This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf repo-rpki.idnic.net/repo/9b7947aa-ce69-4013-a256-58799a56581c/0/581E644EEC44F9523CF189893E102BCC6008F9BE.mft File: 581E644EEC44F9523CF189893E102BCC6008F9BE.mft (raw, json) Hash identifier: YFOiJPP9/J4lJIKaIZaeEXxx5xnMacmqSdpcYUG5wVQ= Subject key identifier: CE:91:4D:2B:FB:75:FF:68:7C:BD:D7:2F:DC:EE:91:0A:AF:24:02:3D Authority key identifier: 58:1E:64:4E:EC:44:F9:52:3C:F1:89:89:3E:10:2B:CC:60:08:F9:BE Certificate issuer: /CN=581E644EEC44F9523CF189893E102BCC6008F9BE Certificate serial: 701FF37A3878DCC4DB469D6737A7941CC9631C42 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/581E644EEC44F9523CF189893E102BCC6008F9BE.cer Subject info access: rsync://repo-rpki.idnic.net/repo/9b7947aa-ce69-4013-a256-58799a56581c/0/581E644EEC44F9523CF189893E102BCC6008F9BE.mft Manifest number: 01FA Signing time: Fri 12 Dec 2025 10:10:01 +0000 Manifest this update: Fri 12 Dec 2025 10:05:01 +0000 Manifest next update: Mon 15 Dec 2025 20:56:01 +0000 Files and hashes: 1: 3130332e3138392e3132302e302f32332d3234203d3e20313338383836.roa (hash: BD1xmKcIfvv53+qbSsqU41j3RH48RKcR2IUwYcDCVHU=) 2: 581E644EEC44F9523CF189893E102BCC6008F9BE.crl (hash: 9xsbHziYBj1XWUYZcU11SGYyPO2ez+rvwZRiKBighjI=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/9b7947aa-ce69-4013-a256-58799a56581c/0/581E644EEC44F9523CF189893E102BCC6008F9BE.crl rsync://repo-rpki.idnic.net/repo/9b7947aa-ce69-4013-a256-58799a56581c/0/581E644EEC44F9523CF189893E102BCC6008F9BE.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/581E644EEC44F9523CF189893E102BCC6008F9BE.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 15 Dec 2025 20:56:01 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 70:1f:f3:7a:38:78:dc:c4:db:46:9d:67:37:a7:94:1c:c9:63:1c:42 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=581E644EEC44F9523CF189893E102BCC6008F9BE Validity Not Before: Dec 12 10:05:01 2025 GMT Not After : Dec 15 20:56:01 2025 GMT Subject: CN=CE914D2BFB75FF687CBDD72FDCEE910AAF24023D Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a1:5d:3a:3c:8c:b0:61:ea:ac:76:73:27:59:20: 70:05:a5:22:b3:fd:75:f2:81:aa:8d:0f:41:f4:21: 39:3f:13:20:80:cf:b2:2f:37:08:48:28:17:af:59: e4:d6:b0:2e:0b:c6:6d:27:22:10:53:17:78:b2:f2: e2:3f:5a:4b:86:1c:3d:e1:dd:f5:29:4b:c2:cf:da: 11:25:ef:dc:c2:ae:54:35:fd:13:cb:2c:01:bb:06: 30:11:ed:52:70:33:81:ad:12:5f:67:24:63:80:27: 1a:6a:f7:18:37:d1:bd:83:b0:ab:07:81:7f:50:cd: 1e:1e:4e:d0:e5:cd:02:c3:2c:8d:97:32:b8:f7:27: cf:88:14:49:8a:3d:e1:0b:fc:31:10:63:23:54:c6: b0:e9:68:9c:2d:9f:57:a3:6a:6b:cf:07:20:15:27: 22:fa:1f:78:01:04:7e:46:b6:3f:07:42:cf:e4:e7: 53:b1:ae:98:57:0b:84:28:e6:c2:bc:fa:ca:5f:46: a6:8a:24:e3:ce:ce:43:93:f2:24:c2:59:12:c0:85: 6f:92:00:71:00:b0:53:b2:6c:4d:87:41:55:26:cf: 4a:ad:bd:0f:13:88:01:a5:7c:28:73:c9:ab:39:cd: 7a:fc:75:f0:d9:7d:5d:55:1e:17:96:38:d0:5d:0f: 71:a9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: CE:91:4D:2B:FB:75:FF:68:7C:BD:D7:2F:DC:EE:91:0A:AF:24:02:3D X509v3 Authority Key Identifier: keyid:58:1E:64:4E:EC:44:F9:52:3C:F1:89:89:3E:10:2B:CC:60:08:F9:BE X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/9b7947aa-ce69-4013-a256-58799a56581c/0/581E644EEC44F9523CF189893E102BCC6008F9BE.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/581E644EEC44F9523CF189893E102BCC6008F9BE.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/9b7947aa-ce69-4013-a256-58799a56581c/0/581E644EEC44F9523CF189893E102BCC6008F9BE.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 63:45:51:bd:f9:10:a0:b1:46:ab:87:1f:f4:99:04:e1:a0:2f: d5:16:27:0f:bc:7e:67:6b:ed:d4:34:81:52:21:17:44:99:a3: 3d:b1:34:c2:97:30:38:2f:09:a9:44:14:d7:2a:32:71:f5:b3: 4a:f7:b3:a0:4d:c7:25:a4:4d:2c:03:b4:3b:50:f3:6b:70:cc: 1b:bf:e5:43:a7:c8:7f:70:21:3f:98:35:17:70:0d:6d:7c:b8: d8:88:74:bd:b3:07:48:a9:b7:14:75:0b:e8:3c:50:a3:cf:05: fa:66:3b:07:f4:b9:91:06:43:72:8a:d1:eb:07:9f:ce:38:86: ec:95:1c:31:56:54:14:2d:48:43:71:68:42:3f:b7:ad:e4:bf: 35:c0:22:8e:f9:72:a3:7b:cf:15:e0:3b:b6:b1:25:4d:aa:0a: 90:32:2c:f2:24:14:ed:cf:6b:9b:2b:89:8f:5b:37:80:f8:70: 6f:6b:7f:28:f3:a9:fa:f8:77:0d:ab:7a:22:fc:b6:a4:43:1b: 03:84:35:74:66:02:ca:8b:2d:e9:de:01:11:b6:00:ea:9d:f5: 51:17:87:18:53:16:62:40:3c:68:57:37:6a:f8:8a:ac:b8:a8: 61:97:81:c0:57:79:d2:4d:1e:92:0b:81:c7:d7:40:03:8f:8d: 65:cd:cd:cb -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUcB/zejh43MTbRp1nN6eUHMljHEIwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoNTgxRTY0NEVFQzQ0Rjk1MjNDRjE4OTg5M0UxMDJCQ0M2 MDA4RjlCRTAeFw0yNTEyMTIxMDA1MDFaFw0yNTEyMTUyMDU2MDFaMDMxMTAvBgNV BAMTKENFOTE0RDJCRkI3NUZGNjg3Q0JERDcyRkRDRUU5MTBBQUYyNDAyM0QwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQChXTo8jLBh6qx2cydZIHAFpSKz /XXygaqND0H0ITk/EyCAz7IvNwhIKBevWeTWsC4Lxm0nIhBTF3iy8uI/WkuGHD3h 3fUpS8LP2hEl79zCrlQ1/RPLLAG7BjAR7VJwM4GtEl9nJGOAJxpq9xg30b2DsKsH gX9QzR4eTtDlzQLDLI2XMrj3J8+IFEmKPeEL/DEQYyNUxrDpaJwtn1ejamvPByAV JyL6H3gBBH5Gtj8HQs/k51OxrphXC4Qo5sK8+spfRqaKJOPOzkOT8iTCWRLAhW+S AHEAsFOybE2HQVUmz0qtvQ8TiAGlfChzyas5zXr8dfDZfV1VHheWONBdD3GpAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUzpFNK/t1/2h8vdcv3O6RCq8kAj0wHwYDVR0j BBgwFoAUWB5kTuxE+VI88YmJPhArzGAI+b4wDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby85 Yjc5NDdhYS1jZTY5LTQwMTMtYTI1Ni01ODc5OWE1NjU4MWMvMC81ODFFNjQ0RUVD NDRGOTUyM0NGMTg5ODkzRTEwMkJDQzYwMDhGOUJFLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvNTgxRTY0NEVFQzQ0Rjk1MjNDRjE4OTg5M0UxMDJCQ0M2MDA4 RjlCRS5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vOWI3OTQ3YWEtY2U2OS00MDEzLWEy NTYtNTg3OTlhNTY1ODFjLzAvNTgxRTY0NEVFQzQ0Rjk1MjNDRjE4OTg5M0UxMDJC Q0M2MDA4RjlCRS5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAGNFUb35EKCxRquHH/SZBOGgL9UWJw+8fmdr 7dQ0gVIhF0SZoz2xNMKXMDgvCalEFNcqMnH1s0r3s6BNxyWkTSwDtDtQ82twzBu/ 5UOnyH9wIT+YNRdwDW18uNiIdL2zB0iptxR1C+g8UKPPBfpmOwf0uZEGQ3KK0esH n844huyVHDFWVBQtSENxaEI/t63kvzXAIo75cqN7zxXgO7axJU2qCpAyLPIkFO3P a5sriY9bN4D4cG9rfyjzqfr4dw2reiL8tqRDGwOENXRmAsqLLeneARG2AOqd9VEX hxhTFmJAPGhXN2r4iqy4qGGXgcBXedJNHpILgcfXQAOPjWXNzcs= -----END CERTIFICATE-----Generated at Sun Dec 14 18:55:36 2025 by rpki-client