This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf repo-rpki.idnic.net/repo/0199e541-1861-4d6a-8e28-b02845861496/0/588DD0FCE4BC243CC9C6D68AE04E8467E0E4D069.mft File: 588DD0FCE4BC243CC9C6D68AE04E8467E0E4D069.mft (raw, json) Hash identifier: 1jfC54ExjVtveflnJ886F2KGQUkUYw1xmMN89QJdpKw= Subject key identifier: 3C:35:29:BE:8C:58:41:D5:DA:4E:EC:D0:3B:B8:22:B2:FF:C0:A3:97 Authority key identifier: 58:8D:D0:FC:E4:BC:24:3C:C9:C6:D6:8A:E0:4E:84:67:E0:E4:D0:69 Certificate issuer: /CN=588DD0FCE4BC243CC9C6D68AE04E8467E0E4D069 Certificate serial: 4815154F0DB0C4A245FF368FAB7CC614F8676DED Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/588DD0FCE4BC243CC9C6D68AE04E8467E0E4D069.cer Subject info access: rsync://repo-rpki.idnic.net/repo/0199e541-1861-4d6a-8e28-b02845861496/0/588DD0FCE4BC243CC9C6D68AE04E8467E0E4D069.mft Manifest number: E8 Signing time: Mon 22 Dec 2025 19:51:58 +0000 Manifest this update: Mon 22 Dec 2025 19:46:58 +0000 Manifest next update: Fri 26 Dec 2025 04:36:58 +0000 Files and hashes: 1: 588DD0FCE4BC243CC9C6D68AE04E8467E0E4D069.crl (hash: 3id0PmLeKgmNKtTLoo2YRV7S02NTbq5bWcAJjIdLl08=) 2: 3136302e32322e31322e302f32342d3234203d3e20313532373935.roa (hash: kSF1VyQJjpek8Mf3gy+lWICO98IQh62K2L543jgKTUA=) 3: 3136302e32322e31332e302f32342d3234203d3e20313532373935.roa (hash: CjQ8LjHFMEFZAKqjfhXd2Dui1+KhZzwEUkNHDbRDo5c=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/0199e541-1861-4d6a-8e28-b02845861496/0/588DD0FCE4BC243CC9C6D68AE04E8467E0E4D069.crl rsync://repo-rpki.idnic.net/repo/0199e541-1861-4d6a-8e28-b02845861496/0/588DD0FCE4BC243CC9C6D68AE04E8467E0E4D069.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/588DD0FCE4BC243CC9C6D68AE04E8467E0E4D069.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/60F8BE9C16625C424B269EE06C64A83BAB8506D4.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/60F8BE9C16625C424B269EE06C64A83BAB8506D4.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/YPi-nBZiXEJLJp7gbGSoO6uFBtQ.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 26 Dec 2025 04:36:58 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 48:15:15:4f:0d:b0:c4:a2:45:ff:36:8f:ab:7c:c6:14:f8:67:6d:ed Signature Algorithm: sha256WithRSAEncryption Issuer: CN=588DD0FCE4BC243CC9C6D68AE04E8467E0E4D069 Validity Not Before: Dec 22 19:46:58 2025 GMT Not After : Dec 26 04:36:58 2025 GMT Subject: CN=3C3529BE8C5841D5DA4EECD03BB822B2FFC0A397 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d8:1b:a2:04:96:cd:2b:53:40:61:ca:87:67:a7: 85:e7:92:f7:a6:2f:01:3e:09:b2:3b:c7:d1:aa:7a: 6e:75:05:ad:ef:78:1c:05:a4:ce:ca:77:fd:a7:c5: 3c:d9:18:9a:5c:54:d6:31:4a:1b:8b:70:74:7b:c0: a3:3d:e1:44:92:96:d5:fd:a8:df:1e:79:f9:a3:c9: 1d:d5:27:8e:f1:9c:0b:bb:e3:a0:ea:24:9c:ba:ba: 71:8e:62:34:1f:55:ac:03:1e:76:8e:d1:f7:e4:50: 2f:e8:b0:d1:03:67:c0:c9:ef:da:cb:75:96:20:5b: bb:39:f3:55:94:d1:34:00:49:62:d1:cf:3d:3d:e5: 6b:73:35:19:62:63:73:ea:d7:6b:9c:3a:5e:8b:7e: db:78:84:ff:9d:1e:26:10:c5:01:93:f5:e6:31:42: 00:bd:78:79:0c:b6:86:bf:3f:bf:6b:cb:38:44:70: e6:b5:e4:54:23:d5:d0:e3:c0:03:17:4b:66:06:ea: ab:f2:30:cf:ed:7c:b5:da:61:d7:fd:66:e4:a6:c2: fc:5e:96:25:ea:88:94:de:f7:18:6f:26:47:3b:34: a5:af:98:a4:7e:36:d2:e5:19:e5:51:d2:37:e6:10: bc:61:09:f3:54:9b:42:e9:2a:39:ad:0c:d2:15:8b: 91:d9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 3C:35:29:BE:8C:58:41:D5:DA:4E:EC:D0:3B:B8:22:B2:FF:C0:A3:97 X509v3 Authority Key Identifier: keyid:58:8D:D0:FC:E4:BC:24:3C:C9:C6:D6:8A:E0:4E:84:67:E0:E4:D0:69 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/0199e541-1861-4d6a-8e28-b02845861496/0/588DD0FCE4BC243CC9C6D68AE04E8467E0E4D069.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/588DD0FCE4BC243CC9C6D68AE04E8467E0E4D069.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/0199e541-1861-4d6a-8e28-b02845861496/0/588DD0FCE4BC243CC9C6D68AE04E8467E0E4D069.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 19:bc:18:34:be:e1:d7:47:4b:ff:35:68:de:a3:94:bb:5c:43: 9f:5d:eb:91:2f:eb:82:a5:54:63:95:a1:6e:33:91:77:33:cb: 5d:f2:4e:2c:30:f1:66:b5:00:34:85:21:ec:cb:30:9b:ae:ee: 76:74:40:da:a5:0f:d2:4b:84:5d:40:1c:bf:59:cb:e3:b2:db: 55:bd:5a:51:87:44:0f:90:fd:79:c8:ca:69:f9:05:ea:2e:6c: 4f:a3:c5:39:3c:64:81:8a:6e:ab:3e:b6:d8:36:73:86:2c:a4: fd:5c:34:15:48:7c:ed:87:a2:58:43:47:19:82:41:fe:44:2c: 39:a9:4c:57:61:e7:75:b6:1e:a3:78:3f:7d:28:6d:8a:0a:f1: ca:9e:e2:d9:9f:cc:44:9c:0c:d8:d3:b1:68:0b:a2:42:42:a5: e5:16:a6:16:b4:75:74:f3:8b:44:2c:de:e4:65:f0:75:95:3f: 1b:72:f2:bb:e6:ff:31:36:90:29:87:00:af:f2:f9:29:e5:18: ee:80:a7:f2:a2:90:b5:37:fb:a7:d1:43:42:c0:e0:41:4a:3c: 10:d5:44:4d:80:09:97:35:f2:9e:70:a8:c4:1a:f8:ef:3b:19: 5e:ef:b7:f2:43:3b:79:8a:4c:5a:1e:3d:01:cc:46:f9:83:85: 98:18:83:22 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUSBUVTw2wxKJF/zaPq3zGFPhnbe0wDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoNTg4REQwRkNFNEJDMjQzQ0M5QzZENjhBRTA0RTg0NjdF MEU0RDA2OTAeFw0yNTEyMjIxOTQ2NThaFw0yNTEyMjYwNDM2NThaMDMxMTAvBgNV BAMTKDNDMzUyOUJFOEM1ODQxRDVEQTRFRUNEMDNCQjgyMkIyRkZDMEEzOTcwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDYG6IEls0rU0Bhyodnp4Xnkvem LwE+CbI7x9Gqem51Ba3veBwFpM7Kd/2nxTzZGJpcVNYxShuLcHR7wKM94USSltX9 qN8eefmjyR3VJ47xnAu746DqJJy6unGOYjQfVawDHnaO0ffkUC/osNEDZ8DJ79rL dZYgW7s581WU0TQASWLRzz095WtzNRliY3Pq12ucOl6Lftt4hP+dHiYQxQGT9eYx QgC9eHkMtoa/P79ryzhEcOa15FQj1dDjwAMXS2YG6qvyMM/tfLXaYdf9ZuSmwvxe liXqiJTe9xhvJkc7NKWvmKR+NtLlGeVR0jfmELxhCfNUm0LpKjmtDNIVi5HZAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUPDUpvoxYQdXaTuzQO7gisv/Ao5cwHwYDVR0j BBgwFoAUWI3Q/OS8JDzJxtaK4E6EZ+Dk0GkwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby8w MTk5ZTU0MS0xODYxLTRkNmEtOGUyOC1iMDI4NDU4NjE0OTYvMC81ODhERDBGQ0U0 QkMyNDNDQzlDNkQ2OEFFMDRFODQ2N0UwRTREMDY5LmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzEvNTg4REQwRkNFNEJDMjQzQ0M5QzZENjhBRTA0RTg0NjdFMEU0 RDA2OS5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vMDE5OWU1NDEtMTg2MS00ZDZhLThl MjgtYjAyODQ1ODYxNDk2LzAvNTg4REQwRkNFNEJDMjQzQ0M5QzZENjhBRTA0RTg0 NjdFMEU0RDA2OS5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBABm8GDS+4ddHS/81aN6jlLtcQ59d65Ev64Kl VGOVoW4zkXczy13yTiww8Wa1ADSFIezLMJuu7nZ0QNqlD9JLhF1AHL9Zy+Oy21W9 WlGHRA+Q/XnIymn5BeoubE+jxTk8ZIGKbqs+ttg2c4YspP1cNBVIfO2HolhDRxmC Qf5ELDmpTFdh53W2HqN4P30obYoK8cqe4tmfzEScDNjTsWgLokJCpeUWpha0dXTz i0Qs3uRl8HWVPxty8rvm/zE2kCmHAK/y+SnlGO6Ap/KikLU3+6fRQ0LA4EFKPBDV RE2ACZc18p5wqMQa+O87GV7vt/JDO3mKTFoePQHMRvmDhZgYgyI= -----END CERTIFICATE-----Generated at Thu Dec 25 00:39:51 2025 by rpki-client