This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

$ rpki-client -vvf repo-rpki.idnic.net/repo/ae92243a-763d-44b8-987d-08bd0da9ee3d/0/C58E232004125E8B46AB63B600900D92EB71A3B1.mft
File: C58E232004125E8B46AB63B600900D92EB71A3B1.mft (raw, json)
Hash identifier: rZxRkUeFqZh9q0SeHq9qXKW0Tdn+Ig6OoC/EjNP6TWY=
Subject key identifier: 5E:80:9F:14:A2:CE:05:47:0B:00:22:98:A4:AD:AC:CD:8E:A4:A4:26
Authority key identifier: C5:8E:23:20:04:12:5E:8B:46:AB:63:B6:00:90:0D:92:EB:71:A3:B1
Certificate issuer: /CN=C58E232004125E8B46AB63B600900D92EB71A3B1
Certificate serial: 7CD6033B94DC2D54D601A3F9C7722481773A6E5B
Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/C58E232004125E8B46AB63B600900D92EB71A3B1.cer
Subject info access: rsync://repo-rpki.idnic.net/repo/ae92243a-763d-44b8-987d-08bd0da9ee3d/0/C58E232004125E8B46AB63B600900D92EB71A3B1.mft
Manifest number: 01D5
Signing time: Sun 01 Feb 2026 03:12:01 +0000
Manifest this update: Sun 01 Feb 2026 03:07:01 +0000
Manifest next update: Wed 04 Feb 2026 04:28:01 +0000
Files and hashes: 1: C58E232004125E8B46AB63B600900D92EB71A3B1.crl (hash: +KpzIPABHs7jvPZXyq9CLK4/jIpCL6ITFoAxIya6DWc=)
2: 3130332e3131362e38322e302f32342d3234203d3e20313530393539.roa (hash: gagkqZ1Th9ULC3nGrIkxBLFj551bmKfZ+zY4Ia+9Mpo=)
3: 3130332e3131362e38332e302f32342d3234203d3e20313530393539.roa (hash: uU8O3CwjMgf4TqwrU9ZGAuoUWz86Zcgor68D+YzMzqo=)
Validation: OK
Signature path: rsync://repo-rpki.idnic.net/repo/ae92243a-763d-44b8-987d-08bd0da9ee3d/0/C58E232004125E8B46AB63B600900D92EB71A3B1.crl
rsync://repo-rpki.idnic.net/repo/ae92243a-763d-44b8-987d-08bd0da9ee3d/0/C58E232004125E8B46AB63B600900D92EB71A3B1.mft
rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/C58E232004125E8B46AB63B600900D92EB71A3B1.cer
rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl
rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Wed 04 Feb 2026 04:28:01 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
7c:d6:03:3b:94:dc:2d:54:d6:01:a3:f9:c7:72:24:81:77:3a:6e:5b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=C58E232004125E8B46AB63B600900D92EB71A3B1
Validity
Not Before: Feb 1 03:07:01 2026 GMT
Not After : Feb 4 04:28:01 2026 GMT
Subject: CN=5E809F14A2CE05470B002298A4ADACCD8EA4A426
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:f1:eb:0d:c6:6c:1d:51:ed:45:9c:28:9c:19:40:
5b:ae:55:bd:72:51:f7:a5:3d:b6:6d:f9:82:23:fa:
a9:d5:d7:18:97:d1:75:12:17:4d:1c:d9:78:4f:37:
c9:55:bb:24:e7:20:63:1e:3c:9a:ff:0a:bb:98:24:
7f:69:8d:d1:7a:32:4d:6e:12:43:69:27:d6:e9:92:
6a:1f:10:f5:77:80:33:83:9f:06:fe:ac:7e:00:bd:
b4:0f:93:a2:04:ad:80:87:01:10:51:e8:23:9d:24:
cd:ba:81:5d:01:08:80:bf:ac:a3:96:32:24:ee:47:
1c:e3:b0:96:42:f6:05:7b:0a:d8:af:b9:54:d1:bd:
14:20:27:68:14:32:f0:a3:52:6c:03:e8:b6:1e:a1:
52:c9:d5:7f:dd:1a:23:42:06:eb:5b:fd:26:5a:90:
b8:ed:a6:93:17:70:78:ec:e1:78:e7:84:71:98:e9:
6e:48:a9:41:0e:1e:f7:10:ed:4e:79:25:1a:4a:31:
c3:ce:f0:a0:30:f0:7d:13:50:76:54:ce:3c:d3:1e:
7a:56:73:85:0c:8b:a0:87:71:81:78:df:70:d4:6d:
d1:5c:84:4f:07:4b:3f:c6:0d:17:1e:96:6d:eb:be:
87:17:64:c2:91:58:1e:2d:90:61:84:2a:ca:04:10:
48:17
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
5E:80:9F:14:A2:CE:05:47:0B:00:22:98:A4:AD:AC:CD:8E:A4:A4:26
X509v3 Authority Key Identifier:
keyid:C5:8E:23:20:04:12:5E:8B:46:AB:63:B6:00:90:0D:92:EB:71:A3:B1
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://repo-rpki.idnic.net/repo/ae92243a-763d-44b8-987d-08bd0da9ee3d/0/C58E232004125E8B46AB63B600900D92EB71A3B1.crl
Authority Information Access:
CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/C58E232004125E8B46AB63B600900D92EB71A3B1.cer
Subject Information Access:
Signed Object - URI:rsync://repo-rpki.idnic.net/repo/ae92243a-763d-44b8-987d-08bd0da9ee3d/0/C58E232004125E8B46AB63B600900D92EB71A3B1.mft
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
56:1a:49:97:ec:ba:36:f8:32:18:68:2c:d3:e4:8c:cf:17:d4:
02:d8:a5:e0:82:12:7b:27:44:5c:ce:36:3a:97:4f:df:7f:be:
7c:09:55:d2:2f:c0:f8:10:f3:ac:bb:05:d5:fb:0b:73:fd:90:
3c:4e:3b:76:5f:e5:6e:26:43:4c:64:37:da:96:5d:76:9b:86:
2e:0f:0d:e5:2b:6a:e4:b3:b6:04:4a:a3:e5:6b:72:68:32:a5:
68:5a:5a:68:cc:c6:3a:7b:a3:df:5d:98:8a:02:15:72:70:a4:
4c:92:8a:2c:d8:86:12:3f:5c:f0:ae:ae:dd:38:d9:ea:da:6c:
26:af:88:90:e4:5a:e9:2e:70:07:0d:87:b6:31:dd:eb:6c:d2:
20:a8:59:da:62:01:03:06:1a:5a:4c:79:0a:aa:2f:15:5b:86:
1e:cc:5f:ae:6f:fd:5c:c8:96:f0:bf:3f:83:0d:8b:f6:e9:79:
1d:86:4e:14:e4:eb:14:8e:74:4e:db:b9:8d:31:e6:28:d2:d5:
3f:7d:aa:a0:37:0c:b2:0a:ab:27:d7:fd:ee:68:17:1e:3f:18:
7e:81:85:5a:d1:c3:4f:b7:89:99:5c:93:42:98:f8:a4:ac:91:
1a:15:b3:96:8c:18:94:23:d8:a8:04:84:b6:c6:99:79:d7:93:
a2:86:5a:a5
-----BEGIN CERTIFICATE-----
MIIFMjCCBBqgAwIBAgIUfNYDO5TcLVTWAaP5x3IkgXc6blswDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoQzU4RTIzMjAwNDEyNUU4QjQ2QUI2M0I2MDA5MDBEOTJF
QjcxQTNCMTAeFw0yNjAyMDEwMzA3MDFaFw0yNjAyMDQwNDI4MDFaMDMxMTAvBgNV
BAMTKDVFODA5RjE0QTJDRTA1NDcwQjAwMjI5OEE0QURBQ0NEOEVBNEE0MjYwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDx6w3GbB1R7UWcKJwZQFuuVb1y
UfelPbZt+YIj+qnV1xiX0XUSF00c2XhPN8lVuyTnIGMePJr/CruYJH9pjdF6Mk1u
EkNpJ9bpkmofEPV3gDODnwb+rH4AvbQPk6IErYCHARBR6COdJM26gV0BCIC/rKOW
MiTuRxzjsJZC9gV7CtivuVTRvRQgJ2gUMvCjUmwD6LYeoVLJ1X/dGiNCButb/SZa
kLjtppMXcHjs4XjnhHGY6W5IqUEOHvcQ7U55JRpKMcPO8KAw8H0TUHZUzjzTHnpW
c4UMi6CHcYF433DUbdFchE8HSz/GDRcelm3rvocXZMKRWB4tkGGEKsoEEEgXAgMB
AAGjggI8MIICODAdBgNVHQ4EFgQUXoCfFKLOBUcLACKYpK2szY6kpCYwHwYDVR0j
BBgwFoAUxY4jIAQSXotGq2O2AJANkutxo7EwDgYDVR0PAQH/BAQDAgeAMIGFBgNV
HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby9h
ZTkyMjQzYS03NjNkLTQ0YjgtOTg3ZC0wOGJkMGRhOWVlM2QvMC9DNThFMjMyMDA0
MTI1RThCNDZBQjYzQjYwMDkwMEQ5MkVCNzFBM0IxLmNybDB0BggrBgEFBQcBAQRo
MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv
L0lETklDLUlELzIvQzU4RTIzMjAwNDEyNUU4QjQ2QUI2M0I2MDA5MDBEOTJFQjcx
QTNCMS5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6
Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vYWU5MjI0M2EtNzYzZC00NGI4LTk4
N2QtMDhiZDBkYTllZTNkLzAvQzU4RTIzMjAwNDEyNUU4QjQ2QUI2M0I2MDA5MDBE
OTJFQjcxQTNCMS5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF
BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC
BQAwDQYJKoZIhvcNAQELBQADggEBAFYaSZfsujb4MhhoLNPkjM8X1ALYpeCCEnsn
RFzONjqXT99/vnwJVdIvwPgQ86y7BdX7C3P9kDxOO3Zf5W4mQ0xkN9qWXXabhi4P
DeUrauSztgRKo+VrcmgypWhaWmjMxjp7o99dmIoCFXJwpEySiizYhhI/XPCurt04
2erabCaviJDkWukucAcNh7Yx3ets0iCoWdpiAQMGGlpMeQqqLxVbhh7MX65v/VzI
lvC/P4MNi/bpeR2GThTk6xSOdE7buY0x5ijS1T99qqA3DLIKqyfX/e5oFx4/GH6B
hVrRw0+3iZlck0KY+KSskRoVs5aMGJQj2KgEhLbGmXnXk6KGWqU=
-----END CERTIFICATE-----
Generated at Mon Feb 2 10:05:14 2026 by rpki-client