This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf repo-rpki.idnic.net/repo/ae92243a-763d-44b8-987d-08bd0da9ee3d/0/C58E232004125E8B46AB63B600900D92EB71A3B1.mft File: C58E232004125E8B46AB63B600900D92EB71A3B1.mft (raw, json) Hash identifier: J06RurjJaTCBP3xK7Y8IUPyrfYiXkT9o+CyC6bWo8ck= Subject key identifier: 44:97:59:D9:7A:93:A0:EC:A3:D3:37:0E:59:C0:FA:FF:33:61:6C:31 Authority key identifier: C5:8E:23:20:04:12:5E:8B:46:AB:63:B6:00:90:0D:92:EB:71:A3:B1 Certificate issuer: /CN=C58E232004125E8B46AB63B600900D92EB71A3B1 Certificate serial: 49E7D57E4C9D4749E5CD43DDB5D786017E5FA422 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/C58E232004125E8B46AB63B600900D92EB71A3B1.cer Subject info access: rsync://repo-rpki.idnic.net/repo/ae92243a-763d-44b8-987d-08bd0da9ee3d/0/C58E232004125E8B46AB63B600900D92EB71A3B1.mft Manifest number: 01C1 Signing time: Fri 19 Dec 2025 20:02:37 +0000 Manifest this update: Fri 19 Dec 2025 19:57:37 +0000 Manifest next update: Tue 23 Dec 2025 02:25:37 +0000 Files and hashes: 1: 3130332e3131362e38322e302f32342d3234203d3e20313530393539.roa (hash: szZrGfxfjDvhYMSxWdXsF8gNn9uKqD0sZuSt9/Sp4zs=) 2: 3130332e3131362e38332e302f32342d3234203d3e20313530393539.roa (hash: F98mLIPqX7xW346RCv6louyBJXE+C84977MPR7enwBM=) 3: C58E232004125E8B46AB63B600900D92EB71A3B1.crl (hash: OpHWHjxp92MszRu3NjMaBcmdKPcMHVd5fH9OS7FTr2U=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/ae92243a-763d-44b8-987d-08bd0da9ee3d/0/C58E232004125E8B46AB63B600900D92EB71A3B1.crl rsync://repo-rpki.idnic.net/repo/ae92243a-763d-44b8-987d-08bd0da9ee3d/0/C58E232004125E8B46AB63B600900D92EB71A3B1.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/C58E232004125E8B46AB63B600900D92EB71A3B1.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 23 Dec 2025 02:25:37 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 49:e7:d5:7e:4c:9d:47:49:e5:cd:43:dd:b5:d7:86:01:7e:5f:a4:22 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=C58E232004125E8B46AB63B600900D92EB71A3B1 Validity Not Before: Dec 19 19:57:37 2025 GMT Not After : Dec 23 02:25:37 2025 GMT Subject: CN=449759D97A93A0ECA3D3370E59C0FAFF33616C31 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c9:11:42:b8:35:1f:a9:25:d1:b6:7f:4a:96:e5: da:94:97:9c:51:66:5e:87:e6:e5:b2:73:84:77:eb: ba:f5:8c:97:e9:40:ea:c7:88:a4:1e:66:81:c6:0a: 73:84:9f:93:f4:a9:40:54:9e:6c:c8:68:57:92:b2: 6c:a1:5a:f7:d6:9e:68:7f:d9:0b:28:38:ff:e5:71: bf:95:e9:17:8a:f1:dc:0a:c9:ec:b7:ca:96:bf:af: cf:a9:bf:aa:c8:03:91:3e:f4:5d:01:fa:03:51:de: 65:07:f8:00:33:68:8e:a2:38:ef:4a:4c:6e:a0:93: 7a:8c:15:27:ff:f8:ca:39:4b:fe:ae:e6:61:ce:d4: dd:76:80:41:35:ad:51:ab:f0:c3:57:6f:b3:c4:8d: ba:e5:26:70:dd:6a:4c:5e:17:af:d2:7b:1b:d3:18: 45:75:be:6c:d2:e9:25:56:45:37:fe:1d:98:b5:32: 2b:c4:af:5a:31:5f:9d:59:46:64:8b:18:a2:2f:76: ab:ac:e4:30:5f:2a:69:fd:49:4e:ff:90:76:2e:60: b7:ca:b8:f2:4f:9f:b9:30:b7:74:bc:1a:68:f0:cc: 36:5e:76:d6:00:87:f5:b0:31:8b:b6:8c:7b:89:7b: b3:fc:a4:94:7a:2f:cd:8d:c3:4f:ed:7e:00:bc:70: a5:d3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 44:97:59:D9:7A:93:A0:EC:A3:D3:37:0E:59:C0:FA:FF:33:61:6C:31 X509v3 Authority Key Identifier: keyid:C5:8E:23:20:04:12:5E:8B:46:AB:63:B6:00:90:0D:92:EB:71:A3:B1 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/ae92243a-763d-44b8-987d-08bd0da9ee3d/0/C58E232004125E8B46AB63B600900D92EB71A3B1.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/C58E232004125E8B46AB63B600900D92EB71A3B1.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/ae92243a-763d-44b8-987d-08bd0da9ee3d/0/C58E232004125E8B46AB63B600900D92EB71A3B1.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 62:b6:c7:33:1d:1d:fc:23:00:3b:22:ce:35:7c:26:d1:36:17: 75:ca:96:f0:ec:12:9a:87:f7:f1:80:74:ab:04:be:dd:f0:bb: ef:31:61:fb:1c:3e:42:69:8a:eb:10:d6:9f:a5:28:c9:8a:f9: 81:b4:1a:0e:78:73:95:b9:4f:63:26:e0:eb:da:1e:5c:92:4a: 3d:27:9c:bb:99:37:3f:05:c6:e5:06:13:92:25:54:0f:22:76: 03:e6:5b:82:80:30:6b:6a:2c:45:f8:6a:e4:42:35:73:ed:11: f6:4e:80:6b:db:78:e7:3c:d7:99:60:14:5a:84:35:23:ce:2f: 79:ae:e5:cf:6f:8d:2f:74:71:d9:cd:b6:e9:59:be:62:1c:e3: 76:12:d9:a4:b2:6d:52:62:d2:10:52:c0:fc:69:73:65:a9:59: 38:da:a0:d0:85:39:d2:90:e8:7e:64:27:27:ff:50:ee:a7:dc: b2:0c:56:8f:1b:94:47:53:d7:83:a3:d8:f4:e9:09:41:47:8c: 34:44:c3:fa:c9:74:05:6f:1e:cf:6f:0c:cf:9c:e5:32:86:ed: 1c:5e:27:05:cf:61:e9:e4:60:fb:9e:6d:48:f7:1c:f8:c5:19: 7e:57:b9:2b:2f:79:0c:f9:c4:3e:ac:a3:96:8c:7d:95:1b:21: 15:fe:93:b5 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUSefVfkydR0nlzUPdtdeGAX5fpCIwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoQzU4RTIzMjAwNDEyNUU4QjQ2QUI2M0I2MDA5MDBEOTJF QjcxQTNCMTAeFw0yNTEyMTkxOTU3MzdaFw0yNTEyMjMwMjI1MzdaMDMxMTAvBgNV BAMTKDQ0OTc1OUQ5N0E5M0EwRUNBM0QzMzcwRTU5QzBGQUZGMzM2MTZDMzEwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDJEUK4NR+pJdG2f0qW5dqUl5xR Zl6H5uWyc4R367r1jJfpQOrHiKQeZoHGCnOEn5P0qUBUnmzIaFeSsmyhWvfWnmh/ 2QsoOP/lcb+V6ReK8dwKyey3ypa/r8+pv6rIA5E+9F0B+gNR3mUH+AAzaI6iOO9K TG6gk3qMFSf/+Mo5S/6u5mHO1N12gEE1rVGr8MNXb7PEjbrlJnDdakxeF6/SexvT GEV1vmzS6SVWRTf+HZi1MivEr1oxX51ZRmSLGKIvdqus5DBfKmn9SU7/kHYuYLfK uPJPn7kwt3S8GmjwzDZedtYAh/WwMYu2jHuJe7P8pJR6L82Nw0/tfgC8cKXTAgMB AAGjggI8MIICODAdBgNVHQ4EFgQURJdZ2XqToOyj0zcOWcD6/zNhbDEwHwYDVR0j BBgwFoAUxY4jIAQSXotGq2O2AJANkutxo7EwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby9h ZTkyMjQzYS03NjNkLTQ0YjgtOTg3ZC0wOGJkMGRhOWVlM2QvMC9DNThFMjMyMDA0 MTI1RThCNDZBQjYzQjYwMDkwMEQ5MkVCNzFBM0IxLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvQzU4RTIzMjAwNDEyNUU4QjQ2QUI2M0I2MDA5MDBEOTJFQjcx QTNCMS5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vYWU5MjI0M2EtNzYzZC00NGI4LTk4 N2QtMDhiZDBkYTllZTNkLzAvQzU4RTIzMjAwNDEyNUU4QjQ2QUI2M0I2MDA5MDBE OTJFQjcxQTNCMS5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAGK2xzMdHfwjADsizjV8JtE2F3XKlvDsEpqH 9/GAdKsEvt3wu+8xYfscPkJpiusQ1p+lKMmK+YG0Gg54c5W5T2Mm4OvaHlySSj0n nLuZNz8FxuUGE5IlVA8idgPmW4KAMGtqLEX4auRCNXPtEfZOgGvbeOc815lgFFqE NSPOL3mu5c9vjS90cdnNtulZvmIc43YS2aSybVJi0hBSwPxpc2WpWTjaoNCFOdKQ 6H5kJyf/UO6n3LIMVo8blEdT14Oj2PTpCUFHjDREw/rJdAVvHs9vDM+c5TKG7Rxe JwXPYenkYPuebUj3HPjFGX5XuSsveQz5xD6so5aMfZUbIRX+k7U= -----END CERTIFICATE-----Generated at Mon Dec 22 00:05:51 2025 by rpki-client