This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf repo-rpki.idnic.net/repo/8a66f350-e642-402f-8ac3-6aef7e11aac3/0/9852ABB8508DE551F1723BC9AC5EC39B35056AE2.mft File: 9852ABB8508DE551F1723BC9AC5EC39B35056AE2.mft (raw, json) Hash identifier: Oot0A6oXxQ5yNgyanlzblrU86eVZr0TkksqGGkkOEoU= Subject key identifier: D0:3C:86:EC:7A:C4:5B:68:E7:E3:28:5A:E3:EB:72:F8:C4:FF:05:C6 Authority key identifier: 98:52:AB:B8:50:8D:E5:51:F1:72:3B:C9:AC:5E:C3:9B:35:05:6A:E2 Certificate issuer: /CN=9852ABB8508DE551F1723BC9AC5EC39B35056AE2 Certificate serial: 05F73613556FA80537CF367BE4DCAFAA9F5906B6 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/9852ABB8508DE551F1723BC9AC5EC39B35056AE2.cer Subject info access: rsync://repo-rpki.idnic.net/repo/8a66f350-e642-402f-8ac3-6aef7e11aac3/0/9852ABB8508DE551F1723BC9AC5EC39B35056AE2.mft Manifest number: 052E Signing time: Tue 02 Dec 2025 01:52:02 +0000 Manifest this update: Tue 02 Dec 2025 01:47:02 +0000 Manifest next update: Fri 05 Dec 2025 04:00:02 +0000 Files and hashes: 1: 9852ABB8508DE551F1723BC9AC5EC39B35056AE2.crl (hash: r+cofes1JrbGD4kyaYN6k+7s6ASm5hsCvru5P9pNNRk=) 2: 323030313a6466343a366430303a3a2f34382d3438203d3e20313337333734.roa (hash: 415EQue+5BmAk6tXc9Eh3zzXOH8qdWNQfAsbBNLYlC0=) 3: 3130332e3131302e3138342e302f32332d3234203d3e20313337333734.roa (hash: t6DqUPB7zlmhbQqkH/Czn9ueyAzHtFeCOGR6aaj9LSw=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/8a66f350-e642-402f-8ac3-6aef7e11aac3/0/9852ABB8508DE551F1723BC9AC5EC39B35056AE2.crl rsync://repo-rpki.idnic.net/repo/8a66f350-e642-402f-8ac3-6aef7e11aac3/0/9852ABB8508DE551F1723BC9AC5EC39B35056AE2.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/9852ABB8508DE551F1723BC9AC5EC39B35056AE2.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 05 Dec 2025 04:00:02 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 05:f7:36:13:55:6f:a8:05:37:cf:36:7b:e4:dc:af:aa:9f:59:06:b6 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=9852ABB8508DE551F1723BC9AC5EC39B35056AE2 Validity Not Before: Dec 2 01:47:02 2025 GMT Not After : Dec 5 04:00:02 2025 GMT Subject: CN=D03C86EC7AC45B68E7E3285AE3EB72F8C4FF05C6 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d3:f5:95:43:bb:b5:db:3e:01:cf:db:11:f1:6b: 48:71:25:da:74:08:ac:5d:1b:1e:e2:19:78:f7:1a: a4:fa:1c:b9:92:e4:8d:72:95:bb:d0:0e:ec:c0:1e: 7a:f2:34:c9:d4:cb:f4:52:99:e4:7a:bc:9c:9b:41: 77:e6:44:e5:80:92:3c:e7:7d:fb:86:0b:cb:38:cc: 97:9a:cb:f5:fc:29:55:4b:cb:d3:b4:40:20:b1:d4: 4e:4d:f2:00:6c:1b:6e:f3:6d:24:5d:b6:0e:2a:57: d6:ca:94:0e:66:61:19:70:77:cc:d9:75:0d:06:ee: 1b:6b:d8:0c:3d:bd:59:09:c9:29:43:43:a6:33:0e: b9:98:61:30:9e:c0:f6:72:94:e3:3f:33:1e:46:59: 75:6a:7b:01:41:04:d8:1d:71:d3:c2:8d:64:53:8a: 22:7a:27:6c:35:24:8b:b8:64:98:57:a0:69:2a:da: 50:ad:8d:b3:20:f1:49:03:01:91:be:da:49:a8:04: 83:6a:35:1a:fb:53:89:ba:85:41:22:51:7b:62:48: 58:18:cd:6e:0e:73:18:ed:30:d5:11:39:ff:07:0c: 99:c1:e6:3b:f2:e7:88:da:72:8b:7b:a2:cf:3a:51: 3c:8c:d6:2a:34:c0:51:15:8d:59:14:90:3b:5a:8a: 41:27 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D0:3C:86:EC:7A:C4:5B:68:E7:E3:28:5A:E3:EB:72:F8:C4:FF:05:C6 X509v3 Authority Key Identifier: keyid:98:52:AB:B8:50:8D:E5:51:F1:72:3B:C9:AC:5E:C3:9B:35:05:6A:E2 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/8a66f350-e642-402f-8ac3-6aef7e11aac3/0/9852ABB8508DE551F1723BC9AC5EC39B35056AE2.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/9852ABB8508DE551F1723BC9AC5EC39B35056AE2.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/8a66f350-e642-402f-8ac3-6aef7e11aac3/0/9852ABB8508DE551F1723BC9AC5EC39B35056AE2.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption c2:aa:5c:cd:b4:ea:08:af:72:d3:ed:57:ff:e3:18:c3:21:3c: be:5c:49:c0:f2:df:70:4d:b7:bc:0d:53:64:b2:da:71:38:e8: 8e:b5:08:81:ed:1e:48:20:45:17:16:b4:72:f9:5d:b8:76:d5: d7:11:a6:6d:a0:3c:e6:42:5a:49:93:79:c1:2f:5e:78:81:58: e1:e1:55:78:3c:a1:e4:62:43:66:b7:c4:69:4e:59:5e:78:23: 03:ba:75:0d:f6:2c:9a:21:77:73:a5:20:04:25:46:08:c7:5b: 19:7c:b6:3f:42:9d:a4:55:7b:70:29:fc:70:c4:8c:93:a4:31: 32:9a:67:8e:1b:cc:1d:6f:01:f6:fc:1a:dd:25:1a:ff:69:26: 05:bb:c4:53:2c:9e:de:47:a1:72:73:d2:c6:56:d3:bd:8c:0f: ab:94:68:63:35:f5:33:cf:30:3c:e1:b4:01:ec:0e:9d:f9:da: 42:19:ad:d0:c9:22:86:32:3a:52:ae:c5:ea:a6:e4:af:8c:74: 23:f7:e4:d5:45:dd:a1:51:fd:10:f6:ba:b7:41:4f:02:26:e5: 3a:08:c1:23:3c:4f:ad:11:25:05:57:87:04:95:0a:4d:10:90: 02:c2:b4:da:da:c5:40:f9:1e:ce:c1:2f:b6:5f:8f:04:d2:8e: 97:f3:2c:a5 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUBfc2E1VvqAU3zzZ75Nyvqp9ZBrYwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoOTg1MkFCQjg1MDhERTU1MUYxNzIzQkM5QUM1RUMzOUIz NTA1NkFFMjAeFw0yNTEyMDIwMTQ3MDJaFw0yNTEyMDUwNDAwMDJaMDMxMTAvBgNV BAMTKEQwM0M4NkVDN0FDNDVCNjhFN0UzMjg1QUUzRUI3MkY4QzRGRjA1QzYwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDT9ZVDu7XbPgHP2xHxa0hxJdp0 CKxdGx7iGXj3GqT6HLmS5I1ylbvQDuzAHnryNMnUy/RSmeR6vJybQXfmROWAkjzn ffuGC8s4zJeay/X8KVVLy9O0QCCx1E5N8gBsG27zbSRdtg4qV9bKlA5mYRlwd8zZ dQ0G7htr2Aw9vVkJySlDQ6YzDrmYYTCewPZylOM/Mx5GWXVqewFBBNgdcdPCjWRT iiJ6J2w1JIu4ZJhXoGkq2lCtjbMg8UkDAZG+2kmoBINqNRr7U4m6hUEiUXtiSFgY zW4OcxjtMNUROf8HDJnB5jvy54jacot7os86UTyM1io0wFEVjVkUkDtaikEnAgMB AAGjggI8MIICODAdBgNVHQ4EFgQU0DyG7HrEW2jn4yha4+ty+MT/BcYwHwYDVR0j BBgwFoAUmFKruFCN5VHxcjvJrF7DmzUFauIwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby84 YTY2ZjM1MC1lNjQyLTQwMmYtOGFjMy02YWVmN2UxMWFhYzMvMC85ODUyQUJCODUw OERFNTUxRjE3MjNCQzlBQzVFQzM5QjM1MDU2QUUyLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvOTg1MkFCQjg1MDhERTU1MUYxNzIzQkM5QUM1RUMzOUIzNTA1 NkFFMi5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vOGE2NmYzNTAtZTY0Mi00MDJmLThh YzMtNmFlZjdlMTFhYWMzLzAvOTg1MkFCQjg1MDhERTU1MUYxNzIzQkM5QUM1RUMz OUIzNTA1NkFFMi5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAMKqXM206givctPtV//jGMMhPL5cScDy33BN t7wNU2Sy2nE46I61CIHtHkggRRcWtHL5Xbh21dcRpm2gPOZCWkmTecEvXniBWOHh VXg8oeRiQ2a3xGlOWV54IwO6dQ32LJohd3OlIAQlRgjHWxl8tj9CnaRVe3Ap/HDE jJOkMTKaZ44bzB1vAfb8Gt0lGv9pJgW7xFMsnt5HoXJz0sZW072MD6uUaGM19TPP MDzhtAHsDp352kIZrdDJIoYyOlKuxeqm5K+MdCP35NVF3aFR/RD2urdBTwIm5ToI wSM8T60RJQVXhwSVCk0QkALCtNraxUD5Hs7BL7ZfjwTSjpfzLKU= -----END CERTIFICATE-----Generated at Wed Dec 3 14:14:28 2025 by rpki-client