This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf repo-rpki.idnic.net/repo/4732f191-e380-4013-bce5-4215a493a71d/0/585D79944E315672D413B937BFC042F7C0AAB990.mft File: 585D79944E315672D413B937BFC042F7C0AAB990.mft (raw, json) Hash identifier: 9k2HfbjQS+wZWa8utUxk09chcjUPkr1aPUiwybFxNk0= Subject key identifier: 17:AC:CA:59:9D:90:3D:E9:B7:18:02:BD:3F:B8:CB:B5:26:81:36:36 Authority key identifier: 58:5D:79:94:4E:31:56:72:D4:13:B9:37:BF:C0:42:F7:C0:AA:B9:90 Certificate issuer: /CN=585D79944E315672D413B937BFC042F7C0AAB990 Certificate serial: 4EC6423C99EC0C3C263B5C75E9BBAFCA3DA49BF5 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/585D79944E315672D413B937BFC042F7C0AAB990.cer Subject info access: rsync://repo-rpki.idnic.net/repo/4732f191-e380-4013-bce5-4215a493a71d/0/585D79944E315672D413B937BFC042F7C0AAB990.mft Manifest number: 0132 Signing time: Thu 18 Dec 2025 13:51:05 +0000 Manifest this update: Thu 18 Dec 2025 13:46:05 +0000 Manifest next update: Sun 21 Dec 2025 14:19:05 +0000 Files and hashes: 1: 585D79944E315672D413B937BFC042F7C0AAB990.crl (hash: bXgP/ivcxnMM7Wzx7C5oBtG93kY78kLIpd5T9eNdegU=) 2: 3130332e3130302e38352e302f32342d3234203d3e20313336383336.roa (hash: 8MQEMqhN7Q9xL1VnnFKndGDw/o7VojjkZHwwL7Jl284=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/4732f191-e380-4013-bce5-4215a493a71d/0/585D79944E315672D413B937BFC042F7C0AAB990.crl rsync://repo-rpki.idnic.net/repo/4732f191-e380-4013-bce5-4215a493a71d/0/585D79944E315672D413B937BFC042F7C0AAB990.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/585D79944E315672D413B937BFC042F7C0AAB990.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 21 Dec 2025 14:19:05 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 4e:c6:42:3c:99:ec:0c:3c:26:3b:5c:75:e9:bb:af:ca:3d:a4:9b:f5 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=585D79944E315672D413B937BFC042F7C0AAB990 Validity Not Before: Dec 18 13:46:05 2025 GMT Not After : Dec 21 14:19:05 2025 GMT Subject: CN=17ACCA599D903DE9B71802BD3FB8CBB526813636 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bd:af:8c:ad:23:02:76:75:8e:89:9a:ea:40:a8: 14:13:47:46:1a:e9:99:3d:0a:b1:6a:01:f0:5f:de: c5:bc:0f:29:41:b6:39:0f:5b:20:e8:6c:81:b5:09: dc:3f:66:6d:f2:70:ee:9e:f2:ac:e7:c6:54:fa:ea: 19:80:18:8c:a6:1e:e7:c9:a3:14:4c:47:fe:a1:9e: 8c:23:ce:80:64:cb:ba:f1:bd:e7:4f:75:35:a1:cc: 38:1d:0b:0e:cc:35:db:d8:1f:58:ec:57:5b:3d:1e: 10:53:f4:4c:95:61:80:0b:3f:1c:bb:80:9e:26:40: 28:27:97:84:92:67:82:cc:b0:bd:75:03:b9:be:34: 6f:1d:a9:66:e2:60:55:c4:ec:27:83:89:23:7d:04: 52:09:54:6a:79:16:25:1e:4c:f9:fc:33:16:2f:09: d4:03:f5:d3:e8:b5:36:0b:cb:0b:f5:57:15:7d:bc: 44:70:62:2f:56:a7:e2:f4:76:0d:f0:be:93:c1:2c: 57:8b:d9:75:be:ab:5c:95:34:85:12:2d:11:cd:25: 06:f8:25:1c:94:46:8a:f5:fd:b1:92:34:35:1c:77: 3b:e8:36:bd:cb:44:2a:2c:c0:98:be:3f:78:46:f0: 93:f3:0f:64:ef:ae:7b:c2:3c:ea:25:4d:aa:1e:a5: 29:6d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 17:AC:CA:59:9D:90:3D:E9:B7:18:02:BD:3F:B8:CB:B5:26:81:36:36 X509v3 Authority Key Identifier: keyid:58:5D:79:94:4E:31:56:72:D4:13:B9:37:BF:C0:42:F7:C0:AA:B9:90 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/4732f191-e380-4013-bce5-4215a493a71d/0/585D79944E315672D413B937BFC042F7C0AAB990.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/585D79944E315672D413B937BFC042F7C0AAB990.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/4732f191-e380-4013-bce5-4215a493a71d/0/585D79944E315672D413B937BFC042F7C0AAB990.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 4d:f2:8e:a3:18:fd:a3:dd:08:c1:bc:c4:6a:c8:67:c0:c9:99: 22:64:fc:54:4e:e8:1b:33:3b:6b:a3:8c:61:2c:22:02:67:fd: 9a:00:3e:b2:a0:e7:4a:f5:7e:28:c2:47:b4:16:f2:2a:78:53: b3:b8:1f:da:96:4e:b8:05:e4:a3:53:d5:74:93:b5:7b:93:f8: c2:74:bb:dd:b8:1a:c8:fc:4b:17:1e:e9:ef:29:07:28:e5:93: 6a:da:1b:b7:22:fa:d7:dd:6b:4e:2e:83:ae:61:48:ce:1a:eb: 5a:f9:ba:c8:21:32:59:e2:b4:85:1b:5f:75:b0:4d:81:42:d6: 62:65:3c:11:93:44:6d:a6:33:2a:72:4f:97:5b:03:ad:39:d9: b0:35:16:43:7c:d2:39:18:ef:3d:bc:38:7d:2b:2c:05:a4:03: f9:e3:0c:c8:a6:6e:6b:76:cd:2b:81:96:c8:a6:b1:b2:d9:70: 32:d1:9c:21:9d:a6:e9:8a:ae:2d:4d:d6:8f:6c:d2:c6:3a:8b: c7:0f:a8:d5:15:b0:f3:c0:53:8e:45:37:6e:75:10:76:0d:9e: 0c:c8:95:2e:0a:7e:b6:cb:77:56:cd:95:3b:ea:da:60:63:3d: 09:56:fb:fb:a3:6d:bc:44:3b:31:05:7e:a1:55:5c:99:a3:c7: 4a:ef:7c:0f -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUTsZCPJnsDDwmO1x16buvyj2km/UwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoNTg1RDc5OTQ0RTMxNTY3MkQ0MTNCOTM3QkZDMDQyRjdD MEFBQjk5MDAeFw0yNTEyMTgxMzQ2MDVaFw0yNTEyMjExNDE5MDVaMDMxMTAvBgNV BAMTKDE3QUNDQTU5OUQ5MDNERTlCNzE4MDJCRDNGQjhDQkI1MjY4MTM2MzYwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC9r4ytIwJ2dY6JmupAqBQTR0Ya 6Zk9CrFqAfBf3sW8DylBtjkPWyDobIG1Cdw/Zm3ycO6e8qznxlT66hmAGIymHufJ oxRMR/6hnowjzoBky7rxvedPdTWhzDgdCw7MNdvYH1jsV1s9HhBT9EyVYYALPxy7 gJ4mQCgnl4SSZ4LMsL11A7m+NG8dqWbiYFXE7CeDiSN9BFIJVGp5FiUeTPn8MxYv CdQD9dPotTYLywv1VxV9vERwYi9Wp+L0dg3wvpPBLFeL2XW+q1yVNIUSLRHNJQb4 JRyURor1/bGSNDUcdzvoNr3LRCoswJi+P3hG8JPzD2TvrnvCPOolTaoepSltAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUF6zKWZ2QPem3GAK9P7jLtSaBNjYwHwYDVR0j BBgwFoAUWF15lE4xVnLUE7k3v8BC98CquZAwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby80 NzMyZjE5MS1lMzgwLTQwMTMtYmNlNS00MjE1YTQ5M2E3MWQvMC81ODVENzk5NDRF MzE1NjcyRDQxM0I5MzdCRkMwNDJGN0MwQUFCOTkwLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvNTg1RDc5OTQ0RTMxNTY3MkQ0MTNCOTM3QkZDMDQyRjdDMEFB Qjk5MC5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vNDczMmYxOTEtZTM4MC00MDEzLWJj ZTUtNDIxNWE0OTNhNzFkLzAvNTg1RDc5OTQ0RTMxNTY3MkQ0MTNCOTM3QkZDMDQy RjdDMEFBQjk5MC5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAE3yjqMY/aPdCMG8xGrIZ8DJmSJk/FRO6Bsz O2ujjGEsIgJn/ZoAPrKg50r1fijCR7QW8ip4U7O4H9qWTrgF5KNT1XSTtXuT+MJ0 u924Gsj8Sxce6e8pByjlk2raG7ci+tfda04ug65hSM4a61r5usghMlnitIUbX3Ww TYFC1mJlPBGTRG2mMypyT5dbA6052bA1FkN80jkY7z28OH0rLAWkA/njDMimbmt2 zSuBlsimsbLZcDLRnCGdpumKri1N1o9s0sY6i8cPqNUVsPPAU45FN251EHYNngzI lS4KfrbLd1bNlTvq2mBjPQlW+/ujbbxEOzEFfqFVXJmjx0rvfA8= -----END CERTIFICATE-----Generated at Sat Dec 20 12:39:29 2025 by rpki-client