This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf repo-rpki.idnic.net/repo/ff2506b1-396d-499e-b7f5-5d9f8e7e0bee/0/58BB439F406646053DA2029A1FDBBE942B381419.mft File: 58BB439F406646053DA2029A1FDBBE942B381419.mft (raw, json) Hash identifier: +1Ytf7zImDXDHHlUSl9EHYJ3zOYjUpAZyb6l4BfTORY= Subject key identifier: 61:87:AB:44:A1:FB:94:F7:ED:CA:FB:5F:95:10:3E:84:7D:E9:7D:AB Authority key identifier: 58:BB:43:9F:40:66:46:05:3D:A2:02:9A:1F:DB:BE:94:2B:38:14:19 Certificate issuer: /CN=58BB439F406646053DA2029A1FDBBE942B381419 Certificate serial: 4C60161A223864B748BF8F2DB86E53C7FB0D25F4 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/58BB439F406646053DA2029A1FDBBE942B381419.cer Subject info access: rsync://repo-rpki.idnic.net/repo/ff2506b1-396d-499e-b7f5-5d9f8e7e0bee/0/58BB439F406646053DA2029A1FDBBE942B381419.mft Manifest number: 0502 Signing time: Fri 19 Dec 2025 11:33:35 +0000 Manifest this update: Fri 19 Dec 2025 11:28:35 +0000 Manifest next update: Mon 22 Dec 2025 20:21:35 +0000 Files and hashes: 1: 58BB439F406646053DA2029A1FDBBE942B381419.crl (hash: IvAuZXkSat4u1yCWEAbX2bfWqYbTjc7IboWEYIbaZ34=) 2: 323430363a373663303a3a2f33322d3438203d3e203538383231.roa (hash: bNw8LF5Ec6WuKsnsnBnZzpsFS6CBddKmbeAtnWBKzS8=) 3: 3130332e3135352e3139382e302f32332d3234203d3e203538383231.roa (hash: 8VEdbgNMofrOYRUnoYix632qXa5TAcUqt6koDVDvkVQ=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/ff2506b1-396d-499e-b7f5-5d9f8e7e0bee/0/58BB439F406646053DA2029A1FDBBE942B381419.crl rsync://repo-rpki.idnic.net/repo/ff2506b1-396d-499e-b7f5-5d9f8e7e0bee/0/58BB439F406646053DA2029A1FDBBE942B381419.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/58BB439F406646053DA2029A1FDBBE942B381419.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 22 Dec 2025 20:21:35 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 4c:60:16:1a:22:38:64:b7:48:bf:8f:2d:b8:6e:53:c7:fb:0d:25:f4 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=58BB439F406646053DA2029A1FDBBE942B381419 Validity Not Before: Dec 19 11:28:35 2025 GMT Not After : Dec 22 20:21:35 2025 GMT Subject: CN=6187AB44A1FB94F7EDCAFB5F95103E847DE97DAB Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bc:52:d6:53:21:68:9e:58:ef:88:e2:12:49:14: e3:7f:e7:0b:b8:06:44:16:4d:64:d6:55:f0:f3:38: 1e:08:0e:2a:1d:f5:1b:71:9b:76:bd:b6:05:72:1f: cd:a9:f4:46:f9:aa:8f:3e:97:43:2a:de:a0:3a:18: f4:48:ae:43:6f:6c:96:d1:a0:fe:e4:53:12:18:a5: 2c:6b:18:6e:36:5e:9d:22:7b:de:c6:d8:c7:3c:99: 53:57:df:09:5e:38:bf:55:45:98:b1:65:58:14:6d: 3a:13:cf:50:0a:5c:b9:1b:af:54:ec:f9:13:3f:b1: 1a:7a:04:3e:87:7a:e9:1b:fb:38:48:01:76:99:82: ad:0a:7a:c1:64:4c:dd:d4:69:16:8e:a6:8c:e8:e7: 87:4d:16:31:4a:ef:33:8f:a3:ee:21:94:95:3c:d1: 4f:38:5b:7b:f7:2d:57:3a:ec:40:fd:74:3d:47:02: 82:a5:94:7e:e1:af:2e:4b:d8:e5:77:31:31:6b:38: 39:eb:c1:08:25:08:8f:47:0e:27:e7:81:61:d3:4b: f2:21:65:13:c2:71:2e:cd:97:01:24:b9:16:59:6e: 72:b5:bc:05:f5:0b:2e:8b:34:0d:dc:5c:4a:fb:3a: b7:3e:ef:d6:c1:2e:3b:8b:28:bd:7f:86:6c:8f:8d: 6f:5b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 61:87:AB:44:A1:FB:94:F7:ED:CA:FB:5F:95:10:3E:84:7D:E9:7D:AB X509v3 Authority Key Identifier: keyid:58:BB:43:9F:40:66:46:05:3D:A2:02:9A:1F:DB:BE:94:2B:38:14:19 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/ff2506b1-396d-499e-b7f5-5d9f8e7e0bee/0/58BB439F406646053DA2029A1FDBBE942B381419.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/58BB439F406646053DA2029A1FDBBE942B381419.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/ff2506b1-396d-499e-b7f5-5d9f8e7e0bee/0/58BB439F406646053DA2029A1FDBBE942B381419.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 86:b3:b8:43:f8:27:5f:28:ac:b9:e7:27:1d:92:e4:65:42:e5: 71:02:06:a1:50:a2:70:53:92:5a:14:fd:a7:ab:35:1b:a4:81: 5a:04:95:a7:d7:30:29:4d:18:eb:0d:88:68:22:77:88:9c:9e: df:e0:74:9b:0a:62:fc:01:0e:cf:51:c1:0d:cc:6d:bf:54:4d: 96:ff:a3:22:e4:bc:a5:c9:a2:be:0d:34:ec:98:20:ee:fc:85: 4a:ca:a9:3d:88:7d:c3:ce:e7:25:21:7a:c7:c9:fd:81:11:db: c9:c2:5c:9a:78:85:eb:98:11:48:74:7e:d8:85:d1:59:1b:2b: 53:98:19:ee:86:5f:4e:0f:4b:81:bf:4e:4b:04:ae:57:5a:dc: 1b:bb:fd:3e:87:55:d5:8a:38:2c:34:59:65:cf:18:7a:15:b8: ce:f1:d7:4a:b2:e8:7f:b1:c8:e8:36:14:74:17:38:bb:c0:3a: dc:b9:c5:d0:5e:e2:94:9f:18:61:7f:0e:3b:d4:4b:f3:f5:2c: af:c1:2a:5c:d1:70:f5:e7:db:69:42:17:6b:17:84:2e:49:d0: 7c:cc:35:92:d3:95:c6:2f:eb:65:e8:9d:ce:2d:9f:93:f7:92: cf:39:56:b4:ab:de:08:5f:82:bd:1e:ac:56:d1:7a:b0:8d:03: 26:b4:38:8d -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUTGAWGiI4ZLdIv48tuG5Tx/sNJfQwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoNThCQjQzOUY0MDY2NDYwNTNEQTIwMjlBMUZEQkJFOTQy QjM4MTQxOTAeFw0yNTEyMTkxMTI4MzVaFw0yNTEyMjIyMDIxMzVaMDMxMTAvBgNV BAMTKDYxODdBQjQ0QTFGQjk0RjdFRENBRkI1Rjk1MTAzRTg0N0RFOTdEQUIwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC8UtZTIWieWO+I4hJJFON/5wu4 BkQWTWTWVfDzOB4IDiod9Rtxm3a9tgVyH82p9Eb5qo8+l0Mq3qA6GPRIrkNvbJbR oP7kUxIYpSxrGG42Xp0ie97G2Mc8mVNX3wleOL9VRZixZVgUbToTz1AKXLkbr1Ts +RM/sRp6BD6Heukb+zhIAXaZgq0KesFkTN3UaRaOpozo54dNFjFK7zOPo+4hlJU8 0U84W3v3LVc67ED9dD1HAoKllH7hry5L2OV3MTFrODnrwQglCI9HDifngWHTS/Ih ZRPCcS7NlwEkuRZZbnK1vAX1Cy6LNA3cXEr7Orc+79bBLjuLKL1/hmyPjW9bAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUYYerRKH7lPftyvtflRA+hH3pfaswHwYDVR0j BBgwFoAUWLtDn0BmRgU9ogKaH9u+lCs4FBkwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby9m ZjI1MDZiMS0zOTZkLTQ5OWUtYjdmNS01ZDlmOGU3ZTBiZWUvMC81OEJCNDM5RjQw NjY0NjA1M0RBMjAyOUExRkRCQkU5NDJCMzgxNDE5LmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvNThCQjQzOUY0MDY2NDYwNTNEQTIwMjlBMUZEQkJFOTQyQjM4 MTQxOS5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vZmYyNTA2YjEtMzk2ZC00OTllLWI3 ZjUtNWQ5ZjhlN2UwYmVlLzAvNThCQjQzOUY0MDY2NDYwNTNEQTIwMjlBMUZEQkJF OTQyQjM4MTQxOS5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAIazuEP4J18orLnnJx2S5GVC5XECBqFQonBT kloU/aerNRukgVoElafXMClNGOsNiGgid4icnt/gdJsKYvwBDs9RwQ3Mbb9UTZb/ oyLkvKXJor4NNOyYIO78hUrKqT2IfcPO5yUhesfJ/YER28nCXJp4heuYEUh0ftiF 0VkbK1OYGe6GX04PS4G/TksErlda3Bu7/T6HVdWKOCw0WWXPGHoVuM7x10qy6H+x yOg2FHQXOLvAOty5xdBe4pSfGGF/DjvUS/P1LK/BKlzRcPXn22lCF2sXhC5J0HzM NZLTlcYv62Xonc4tn5P3ks85VrSr3ghfgr0erFbRerCNAya0OI0= -----END CERTIFICATE-----Generated at Sun Dec 21 01:18:37 2025 by rpki-client