This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

$ rpki-client -vvf repo-rpki.idnic.net/repo/82fa3a39-e0ec-4fc1-9b54-353e07f005dd/0/58D7DC530F3BA4ACD0488062170E1581B67D61EA.mft
File: 58D7DC530F3BA4ACD0488062170E1581B67D61EA.mft (raw, json)
Hash identifier: mkGApUo3BBr11NyZ+y0fNDA4hovqvvitRyV/LwxMogs=
Subject key identifier: 81:77:E1:6C:6E:67:60:1E:A7:55:D5:54:93:8A:A2:F8:3A:A8:53:25
Authority key identifier: 58:D7:DC:53:0F:3B:A4:AC:D0:48:80:62:17:0E:15:81:B6:7D:61:EA
Certificate issuer: /CN=58D7DC530F3BA4ACD0488062170E1581B67D61EA
Certificate serial: 5E969E49149FDEA0A24F408873F76D1420ABA68D
Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/58D7DC530F3BA4ACD0488062170E1581B67D61EA.cer
Subject info access: rsync://repo-rpki.idnic.net/repo/82fa3a39-e0ec-4fc1-9b54-353e07f005dd/0/58D7DC530F3BA4ACD0488062170E1581B67D61EA.mft
Manifest number: 053D
Signing time: Tue 23 Dec 2025 18:52:02 +0000
Manifest this update: Tue 23 Dec 2025 18:47:02 +0000
Manifest next update: Sat 27 Dec 2025 00:33:02 +0000
Files and hashes: 1: 58D7DC530F3BA4ACD0488062170E1581B67D61EA.crl (hash: WUOgt+MaUYLxX2e8K+uV0lq4ceNahsi/v5GkF4tIWhc=)
Validation: OK
Signature path: rsync://repo-rpki.idnic.net/repo/82fa3a39-e0ec-4fc1-9b54-353e07f005dd/0/58D7DC530F3BA4ACD0488062170E1581B67D61EA.crl
rsync://repo-rpki.idnic.net/repo/82fa3a39-e0ec-4fc1-9b54-353e07f005dd/0/58D7DC530F3BA4ACD0488062170E1581B67D61EA.mft
rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/58D7DC530F3BA4ACD0488062170E1581B67D61EA.cer
rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl
rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Sat 27 Dec 2025 00:33:02 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
5e:96:9e:49:14:9f:de:a0:a2:4f:40:88:73:f7:6d:14:20:ab:a6:8d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=58D7DC530F3BA4ACD0488062170E1581B67D61EA
Validity
Not Before: Dec 23 18:47:02 2025 GMT
Not After : Dec 27 00:33:02 2025 GMT
Subject: CN=8177E16C6E67601EA755D554938AA2F83AA85325
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b0:69:92:88:66:e6:a9:21:c3:b3:85:e0:49:43:
90:9c:c1:da:d3:4c:d2:c5:cc:67:6d:1b:51:c6:3a:
23:46:a5:47:ea:2a:48:e5:ad:12:f5:a1:58:16:b2:
04:75:96:b0:02:88:bb:43:c5:28:d3:be:c3:fc:2b:
6b:bf:5a:f7:4f:d5:e8:7c:92:46:c9:29:1b:b7:3a:
27:1a:45:94:0a:11:40:c7:cd:c2:33:fc:05:2b:6d:
bc:de:72:f5:a7:ba:c8:ae:b5:03:97:47:60:56:74:
d2:f3:5f:5c:de:64:ce:81:1c:d7:62:5d:9a:93:00:
2d:92:4d:90:b4:eb:79:42:00:5d:1c:d7:24:91:57:
42:d0:ff:da:75:8c:1c:14:89:bd:fa:f8:ae:37:90:
32:cd:ed:0e:3d:c2:d5:8f:d4:9f:d7:7d:f9:ef:6d:
a2:f4:50:75:93:3b:3f:14:b9:69:67:9b:d2:5f:75:
28:f6:c9:70:97:d2:77:70:66:f6:71:24:b9:a0:d9:
55:5c:1d:0d:2e:dc:30:4b:c4:02:d6:6a:75:c1:e0:
f5:9a:a4:2f:83:b0:7e:db:3a:1c:20:20:0b:56:2a:
99:60:73:50:2f:a2:41:55:1b:bb:53:97:ae:14:98:
94:75:8b:89:3a:c4:1b:d8:23:84:65:7c:bd:4f:30:
20:b3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
81:77:E1:6C:6E:67:60:1E:A7:55:D5:54:93:8A:A2:F8:3A:A8:53:25
X509v3 Authority Key Identifier:
keyid:58:D7:DC:53:0F:3B:A4:AC:D0:48:80:62:17:0E:15:81:B6:7D:61:EA
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://repo-rpki.idnic.net/repo/82fa3a39-e0ec-4fc1-9b54-353e07f005dd/0/58D7DC530F3BA4ACD0488062170E1581B67D61EA.crl
Authority Information Access:
CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/58D7DC530F3BA4ACD0488062170E1581B67D61EA.cer
Subject Information Access:
Signed Object - URI:rsync://repo-rpki.idnic.net/repo/82fa3a39-e0ec-4fc1-9b54-353e07f005dd/0/58D7DC530F3BA4ACD0488062170E1581B67D61EA.mft
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
6a:93:b0:d3:a4:62:29:d3:22:54:32:3f:02:20:a6:0e:06:0b:
88:15:f8:94:60:c8:a8:76:61:4e:96:a3:9d:3e:16:a8:57:95:
43:a2:ba:32:45:96:b2:41:c2:72:6b:3f:01:12:25:ca:f2:dd:
33:75:d4:f6:7f:b4:a7:77:60:94:5d:a3:42:95:2a:fb:e0:d0:
5a:84:3e:28:15:79:05:50:50:c7:86:ff:32:c8:01:97:68:14:
c0:4b:fe:cc:76:77:40:60:0a:f7:b0:45:a0:62:09:2e:8f:16:
b3:6f:52:aa:f7:95:23:66:ea:34:23:df:cc:1d:d4:06:48:aa:
b4:5c:5f:6b:8e:13:e1:7b:57:af:67:25:76:ba:c6:34:3d:28:
ff:f5:72:37:68:00:80:40:cf:8e:a5:d6:93:24:7a:15:63:6b:
35:49:31:2c:3d:67:98:89:20:24:f0:60:77:1a:4e:c3:3e:06:
92:5c:6d:35:84:7e:07:97:f0:c1:45:d4:89:b6:3d:0b:2d:37:
bd:b9:04:83:f3:d6:75:04:83:ef:1a:24:27:a8:f8:fd:bd:d3:
28:40:42:c6:6f:7f:b6:c6:66:02:8c:b5:85:69:5b:72:74:81:
98:17:8d:9c:67:4f:15:8a:f7:37:f3:ca:5a:a6:ba:28:d0:58:
f1:c0:11:e8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Dec 24 22:05:06 2025 by rpki-client