This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

$ rpki-client -vvf repo-rpki.idnic.net/repo/a1ee3765-0abb-4ba3-a00d-cbcec8399928/0/52C34A755DF981FDF13789624A2BE028AB5B5DAE.mft
File: 52C34A755DF981FDF13789624A2BE028AB5B5DAE.mft (raw, json)
Hash identifier: yi4qqsBPJPzFfAGvgqO5EH6kKV5ZPbHKfyLnAvJHNSY=
Subject key identifier: 1F:E8:A1:C4:9F:17:6A:30:76:62:78:18:A8:E7:8E:AA:8A:6F:A6:64
Authority key identifier: 52:C3:4A:75:5D:F9:81:FD:F1:37:89:62:4A:2B:E0:28:AB:5B:5D:AE
Certificate issuer: /CN=52C34A755DF981FDF13789624A2BE028AB5B5DAE
Certificate serial: 54376D94016A24D002ECB38E506A42EA19159CBC
Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/52C34A755DF981FDF13789624A2BE028AB5B5DAE.cer
Subject info access: rsync://repo-rpki.idnic.net/repo/a1ee3765-0abb-4ba3-a00d-cbcec8399928/0/52C34A755DF981FDF13789624A2BE028AB5B5DAE.mft
Manifest number: 013C
Signing time: Sun 01 Feb 2026 11:21:08 +0000
Manifest this update: Sun 01 Feb 2026 11:16:08 +0000
Manifest next update: Wed 04 Feb 2026 15:12:08 +0000
Files and hashes: 1: 3231302e38372e3131332e302f32342d3234203d3e20313532303533.roa (hash: MfOMH8pyeWOb33eVj5lGJlXFgGJnVY97tpbaPDlGeZk=)
2: 52C34A755DF981FDF13789624A2BE028AB5B5DAE.crl (hash: CWwtQ2kV1ecxqU8zJ2036QfuPolredS+yICePKV8jd4=)
3: 3231302e38372e3131322e302f32342d3234203d3e20313532303533.roa (hash: 4v43iD9DKTufMtXesf51VzAOv6Cm6ifyUjKOJHeSXSw=)
Validation: OK
Signature path: rsync://repo-rpki.idnic.net/repo/a1ee3765-0abb-4ba3-a00d-cbcec8399928/0/52C34A755DF981FDF13789624A2BE028AB5B5DAE.crl
rsync://repo-rpki.idnic.net/repo/a1ee3765-0abb-4ba3-a00d-cbcec8399928/0/52C34A755DF981FDF13789624A2BE028AB5B5DAE.mft
rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/52C34A755DF981FDF13789624A2BE028AB5B5DAE.cer
rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl
rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Wed 04 Feb 2026 15:12:08 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
54:37:6d:94:01:6a:24:d0:02:ec:b3:8e:50:6a:42:ea:19:15:9c:bc
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=52C34A755DF981FDF13789624A2BE028AB5B5DAE
Validity
Not Before: Feb 1 11:16:08 2026 GMT
Not After : Feb 4 15:12:08 2026 GMT
Subject: CN=1FE8A1C49F176A3076627818A8E78EAA8A6FA664
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:96:fb:cc:35:2a:39:1e:9b:cd:f5:9f:fe:80:90:
2f:d3:84:e2:21:91:08:3c:81:91:23:8c:0f:fc:df:
3b:65:6b:69:d5:6f:31:14:ee:94:2f:9e:52:65:e7:
97:6c:1d:57:15:42:2e:3a:f1:58:85:54:90:e5:f0:
71:5d:36:6f:d3:30:cd:54:77:bc:58:49:e8:db:c2:
b0:05:4e:11:ad:57:eb:43:a7:3e:77:6b:9b:a3:f7:
06:e3:94:95:f4:b6:33:58:cd:3f:8a:76:f4:0c:9d:
f2:9f:12:91:43:95:0c:42:07:5c:66:b2:8c:8d:fc:
d7:3e:29:16:04:b8:16:01:a4:7e:f9:1e:c8:5b:42:
2f:6a:dc:bc:67:8a:a3:5c:38:92:ce:6a:6c:b4:10:
44:4f:ed:47:7d:ea:e6:f4:bf:00:95:e9:2c:44:f3:
91:26:5c:f9:15:0d:31:af:46:de:3b:df:35:75:7b:
e7:d0:50:5e:1c:c7:ad:60:d5:b6:15:3c:ff:30:91:
c1:6b:d2:8b:75:fe:94:85:36:18:7b:7e:d0:55:b4:
ed:c0:4a:79:f4:71:27:5b:b6:5a:c1:07:21:c5:d5:
87:ff:d8:96:dd:1e:e4:72:86:1a:9c:6b:c6:59:56:
44:52:51:8a:b5:f8:78:8f:bf:b4:96:35:33:cd:38:
65:b1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
1F:E8:A1:C4:9F:17:6A:30:76:62:78:18:A8:E7:8E:AA:8A:6F:A6:64
X509v3 Authority Key Identifier:
keyid:52:C3:4A:75:5D:F9:81:FD:F1:37:89:62:4A:2B:E0:28:AB:5B:5D:AE
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://repo-rpki.idnic.net/repo/a1ee3765-0abb-4ba3-a00d-cbcec8399928/0/52C34A755DF981FDF13789624A2BE028AB5B5DAE.crl
Authority Information Access:
CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/52C34A755DF981FDF13789624A2BE028AB5B5DAE.cer
Subject Information Access:
Signed Object - URI:rsync://repo-rpki.idnic.net/repo/a1ee3765-0abb-4ba3-a00d-cbcec8399928/0/52C34A755DF981FDF13789624A2BE028AB5B5DAE.mft
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
8d:9c:03:32:bf:b7:88:67:a5:d5:b1:3f:57:6e:ea:83:b8:84:
5c:84:10:07:05:73:f9:23:0f:35:2f:8b:f6:6b:6d:9b:4e:10:
32:7a:e3:d3:52:a9:2a:20:fb:0d:ea:ed:47:9f:ab:e7:c3:b1:
d3:80:d9:50:0e:de:fe:bd:fc:c9:03:2a:5a:5c:b9:93:ca:7e:
a1:4b:98:cf:2e:01:b6:54:e4:e7:f9:89:fc:aa:ae:a1:68:a3:
39:d0:65:b3:54:2f:a1:de:10:75:4e:59:9e:98:16:81:98:1b:
5a:18:55:d4:89:2a:82:bc:e8:7b:41:58:cf:be:1a:f1:43:61:
48:3b:c3:fc:08:99:1a:8f:bc:d8:22:91:d3:ec:88:99:33:dd:
5c:75:be:2b:9f:98:d6:e0:27:89:88:cb:c3:6a:98:a6:3f:0f:
e4:06:50:da:58:1c:b5:c3:39:a8:1c:6e:73:54:51:23:33:6a:
81:67:79:c4:1f:41:e7:ed:2f:b1:68:9e:c9:3a:97:ad:9e:5f:
d9:f1:9e:26:ac:84:58:72:9f:21:72:c0:e0:90:d5:c8:83:99:
f5:37:38:7c:28:80:5e:69:0a:1c:59:04:3d:ac:fd:ba:a4:d2:
97:a8:c2:f4:c2:f3:85:39:56:45:29:4a:ca:33:27:d3:8d:e5:
18:1b:5c:d8
-----BEGIN CERTIFICATE-----
MIIFMjCCBBqgAwIBAgIUVDdtlAFqJNAC7LOOUGpC6hkVnLwwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoNTJDMzRBNzU1REY5ODFGREYxMzc4OTYyNEEyQkUwMjhB
QjVCNURBRTAeFw0yNjAyMDExMTE2MDhaFw0yNjAyMDQxNTEyMDhaMDMxMTAvBgNV
BAMTKDFGRThBMUM0OUYxNzZBMzA3NjYyNzgxOEE4RTc4RUFBOEE2RkE2NjQwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCW+8w1Kjkem831n/6AkC/ThOIh
kQg8gZEjjA/83ztla2nVbzEU7pQvnlJl55dsHVcVQi468ViFVJDl8HFdNm/TMM1U
d7xYSejbwrAFThGtV+tDpz53a5uj9wbjlJX0tjNYzT+KdvQMnfKfEpFDlQxCB1xm
soyN/Nc+KRYEuBYBpH75HshbQi9q3LxniqNcOJLOamy0EERP7Ud96ub0vwCV6SxE
85EmXPkVDTGvRt473zV1e+fQUF4cx61g1bYVPP8wkcFr0ot1/pSFNhh7ftBVtO3A
Snn0cSdbtlrBByHF1Yf/2JbdHuRyhhqca8ZZVkRSUYq1+HiPv7SWNTPNOGWxAgMB
AAGjggI8MIICODAdBgNVHQ4EFgQUH+ihxJ8XajB2YngYqOeOqopvpmQwHwYDVR0j
BBgwFoAUUsNKdV35gf3xN4liSivgKKtbXa4wDgYDVR0PAQH/BAQDAgeAMIGFBgNV
HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby9h
MWVlMzc2NS0wYWJiLTRiYTMtYTAwZC1jYmNlYzgzOTk5MjgvMC81MkMzNEE3NTVE
Rjk4MUZERjEzNzg5NjI0QTJCRTAyOEFCNUI1REFFLmNybDB0BggrBgEFBQcBAQRo
MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv
L0lETklDLUlELzIvNTJDMzRBNzU1REY5ODFGREYxMzc4OTYyNEEyQkUwMjhBQjVC
NURBRS5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6
Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vYTFlZTM3NjUtMGFiYi00YmEzLWEw
MGQtY2JjZWM4Mzk5OTI4LzAvNTJDMzRBNzU1REY5ODFGREYxMzc4OTYyNEEyQkUw
MjhBQjVCNURBRS5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF
BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC
BQAwDQYJKoZIhvcNAQELBQADggEBAI2cAzK/t4hnpdWxP1du6oO4hFyEEAcFc/kj
DzUvi/ZrbZtOEDJ649NSqSog+w3q7Uefq+fDsdOA2VAO3v69/MkDKlpcuZPKfqFL
mM8uAbZU5Of5ifyqrqFooznQZbNUL6HeEHVOWZ6YFoGYG1oYVdSJKoK86HtBWM++
GvFDYUg7w/wImRqPvNgikdPsiJkz3Vx1viufmNbgJ4mIy8NqmKY/D+QGUNpYHLXD
OagcbnNUUSMzaoFnecQfQeftL7Fonsk6l62eX9nxniashFhynyFywOCQ1ciDmfU3
OHwogF5pChxZBD2s/bqk0peowvTC84U5VkUpSsozJ9ON5RgbXNg=
-----END CERTIFICATE-----
Generated at Mon Feb 2 10:03:48 2026 by rpki-client