This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf repo-rpki.idnic.net/repo/4b048064-87de-4de7-b0bd-12fa0deb8e32/0/59B19DD1D646793F5F17D89C42AC2F6399FB1854.mft File: 59B19DD1D646793F5F17D89C42AC2F6399FB1854.mft (raw, json) Hash identifier: K39aDDgORiS/lVU2BXlslEIz89zZJkmWU8pLu3LQgTE= Subject key identifier: 56:B2:51:41:FB:B8:EB:47:63:7E:BB:37:3E:93:78:43:96:9A:6E:DD Authority key identifier: 59:B1:9D:D1:D6:46:79:3F:5F:17:D8:9C:42:AC:2F:63:99:FB:18:54 Certificate issuer: /CN=59B19DD1D646793F5F17D89C42AC2F6399FB1854 Certificate serial: 57C4CE6585386C4E293A55678382B461E24A3094 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/59B19DD1D646793F5F17D89C42AC2F6399FB1854.cer Subject info access: rsync://repo-rpki.idnic.net/repo/4b048064-87de-4de7-b0bd-12fa0deb8e32/0/59B19DD1D646793F5F17D89C42AC2F6399FB1854.mft Manifest number: 0534 Signing time: Mon 22 Dec 2025 20:01:11 +0000 Manifest this update: Mon 22 Dec 2025 19:56:11 +0000 Manifest next update: Fri 26 Dec 2025 06:24:11 +0000 Files and hashes: 1: 3130332e37312e3139312e302f32342d3234203d3e20313335343732.roa (hash: 1EZSjvRP2SRnr2FbtmEkuDAZWdhz/ERYDxYK2+TR5jA=) 2: 59B19DD1D646793F5F17D89C42AC2F6399FB1854.crl (hash: r0SuIdSFq4C3UfyhO1uEnEnSGIbrZFdozVsf6E+YrbA=) 3: 3130332e37312e3139302e302f32342d3234203d3e20313335343732.roa (hash: G0VeuaYXS/KgF8/ez14lbGq6IneUYgvcmaO4bAZiGEU=) 4: 3130332e37312e3139302e302f32332d3233203d3e20313335343732.roa (hash: zYQUx+ql30PPLkUcmDWdEwPKMJFZU5b5VUJfAZqzXL8=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/4b048064-87de-4de7-b0bd-12fa0deb8e32/0/59B19DD1D646793F5F17D89C42AC2F6399FB1854.crl rsync://repo-rpki.idnic.net/repo/4b048064-87de-4de7-b0bd-12fa0deb8e32/0/59B19DD1D646793F5F17D89C42AC2F6399FB1854.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/59B19DD1D646793F5F17D89C42AC2F6399FB1854.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 26 Dec 2025 06:24:11 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 57:c4:ce:65:85:38:6c:4e:29:3a:55:67:83:82:b4:61:e2:4a:30:94 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=59B19DD1D646793F5F17D89C42AC2F6399FB1854 Validity Not Before: Dec 22 19:56:11 2025 GMT Not After : Dec 26 06:24:11 2025 GMT Subject: CN=56B25141FBB8EB47637EBB373E937843969A6EDD Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e5:05:e2:f8:2a:c1:ef:9b:34:93:08:d8:21:05: f0:76:c3:d6:e6:a5:31:62:1c:d6:76:6d:14:82:bb: c5:a5:b7:0d:9b:53:85:4b:46:a0:2c:bd:ed:4e:8c: 4d:02:8d:4b:43:d5:53:a6:d0:37:e9:6d:de:c4:3e: 20:01:85:61:45:f6:32:6a:30:31:c3:f9:da:4f:69: 04:b5:17:8d:b0:a9:83:77:5f:d2:60:57:b0:87:24: e4:54:3c:2e:22:f9:60:7e:4b:0a:c8:52:5d:e8:44: 0b:0e:ec:fc:4d:7c:eb:4f:45:30:5e:99:6e:e8:37: 06:77:42:a1:bf:f8:d8:6a:4d:b4:8a:1f:c7:d0:92: 49:db:30:0b:e5:4c:df:0f:c3:6a:d1:d3:e3:61:29: 04:4e:b2:e0:66:21:26:09:1f:78:85:dd:b9:14:a5: ef:82:ce:57:0d:74:a2:74:c0:98:7f:da:c0:4d:f3: c1:50:57:08:ea:56:a5:66:cc:19:46:30:c3:50:c9: f3:c9:a4:1f:d2:f2:a7:04:16:92:e4:e7:50:d4:2b: a7:a5:0e:1b:b9:c0:52:74:b6:df:ec:05:7e:ae:07: 29:94:d3:be:00:13:c2:78:af:ca:8c:0e:ee:cd:95: 26:e5:12:58:52:d5:48:68:a1:92:80:58:85:ff:01: a3:17 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 56:B2:51:41:FB:B8:EB:47:63:7E:BB:37:3E:93:78:43:96:9A:6E:DD X509v3 Authority Key Identifier: keyid:59:B1:9D:D1:D6:46:79:3F:5F:17:D8:9C:42:AC:2F:63:99:FB:18:54 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/4b048064-87de-4de7-b0bd-12fa0deb8e32/0/59B19DD1D646793F5F17D89C42AC2F6399FB1854.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/59B19DD1D646793F5F17D89C42AC2F6399FB1854.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/4b048064-87de-4de7-b0bd-12fa0deb8e32/0/59B19DD1D646793F5F17D89C42AC2F6399FB1854.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 82:32:07:23:ad:2c:d5:13:da:a7:d1:6b:7a:3f:f7:5d:c1:ac: 7c:60:97:1e:f0:94:c5:53:f0:72:8d:56:60:b0:82:15:26:ab: 05:90:35:b5:c2:87:44:75:d2:e7:9d:5e:41:5e:9f:12:d4:7f: f2:ec:5d:1b:67:da:61:e6:a1:44:ce:a7:dc:69:03:95:8e:dd: 37:cd:a0:3f:2c:96:a8:16:ff:8e:cd:73:ce:29:f9:ce:67:3d: 90:e7:22:e6:7b:3b:11:b0:90:67:36:64:2c:3e:fd:70:8c:65: ac:1a:8b:4f:86:84:e8:ea:b6:b6:e4:a4:33:c9:4e:8b:6f:2a: 61:60:85:74:02:16:7d:5a:c0:8a:51:49:a6:3c:48:1b:f1:45: d4:a3:67:8a:08:bb:04:15:fe:89:fd:11:e4:b4:16:3f:f5:82: 97:d2:32:3d:c8:6f:1d:48:cd:6f:4c:91:8a:2c:77:a1:32:a2: ee:f2:6d:b8:e3:76:e2:df:2b:c4:c9:6a:a9:ac:5c:8f:cc:b5: db:41:01:dd:45:3c:54:fa:65:80:67:84:e1:fe:e0:71:94:b4: 82:be:2a:c7:47:62:61:ff:f3:f3:21:3b:0d:03:17:77:c4:56: 80:0b:a0:ff:62:62:4d:e4:c5:17:ca:21:d4:20:57:1d:21:1d: 8b:54:6c:45 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUV8TOZYU4bE4pOlVng4K0YeJKMJQwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoNTlCMTlERDFENjQ2NzkzRjVGMTdEODlDNDJBQzJGNjM5 OUZCMTg1NDAeFw0yNTEyMjIxOTU2MTFaFw0yNTEyMjYwNjI0MTFaMDMxMTAvBgNV BAMTKDU2QjI1MTQxRkJCOEVCNDc2MzdFQkIzNzNFOTM3ODQzOTY5QTZFREQwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDlBeL4KsHvmzSTCNghBfB2w9bm pTFiHNZ2bRSCu8Wltw2bU4VLRqAsve1OjE0CjUtD1VOm0Dfpbd7EPiABhWFF9jJq MDHD+dpPaQS1F42wqYN3X9JgV7CHJORUPC4i+WB+SwrIUl3oRAsO7PxNfOtPRTBe mW7oNwZ3QqG/+NhqTbSKH8fQkknbMAvlTN8Pw2rR0+NhKQROsuBmISYJH3iF3bkU pe+CzlcNdKJ0wJh/2sBN88FQVwjqVqVmzBlGMMNQyfPJpB/S8qcEFpLk51DUK6el Dhu5wFJ0tt/sBX6uBymU074AE8J4r8qMDu7NlSblElhS1UhooZKAWIX/AaMXAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUVrJRQfu460djfrs3PpN4Q5aabt0wHwYDVR0j BBgwFoAUWbGd0dZGeT9fF9icQqwvY5n7GFQwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby80 YjA0ODA2NC04N2RlLTRkZTctYjBiZC0xMmZhMGRlYjhlMzIvMC81OUIxOUREMUQ2 NDY3OTNGNUYxN0Q4OUM0MkFDMkY2Mzk5RkIxODU0LmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvNTlCMTlERDFENjQ2NzkzRjVGMTdEODlDNDJBQzJGNjM5OUZC MTg1NC5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vNGIwNDgwNjQtODdkZS00ZGU3LWIw YmQtMTJmYTBkZWI4ZTMyLzAvNTlCMTlERDFENjQ2NzkzRjVGMTdEODlDNDJBQzJG NjM5OUZCMTg1NC5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAIIyByOtLNUT2qfRa3o/913BrHxglx7wlMVT 8HKNVmCwghUmqwWQNbXCh0R10uedXkFenxLUf/LsXRtn2mHmoUTOp9xpA5WO3TfN oD8slqgW/47Nc84p+c5nPZDnIuZ7OxGwkGc2ZCw+/XCMZawai0+GhOjqtrbkpDPJ TotvKmFghXQCFn1awIpRSaY8SBvxRdSjZ4oIuwQV/on9EeS0Fj/1gpfSMj3Ibx1I zW9MkYosd6Eyou7ybbjjduLfK8TJaqmsXI/MtdtBAd1FPFT6ZYBnhOH+4HGUtIK+ KsdHYmH/8/MhOw0DF3fEVoALoP9iYk3kxRfKIdQgVx0hHYtUbEU= -----END CERTIFICATE-----Generated at Thu Dec 25 01:23:12 2025 by rpki-client