This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf repo-rpki.idnic.net/repo/ff2506b1-396d-499e-b7f5-5d9f8e7e0bee/0/58BB439F406646053DA2029A1FDBBE942B381419.mft File: 58BB439F406646053DA2029A1FDBBE942B381419.mft (raw, json) Hash identifier: mnSwWpjz77gMAQNuFnNnH8jhQY0RUhFeExxhTssz48k= Subject key identifier: 78:60:F4:FC:50:57:E4:10:BF:8C:16:98:94:A6:9D:11:F3:DE:38:BE Authority key identifier: 58:BB:43:9F:40:66:46:05:3D:A2:02:9A:1F:DB:BE:94:2B:38:14:19 Certificate issuer: /CN=58BB439F406646053DA2029A1FDBBE942B381419 Certificate serial: 234CAB7D850F6400272D34CF8A06426E1D9546F7 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/58BB439F406646053DA2029A1FDBBE942B381419.cer Subject info access: rsync://repo-rpki.idnic.net/repo/ff2506b1-396d-499e-b7f5-5d9f8e7e0bee/0/58BB439F406646053DA2029A1FDBBE942B381419.mft Manifest number: 0500 Signing time: Mon 15 Dec 2025 04:12:10 +0000 Manifest this update: Mon 15 Dec 2025 04:07:10 +0000 Manifest next update: Thu 18 Dec 2025 09:41:10 +0000 Files and hashes: 1: 323430363a373663303a3a2f33322d3438203d3e203538383231.roa (hash: bNw8LF5Ec6WuKsnsnBnZzpsFS6CBddKmbeAtnWBKzS8=) 2: 58BB439F406646053DA2029A1FDBBE942B381419.crl (hash: fFhgEvcgiCOVXwi1KJZFAdtG3cpvBogtn6CCUOBAYDQ=) 3: 3130332e3135352e3139382e302f32332d3234203d3e203538383231.roa (hash: 8VEdbgNMofrOYRUnoYix632qXa5TAcUqt6koDVDvkVQ=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/ff2506b1-396d-499e-b7f5-5d9f8e7e0bee/0/58BB439F406646053DA2029A1FDBBE942B381419.crl rsync://repo-rpki.idnic.net/repo/ff2506b1-396d-499e-b7f5-5d9f8e7e0bee/0/58BB439F406646053DA2029A1FDBBE942B381419.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/58BB439F406646053DA2029A1FDBBE942B381419.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 18 Dec 2025 09:41:10 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 23:4c:ab:7d:85:0f:64:00:27:2d:34:cf:8a:06:42:6e:1d:95:46:f7 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=58BB439F406646053DA2029A1FDBBE942B381419 Validity Not Before: Dec 15 04:07:10 2025 GMT Not After : Dec 18 09:41:10 2025 GMT Subject: CN=7860F4FC5057E410BF8C169894A69D11F3DE38BE Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b9:3c:6d:0e:1e:93:a5:74:ef:cb:d1:03:da:fa: ba:6c:b6:1c:cb:a1:ca:7c:51:50:36:a6:b5:5f:b9: 2b:21:a2:4c:13:c1:88:a9:8a:58:98:a2:86:5c:a2: b3:34:0a:22:da:2c:15:ee:21:0b:83:f3:41:c8:b6: 5b:d0:7b:c5:17:d1:15:93:be:21:08:17:ce:b8:a0: b0:3f:ac:fb:88:56:2f:d1:99:0e:06:fd:6f:8a:cf: 42:ff:d4:a8:ca:c9:b1:f5:cc:25:81:93:1e:d7:d1: 51:4e:f9:08:15:ac:13:a9:13:52:39:e0:d5:66:44: eb:92:0c:99:90:3f:73:80:e2:f2:a4:7a:54:b9:e2: 3e:e8:0d:8b:81:02:b4:1d:e0:c3:02:86:45:a4:cc: 46:fe:cd:ab:31:4c:61:8c:dc:98:af:68:64:e2:af: a9:74:d6:e6:c6:ac:f0:bc:1a:24:05:23:ec:bc:8a: 76:9d:bf:53:8a:9c:86:28:2e:51:0f:5b:df:87:33: 20:e1:59:a4:32:7a:13:c1:de:b4:df:43:51:7a:42: 3f:c7:b1:a8:1b:c9:d9:0b:c8:78:c3:6e:79:6a:73: d7:89:37:33:1f:74:41:a2:80:bd:9b:c1:3e:99:44: da:4c:87:d2:07:b0:78:8f:f6:10:df:b4:60:d2:f3: f9:cb Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 78:60:F4:FC:50:57:E4:10:BF:8C:16:98:94:A6:9D:11:F3:DE:38:BE X509v3 Authority Key Identifier: keyid:58:BB:43:9F:40:66:46:05:3D:A2:02:9A:1F:DB:BE:94:2B:38:14:19 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/ff2506b1-396d-499e-b7f5-5d9f8e7e0bee/0/58BB439F406646053DA2029A1FDBBE942B381419.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/58BB439F406646053DA2029A1FDBBE942B381419.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/ff2506b1-396d-499e-b7f5-5d9f8e7e0bee/0/58BB439F406646053DA2029A1FDBBE942B381419.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption a6:a4:d7:1a:fe:2d:0c:a0:18:3c:a2:ff:1b:25:ea:61:6c:8a: 2d:60:6d:28:ef:61:ed:06:26:76:29:fd:59:35:49:f7:be:9d: 44:ea:9a:8b:8f:4f:44:01:6d:d0:35:72:1d:62:ed:59:e6:ce: ff:ad:42:78:85:45:ad:03:a3:84:4d:f2:1a:62:16:76:19:f4: d5:56:2a:63:a7:04:af:c9:c7:a7:c0:7f:0d:26:3f:9f:cc:b4: a2:7b:85:18:be:a0:72:3a:36:d6:61:bb:c1:4d:3e:09:28:08: 63:5b:0c:af:59:19:f1:9c:86:68:57:ca:5f:10:7a:1e:17:fb: 3f:fb:20:51:9b:97:e4:fd:88:a7:35:f3:92:45:3a:ec:7b:c5: c2:e5:92:92:e5:40:ea:1a:05:90:06:90:e2:a7:9e:92:c9:33: 18:9d:84:28:c4:0c:89:5d:49:ce:57:35:5f:fb:ae:46:c3:25: c2:c0:dd:f0:30:c8:d5:dc:28:bd:81:44:24:4c:42:da:ec:26: b6:ef:5b:38:bc:f3:a1:1d:c1:22:a9:52:bd:64:07:25:72:dd: 9c:a7:d7:47:93:53:43:68:cc:2a:94:21:a1:e6:16:8c:7a:28: 21:35:87:72:d2:16:25:42:38:72:88:6e:f4:49:0e:31:b4:7e: 84:31:79:83 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUI0yrfYUPZAAnLTTPigZCbh2VRvcwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoNThCQjQzOUY0MDY2NDYwNTNEQTIwMjlBMUZEQkJFOTQy QjM4MTQxOTAeFw0yNTEyMTUwNDA3MTBaFw0yNTEyMTgwOTQxMTBaMDMxMTAvBgNV BAMTKDc4NjBGNEZDNTA1N0U0MTBCRjhDMTY5ODk0QTY5RDExRjNERTM4QkUwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC5PG0OHpOldO/L0QPa+rpsthzL ocp8UVA2prVfuSshokwTwYipiliYooZcorM0CiLaLBXuIQuD80HItlvQe8UX0RWT viEIF864oLA/rPuIVi/RmQ4G/W+Kz0L/1KjKybH1zCWBkx7X0VFO+QgVrBOpE1I5 4NVmROuSDJmQP3OA4vKkelS54j7oDYuBArQd4MMChkWkzEb+zasxTGGM3JivaGTi r6l01ubGrPC8GiQFI+y8inadv1OKnIYoLlEPW9+HMyDhWaQyehPB3rTfQ1F6Qj/H sagbydkLyHjDbnlqc9eJNzMfdEGigL2bwT6ZRNpMh9IHsHiP9hDftGDS8/nLAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUeGD0/FBX5BC/jBaYlKadEfPeOL4wHwYDVR0j BBgwFoAUWLtDn0BmRgU9ogKaH9u+lCs4FBkwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby9m ZjI1MDZiMS0zOTZkLTQ5OWUtYjdmNS01ZDlmOGU3ZTBiZWUvMC81OEJCNDM5RjQw NjY0NjA1M0RBMjAyOUExRkRCQkU5NDJCMzgxNDE5LmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvNThCQjQzOUY0MDY2NDYwNTNEQTIwMjlBMUZEQkJFOTQyQjM4 MTQxOS5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vZmYyNTA2YjEtMzk2ZC00OTllLWI3 ZjUtNWQ5ZjhlN2UwYmVlLzAvNThCQjQzOUY0MDY2NDYwNTNEQTIwMjlBMUZEQkJF OTQyQjM4MTQxOS5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAKak1xr+LQygGDyi/xsl6mFsii1gbSjvYe0G JnYp/Vk1Sfe+nUTqmouPT0QBbdA1ch1i7Vnmzv+tQniFRa0Do4RN8hpiFnYZ9NVW KmOnBK/Jx6fAfw0mP5/MtKJ7hRi+oHI6NtZhu8FNPgkoCGNbDK9ZGfGchmhXyl8Q eh4X+z/7IFGbl+T9iKc185JFOux7xcLlkpLlQOoaBZAGkOKnnpLJMxidhCjEDIld Sc5XNV/7rkbDJcLA3fAwyNXcKL2BRCRMQtrsJrbvWzi886EdwSKpUr1kByVy3Zyn 10eTU0NozCqUIaHmFox6KCE1h3LSFiVCOHKIbvRJDjG0foQxeYM= -----END CERTIFICATE-----Generated at Tue Dec 16 03:39:27 2025 by rpki-client