This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf repo-rpki.idnic.net/repo/2cb52619-379d-430a-b19b-1f0ec53ae909/0/D58BCD47A6263CC3A12ABDE6E3A2AD28AF8BDED7.mft File: D58BCD47A6263CC3A12ABDE6E3A2AD28AF8BDED7.mft (raw, json) Hash identifier: 1OafFFOtbHSvhaA3ugBps+jnkRBF/agiFiGa/lDKt0k= Subject key identifier: CD:6E:B8:7C:1E:9D:DC:87:B7:70:0E:F6:0E:90:F5:68:E1:34:7A:56 Authority key identifier: D5:8B:CD:47:A6:26:3C:C3:A1:2A:BD:E6:E3:A2:AD:28:AF:8B:DE:D7 Certificate issuer: /CN=D58BCD47A6263CC3A12ABDE6E3A2AD28AF8BDED7 Certificate serial: 2069B7BF1260D52AA331D6C1D0DAA4BC5BFF4BE1 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/D58BCD47A6263CC3A12ABDE6E3A2AD28AF8BDED7.cer Subject info access: rsync://repo-rpki.idnic.net/repo/2cb52619-379d-430a-b19b-1f0ec53ae909/0/D58BCD47A6263CC3A12ABDE6E3A2AD28AF8BDED7.mft Manifest number: 0317 Signing time: Fri 19 Dec 2025 00:22:24 +0000 Manifest this update: Fri 19 Dec 2025 00:17:24 +0000 Manifest next update: Mon 22 Dec 2025 06:36:24 +0000 Files and hashes: 1: 3130332e3136392e34302e302f32342d3234203d3e20313432333332.roa (hash: yIxyAi+LsGKpwTABrM9lNwtjILhJjgs1G21qada+Ir4=) 2: D58BCD47A6263CC3A12ABDE6E3A2AD28AF8BDED7.crl (hash: /wpe61O7t9sMkSMe6VU3HoIAN8jTZYejJX4NXwyCXsI=) 3: 3130332e3136392e34302e302f32332d3233203d3e20313432333332.roa (hash: lwypc1eue2zj3ktOWvglzu1Jo7qmvdfN4AlugN+i5Zw=) 4: 3130332e3136392e34312e302f32342d3234203d3e20313432333332.roa (hash: zPRVVEuzND/TSHdVq3ZkAQYAgPmvosaZoKU+TXGH1vc=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/2cb52619-379d-430a-b19b-1f0ec53ae909/0/D58BCD47A6263CC3A12ABDE6E3A2AD28AF8BDED7.crl rsync://repo-rpki.idnic.net/repo/2cb52619-379d-430a-b19b-1f0ec53ae909/0/D58BCD47A6263CC3A12ABDE6E3A2AD28AF8BDED7.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/D58BCD47A6263CC3A12ABDE6E3A2AD28AF8BDED7.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 22 Dec 2025 03:43:10 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 20:69:b7:bf:12:60:d5:2a:a3:31:d6:c1:d0:da:a4:bc:5b:ff:4b:e1 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=D58BCD47A6263CC3A12ABDE6E3A2AD28AF8BDED7 Validity Not Before: Dec 19 00:17:24 2025 GMT Not After : Dec 22 06:36:24 2025 GMT Subject: CN=CD6EB87C1E9DDC87B7700EF60E90F568E1347A56 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b2:72:dc:93:6e:7f:8e:20:8c:73:75:ce:57:59: 1a:a6:97:43:54:90:a9:b9:f4:50:b0:fa:6a:1e:be: 98:a4:a2:99:0f:fa:73:e4:64:de:d2:47:e7:51:04: 7a:e3:9a:14:f6:2e:99:6a:40:bc:d9:31:67:9d:16: 1e:87:9d:71:aa:4e:d0:c7:3f:3c:f7:61:5a:ad:86: 5f:bd:2c:9c:99:3f:ab:60:3f:70:72:bd:2c:72:37: ca:6b:62:73:5f:02:2b:1b:23:ef:a4:a1:e9:7a:85: 74:ce:2f:a2:19:7d:cd:db:10:ea:77:0e:8b:99:83: 2c:e7:d2:a9:0f:29:93:e0:96:59:2a:51:5b:65:86: 46:0b:4b:a6:f6:cf:a7:9f:a0:ed:f6:69:1c:6a:ee: 69:b2:24:78:98:3d:56:ff:21:9a:83:4c:9c:f5:36: e8:fb:49:77:5b:31:0d:32:e5:c9:f7:2a:fe:df:59: 44:ab:f5:55:57:4c:43:0f:07:e6:70:6d:34:9d:e6: 37:30:30:63:06:01:c1:fe:8e:a6:0a:6d:ec:ac:1b: db:8e:7d:32:e7:ba:5e:33:45:64:26:2b:a4:09:85: 19:29:6f:86:10:d9:27:f8:cf:73:45:6f:0e:88:a1: 03:d1:23:51:8c:55:ea:3b:aa:85:a3:da:ef:82:c2: e0:db Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: CD:6E:B8:7C:1E:9D:DC:87:B7:70:0E:F6:0E:90:F5:68:E1:34:7A:56 X509v3 Authority Key Identifier: keyid:D5:8B:CD:47:A6:26:3C:C3:A1:2A:BD:E6:E3:A2:AD:28:AF:8B:DE:D7 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/2cb52619-379d-430a-b19b-1f0ec53ae909/0/D58BCD47A6263CC3A12ABDE6E3A2AD28AF8BDED7.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/D58BCD47A6263CC3A12ABDE6E3A2AD28AF8BDED7.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/2cb52619-379d-430a-b19b-1f0ec53ae909/0/D58BCD47A6263CC3A12ABDE6E3A2AD28AF8BDED7.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 19:88:b4:51:85:80:02:2e:c6:16:57:8a:86:62:5a:43:aa:8b: 5c:d7:92:ce:8f:ac:92:4c:c8:3c:cb:ef:9d:02:30:a0:28:cb: d2:c4:35:c4:fd:9a:46:37:06:9b:21:df:3c:74:57:d1:44:76: 7d:3b:11:19:db:6b:25:be:34:f2:1c:97:cf:bf:75:99:ce:d7: e4:9e:d7:48:2d:ad:4e:d4:e9:da:af:a8:de:5e:06:bc:1f:e0: 28:8f:c2:76:33:1f:0e:82:c6:19:87:84:08:b5:f3:c3:82:29: f5:8a:6c:b1:b2:6b:8c:85:76:51:e4:02:21:af:41:a7:9e:15: f3:f1:d8:cc:20:97:b1:fc:bd:1f:5a:da:6c:3d:79:c3:b3:9d: 76:e0:d7:23:b7:78:ba:2a:01:fa:65:e1:31:2f:13:2b:a4:dc: e7:70:11:ad:f3:2e:11:19:26:de:d2:55:6b:8c:2a:06:9b:6d: 83:67:b6:0a:0c:7f:28:11:71:85:96:95:2e:34:d5:d4:39:02: 81:00:f1:f8:0a:68:f4:d6:25:93:3c:9c:ed:89:0c:ab:0d:4f: 89:9e:02:e3:79:cb:8c:eb:5c:64:10:b2:71:97:5b:01:f7:da: f7:cc:62:20:43:67:f0:c8:26:94:cc:46:ba:b0:f7:6f:0d:44: eb:1d:2e:18 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUIGm3vxJg1SqjMdbB0NqkvFv/S+EwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoRDU4QkNENDdBNjI2M0NDM0ExMkFCREU2RTNBMkFEMjhB RjhCREVENzAeFw0yNTEyMTkwMDE3MjRaFw0yNTEyMjIwNjM2MjRaMDMxMTAvBgNV BAMTKENENkVCODdDMUU5RERDODdCNzcwMEVGNjBFOTBGNTY4RTEzNDdBNTYwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCyctyTbn+OIIxzdc5XWRqml0NU kKm59FCw+moevpikopkP+nPkZN7SR+dRBHrjmhT2LplqQLzZMWedFh6HnXGqTtDH Pzz3YVqthl+9LJyZP6tgP3ByvSxyN8prYnNfAisbI++koel6hXTOL6IZfc3bEOp3 DouZgyzn0qkPKZPgllkqUVtlhkYLS6b2z6efoO32aRxq7mmyJHiYPVb/IZqDTJz1 Nuj7SXdbMQ0y5cn3Kv7fWUSr9VVXTEMPB+ZwbTSd5jcwMGMGAcH+jqYKbeysG9uO fTLnul4zRWQmK6QJhRkpb4YQ2Sf4z3NFbw6IoQPRI1GMVeo7qoWj2u+CwuDbAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUzW64fB6d3Ie3cA72DpD1aOE0elYwHwYDVR0j BBgwFoAU1YvNR6YmPMOhKr3m46KtKK+L3tcwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby8y Y2I1MjYxOS0zNzlkLTQzMGEtYjE5Yi0xZjBlYzUzYWU5MDkvMC9ENThCQ0Q0N0E2 MjYzQ0MzQTEyQUJERTZFM0EyQUQyOEFGOEJERUQ3LmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvRDU4QkNENDdBNjI2M0NDM0ExMkFCREU2RTNBMkFEMjhBRjhC REVENy5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vMmNiNTI2MTktMzc5ZC00MzBhLWIx OWItMWYwZWM1M2FlOTA5LzAvRDU4QkNENDdBNjI2M0NDM0ExMkFCREU2RTNBMkFE MjhBRjhCREVENy5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBABmItFGFgAIuxhZXioZiWkOqi1zXks6PrJJM yDzL750CMKAoy9LENcT9mkY3Bpsh3zx0V9FEdn07ERnbayW+NPIcl8+/dZnO1+Se 10gtrU7U6dqvqN5eBrwf4CiPwnYzHw6CxhmHhAi188OCKfWKbLGya4yFdlHkAiGv QaeeFfPx2Mwgl7H8vR9a2mw9ecOznXbg1yO3eLoqAfpl4TEvEyuk3OdwEa3zLhEZ Jt7SVWuMKgabbYNntgoMfygRcYWWlS401dQ5AoEA8fgKaPTWJZM8nO2JDKsNT4me AuN5y4zrXGQQsnGXWwH32vfMYiBDZ/DIJpTMRrqw928NROsdLhg= -----END CERTIFICATE-----Generated at Fri Dec 19 10:53:44 2025 by rpki-client