This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

$ rpki-client -vvf repo-rpki.idnic.net/repo/ff2506b1-396d-499e-b7f5-5d9f8e7e0bee/0/58BB439F406646053DA2029A1FDBBE942B381419.mft
File: 58BB439F406646053DA2029A1FDBBE942B381419.mft (raw, json)
Hash identifier: DGRVOikylJ+LQ9FWPYy2jxmwaEPbzmQth40rg1UpYQc=
Subject key identifier: 9E:3F:91:0B:03:1B:D7:DE:EB:66:4C:B6:2B:6E:DF:BE:8F:AC:A7:48
Authority key identifier: 58:BB:43:9F:40:66:46:05:3D:A2:02:9A:1F:DB:BE:94:2B:38:14:19
Certificate issuer: /CN=58BB439F406646053DA2029A1FDBBE942B381419
Certificate serial: 4C52516A2BC9652590E9E9C279971817356299A5
Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/58BB439F406646053DA2029A1FDBBE942B381419.cer
Subject info access: rsync://repo-rpki.idnic.net/repo/ff2506b1-396d-499e-b7f5-5d9f8e7e0bee/0/58BB439F406646053DA2029A1FDBBE942B381419.mft
Manifest number: 0515
Signing time: Sat 31 Jan 2026 07:02:11 +0000
Manifest this update: Sat 31 Jan 2026 06:57:11 +0000
Manifest next update: Tue 03 Feb 2026 08:29:11 +0000
Files and hashes: 1: 323430363a373663303a3a2f33322d3438203d3e203538383231.roa (hash: bNw8LF5Ec6WuKsnsnBnZzpsFS6CBddKmbeAtnWBKzS8=)
2: 3130332e3135352e3139382e302f32332d3234203d3e203538383231.roa (hash: 8VEdbgNMofrOYRUnoYix632qXa5TAcUqt6koDVDvkVQ=)
3: 58BB439F406646053DA2029A1FDBBE942B381419.crl (hash: EtVjnb7ShS+yhVC2hfe4xizSQCzGPkT7dftDlNHkhI8=)
Validation: OK
Signature path: rsync://repo-rpki.idnic.net/repo/ff2506b1-396d-499e-b7f5-5d9f8e7e0bee/0/58BB439F406646053DA2029A1FDBBE942B381419.crl
rsync://repo-rpki.idnic.net/repo/ff2506b1-396d-499e-b7f5-5d9f8e7e0bee/0/58BB439F406646053DA2029A1FDBBE942B381419.mft
rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/58BB439F406646053DA2029A1FDBBE942B381419.cer
rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl
rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Tue 03 Feb 2026 08:29:11 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
4c:52:51:6a:2b:c9:65:25:90:e9:e9:c2:79:97:18:17:35:62:99:a5
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=58BB439F406646053DA2029A1FDBBE942B381419
Validity
Not Before: Jan 31 06:57:11 2026 GMT
Not After : Feb 3 08:29:11 2026 GMT
Subject: CN=9E3F910B031BD7DEEB664CB62B6EDFBE8FACA748
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d8:cf:4b:37:6f:da:fd:7e:b0:fb:71:70:f1:2f:
f0:dc:e0:d0:ea:92:01:3b:7e:87:77:cf:35:84:82:
a6:39:6e:c1:e4:48:5e:56:50:a2:96:a5:8f:f7:d0:
64:7e:40:20:3f:50:d7:1e:54:aa:f8:aa:42:f3:a6:
33:cd:7d:ce:e6:f9:d6:63:ef:31:7c:9b:e8:97:a4:
0a:e8:c0:04:e4:c6:b9:72:76:d4:80:6a:de:fa:57:
21:7d:df:33:52:52:fd:c6:5e:a5:8a:f3:9f:58:02:
8c:16:8a:2b:99:06:e3:ff:51:ff:c6:6b:f7:70:57:
a2:23:6f:ff:9e:1c:be:67:c8:09:0c:d9:64:6f:2d:
71:b1:d6:58:14:88:5a:50:8b:d4:0f:89:57:2c:0f:
9c:80:4b:d5:4d:20:9c:84:71:52:68:3a:e6:60:8b:
6c:ee:93:33:59:32:82:0b:62:39:04:f6:4a:76:2f:
bb:4d:da:bd:d1:7b:f7:17:52:85:9c:e4:23:6a:af:
db:de:c4:0a:84:2f:93:5e:77:3a:e4:03:f6:74:a1:
8e:5a:71:ff:b0:9a:6a:d9:98:a0:d8:15:11:3d:b5:
26:d9:39:1b:f3:49:e5:2d:ed:b1:eb:83:28:34:54:
57:d6:a5:9c:29:42:4c:60:ad:85:5d:e3:62:73:27:
4b:15
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
9E:3F:91:0B:03:1B:D7:DE:EB:66:4C:B6:2B:6E:DF:BE:8F:AC:A7:48
X509v3 Authority Key Identifier:
keyid:58:BB:43:9F:40:66:46:05:3D:A2:02:9A:1F:DB:BE:94:2B:38:14:19
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://repo-rpki.idnic.net/repo/ff2506b1-396d-499e-b7f5-5d9f8e7e0bee/0/58BB439F406646053DA2029A1FDBBE942B381419.crl
Authority Information Access:
CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/58BB439F406646053DA2029A1FDBBE942B381419.cer
Subject Information Access:
Signed Object - URI:rsync://repo-rpki.idnic.net/repo/ff2506b1-396d-499e-b7f5-5d9f8e7e0bee/0/58BB439F406646053DA2029A1FDBBE942B381419.mft
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
75:be:64:1f:bd:46:89:83:84:3f:73:dc:e6:23:3e:83:39:b5:
f9:45:b5:8a:79:fa:b8:c2:f6:be:2b:b9:30:18:42:b2:46:a8:
4d:87:52:de:d9:d9:d0:bc:fd:b7:04:dd:69:9a:ac:2d:e1:d5:
59:7c:97:bc:19:0d:b7:63:af:79:eb:fc:0a:9f:1c:02:b8:88:
7d:ca:0b:e0:3d:9b:97:77:02:7e:89:7a:45:ba:a9:97:ea:f4:
bb:ab:a8:5c:c1:2a:ec:b9:d1:4d:9d:3e:c6:e4:81:ec:67:94:
1e:75:ad:80:75:e8:1e:6e:4e:e5:c1:dc:13:40:c2:c5:2f:6c:
75:f3:61:3d:49:fc:9e:1f:54:4c:22:3c:01:68:d0:0c:e4:92:
fe:f5:43:09:1e:2d:73:a5:7f:7f:e6:90:03:7c:ba:6e:d4:14:
2d:60:68:d3:94:b0:67:15:bd:f2:79:d7:9d:63:1f:e2:a4:f2:
b6:68:df:8e:83:aa:fd:b0:16:b1:f1:c9:72:e9:99:2a:34:98:
b3:a5:17:0f:c5:4c:85:d2:6a:03:7b:23:fb:40:f1:39:8b:b0:
03:f5:e9:fa:12:94:69:8a:eb:bf:51:3d:d9:e4:5c:16:fb:25:
31:11:5e:bc:cf:8a:3c:43:84:cc:f6:14:51:ab:22:a7:51:e5:
9e:f8:a9:91
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Feb 2 09:52:25 2026 by rpki-client