This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf repo-rpki.idnic.net/repo/31224247-347f-4a57-a79a-cb2c21c9170e/0/52FA38C22CA0987CE48A3BD5191FFDA2AD39DB3B.mft File: 52FA38C22CA0987CE48A3BD5191FFDA2AD39DB3B.mft (raw, json) Hash identifier: UPRzVId5sRiMFvw6XbEDtEbKhlC9C90UVExGIIjr2sI= Subject key identifier: 1C:FB:08:28:0A:5E:96:47:09:4A:DF:E1:CA:25:72:F9:59:E1:11:11 Authority key identifier: 52:FA:38:C2:2C:A0:98:7C:E4:8A:3B:D5:19:1F:FD:A2:AD:39:DB:3B Certificate issuer: /CN=52FA38C22CA0987CE48A3BD5191FFDA2AD39DB3B Certificate serial: 35CCC89F97728B22CEB452BAEA659724C95D8D66 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/52FA38C22CA0987CE48A3BD5191FFDA2AD39DB3B.cer Subject info access: rsync://repo-rpki.idnic.net/repo/31224247-347f-4a57-a79a-cb2c21c9170e/0/52FA38C22CA0987CE48A3BD5191FFDA2AD39DB3B.mft Manifest number: EA Signing time: Wed 03 Dec 2025 07:45:03 +0000 Manifest this update: Wed 03 Dec 2025 07:40:03 +0000 Manifest next update: Sat 06 Dec 2025 13:20:03 +0000 Files and hashes: 1: 52FA38C22CA0987CE48A3BD5191FFDA2AD39DB3B.crl (hash: SGmlPqYiM0gSzEDBgjiPPo/TGX/jtQ13tqiAS36QaVc=) 2: 3231302e38372e3132332e302f32342d3234203d3e20313532303634.roa (hash: cxNzmi6v2p99HHhR+ggQ6n1CG/x3GBlPxyYmKXCdmXo=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/31224247-347f-4a57-a79a-cb2c21c9170e/0/52FA38C22CA0987CE48A3BD5191FFDA2AD39DB3B.crl rsync://repo-rpki.idnic.net/repo/31224247-347f-4a57-a79a-cb2c21c9170e/0/52FA38C22CA0987CE48A3BD5191FFDA2AD39DB3B.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/52FA38C22CA0987CE48A3BD5191FFDA2AD39DB3B.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 06 Dec 2025 13:20:03 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 35:cc:c8:9f:97:72:8b:22:ce:b4:52:ba:ea:65:97:24:c9:5d:8d:66 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=52FA38C22CA0987CE48A3BD5191FFDA2AD39DB3B Validity Not Before: Dec 3 07:40:03 2025 GMT Not After : Dec 6 13:20:03 2025 GMT Subject: CN=1CFB08280A5E9647094ADFE1CA2572F959E11111 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ab:e9:58:ad:38:69:c3:b5:8c:ab:5a:b2:6f:6a: 1b:48:95:fe:14:cd:2e:75:4d:23:f3:68:f5:0e:78: 49:1a:f6:9c:d1:6b:29:a9:68:b0:de:b6:1d:6a:38: f0:04:51:70:38:ba:06:6f:a0:34:eb:5a:92:e4:00: 57:d4:35:24:6b:6e:26:37:9a:9c:af:0a:8e:fa:52: 58:3a:c6:3e:ed:43:1f:cd:d3:6d:8d:e7:74:fe:f6: e7:89:75:a1:f2:1d:30:c2:5b:31:2e:3b:4b:7c:93: 93:cc:ce:b5:64:b3:7a:bc:7a:bc:2a:40:ff:d0:4f: ec:97:13:38:88:66:cf:7e:d0:f1:31:85:7a:e0:67: 84:3f:55:af:04:38:a8:23:9e:07:20:35:e9:e2:13: c3:24:7a:70:3d:16:b0:d5:f0:b3:09:ff:06:ba:0e: 8a:13:31:57:b3:4b:4f:ff:1c:6e:81:00:fe:e1:a6: 70:cd:09:2c:01:16:2e:ea:d3:bd:22:fe:bb:6e:65: d7:84:11:66:64:6c:24:c2:dc:4e:2d:29:27:a2:56: 57:7c:75:c3:75:aa:e7:fa:33:cd:98:31:9b:db:dc: 5c:4d:49:cf:fb:16:37:44:1b:45:71:b7:c5:5d:52: ab:ee:4c:bc:d7:3d:76:ec:72:26:bc:31:e8:aa:69: 21:25 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 1C:FB:08:28:0A:5E:96:47:09:4A:DF:E1:CA:25:72:F9:59:E1:11:11 X509v3 Authority Key Identifier: keyid:52:FA:38:C2:2C:A0:98:7C:E4:8A:3B:D5:19:1F:FD:A2:AD:39:DB:3B X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/31224247-347f-4a57-a79a-cb2c21c9170e/0/52FA38C22CA0987CE48A3BD5191FFDA2AD39DB3B.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/52FA38C22CA0987CE48A3BD5191FFDA2AD39DB3B.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/31224247-347f-4a57-a79a-cb2c21c9170e/0/52FA38C22CA0987CE48A3BD5191FFDA2AD39DB3B.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 83:61:a9:93:4d:ba:35:67:10:c4:fa:17:79:94:83:81:2f:d9: 2f:fb:d8:6c:f1:e5:48:ad:6c:df:30:86:8f:db:52:9b:fd:9b: 1c:ec:87:89:06:a6:78:07:8f:d7:43:57:cf:9f:e1:b5:ed:72: c5:6a:33:ec:60:9f:eb:24:a7:65:ec:c1:b8:f7:5b:90:ae:d9: 50:98:72:72:73:c9:51:24:fd:2e:24:fa:36:30:d9:21:a1:2b: 2d:4e:cb:e2:fa:82:43:42:cc:b3:6d:e5:14:56:5c:3b:0f:a1: ce:cd:f7:d6:9f:74:51:92:9b:79:31:7f:f6:c1:14:43:4a:20: ba:83:a0:ea:1e:7e:26:ee:f9:3f:50:da:68:66:f2:48:9f:70: e1:5f:ff:25:89:48:bf:94:de:55:a0:79:34:80:b3:5f:3a:58: c9:e1:51:1f:54:da:a4:04:e6:56:17:dd:5d:0b:3c:db:9e:3c: 80:bc:13:55:55:0d:75:96:30:db:48:26:6c:4b:dd:6b:6b:25: 38:d5:92:dd:3f:84:ac:d3:0e:75:7a:50:d8:65:4b:cd:16:d3: da:ba:45:de:2f:8d:b4:2b:86:17:8b:23:08:50:b4:07:6b:30: be:3c:7f:28:a2:67:97:b6:aa:6b:60:85:dd:3f:e1:36:33:98: 8e:58:d9:72 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUNczIn5dyiyLOtFK66mWXJMldjWYwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoNTJGQTM4QzIyQ0EwOTg3Q0U0OEEzQkQ1MTkxRkZEQTJB RDM5REIzQjAeFw0yNTEyMDMwNzQwMDNaFw0yNTEyMDYxMzIwMDNaMDMxMTAvBgNV BAMTKDFDRkIwODI4MEE1RTk2NDcwOTRBREZFMUNBMjU3MkY5NTlFMTExMTEwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCr6VitOGnDtYyrWrJvahtIlf4U zS51TSPzaPUOeEka9pzRaympaLDeth1qOPAEUXA4ugZvoDTrWpLkAFfUNSRrbiY3 mpyvCo76Ulg6xj7tQx/N022N53T+9ueJdaHyHTDCWzEuO0t8k5PMzrVks3q8erwq QP/QT+yXEziIZs9+0PExhXrgZ4Q/Va8EOKgjngcgNeniE8MkenA9FrDV8LMJ/wa6 DooTMVezS0//HG6BAP7hpnDNCSwBFi7q070i/rtuZdeEEWZkbCTC3E4tKSeiVld8 dcN1quf6M82YMZvb3FxNSc/7FjdEG0Vxt8VdUqvuTLzXPXbscia8MeiqaSElAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUHPsIKApelkcJSt/hyiVy+VnhEREwHwYDVR0j BBgwFoAUUvo4wiygmHzkijvVGR/9oq052zswDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby8z MTIyNDI0Ny0zNDdmLTRhNTctYTc5YS1jYjJjMjFjOTE3MGUvMC81MkZBMzhDMjJD QTA5ODdDRTQ4QTNCRDUxOTFGRkRBMkFEMzlEQjNCLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvNTJGQTM4QzIyQ0EwOTg3Q0U0OEEzQkQ1MTkxRkZEQTJBRDM5 REIzQi5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vMzEyMjQyNDctMzQ3Zi00YTU3LWE3 OWEtY2IyYzIxYzkxNzBlLzAvNTJGQTM4QzIyQ0EwOTg3Q0U0OEEzQkQ1MTkxRkZE QTJBRDM5REIzQi5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAINhqZNNujVnEMT6F3mUg4Ev2S/72Gzx5Uit bN8who/bUpv9mxzsh4kGpngHj9dDV8+f4bXtcsVqM+xgn+skp2Xswbj3W5Cu2VCY cnJzyVEk/S4k+jYw2SGhKy1Oy+L6gkNCzLNt5RRWXDsPoc7N99afdFGSm3kxf/bB FENKILqDoOoefibu+T9Q2mhm8kifcOFf/yWJSL+U3lWgeTSAs186WMnhUR9U2qQE 5lYX3V0LPNuePIC8E1VVDXWWMNtIJmxL3WtrJTjVkt0/hKzTDnV6UNhlS80W09q6 Rd4vjbQrhheLIwhQtAdrML48fyiiZ5e2qmtghd0/4TYzmI5Y2XI= -----END CERTIFICATE-----Generated at Wed Dec 3 16:08:25 2025 by rpki-client