft Manifest number: 0534 Signing time: Tue 02 Dec 2025 21:51:09 +0000 Manifest this update: Tue 02 Dec 2025 21:46:09 +0000 Manifest next update: Sat 06 Dec 2025 09:50:09 +0000 Files and hashes: 1: 58D7DC530F3BA4ACD0488062170E1581B67D61EA.crl (hash: HWPiuc6vUJvBc/wLsORZBpvx5n57CJQ+tTeFtTMJ/R4=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/82fa3a39-e0ec-4fc1-9b54-353e07f005dd/0/58D7DC530F3BA4ACD0488062170E1581B67D61EA.crl rsync://repo-rpki.idnic.net/repo/82fa3a39-e0ec-4fc1-9b54-353e07f005dd/0/58D7DC530F3BA4ACD0488062170E1581B67D61EA.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/58D7DC530F3BA4ACD0488062170E1581B67D61EA.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 06 Dec 2025 09:50:09 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 0f:8f:1f:90:08:c6:c9:fd:ad:c7:7d:fb:72:4f:3a:ad:f6:47:ba:f2 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=58D7DC530F3BA4ACD0488062170E1581B67D61EA Validity Not Before: Dec 2 21:46:09 2025 GMT Not After : Dec 6 09:50:09 2025 GMT Subject: CN=3E9C55FE098B399695C9A29B852500405A66A788 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b2:dc:86:51:13:6b:90:06:41:36:50:bd:62:b0: 57:85:52:4a:42:d0:32:66:31:f9:cf:4c:c7:80:bd: ec:24:bf:ad:c1:c6:aa:de:78:61:13:77:5d:43:09: 7b:0a:d3:b7:40:39:87:19:96:52:5a:35:9c:c9:cd: 9a:d4:97:d5:41:a1:c5:a5:d5:bf:61:8c:76:f1:4e: 36:30:f6:b7:24:d2:7e:fa:05:c6:8a:cc:ee:c4:35: e9:72:7d:88:77:65:77:10:11:ae:e9:9f:ca:62:91: 4f:74:15:eb:68:80:0a:6b:92:0a:ef:72:61:27:24: 2d:36:5f:0e:b9:ec:18:d0:66:f8:6a:d1:b8:fb:e5: 47:1d:61:2b:ac:83:c1:69:f9:5a:6e:6b:d2:52:8b: 2e:0e:35:89:c5:a9:3c:a0:20:72:60:ec:6d:0c:f4: 6f:a6:2f:14:d2:e3:07:81:38:cb:77:91:49:44:37: af:8b:d1:43:50:ca:8a:fb:22:45:54:e6:a0:c5:74: 17:75:05:f3:75:43:31:b9:bc:c5:19:d6:4d:c3:37: ff:c6:51:5b:db:9d:a8:10:f0:0b:24:7f:27:ea:17: 26:5a:26:39:38:b9:ae:2b:7e:0b:7b:11:d4:02:bc: 7a:c5:5e:dd:5b:b9:1b:83:cf:2c:56:db:a4:41:1b: 0e:19 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 3E:9C:55:FE:09:8B:39:96:95:C9:A2:9B:85:25:00:40:5A:66:A7:88 X509v3 Authority Key Identifier: keyid:58:D7:DC:53:0F:3B:A4:AC:D0:48:80:62:17:0E:15:81:B6:7D:61:EA X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/82fa3a39-e0ec-4fc1-9b54-353e07f005dd/0/58D7DC530F3BA4ACD0488062170E1581B67D61EA.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/58D7DC530F3BA4ACD0488062170E1581B67D61EA.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/82fa3a39-e0ec-4fc1-9b54-353e07f005dd/0/58D7DC530F3BA4ACD0488062170E1581B67D61EA.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 15:d9:e2:4c:35:97:d7:93:65:2b:20:5b:5c:9e:cf:01:af:ed: b4:84:ab:1e:c6:45:c9:37:22:21:49:42:f3:4f:9c:dc:b6:0a: 19:af:24:ac:47:27:49:ec:aa:09:af:1b:60:eb:3b:ee:37:6b: c2:da:05:92:d3:06:43:47:ad:a4:9b:fb:ac:b0:bf:b3:89:44: 5e:8c:f7:d3:1d:58:b4:e0:c4:55:23:b4:02:99:25:a2:da:f4: 50:12:bd:4b:dc:21:fb:5e:f6:84:3a:cb:68:99:9d:72:aa:01: cc:79:86:9b:04:29:98:d6:f6:a6:68:33:60:53:f8:6c:b8:4e: 94:4b:f3:b3:c7:3b:8e:04:3f:5d:0c:8e:96:a8:e1:9a:20:3a: 64:3a:c3:10:f9:f7:9e:b4:e3:80:65:71:3e:8b:f0:50:50:a4: 5e:5c:85:48:9a:b0:b7:ae:7a:dc:30:98:b0:5f:60:89:d1:30: 43:f6:7e:f5:78:4f:f3:d2:e2:4a:22:89:2a:69:dd:60:b4:40: 33:64:74:79:1b:79:a7:90:d3:6e:cb:e8:d5:65:2c:88:ba:b5: 8a:1c:a5:a4:a3:ff:84:bc:f9:9c:c1:bd:58:ac:de:cd:3b:af: f5:29:fd:2b:19:7c:41:bb:42:cf:c1:34:50:a7:82:69:44:15: a0:55:d5:bf -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUD48fkAjGyf2tx337ck86rfZHuvIwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoNThEN0RDNTMwRjNCQTRBQ0QwNDg4MDYyMTcwRTE1ODFC NjdENjFFQTAeFw0yNTEyMDIyMTQ2MDlaFw0yNTEyMDYwOTUwMDlaMDMxMTAvBgNV BAMTKDNFOUM1NUZFMDk4QjM5OTY5NUM5QTI5Qjg1MjUwMDQwNUE2NkE3ODgwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCy3IZRE2uQBkE2UL1isFeFUkpC 0DJmMfnPTMeAvewkv63BxqreeGETd11DCXsK07dAOYcZllJaNZzJzZrUl9VBocWl 1b9hjHbxTjYw9rck0n76BcaKzO7ENelyfYh3ZXcQEa7pn8pikU90FetogAprkgrv cmEnJC02Xw657BjQZvhq0bj75UcdYSusg8Fp+Vpua9JSiy4ONYnFqTygIHJg7G0M 9G+mLxTS4weBOMt3kUlEN6+L0UNQyor7IkVU5qDFdBd1BfN1QzG5vMUZ1k3DN//G UVvbnagQ8AskfyfqFyZaJjk4ua4rfgt7EdQCvHrFXt1buRuDzyxW26RBGw4ZAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUPpxV/gmLOZaVyaKbhSUAQFpmp4gwHwYDVR0j BBgwFoAUWNfcUw87pKzQSIBiFw4VgbZ9YeowDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby84 MmZhM2EzOS1lMGVjLTRmYzEtOWI1NC0zNTNlMDdmMDA1ZGQvMC81OEQ3REM1MzBG M0JBNEFDRDA0ODgwNjIxNzBFMTU4MUI2N0Q2MUVBLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvNThEN0RDNTMwRjNCQTRBQ0QwNDg4MDYyMTcwRTE1ODFCNjdE NjFFQS5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vODJmYTNhMzktZTBlYy00ZmMxLTli NTQtMzUzZTA3ZjAwNWRkLzAvNThEN0RDNTMwRjNCQTRBQ0QwNDg4MDYyMTcwRTE1 ODFCNjdENjFFQS5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBABXZ4kw1l9eTZSsgW1yezwGv7bSEqx7GRck3 IiFJQvNPnNy2ChmvJKxHJ0nsqgmvG2DrO+43a8LaBZLTBkNHraSb+6ywv7OJRF6M 99MdWLTgxFUjtAKZJaLa9FASvUvcIfte9oQ6y2iZnXKqAcx5hpsEKZjW9qZoM2BT +Gy4TpRL87PHO44EP10Mjpao4ZogOmQ6wxD5956044BlcT6L8FBQpF5chUiasLeu etwwmLBfYInRMEP2fvV4T/PS4koiiSpp3WC0QDNkdHkbeaeQ027L6NVlLIi6tYoc paSj/4S8+ZzBvVis3s07r/Up/SsZfEG7Qs/BNFCngmlEFaBV1b8= -----END CERTIFICATE-----Generated at Wed Dec 3 13:59:47 2025 by rpki-client