This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf repo-rpki.idnic.net/repo/a0fe163c-14d5-4e31-ac20-c04e3e44c34f/0/52DC1412C6708ADA13DE89F150FA8C5BEF205DCB.mft
File:                     52DC1412C6708ADA13DE89F150FA8C5BEF205DCB.mft (raw, json)
Hash identifier:          yrnHg1tt/UTT8MIvFsF5SaV3L31Fw0PsmeJeb6/9R6s=
Subject key identifier:   3D:75:AB:52:D2:A4:C3:40:72:85:08:52:E5:AB:3F:60:E8:17:BD:00
Authority key identifier: 52:DC:14:12:C6:70:8A:DA:13:DE:89:F1:50:FA:8C:5B:EF:20:5D:CB
Certificate issuer:       /CN=52DC1412C6708ADA13DE89F150FA8C5BEF205DCB
Certificate serial:       64DBF77979E0397A83AE10E293500F4AEF49EBC7
Authority info access:    rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/52DC1412C6708ADA13DE89F150FA8C5BEF205DCB.cer
Subject info access:      rsync://repo-rpki.idnic.net/repo/a0fe163c-14d5-4e31-ac20-c04e3e44c34f/0/52DC1412C6708ADA13DE89F150FA8C5BEF205DCB.mft
Manifest number:          0426
Signing time:             Mon 02 Feb 2026 08:31:57 +0000
Manifest this update:     Mon 02 Feb 2026 08:26:57 +0000
Manifest next update:     Thu 05 Feb 2026 08:58:57 +0000
Files and hashes:         1: 52DC1412C6708ADA13DE89F150FA8C5BEF205DCB.crl (hash: R7KitDXMvh4V4kgSbhrKGJFOlqjFRbWuvTAXvTGmh1o=)
Validation:               OK
Signature path:           rsync://repo-rpki.idnic.net/repo/a0fe163c-14d5-4e31-ac20-c04e3e44c34f/0/52DC1412C6708ADA13DE89F150FA8C5BEF205DCB.crl
                          rsync://repo-rpki.idnic.net/repo/a0fe163c-14d5-4e31-ac20-c04e3e44c34f/0/52DC1412C6708ADA13DE89F150FA8C5BEF205DCB.mft
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/52DC1412C6708ADA13DE89F150FA8C5BEF205DCB.cer
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Thu 05 Feb 2026 05:24:03 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            64:db:f7:79:79:e0:39:7a:83:ae:10:e2:93:50:0f:4a:ef:49:eb:c7
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=52DC1412C6708ADA13DE89F150FA8C5BEF205DCB
        Validity
            Not Before: Feb  2 08:26:57 2026 GMT
            Not After : Feb  5 08:58:57 2026 GMT
        Subject: CN=3D75AB52D2A4C34072850852E5AB3F60E817BD00
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b0:32:76:27:23:03:e9:bd:ef:4b:e3:0d:30:14:
                    61:45:63:86:65:ca:a5:12:e3:df:cc:3a:13:ff:76:
                    82:46:6d:30:30:ac:98:9e:f4:76:ca:5a:f5:bb:c9:
                    1c:97:73:9e:b8:11:05:9c:ea:fc:3e:bf:76:0e:ef:
                    53:39:af:b7:56:72:5b:57:63:2f:c1:76:26:da:cc:
                    a7:29:df:09:6f:c7:5a:7b:ed:4d:be:a1:6e:c2:a2:
                    73:b2:47:52:bc:79:bb:a4:43:c3:c7:bc:0d:ee:34:
                    34:6b:1f:0e:24:40:7e:82:c2:7f:d8:c0:bd:20:e0:
                    be:ca:66:7c:96:7d:9e:5d:3d:18:9d:49:46:59:b8:
                    cc:58:a5:5a:8f:77:22:d7:9e:31:fe:93:92:6f:4a:
                    8c:61:a8:e2:8f:df:90:46:f9:a7:f1:ae:27:bb:5c:
                    58:f2:03:a6:51:f3:9d:31:f7:db:29:33:40:7f:82:
                    1c:e1:0c:e0:62:81:ee:70:d8:dc:05:97:b5:12:83:
                    4a:9f:b6:5a:7c:1e:74:f7:5f:f3:64:1a:55:4b:16:
                    d7:0c:0d:6a:93:7e:91:99:a3:f0:da:8f:14:42:bf:
                    1d:ea:64:d4:5b:28:9a:33:c3:0b:b8:85:fd:4c:5c:
                    35:fb:91:f2:0c:69:12:2f:07:37:e0:fa:6e:2a:1b:
                    96:31
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                3D:75:AB:52:D2:A4:C3:40:72:85:08:52:E5:AB:3F:60:E8:17:BD:00
            X509v3 Authority Key Identifier:
                keyid:52:DC:14:12:C6:70:8A:DA:13:DE:89:F1:50:FA:8C:5B:EF:20:5D:CB

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repo-rpki.idnic.net/repo/a0fe163c-14d5-4e31-ac20-c04e3e44c34f/0/52DC1412C6708ADA13DE89F150FA8C5BEF205DCB.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/52DC1412C6708ADA13DE89F150FA8C5BEF205DCB.cer

            Subject Information Access:
                Signed Object - URI:rsync://repo-rpki.idnic.net/repo/a0fe163c-14d5-4e31-ac20-c04e3e44c34f/0/52DC1412C6708ADA13DE89F150FA8C5BEF205DCB.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         3c:63:ea:e7:ea:53:75:a1:07:61:75:71:13:33:f5:3d:02:e6:
         8b:64:b4:bc:9c:b9:e8:1d:52:b5:1f:cb:75:7a:ca:9d:8a:60:
         fa:f6:45:7c:9f:d8:52:61:e6:43:36:b3:37:55:68:06:e6:1f:
         1b:71:4a:b4:f8:98:e3:cc:b1:e9:2a:6a:9b:17:60:8f:dd:f2:
         73:0f:ae:67:7b:4f:82:c9:7d:da:49:4b:f0:00:50:3f:ba:09:
         d0:c1:7a:11:d1:c5:70:05:cb:21:cb:79:d7:61:3c:9e:48:15:
         e0:54:87:58:3f:02:f7:f3:77:38:ab:f1:b8:be:de:09:23:bb:
         45:9a:4b:d3:ba:7e:56:47:04:7c:7d:eb:6a:e5:31:ee:7f:bc:
         2a:91:37:c2:2f:d2:b6:52:58:39:07:fd:ba:38:d6:b7:66:54:
         75:7d:4a:d2:2b:66:75:a6:9f:9d:83:c2:4e:10:68:9e:f6:af:
         09:55:73:84:ee:72:6f:7d:7b:28:c7:7e:84:2f:af:94:56:bd:
         b9:86:ab:74:8f:b0:86:d5:ee:e7:53:c6:84:08:a3:b1:25:59:
         ea:d3:a0:3c:f0:1a:72:85:64:68:33:98:ee:9b:95:1c:e8:0b:
         be:4b:d1:b1:3f:ce:fb:4e:1b:0e:2a:aa:8c:9d:24:fa:28:f7:
         b4:fe:95:1a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Feb 2 12:48:34 2026 by rpki-client