This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf repo-rpki.idnic.net/repo/10a8590e-e4dc-4416-a6fa-fb78d6dd12d7/0/52B9C1E5F0BAF345C40F2E79669C63CB39E5CF3A.mft File: 52B9C1E5F0BAF345C40F2E79669C63CB39E5CF3A.mft (raw, json) Hash identifier: +h4nfbKiSeV7BFXxxPZeOEC4n1yp15we/uLfeDVi6r0= Subject key identifier: 6B:DA:A3:07:2D:75:DA:3F:2C:53:94:FC:3C:1C:66:41:D5:67:99:8E Authority key identifier: 52:B9:C1:E5:F0:BA:F3:45:C4:0F:2E:79:66:9C:63:CB:39:E5:CF:3A Certificate issuer: /CN=52B9C1E5F0BAF345C40F2E79669C63CB39E5CF3A Certificate serial: 62F4A4832B7A8C97780DAEE4D6D6E1AE117B025B Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/52B9C1E5F0BAF345C40F2E79669C63CB39E5CF3A.cer Subject info access: rsync://repo-rpki.idnic.net/repo/10a8590e-e4dc-4416-a6fa-fb78d6dd12d7/0/52B9C1E5F0BAF345C40F2E79669C63CB39E5CF3A.mft Manifest number: BC Signing time: Sat 06 Dec 2025 23:30:50 +0000 Manifest this update: Sat 06 Dec 2025 23:25:50 +0000 Manifest next update: Wed 10 Dec 2025 07:23:50 +0000 Files and hashes: 1: 3135372e31302e3138342e302f32342d3234203d3e20313532333438.roa (hash: pR6eogbZvQzPFnI0kZLcItGmRoYFBBreikW5pxdST7Q=) 2: 52B9C1E5F0BAF345C40F2E79669C63CB39E5CF3A.crl (hash: HVnt2uKmNFOHj89cJ+aeOArXDq/QyYbFI7LrV/4dJGM=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/10a8590e-e4dc-4416-a6fa-fb78d6dd12d7/0/52B9C1E5F0BAF345C40F2E79669C63CB39E5CF3A.crl rsync://repo-rpki.idnic.net/repo/10a8590e-e4dc-4416-a6fa-fb78d6dd12d7/0/52B9C1E5F0BAF345C40F2E79669C63CB39E5CF3A.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/52B9C1E5F0BAF345C40F2E79669C63CB39E5CF3A.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/60F8BE9C16625C424B269EE06C64A83BAB8506D4.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/60F8BE9C16625C424B269EE06C64A83BAB8506D4.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/YPi-nBZiXEJLJp7gbGSoO6uFBtQ.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 09 Dec 2025 06:55:17 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 62:f4:a4:83:2b:7a:8c:97:78:0d:ae:e4:d6:d6:e1:ae:11:7b:02:5b Signature Algorithm: sha256WithRSAEncryption Issuer: CN=52B9C1E5F0BAF345C40F2E79669C63CB39E5CF3A Validity Not Before: Dec 6 23:25:50 2025 GMT Not After : Dec 10 07:23:50 2025 GMT Subject: CN=6BDAA3072D75DA3F2C5394FC3C1C6641D567998E Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ae:0e:86:3d:5a:f5:9d:80:1f:2a:a3:08:4f:15: d6:59:63:7a:5f:44:44:1d:d1:20:87:5a:ce:a4:cf: 1d:c9:d5:01:f4:84:25:61:e9:1e:a9:f0:5f:c9:11: 59:f8:8d:c0:17:0e:d0:13:49:1d:e6:21:c0:68:96: a2:64:51:13:d5:3a:9d:fd:85:2c:19:7a:e7:a1:25: 49:c5:48:50:72:81:04:38:82:d5:2c:c7:33:94:4c: 94:f6:7f:11:3a:21:d5:da:42:72:5e:ca:23:4b:c6: 01:5b:b3:2f:bb:c4:73:ba:aa:0d:b2:f6:95:16:08: b9:d7:36:4e:e3:aa:04:0b:86:59:6e:1a:42:2a:fb: 95:8d:f0:48:66:47:58:5a:9e:d8:00:f5:17:8a:27: 1f:53:eb:76:67:18:7e:72:b3:49:e8:c3:0f:5e:58: ee:62:c7:f9:2e:94:f8:a6:5d:6d:03:7a:61:25:c0: 10:20:57:89:c2:29:2d:f6:25:da:9d:20:f9:83:f2: 6d:50:ab:95:45:73:44:4b:1a:6d:8b:34:7d:95:d8: cb:27:a8:1e:bd:23:a5:c9:fd:d1:e8:ca:37:aa:73: 5e:9d:a0:0d:9c:3a:10:3b:5d:4a:de:ca:36:54:43: 93:0f:ae:e8:33:5d:75:45:a0:6f:c2:b6:c4:17:a2: bc:b1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 6B:DA:A3:07:2D:75:DA:3F:2C:53:94:FC:3C:1C:66:41:D5:67:99:8E X509v3 Authority Key Identifier: keyid:52:B9:C1:E5:F0:BA:F3:45:C4:0F:2E:79:66:9C:63:CB:39:E5:CF:3A X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/10a8590e-e4dc-4416-a6fa-fb78d6dd12d7/0/52B9C1E5F0BAF345C40F2E79669C63CB39E5CF3A.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/52B9C1E5F0BAF345C40F2E79669C63CB39E5CF3A.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/10a8590e-e4dc-4416-a6fa-fb78d6dd12d7/0/52B9C1E5F0BAF345C40F2E79669C63CB39E5CF3A.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 95:bd:42:1b:ee:e2:91:97:e0:a6:b4:e5:69:4f:c3:be:a8:dd: e4:e0:da:76:37:28:d3:6b:63:13:59:c9:92:72:92:2d:b1:68: ad:80:f9:ca:da:e3:0c:e2:74:f5:86:89:28:ca:87:ec:34:02: a0:3e:d2:61:9f:2c:9e:76:63:74:5d:ce:b2:11:e3:a5:7c:a3: 9d:87:44:1b:04:16:1a:5b:49:55:43:e6:10:53:18:a0:a8:43: 7a:03:68:8b:17:16:ac:4c:75:88:f2:58:de:55:30:09:ba:9d: be:81:73:c7:cc:bf:d7:a8:5c:dd:a2:10:33:cf:50:dc:d6:66: a8:e0:7a:c5:0c:c9:e1:ee:b5:b5:81:ca:aa:51:d0:9b:53:a8: 5a:72:99:fb:57:cb:bf:93:a1:3f:04:ff:7b:fc:69:a4:0a:70: d7:cd:05:bb:a2:f3:86:01:4e:62:4d:6c:60:52:49:68:7e:46: b2:e3:a0:1b:64:c4:bf:d4:38:85:e8:cb:97:2f:f5:fc:69:58: 16:0f:28:79:9b:d0:9a:df:4e:b1:11:2c:22:61:f3:90:0d:9b: 39:d3:21:8f:ab:bb:33:a4:fc:50:29:91:3a:04:a0:66:92:56: 81:e0:c4:61:39:bd:9f:ec:91:d8:72:83:f7:07:88:c7:31:63: b2:0c:de:7f -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUYvSkgyt6jJd4Da7k1tbhrhF7AlswDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoNTJCOUMxRTVGMEJBRjM0NUM0MEYyRTc5NjY5QzYzQ0Iz OUU1Q0YzQTAeFw0yNTEyMDYyMzI1NTBaFw0yNTEyMTAwNzIzNTBaMDMxMTAvBgNV BAMTKDZCREFBMzA3MkQ3NURBM0YyQzUzOTRGQzNDMUM2NjQxRDU2Nzk5OEUwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCuDoY9WvWdgB8qowhPFdZZY3pf REQd0SCHWs6kzx3J1QH0hCVh6R6p8F/JEVn4jcAXDtATSR3mIcBolqJkURPVOp39 hSwZeuehJUnFSFBygQQ4gtUsxzOUTJT2fxE6IdXaQnJeyiNLxgFbsy+7xHO6qg2y 9pUWCLnXNk7jqgQLhlluGkIq+5WN8EhmR1hantgA9ReKJx9T63ZnGH5ys0noww9e WO5ix/kulPimXW0DemElwBAgV4nCKS32JdqdIPmD8m1Qq5VFc0RLGm2LNH2V2Msn qB69I6XJ/dHoyjeqc16doA2cOhA7XUreyjZUQ5MPrugzXXVFoG/CtsQXoryxAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUa9qjBy112j8sU5T8PBxmQdVnmY4wHwYDVR0j BBgwFoAUUrnB5fC680XEDy55ZpxjyznlzzowDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby8x MGE4NTkwZS1lNGRjLTQ0MTYtYTZmYS1mYjc4ZDZkZDEyZDcvMC81MkI5QzFFNUYw QkFGMzQ1QzQwRjJFNzk2NjlDNjNDQjM5RTVDRjNBLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzEvNTJCOUMxRTVGMEJBRjM0NUM0MEYyRTc5NjY5QzYzQ0IzOUU1 Q0YzQS5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vMTBhODU5MGUtZTRkYy00NDE2LWE2 ZmEtZmI3OGQ2ZGQxMmQ3LzAvNTJCOUMxRTVGMEJBRjM0NUM0MEYyRTc5NjY5QzYz Q0IzOUU1Q0YzQS5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAJW9Qhvu4pGX4Ka05WlPw76o3eTg2nY3KNNr YxNZyZJyki2xaK2A+cra4wzidPWGiSjKh+w0AqA+0mGfLJ52Y3RdzrIR46V8o52H RBsEFhpbSVVD5hBTGKCoQ3oDaIsXFqxMdYjyWN5VMAm6nb6Bc8fMv9eoXN2iEDPP UNzWZqjgesUMyeHutbWByqpR0JtTqFpymftXy7+ToT8E/3v8aaQKcNfNBbui84YB TmJNbGBSSWh+RrLjoBtkxL/UOIXoy5cv9fxpWBYPKHmb0JrfTrERLCJh85ANmznT IY+ruzOk/FApkToEoGaSVoHgxGE5vZ/skdhyg/cHiMcxY7IM3n8= -----END CERTIFICATE-----Generated at Sun Dec 7 18:52:34 2025 by rpki-client