This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf repo-rpki.idnic.net/repo/a0fe163c-14d5-4e31-ac20-c04e3e44c34f/0/52DC1412C6708ADA13DE89F150FA8C5BEF205DCB.mft
File:                     52DC1412C6708ADA13DE89F150FA8C5BEF205DCB.mft (raw, json)
Hash identifier:          rT95J6lESeMyIhP7rCPEKaHIgF0XXdq4zFQ/P/AthAU=
Subject key identifier:   50:58:3B:35:BA:BB:33:59:2D:FF:AD:3B:DA:E7:A0:EA:BD:FA:96:8F
Authority key identifier: 52:DC:14:12:C6:70:8A:DA:13:DE:89:F1:50:FA:8C:5B:EF:20:5D:CB
Certificate issuer:       /CN=52DC1412C6708ADA13DE89F150FA8C5BEF205DCB
Certificate serial:       10393C8B9FFEDF0F7DC0BF4139653DF39395E679
Authority info access:    rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/52DC1412C6708ADA13DE89F150FA8C5BEF205DCB.cer
Subject info access:      rsync://repo-rpki.idnic.net/repo/a0fe163c-14d5-4e31-ac20-c04e3e44c34f/0/52DC1412C6708ADA13DE89F150FA8C5BEF205DCB.mft
Manifest number:          040A
Signing time:             Mon 01 Dec 2025 23:41:54 +0000
Manifest this update:     Mon 01 Dec 2025 23:36:53 +0000
Manifest next update:     Fri 05 Dec 2025 03:03:53 +0000
Files and hashes:         1: 52DC1412C6708ADA13DE89F150FA8C5BEF205DCB.crl (hash: dNH5fJaGA6FyrM81sViMqyLpIs7EVjpcmkCA1vQjCoY=)
Validation:               OK
Signature path:           rsync://repo-rpki.idnic.net/repo/a0fe163c-14d5-4e31-ac20-c04e3e44c34f/0/52DC1412C6708ADA13DE89F150FA8C5BEF205DCB.crl
                          rsync://repo-rpki.idnic.net/repo/a0fe163c-14d5-4e31-ac20-c04e3e44c34f/0/52DC1412C6708ADA13DE89F150FA8C5BEF205DCB.mft
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/52DC1412C6708ADA13DE89F150FA8C5BEF205DCB.cer
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Fri 05 Dec 2025 03:03:53 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            10:39:3c:8b:9f:fe:df:0f:7d:c0:bf:41:39:65:3d:f3:93:95:e6:79
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=52DC1412C6708ADA13DE89F150FA8C5BEF205DCB
        Validity
            Not Before: Dec  1 23:36:53 2025 GMT
            Not After : Dec  5 03:03:53 2025 GMT
        Subject: CN=50583B35BABB33592DFFAD3BDAE7A0EABDFA968F
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bb:f6:a3:b3:73:bf:e1:20:8c:58:3b:f3:d5:b9:
                    a9:76:02:f6:5c:67:d6:83:ba:7a:d2:c6:df:1a:cc:
                    bd:0d:d7:10:56:6e:19:05:be:d1:1a:29:ef:9c:26:
                    fe:a3:a4:f8:85:15:1f:70:36:bd:c6:cd:02:32:fd:
                    29:c4:06:26:36:81:fe:bf:49:bb:73:9b:44:0c:02:
                    cc:e8:40:5f:0a:23:5b:a6:ad:63:39:3f:55:b3:08:
                    a5:61:23:5e:b3:52:f9:73:3d:88:a4:a0:fc:f5:b1:
                    7e:07:66:dd:c5:a1:ce:fe:7c:0b:e6:d0:55:33:de:
                    86:d0:b2:e9:75:14:db:ca:3b:b3:25:da:71:31:c2:
                    a0:37:62:70:09:9c:7e:81:73:6c:ec:5d:e2:4e:e0:
                    96:6a:b2:ea:40:ec:c0:18:87:fa:cc:2a:d3:91:b3:
                    88:35:1f:b7:d3:76:e1:c1:d5:a0:6b:b9:58:69:c5:
                    28:c1:4f:a3:39:c1:4f:4d:22:ae:9e:e0:d5:c3:4d:
                    67:16:a3:be:c8:f2:9b:9c:5d:8b:12:48:a0:d3:a3:
                    8d:62:81:23:24:3a:cb:88:09:d2:79:35:db:ee:ef:
                    4a:e6:7b:f0:81:11:07:5c:0e:28:47:34:69:20:47:
                    75:62:5f:47:5a:4a:71:5d:fd:36:b9:b4:b9:e0:ec:
                    39:87
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                50:58:3B:35:BA:BB:33:59:2D:FF:AD:3B:DA:E7:A0:EA:BD:FA:96:8F
            X509v3 Authority Key Identifier:
                keyid:52:DC:14:12:C6:70:8A:DA:13:DE:89:F1:50:FA:8C:5B:EF:20:5D:CB

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repo-rpki.idnic.net/repo/a0fe163c-14d5-4e31-ac20-c04e3e44c34f/0/52DC1412C6708ADA13DE89F150FA8C5BEF205DCB.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/52DC1412C6708ADA13DE89F150FA8C5BEF205DCB.cer

            Subject Information Access:
                Signed Object - URI:rsync://repo-rpki.idnic.net/repo/a0fe163c-14d5-4e31-ac20-c04e3e44c34f/0/52DC1412C6708ADA13DE89F150FA8C5BEF205DCB.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         0c:ff:f5:43:3b:a0:3a:0d:68:54:63:ea:39:00:6a:5c:bd:14:
         86:0e:b6:51:27:9d:65:08:2b:f8:f6:24:51:e5:c2:39:17:cf:
         36:64:4e:51:2a:9e:61:ea:e9:3c:ab:40:c8:60:d9:e6:9e:71:
         78:4c:4e:c5:0a:67:e2:74:02:17:85:0a:1b:db:bb:2d:ec:5b:
         f8:05:a2:a7:7e:ad:fc:67:a9:e8:a2:7d:90:d1:9d:1e:aa:1b:
         cd:d6:7d:2c:e3:5d:ac:3f:23:93:ba:fa:06:52:de:54:53:6c:
         87:76:d1:d8:d9:59:7d:96:02:37:f9:05:1d:89:30:a3:61:38:
         a5:9a:93:67:20:42:35:19:12:ef:5e:81:b9:9c:65:0a:2f:eb:
         8d:45:5c:91:f3:ba:b6:87:fc:66:5e:40:a1:8f:0b:87:06:9f:
         72:53:56:1a:82:c1:19:db:1b:ae:c6:6c:6b:28:db:1c:d7:37:
         52:e6:aa:66:97:fb:5d:bb:73:1e:68:f3:c3:45:06:21:a0:e8:
         9a:28:4a:85:79:4f:56:d8:cb:8e:b6:bc:bf:b6:f9:91:bb:28:
         bb:d5:08:2f:a3:15:1d:aa:9b:e0:e5:ca:71:24:b7:66:ac:3c:
         19:0b:fa:15:39:72:6f:ca:37:3f:80:cf:59:5f:e8:33:28:64:
         d3:e5:17:74
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Dec 3 14:13:25 2025 by rpki-client