This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

$ rpki-client -vvf repo-rpki.idnic.net/repo/837694b7-3256-4666-a3fe-6e82e783b1e1/0/3C52D4A86ABDDD0D6DA631737F78DC205EEC239B.mft
File: 3C52D4A86ABDDD0D6DA631737F78DC205EEC239B.mft (raw, json)
Hash identifier: Qa7DCrifcmi8P9xh7jUE3aHpTLAsjXiYYVcopkEDCtM=
Subject key identifier: 92:EC:08:78:8C:50:DF:F9:BA:21:66:83:08:88:0A:A4:86:0B:17:42
Authority key identifier: 3C:52:D4:A8:6A:BD:DD:0D:6D:A6:31:73:7F:78:DC:20:5E:EC:23:9B
Certificate issuer: /CN=3C52D4A86ABDDD0D6DA631737F78DC205EEC239B
Certificate serial: 3AEDB3CBC02F7537085CF848E118569A67AEFF64
Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/3C52D4A86ABDDD0D6DA631737F78DC205EEC239B.cer
Subject info access: rsync://repo-rpki.idnic.net/repo/837694b7-3256-4666-a3fe-6e82e783b1e1/0/3C52D4A86ABDDD0D6DA631737F78DC205EEC239B.mft
Manifest number: 01E0
Signing time: Sat 13 Dec 2025 16:50:44 +0000
Manifest this update: Sat 13 Dec 2025 16:45:44 +0000
Manifest next update: Wed 17 Dec 2025 01:31:44 +0000
Files and hashes: 1: 3130332e35342e3137302e302f32342d3234203d3e20313336303532.roa (hash: CpTR92roiSPDW46ulFPgC4ZnSRc5NkRxg7oSv8ZLm9M=)
2: 3C52D4A86ABDDD0D6DA631737F78DC205EEC239B.crl (hash: 9H02pQHTLpCZI4t06L+t8QzsyKs5ACMz+Hbvzcz5z1s=)
3: 3130332e35342e3137312e302f32342d3234203d3e20313431303731.roa (hash: A15JvoKxrrNNly8QbNKG17HNlGfUgFoFqcNw47K8k1o=)
Validation: OK
Signature path: rsync://repo-rpki.idnic.net/repo/837694b7-3256-4666-a3fe-6e82e783b1e1/0/3C52D4A86ABDDD0D6DA631737F78DC205EEC239B.crl
rsync://repo-rpki.idnic.net/repo/837694b7-3256-4666-a3fe-6e82e783b1e1/0/3C52D4A86ABDDD0D6DA631737F78DC205EEC239B.mft
rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/3C52D4A86ABDDD0D6DA631737F78DC205EEC239B.cer
rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl
rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Tue 16 Dec 2025 13:15:18 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
3a:ed:b3:cb:c0:2f:75:37:08:5c:f8:48:e1:18:56:9a:67:ae:ff:64
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3C52D4A86ABDDD0D6DA631737F78DC205EEC239B
Validity
Not Before: Dec 13 16:45:44 2025 GMT
Not After : Dec 17 01:31:44 2025 GMT
Subject: CN=92EC08788C50DFF9BA21668308880AA4860B1742
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c5:9a:4a:17:b2:d4:e2:97:83:56:5b:1b:8a:13:
d8:15:ce:26:e1:79:ae:a4:14:a1:00:fb:4b:1b:e6:
a6:d8:4b:9f:9a:5d:24:a0:b9:75:da:c8:87:c8:ed:
d4:40:4a:66:40:6c:b1:34:8e:4f:ea:ba:e0:9d:f6:
25:65:7a:54:80:ff:59:e7:03:a2:15:4d:d7:88:32:
ac:12:1d:21:e8:f3:30:5c:2e:a4:be:a1:7a:a6:db:
91:42:b9:0c:b5:bd:da:d3:51:18:11:8f:92:c2:51:
95:19:ba:13:0a:6e:45:66:3c:aa:40:15:f6:e8:a0:
54:e2:ab:ec:a9:1f:6a:19:a2:39:88:d4:a4:47:ab:
bb:4d:f8:db:28:2d:29:eb:ea:ce:53:46:49:cb:af:
79:b8:69:e1:a3:87:65:0f:4d:8a:09:5b:8f:38:1c:
1d:54:2c:de:eb:b7:a4:eb:c4:aa:4f:bd:7b:e0:17:
6c:8c:d6:9d:a1:98:b1:a9:5e:2c:2a:2c:f2:21:b3:
26:c5:32:e3:ab:ad:60:ff:a4:c5:ec:cc:7e:27:a4:
06:3e:51:64:a7:e9:52:ec:2b:ca:9d:62:43:c5:6b:
ff:0d:34:6d:45:91:0c:09:eb:9a:7b:73:1a:b6:9a:
51:72:58:79:2b:19:01:7d:5e:aa:62:f8:9b:42:c8:
15:25
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
92:EC:08:78:8C:50:DF:F9:BA:21:66:83:08:88:0A:A4:86:0B:17:42
X509v3 Authority Key Identifier:
keyid:3C:52:D4:A8:6A:BD:DD:0D:6D:A6:31:73:7F:78:DC:20:5E:EC:23:9B
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://repo-rpki.idnic.net/repo/837694b7-3256-4666-a3fe-6e82e783b1e1/0/3C52D4A86ABDDD0D6DA631737F78DC205EEC239B.crl
Authority Information Access:
CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/3C52D4A86ABDDD0D6DA631737F78DC205EEC239B.cer
Subject Information Access:
Signed Object - URI:rsync://repo-rpki.idnic.net/repo/837694b7-3256-4666-a3fe-6e82e783b1e1/0/3C52D4A86ABDDD0D6DA631737F78DC205EEC239B.mft
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
67:84:69:7c:92:6e:da:81:fa:e5:de:b8:f3:7b:c2:11:a3:bc:
b1:be:a5:67:c3:c7:33:04:23:0d:92:37:e4:86:85:46:da:c6:
96:f4:c0:88:d3:1a:31:d7:8d:81:dc:c1:1e:67:d1:2a:2b:53:
0a:d4:79:c4:73:b5:6e:09:98:fb:7e:72:58:1d:36:24:12:3b:
05:df:4a:90:2d:ec:95:13:93:e0:69:34:1e:b8:10:51:4b:22:
77:8c:5f:18:4b:4b:63:20:b7:14:64:41:42:ce:9f:2d:b2:5b:
c0:0a:67:82:0b:58:4f:30:ec:42:78:6b:b6:2b:c7:a8:09:d7:
4d:52:5a:9e:36:82:05:e4:e2:84:a7:7c:5b:da:4a:22:df:67:
85:b0:92:1b:c4:85:80:4f:5b:20:8b:17:75:96:c1:b6:cd:28:
00:b9:03:9a:2a:9a:7a:54:c6:16:ba:c4:b3:7b:2d:ad:dc:4d:
5e:11:8d:9e:44:7d:8b:08:26:a6:25:2d:e5:0b:fa:55:df:fa:
7d:12:9c:7b:11:31:d7:33:8d:72:d0:4d:02:97:a9:96:e4:f8:
1e:68:20:db:4b:1d:69:bf:65:00:ab:e2:0a:9d:0b:94:c5:e1:
53:c3:6a:8a:5e:f7:e8:73:ca:30:8a:d6:80:23:95:6b:5b:b3:
36:a0:b5:8c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Dec 14 01:51:03 2025 by rpki-client