This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf repo-rpki.idnic.net/repo/32bfab09-c1e9-44d8-819e-fdf6549c6b3f/0/58A706EA7468DF0D14CA1817C7CC5DBD5A69C596.mft File: 58A706EA7468DF0D14CA1817C7CC5DBD5A69C596.mft (raw, json) Hash identifier: ZqvS4LyI4fa6FFTz8CQXweoLUIFjdmtL0SD2knY8YNE= Subject key identifier: EB:FA:59:28:FA:1E:F9:23:26:88:B8:98:35:1D:B4:FD:88:78:BF:46 Authority key identifier: 58:A7:06:EA:74:68:DF:0D:14:CA:18:17:C7:CC:5D:BD:5A:69:C5:96 Certificate issuer: /CN=58A706EA7468DF0D14CA1817C7CC5DBD5A69C596 Certificate serial: 2FE11A219A6003651F27CEC250FED92FDD7E03AC Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/58A706EA7468DF0D14CA1817C7CC5DBD5A69C596.cer Subject info access: rsync://repo-rpki.idnic.net/repo/32bfab09-c1e9-44d8-819e-fdf6549c6b3f/0/58A706EA7468DF0D14CA1817C7CC5DBD5A69C596.mft Manifest number: 022C Signing time: Wed 24 Dec 2025 01:31:17 +0000 Manifest this update: Wed 24 Dec 2025 01:26:17 +0000 Manifest next update: Sat 27 Dec 2025 10:54:17 +0000 Files and hashes: 1: 58A706EA7468DF0D14CA1817C7CC5DBD5A69C596.crl (hash: kDBbkH+aHMn1ZOFmWUr/xgnS2kIStyLbRKHvN7FtpuM=) 2: 3130332e3138342e32312e302f32342d3234203d3e20313439383833.roa (hash: SYGWmmOnwGKD6Y/4QC0HTfwuXQyWf4xsNcK5v8re6i0=) 3: 3130332e3138342e32302e302f32332d3233203d3e20313439383833.roa (hash: +E4T7dUXV6aX4bEXGLU3jVOr97rI3sHCGNsBCv/YCaI=) 4: 3130332e3138342e32302e302f32342d3234203d3e20313439383833.roa (hash: GTF74Ft0qa3Ml/qzXNfnDXeDnWgSofyFjshmuk26klk=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/32bfab09-c1e9-44d8-819e-fdf6549c6b3f/0/58A706EA7468DF0D14CA1817C7CC5DBD5A69C596.crl rsync://repo-rpki.idnic.net/repo/32bfab09-c1e9-44d8-819e-fdf6549c6b3f/0/58A706EA7468DF0D14CA1817C7CC5DBD5A69C596.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/58A706EA7468DF0D14CA1817C7CC5DBD5A69C596.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 27 Dec 2025 10:54:17 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2f:e1:1a:21:9a:60:03:65:1f:27:ce:c2:50:fe:d9:2f:dd:7e:03:ac Signature Algorithm: sha256WithRSAEncryption Issuer: CN=58A706EA7468DF0D14CA1817C7CC5DBD5A69C596 Validity Not Before: Dec 24 01:26:17 2025 GMT Not After : Dec 27 10:54:17 2025 GMT Subject: CN=EBFA5928FA1EF9232688B898351DB4FD8878BF46 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:f7:66:5b:53:8b:ea:c9:6e:0e:bb:90:b8:13:4d: f5:9c:74:6f:33:6e:de:cd:cb:c7:19:23:84:f3:42: 77:45:1d:f3:aa:98:ca:d2:06:3f:45:01:46:71:0b: 97:51:3c:cd:93:81:61:a0:54:25:52:13:2f:09:fe: 68:be:14:f8:0a:43:e5:52:62:7a:94:7b:51:ae:0e: 54:4f:c5:dd:99:d8:39:96:4a:f6:31:8c:0b:c4:4e: b6:8d:46:2a:c8:96:39:df:4a:d0:0b:de:60:ae:87: ba:a0:f3:19:98:52:67:96:2f:0e:71:38:11:b0:08: ff:9e:ac:83:8d:28:23:c8:dd:85:ed:c0:73:4a:78: 38:d9:60:80:04:da:8c:aa:9c:23:ee:03:fe:e4:21: 4a:60:2c:33:a9:70:03:81:82:b9:ee:b9:ed:b1:f5: 2a:16:04:5b:11:0e:ee:e9:98:69:71:a8:c5:80:b8: be:e5:62:ba:ba:92:a5:75:2b:c1:89:2c:05:dd:7b: df:7c:92:f0:ee:b6:ec:4a:e0:b5:ce:d1:06:6f:25: da:b1:91:49:bb:24:60:6a:e6:0c:59:34:73:68:7c: 76:47:69:72:c0:6e:fb:13:cd:aa:f7:f9:9c:02:df: 6f:25:e3:53:58:ac:f3:60:17:ba:78:9f:fc:ec:ca: 85:bd Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: EB:FA:59:28:FA:1E:F9:23:26:88:B8:98:35:1D:B4:FD:88:78:BF:46 X509v3 Authority Key Identifier: keyid:58:A7:06:EA:74:68:DF:0D:14:CA:18:17:C7:CC:5D:BD:5A:69:C5:96 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/32bfab09-c1e9-44d8-819e-fdf6549c6b3f/0/58A706EA7468DF0D14CA1817C7CC5DBD5A69C596.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/58A706EA7468DF0D14CA1817C7CC5DBD5A69C596.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/32bfab09-c1e9-44d8-819e-fdf6549c6b3f/0/58A706EA7468DF0D14CA1817C7CC5DBD5A69C596.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 21:88:fe:4c:61:ca:3c:1c:2d:14:44:5c:19:f7:b5:bc:a2:9a: 06:73:89:c1:8a:26:41:8e:f8:a2:d9:ed:0f:3f:d0:90:e1:a6: 00:8b:13:32:c9:66:1d:ad:36:ba:4d:59:8e:f4:bd:cf:6c:35: 0f:4f:16:5f:a1:13:92:95:d9:38:1c:14:21:59:be:4b:39:c7: c2:2a:2f:90:8c:4a:69:e9:0a:11:5d:24:15:bc:e1:3e:0d:e7: f4:51:a2:85:c6:ca:36:7c:10:f3:03:6b:84:f5:36:48:d7:69: 07:2c:30:27:59:42:2d:bd:d2:f0:9d:66:ad:dc:fa:88:63:6b: 0f:bf:c3:ae:f3:45:1e:be:c8:9e:64:cb:7b:67:de:69:5f:c0: da:8a:91:50:d1:0c:44:d3:3b:a3:fb:a7:06:6c:fe:b8:05:63: 82:e3:90:4b:2c:7e:3f:5c:cf:b8:7d:df:7f:76:3f:df:43:10: bc:3b:60:b6:24:85:a7:30:54:c7:56:e5:6b:6d:a2:13:0b:7f: dd:3d:38:53:b8:0c:6a:a8:78:03:6e:07:08:db:d5:38:a1:96: 2f:e9:ac:ad:c3:a8:87:7a:3f:61:cf:4f:f7:16:15:e6:8b:19: 92:0a:6c:11:3e:c6:71:ba:6e:75:56:ef:c6:ce:b9:3e:48:83: bc:33:41:1f -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUL+EaIZpgA2UfJ87CUP7ZL91+A6wwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoNThBNzA2RUE3NDY4REYwRDE0Q0ExODE3QzdDQzVEQkQ1 QTY5QzU5NjAeFw0yNTEyMjQwMTI2MTdaFw0yNTEyMjcxMDU0MTdaMDMxMTAvBgNV BAMTKEVCRkE1OTI4RkExRUY5MjMyNjg4Qjg5ODM1MURCNEZEODg3OEJGNDYwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQD3ZltTi+rJbg67kLgTTfWcdG8z bt7Ny8cZI4TzQndFHfOqmMrSBj9FAUZxC5dRPM2TgWGgVCVSEy8J/mi+FPgKQ+VS YnqUe1GuDlRPxd2Z2DmWSvYxjAvETraNRirIljnfStAL3mCuh7qg8xmYUmeWLw5x OBGwCP+erIONKCPI3YXtwHNKeDjZYIAE2oyqnCPuA/7kIUpgLDOpcAOBgrnuue2x 9SoWBFsRDu7pmGlxqMWAuL7lYrq6kqV1K8GJLAXde998kvDutuxK4LXO0QZvJdqx kUm7JGBq5gxZNHNofHZHaXLAbvsTzar3+ZwC328l41NYrPNgF7p4n/zsyoW9AgMB AAGjggI8MIICODAdBgNVHQ4EFgQU6/pZKPoe+SMmiLiYNR20/Yh4v0YwHwYDVR0j BBgwFoAUWKcG6nRo3w0UyhgXx8xdvVppxZYwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby8z MmJmYWIwOS1jMWU5LTQ0ZDgtODE5ZS1mZGY2NTQ5YzZiM2YvMC81OEE3MDZFQTc0 NjhERjBEMTRDQTE4MTdDN0NDNURCRDVBNjlDNTk2LmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvNThBNzA2RUE3NDY4REYwRDE0Q0ExODE3QzdDQzVEQkQ1QTY5 QzU5Ni5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vMzJiZmFiMDktYzFlOS00NGQ4LTgx OWUtZmRmNjU0OWM2YjNmLzAvNThBNzA2RUE3NDY4REYwRDE0Q0ExODE3QzdDQzVE QkQ1QTY5QzU5Ni5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBACGI/kxhyjwcLRREXBn3tbyimgZzicGKJkGO +KLZ7Q8/0JDhpgCLEzLJZh2tNrpNWY70vc9sNQ9PFl+hE5KV2TgcFCFZvks5x8Iq L5CMSmnpChFdJBW84T4N5/RRooXGyjZ8EPMDa4T1NkjXaQcsMCdZQi290vCdZq3c +ohjaw+/w67zRR6+yJ5ky3tn3mlfwNqKkVDRDETTO6P7pwZs/rgFY4LjkEssfj9c z7h93392P99DELw7YLYkhacwVMdW5WttohMLf909OFO4DGqoeANuBwjb1Tihli/p rK3DqId6P2HPT/cWFeaLGZIKbBE+xnG6bnVW78bOuT5Ig7wzQR8= -----END CERTIFICATE-----Generated at Wed Dec 24 20:23:48 2025 by rpki-client