This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf repo-rpki.idnic.net/repo/d00f9cc7-4a69-4c9e-bba6-4d9abb56eff6/0/580F61C23A4857BE23095E060FE36642F86DA6E8.mft File: 580F61C23A4857BE23095E060FE36642F86DA6E8.mft (raw, json) Hash identifier: TXg9M9jme7/lwErLaeJQjugbpJKltAjJoAzQ+UXL6pM= Subject key identifier: AF:96:FF:7C:7F:A2:55:47:DA:17:A1:CC:9D:B4:6A:EF:15:74:55:AC Authority key identifier: 58:0F:61:C2:3A:48:57:BE:23:09:5E:06:0F:E3:66:42:F8:6D:A6:E8 Certificate issuer: /CN=580F61C23A4857BE23095E060FE36642F86DA6E8 Certificate serial: 0FF46648F40F4582BBA17BB395A3C0DEFD093CCE Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/580F61C23A4857BE23095E060FE36642F86DA6E8.cer Subject info access: rsync://repo-rpki.idnic.net/repo/d00f9cc7-4a69-4c9e-bba6-4d9abb56eff6/0/580F61C23A4857BE23095E060FE36642F86DA6E8.mft Manifest number: 02F5 Signing time: Mon 01 Dec 2025 05:40:38 +0000 Manifest this update: Mon 01 Dec 2025 05:35:38 +0000 Manifest next update: Thu 04 Dec 2025 13:48:38 +0000 Files and hashes: 1: 3130332e3137332e3233312e302f32342d3234203d3e20313437303837.roa (hash: ZuAJ9UU5ofuu/a/pfpbxOKyZsNH+A+BhN1h6JCEwmPc=) 2: 323030313a6466373a633138303a3a2f34382d3438203d3e20313437303837.roa (hash: wDJx14AXcC6zyLSHO8xooP/SWPirYqE9vUnBStY8roQ=) 3: 3130332e3137332e3233302e302f32342d3234203d3e20313437303837.roa (hash: oQhg18Sbo2ti9rlX+keHdmEowwBTrgS3kdu5j5Tcp6g=) 4: 580F61C23A4857BE23095E060FE36642F86DA6E8.crl (hash: 23a59eRBhoeIt4UfElTLMt65UtFoBvi82kUoks6V4VU=) 5: 3130332e3137332e3233302e302f32332d3233203d3e20313437303837.roa (hash: 6zcVUOjrvBXZsgJ0ACZdVFEnzsSrQV/HWX1p3BUV2ko=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/d00f9cc7-4a69-4c9e-bba6-4d9abb56eff6/0/580F61C23A4857BE23095E060FE36642F86DA6E8.crl rsync://repo-rpki.idnic.net/repo/d00f9cc7-4a69-4c9e-bba6-4d9abb56eff6/0/580F61C23A4857BE23095E060FE36642F86DA6E8.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/580F61C23A4857BE23095E060FE36642F86DA6E8.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 04 Dec 2025 13:48:38 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 0f:f4:66:48:f4:0f:45:82:bb:a1:7b:b3:95:a3:c0:de:fd:09:3c:ce Signature Algorithm: sha256WithRSAEncryption Issuer: CN=580F61C23A4857BE23095E060FE36642F86DA6E8 Validity Not Before: Dec 1 05:35:38 2025 GMT Not After : Dec 4 13:48:38 2025 GMT Subject: CN=AF96FF7C7FA25547DA17A1CC9DB46AEF157455AC Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d2:7e:be:01:3b:d5:ad:b3:4e:68:09:05:ca:7c: db:85:71:14:fe:88:41:c5:8d:3e:ac:46:92:f8:df: 2f:a0:a0:18:54:b3:df:bc:01:59:86:bb:46:34:bf: 5b:df:35:96:09:d0:d9:55:63:e5:a1:5a:81:63:f5: f6:33:08:60:a0:3d:99:16:29:6e:e3:5e:c1:29:f5: c0:cc:71:87:c7:07:03:4d:e4:cc:52:e5:1e:8c:5f: e9:6a:0f:86:9b:b9:42:2b:b8:58:ab:3d:12:2e:a9: e4:df:02:45:4c:51:e4:9f:f4:0c:f1:c1:e3:58:b1: 7a:3b:14:77:e5:89:b3:15:2b:94:25:cc:a2:0d:7c: 5f:52:fa:43:39:1e:f5:21:7a:73:d9:fc:6f:ef:e5: cc:7a:e2:44:88:c5:7c:8b:1d:a2:7b:36:9b:ec:a6: ab:2d:62:0f:10:46:ef:40:da:57:99:50:24:e9:1c: 1a:b3:9f:0e:49:19:b6:fc:b3:29:31:64:ce:b5:f5: 06:81:e7:e4:a0:e9:ab:3f:e1:c6:2f:0c:2c:6d:e7: 50:12:76:b8:4c:6c:ac:2d:03:1a:78:7f:c6:55:bb: 95:83:1c:37:f0:bf:98:92:41:24:40:25:52:83:01: f5:97:e7:dc:ba:e1:fd:bd:56:b7:68:52:a0:44:9a: f4:0d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: AF:96:FF:7C:7F:A2:55:47:DA:17:A1:CC:9D:B4:6A:EF:15:74:55:AC X509v3 Authority Key Identifier: keyid:58:0F:61:C2:3A:48:57:BE:23:09:5E:06:0F:E3:66:42:F8:6D:A6:E8 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/d00f9cc7-4a69-4c9e-bba6-4d9abb56eff6/0/580F61C23A4857BE23095E060FE36642F86DA6E8.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/580F61C23A4857BE23095E060FE36642F86DA6E8.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/d00f9cc7-4a69-4c9e-bba6-4d9abb56eff6/0/580F61C23A4857BE23095E060FE36642F86DA6E8.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption b9:b4:f4:20:44:94:7d:dd:fa:4c:4e:3a:51:0a:78:17:97:41: 2e:c1:b3:75:bd:41:d0:c4:b6:fe:bd:1e:10:c6:dc:b6:c9:a8: 73:ec:f8:96:9b:f0:3d:d0:04:a5:22:fb:31:24:8c:11:f8:09: c9:75:07:86:e1:6d:71:80:14:bf:4d:0c:6f:e1:27:02:e7:aa: 75:9e:6e:40:af:63:be:6a:95:a9:19:28:bc:21:a9:a4:45:22: d0:3b:f7:88:7a:22:64:69:35:ea:fa:83:46:33:33:5e:4d:6d: d2:87:a6:4c:a4:e6:68:1f:b8:b6:90:e2:57:bd:1c:5e:5b:71: c3:34:ee:11:e8:d6:83:51:e8:a0:69:65:99:a3:32:43:d0:c3: f5:c9:e8:e6:71:55:e9:66:13:40:5e:39:a4:69:6b:1f:a5:48: 04:c3:98:f9:b5:15:71:5b:fd:7d:96:5b:62:0a:df:2b:ad:3c: 86:2b:8e:c0:2d:c9:eb:8b:0e:5d:03:20:c5:11:4b:5e:2b:0f: ee:a1:c0:81:7a:72:79:54:b7:4b:b8:c3:3e:f2:d0:52:48:c4: c8:47:5b:fa:b8:71:a0:2c:4e:02:b5:59:ea:84:94:52:8f:05: c6:3d:c9:f8:21:be:8d:6c:c8:74:23:dc:06:78:01:20:00:73: 76:12:e8:3a -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUD/RmSPQPRYK7oXuzlaPA3v0JPM4wDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoNTgwRjYxQzIzQTQ4NTdCRTIzMDk1RTA2MEZFMzY2NDJG ODZEQTZFODAeFw0yNTEyMDEwNTM1MzhaFw0yNTEyMDQxMzQ4MzhaMDMxMTAvBgNV BAMTKEFGOTZGRjdDN0ZBMjU1NDdEQTE3QTFDQzlEQjQ2QUVGMTU3NDU1QUMwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDSfr4BO9Wts05oCQXKfNuFcRT+ iEHFjT6sRpL43y+goBhUs9+8AVmGu0Y0v1vfNZYJ0NlVY+WhWoFj9fYzCGCgPZkW KW7jXsEp9cDMcYfHBwNN5MxS5R6MX+lqD4abuUIruFirPRIuqeTfAkVMUeSf9Azx weNYsXo7FHflibMVK5QlzKINfF9S+kM5HvUhenPZ/G/v5cx64kSIxXyLHaJ7Npvs pqstYg8QRu9A2leZUCTpHBqznw5JGbb8sykxZM619QaB5+Sg6as/4cYvDCxt51AS drhMbKwtAxp4f8ZVu5WDHDfwv5iSQSRAJVKDAfWX59y64f29VrdoUqBEmvQNAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUr5b/fH+iVUfaF6HMnbRq7xV0VawwHwYDVR0j BBgwFoAUWA9hwjpIV74jCV4GD+NmQvhtpugwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby9k MDBmOWNjNy00YTY5LTRjOWUtYmJhNi00ZDlhYmI1NmVmZjYvMC81ODBGNjFDMjNB NDg1N0JFMjMwOTVFMDYwRkUzNjY0MkY4NkRBNkU4LmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvNTgwRjYxQzIzQTQ4NTdCRTIzMDk1RTA2MEZFMzY2NDJGODZE QTZFOC5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vZDAwZjljYzctNGE2OS00YzllLWJi YTYtNGQ5YWJiNTZlZmY2LzAvNTgwRjYxQzIzQTQ4NTdCRTIzMDk1RTA2MEZFMzY2 NDJGODZEQTZFOC5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBALm09CBElH3d+kxOOlEKeBeXQS7Bs3W9QdDE tv69HhDG3LbJqHPs+Jab8D3QBKUi+zEkjBH4Ccl1B4bhbXGAFL9NDG/hJwLnqnWe bkCvY75qlakZKLwhqaRFItA794h6ImRpNer6g0YzM15NbdKHpkyk5mgfuLaQ4le9 HF5bccM07hHo1oNR6KBpZZmjMkPQw/XJ6OZxVelmE0BeOaRpax+lSATDmPm1FXFb /X2WW2IK3yutPIYrjsAtyeuLDl0DIMURS14rD+6hwIF6cnlUt0u4wz7y0FJIxMhH W/q4caAsTgK1WeqElFKPBcY9yfghvo1syHQj3AZ4ASAAc3YS6Do= -----END CERTIFICATE-----Generated at Wed Dec 3 14:58:05 2025 by rpki-client