This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf repo-rpki.idnic.net/repo/26652000-1f2c-4791-81b4-d4457cef1270/0/7D52713C0D26932DC1EECC75CB0C11784C9B0592.mft File: 7D52713C0D26932DC1EECC75CB0C11784C9B0592.mft (raw, json) Hash identifier: vdmK5HG9ewSiB+fyx9sopLkkA12Ee8Ts9LJ4SHlT3tQ= Subject key identifier: 35:78:53:DA:A3:78:F6:1D:F4:8C:AD:A3:CB:A5:AA:FA:DF:9E:2E:68 Authority key identifier: 7D:52:71:3C:0D:26:93:2D:C1:EE:CC:75:CB:0C:11:78:4C:9B:05:92 Certificate issuer: /CN=7D52713C0D26932DC1EECC75CB0C11784C9B0592 Certificate serial: 335A8942BEDDEB39FE423083DA71214CC6A80FFE Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/7D52713C0D26932DC1EECC75CB0C11784C9B0592.cer Subject info access: rsync://repo-rpki.idnic.net/repo/26652000-1f2c-4791-81b4-d4457cef1270/0/7D52713C0D26932DC1EECC75CB0C11784C9B0592.mft Manifest number: 02D2 Signing time: Wed 17 Dec 2025 12:51:44 +0000 Manifest this update: Wed 17 Dec 2025 12:46:44 +0000 Manifest next update: Sat 20 Dec 2025 23:56:44 +0000 Files and hashes: 1: 3130332e3134372e37322e302f32332d3234203d3e20313339393531.roa (hash: 00o5kwNuKSJ5PpNjUI86eyQMeGSOAboXshPfZ04uCOQ=) 2: 7D52713C0D26932DC1EECC75CB0C11784C9B0592.crl (hash: 7hhZk2D96cuyOi538ZcVXX7mcfXopwjdtihIV075xtc=) 3: 323430353a623034303a3a2f33322d3332203d3e20313339393531.roa (hash: BOXleI82qkqA+XBkcaVMr9vBsmwOlXi/gSfu64m+8zY=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/26652000-1f2c-4791-81b4-d4457cef1270/0/7D52713C0D26932DC1EECC75CB0C11784C9B0592.crl rsync://repo-rpki.idnic.net/repo/26652000-1f2c-4791-81b4-d4457cef1270/0/7D52713C0D26932DC1EECC75CB0C11784C9B0592.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/7D52713C0D26932DC1EECC75CB0C11784C9B0592.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 20 Dec 2025 23:56:44 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 33:5a:89:42:be:dd:eb:39:fe:42:30:83:da:71:21:4c:c6:a8:0f:fe Signature Algorithm: sha256WithRSAEncryption Issuer: CN=7D52713C0D26932DC1EECC75CB0C11784C9B0592 Validity Not Before: Dec 17 12:46:44 2025 GMT Not After : Dec 20 23:56:44 2025 GMT Subject: CN=357853DAA378F61DF48CADA3CBA5AAFADF9E2E68 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d4:0e:75:73:e4:12:6c:8b:dd:38:73:ea:e8:dd: b0:20:d5:25:ab:05:7d:66:f1:25:b2:4e:56:9a:5c: 45:8c:86:d3:e8:e7:94:97:f2:54:65:88:f2:3d:f2: b4:71:39:10:70:50:77:b5:fd:d7:99:80:6e:e5:15: 5f:d8:f3:8d:89:5c:01:8d:be:0c:b0:c7:50:f7:14: ac:db:65:a4:89:32:db:76:eb:63:1a:47:39:b3:84: 7b:d9:d6:8c:3d:30:7a:c1:2f:94:53:45:a5:00:17: 47:f7:71:8f:0f:11:51:26:0a:de:ec:94:a0:a4:c0: 73:1e:81:0f:b1:56:6c:fd:7c:d6:36:4e:44:5b:93: b1:58:38:34:60:c5:78:ef:d4:b0:54:05:b5:3e:8e: 92:d4:7a:a8:7c:45:c0:a2:3b:84:92:62:61:f9:9d: 91:81:39:f7:cc:75:fc:3f:65:b3:19:58:56:ae:ba: f2:74:83:06:c7:3e:b3:be:1b:1a:a3:42:16:69:16: f9:37:fb:05:34:12:39:9b:cb:4a:6d:77:9e:0a:5a: 00:8e:03:3d:f6:55:26:21:0d:75:87:92:b3:2f:81: ab:bc:ff:9f:07:63:2c:f0:f4:5d:55:d0:15:b7:b7: dc:45:fb:91:e0:4b:5e:25:7a:e1:6a:b4:89:dd:52: 1d:c5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 35:78:53:DA:A3:78:F6:1D:F4:8C:AD:A3:CB:A5:AA:FA:DF:9E:2E:68 X509v3 Authority Key Identifier: keyid:7D:52:71:3C:0D:26:93:2D:C1:EE:CC:75:CB:0C:11:78:4C:9B:05:92 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/26652000-1f2c-4791-81b4-d4457cef1270/0/7D52713C0D26932DC1EECC75CB0C11784C9B0592.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/7D52713C0D26932DC1EECC75CB0C11784C9B0592.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/26652000-1f2c-4791-81b4-d4457cef1270/0/7D52713C0D26932DC1EECC75CB0C11784C9B0592.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 9f:e9:c9:a1:36:b9:62:94:38:65:08:01:3e:d4:a3:80:e8:c1: 4a:77:aa:17:89:bd:05:0a:66:fa:a0:c4:8a:64:ab:4d:79:81: 48:23:6b:eb:86:8a:da:17:2c:56:42:ff:61:f2:35:4c:e3:0d: 1b:75:d7:d6:62:81:f5:9d:12:46:de:2e:e3:90:3c:c0:d8:f7: 16:58:d5:5a:54:93:0f:e6:f1:18:b3:99:09:2a:a3:23:45:a1: 9d:e7:99:f0:bc:60:a2:9c:3b:9c:d5:41:16:0b:0c:64:d7:9e: ce:c3:5b:3a:f6:14:89:8e:18:be:a3:a7:a0:05:33:f7:8f:69: bd:c2:ba:4a:d7:79:57:47:a3:fd:cc:74:5f:9e:c8:6d:6d:e3: 95:30:aa:c6:bb:2d:2c:3e:90:a3:e5:b6:49:e8:42:78:80:4b: 5e:bc:af:04:73:1a:7f:35:60:f4:bf:9b:23:f8:15:f8:7f:90: 54:cf:29:19:84:79:8b:f2:4f:51:f7:e0:89:01:17:78:36:c0: c9:36:6b:ee:e3:f5:a9:a5:4a:07:1f:25:35:db:29:a7:97:89: df:d4:18:5e:fc:33:3f:04:90:f1:79:bd:79:22:31:1c:7e:28: ac:ce:58:6f:5a:74:ed:54:87:96:0e:f6:5b:a6:98:39:0f:ea: 1c:0a:8f:fc -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUM1qJQr7d6zn+QjCD2nEhTMaoD/4wDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoN0Q1MjcxM0MwRDI2OTMyREMxRUVDQzc1Q0IwQzExNzg0 QzlCMDU5MjAeFw0yNTEyMTcxMjQ2NDRaFw0yNTEyMjAyMzU2NDRaMDMxMTAvBgNV BAMTKDM1Nzg1M0RBQTM3OEY2MURGNDhDQURBM0NCQTVBQUZBREY5RTJFNjgwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDUDnVz5BJsi904c+ro3bAg1SWr BX1m8SWyTlaaXEWMhtPo55SX8lRliPI98rRxORBwUHe1/deZgG7lFV/Y842JXAGN vgywx1D3FKzbZaSJMtt262MaRzmzhHvZ1ow9MHrBL5RTRaUAF0f3cY8PEVEmCt7s lKCkwHMegQ+xVmz9fNY2TkRbk7FYODRgxXjv1LBUBbU+jpLUeqh8RcCiO4SSYmH5 nZGBOffMdfw/ZbMZWFauuvJ0gwbHPrO+GxqjQhZpFvk3+wU0Ejmby0ptd54KWgCO Az32VSYhDXWHkrMvgau8/58HYyzw9F1V0BW3t9xF+5HgS14leuFqtIndUh3FAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUNXhT2qN49h30jK2jy6Wq+t+eLmgwHwYDVR0j BBgwFoAUfVJxPA0mky3B7sx1ywwReEybBZIwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby8y NjY1MjAwMC0xZjJjLTQ3OTEtODFiNC1kNDQ1N2NlZjEyNzAvMC83RDUyNzEzQzBE MjY5MzJEQzFFRUNDNzVDQjBDMTE3ODRDOUIwNTkyLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvN0Q1MjcxM0MwRDI2OTMyREMxRUVDQzc1Q0IwQzExNzg0QzlC MDU5Mi5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vMjY2NTIwMDAtMWYyYy00NzkxLTgx YjQtZDQ0NTdjZWYxMjcwLzAvN0Q1MjcxM0MwRDI2OTMyREMxRUVDQzc1Q0IwQzEx Nzg0QzlCMDU5Mi5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAJ/pyaE2uWKUOGUIAT7Uo4DowUp3qheJvQUK ZvqgxIpkq015gUgja+uGitoXLFZC/2HyNUzjDRt119ZigfWdEkbeLuOQPMDY9xZY 1VpUkw/m8RizmQkqoyNFoZ3nmfC8YKKcO5zVQRYLDGTXns7DWzr2FImOGL6jp6AF M/ePab3CukrXeVdHo/3MdF+eyG1t45Uwqsa7LSw+kKPltknoQniAS168rwRzGn81 YPS/myP4Ffh/kFTPKRmEeYvyT1H34IkBF3g2wMk2a+7j9amlSgcfJTXbKaeXid/U GF78Mz8EkPF5vXkiMRx+KKzOWG9adO1Uh5YO9lummDkP6hwKj/w= -----END CERTIFICATE-----Generated at Fri Dec 19 08:06:41 2025 by rpki-client