This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf repo-rpki.idnic.net/repo/bc072db7-0127-4564-8d20-bced525a14b8/0/586FE8D27FF4D6BD4FA839FC58844A4B03D535DF.mft File: 586FE8D27FF4D6BD4FA839FC58844A4B03D535DF.mft (raw, json) Hash identifier: CiOblCteHrfVQXaCDskgYbqINCBbcGuF477s+4SjX0A= Subject key identifier: 90:B3:87:7D:B3:0F:0B:74:F2:D2:AF:50:70:14:59:8C:E6:1A:19:83 Authority key identifier: 58:6F:E8:D2:7F:F4:D6:BD:4F:A8:39:FC:58:84:4A:4B:03:D5:35:DF Certificate issuer: /CN=586FE8D27FF4D6BD4FA839FC58844A4B03D535DF Certificate serial: 7E3E346E9990B22D3776A308CA4D0A78489F20C3 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/586FE8D27FF4D6BD4FA839FC58844A4B03D535DF.cer Subject info access: rsync://repo-rpki.idnic.net/repo/bc072db7-0127-4564-8d20-bced525a14b8/0/586FE8D27FF4D6BD4FA839FC58844A4B03D535DF.mft Manifest number: 04FA Signing time: Wed 17 Dec 2025 23:21:32 +0000 Manifest this update: Wed 17 Dec 2025 23:16:32 +0000 Manifest next update: Sun 21 Dec 2025 07:45:32 +0000 Files and hashes: 1: 586FE8D27FF4D6BD4FA839FC58844A4B03D535DF.crl (hash: cae6niWgBuUJE7H1vTc1Ez9p9l8XIF7ZTLOUycYJ8Sc=) 2: 323030313a6466303a336538303a3a2f34382d3438203d3e20313338383531.roa (hash: z4oYCZWDew+XBZrkivYPBIEa8esU/2et9t2LDZPakkY=) 3: 3130332e3133382e3132372e302f32342d3234203d3e20313338383531.roa (hash: 8uluz9oQUOC33A/yP5J6qEWwFa5BN6LUXooNJ8KA6Pw=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/bc072db7-0127-4564-8d20-bced525a14b8/0/586FE8D27FF4D6BD4FA839FC58844A4B03D535DF.crl rsync://repo-rpki.idnic.net/repo/bc072db7-0127-4564-8d20-bced525a14b8/0/586FE8D27FF4D6BD4FA839FC58844A4B03D535DF.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/586FE8D27FF4D6BD4FA839FC58844A4B03D535DF.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 21 Dec 2025 07:45:32 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 7e:3e:34:6e:99:90:b2:2d:37:76:a3:08:ca:4d:0a:78:48:9f:20:c3 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=586FE8D27FF4D6BD4FA839FC58844A4B03D535DF Validity Not Before: Dec 17 23:16:32 2025 GMT Not After : Dec 21 07:45:32 2025 GMT Subject: CN=90B3877DB30F0B74F2D2AF507014598CE61A1983 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b4:a5:21:7b:6d:9d:22:a9:72:20:7c:b9:76:ca: 6d:8d:5b:c3:ec:20:41:9c:6a:a6:1e:f0:4d:cb:0a: 70:36:2f:3b:d7:96:c4:2b:7a:16:24:d8:8b:dd:fe: c3:2b:9c:6f:3b:62:ac:f0:bb:c4:2f:51:02:7c:8b: e2:7e:62:de:1f:30:99:ae:65:37:2d:a7:6f:ad:07: bc:46:8c:cd:bd:16:b4:ad:9b:e1:f4:c5:83:cb:60: 9b:e0:c6:02:f6:d4:88:3c:cc:62:34:55:b5:9a:0a: b6:e4:4c:b8:49:40:6d:83:f8:78:66:8d:55:50:13: 22:2a:0d:a9:3a:69:47:a7:0b:c9:a7:d7:0b:2c:f8: 9e:9e:16:f7:2b:e5:da:ae:77:cd:6c:01:7f:ff:69: f8:25:ea:7f:61:4f:6e:54:ae:0b:cf:9e:0b:61:c8: d3:a6:cb:0f:44:af:1e:14:05:e6:5d:5e:85:47:07: 29:b5:96:bf:d2:57:5f:30:41:f5:93:14:fe:3d:45: 42:f7:c1:a7:7e:8f:ee:fc:03:99:86:7c:01:9d:6a: 3c:5d:53:52:9e:00:ab:60:ae:fb:4e:eb:b6:23:fd: b5:af:2a:d4:cc:6c:39:c3:93:39:30:ce:3c:72:75: 42:89:8c:c5:0b:f3:51:56:a5:af:ad:a6:1f:e5:a2: b6:b9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 90:B3:87:7D:B3:0F:0B:74:F2:D2:AF:50:70:14:59:8C:E6:1A:19:83 X509v3 Authority Key Identifier: keyid:58:6F:E8:D2:7F:F4:D6:BD:4F:A8:39:FC:58:84:4A:4B:03:D5:35:DF X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/bc072db7-0127-4564-8d20-bced525a14b8/0/586FE8D27FF4D6BD4FA839FC58844A4B03D535DF.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/586FE8D27FF4D6BD4FA839FC58844A4B03D535DF.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/bc072db7-0127-4564-8d20-bced525a14b8/0/586FE8D27FF4D6BD4FA839FC58844A4B03D535DF.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 12:64:69:28:a7:c0:aa:07:f3:8a:5a:e0:8f:1f:c1:8c:cf:0a: 6b:30:1c:9c:ff:2c:b9:55:2d:e0:7d:e0:42:a8:cc:11:95:61: 17:d4:5a:04:7b:12:df:37:62:f8:c0:25:1d:24:11:a1:46:10: 60:a8:3a:6c:5d:bf:87:18:eb:eb:f1:df:4c:fb:92:89:f8:70: ed:7a:53:d6:21:98:40:0e:71:14:b0:85:88:8b:39:34:67:65: 2d:98:58:3a:6d:ac:77:62:b8:ed:3f:e0:49:9e:22:0d:1a:8d: 52:43:0d:51:d8:40:40:4b:ee:91:00:3d:45:c3:28:4d:d4:9f: fd:de:c4:7a:32:ff:30:85:2a:02:53:c0:ea:ec:a5:ab:8c:c4: ac:32:42:48:21:86:ca:6f:5a:d3:cb:c0:37:fe:25:64:e5:59: b4:9d:4d:36:dc:b8:fc:87:50:27:71:0c:bf:51:62:77:30:da: cc:02:0b:b5:21:e1:77:74:c7:87:4d:b2:11:14:c8:7c:1c:dc: f1:7d:59:0b:50:2b:30:d1:ce:86:94:6a:9c:23:fe:c3:bb:c0: d4:88:a7:bb:f7:cb:a6:68:dd:44:54:78:4c:39:a3:15:94:58: 63:45:3c:5a:12:33:a7:ae:5c:5b:a7:32:c4:ae:14:24:46:83: 82:69:ee:76 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUfj40bpmQsi03dqMIyk0KeEifIMMwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoNTg2RkU4RDI3RkY0RDZCRDRGQTgzOUZDNTg4NDRBNEIw M0Q1MzVERjAeFw0yNTEyMTcyMzE2MzJaFw0yNTEyMjEwNzQ1MzJaMDMxMTAvBgNV BAMTKDkwQjM4NzdEQjMwRjBCNzRGMkQyQUY1MDcwMTQ1OThDRTYxQTE5ODMwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC0pSF7bZ0iqXIgfLl2ym2NW8Ps IEGcaqYe8E3LCnA2LzvXlsQrehYk2Ivd/sMrnG87Yqzwu8QvUQJ8i+J+Yt4fMJmu ZTctp2+tB7xGjM29FrStm+H0xYPLYJvgxgL21Ig8zGI0VbWaCrbkTLhJQG2D+Hhm jVVQEyIqDak6aUenC8mn1wss+J6eFvcr5dqud81sAX//afgl6n9hT25UrgvPngth yNOmyw9Erx4UBeZdXoVHBym1lr/SV18wQfWTFP49RUL3wad+j+78A5mGfAGdajxd U1KeAKtgrvtO67Yj/bWvKtTMbDnDkzkwzjxydUKJjMUL81FWpa+tph/lora5AgMB AAGjggI8MIICODAdBgNVHQ4EFgQUkLOHfbMPC3Ty0q9QcBRZjOYaGYMwHwYDVR0j BBgwFoAUWG/o0n/01r1PqDn8WIRKSwPVNd8wDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby9i YzA3MmRiNy0wMTI3LTQ1NjQtOGQyMC1iY2VkNTI1YTE0YjgvMC81ODZGRThEMjdG RjRENkJENEZBODM5RkM1ODg0NEE0QjAzRDUzNURGLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvNTg2RkU4RDI3RkY0RDZCRDRGQTgzOUZDNTg4NDRBNEIwM0Q1 MzVERi5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vYmMwNzJkYjctMDEyNy00NTY0LThk MjAtYmNlZDUyNWExNGI4LzAvNTg2RkU4RDI3RkY0RDZCRDRGQTgzOUZDNTg4NDRB NEIwM0Q1MzVERi5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBABJkaSinwKoH84pa4I8fwYzPCmswHJz/LLlV LeB94EKozBGVYRfUWgR7Et83YvjAJR0kEaFGEGCoOmxdv4cY6+vx30z7kon4cO16 U9YhmEAOcRSwhYiLOTRnZS2YWDptrHdiuO0/4EmeIg0ajVJDDVHYQEBL7pEAPUXD KE3Un/3exHoy/zCFKgJTwOrspauMxKwyQkghhspvWtPLwDf+JWTlWbSdTTbcuPyH UCdxDL9RYncw2swCC7Uh4Xd0x4dNshEUyHwc3PF9WQtQKzDRzoaUapwj/sO7wNSI p7v3y6Zo3URUeEw5oxWUWGNFPFoSM6euXFunMsSuFCRGg4Jp7nY= -----END CERTIFICATE-----Generated at Fri Dec 19 19:35:35 2025 by rpki-client