This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf repo-rpki.idnic.net/repo/a1ee3765-0abb-4ba3-a00d-cbcec8399928/0/52C34A755DF981FDF13789624A2BE028AB5B5DAE.mft File: 52C34A755DF981FDF13789624A2BE028AB5B5DAE.mft (raw, json) Hash identifier: BoYFcJJ1NDM4ub/HByU5zUxDHnAH9jgUkk73B6uIiJk= Subject key identifier: F0:61:1C:E9:C1:3D:F9:4B:79:0F:F4:B0:5A:A1:29:40:68:2E:04:72 Authority key identifier: 52:C3:4A:75:5D:F9:81:FD:F1:37:89:62:4A:2B:E0:28:AB:5B:5D:AE Certificate issuer: /CN=52C34A755DF981FDF13789624A2BE028AB5B5DAE Certificate serial: 6C1F11282561D06F77AC90CEA1A3E7BFB0023979 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/52C34A755DF981FDF13789624A2BE028AB5B5DAE.cer Subject info access: rsync://repo-rpki.idnic.net/repo/a1ee3765-0abb-4ba3-a00d-cbcec8399928/0/52C34A755DF981FDF13789624A2BE028AB5B5DAE.mft Manifest number: 0120 Signing time: Mon 01 Dec 2025 08:12:36 +0000 Manifest this update: Mon 01 Dec 2025 08:07:36 +0000 Manifest next update: Thu 04 Dec 2025 14:32:36 +0000 Files and hashes: 1: 3231302e38372e3131332e302f32342d3234203d3e20313532303533.roa (hash: M/ahzHC3ODRI/WG3tVFzAKjzCsCePhBkrqbTyrlIMdA=) 2: 3231302e38372e3131322e302f32342d3234203d3e20313532303533.roa (hash: KmvZNHMkYGjniiDVsPzoqz85biHBg1yoTLWktyy3KyI=) 3: 52C34A755DF981FDF13789624A2BE028AB5B5DAE.crl (hash: VEuSoF10Q7eqT3Fuour1VcB6NUtS+v+aJfadvGLDx/s=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/a1ee3765-0abb-4ba3-a00d-cbcec8399928/0/52C34A755DF981FDF13789624A2BE028AB5B5DAE.crl rsync://repo-rpki.idnic.net/repo/a1ee3765-0abb-4ba3-a00d-cbcec8399928/0/52C34A755DF981FDF13789624A2BE028AB5B5DAE.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/52C34A755DF981FDF13789624A2BE028AB5B5DAE.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 04 Dec 2025 14:32:36 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 6c:1f:11:28:25:61:d0:6f:77:ac:90:ce:a1:a3:e7:bf:b0:02:39:79 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=52C34A755DF981FDF13789624A2BE028AB5B5DAE Validity Not Before: Dec 1 08:07:36 2025 GMT Not After : Dec 4 14:32:36 2025 GMT Subject: CN=F0611CE9C13DF94B790FF4B05AA12940682E0472 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c3:88:45:2f:4a:7a:7a:29:be:a0:5d:0b:34:54: 56:30:e0:8f:a0:9b:ea:86:1e:a7:a8:f7:24:72:dd: f9:55:91:68:54:55:0c:c3:c2:39:9d:7e:e1:12:6e: a9:bd:bc:51:77:0f:ec:10:06:93:6a:97:c6:d1:69: 65:89:38:e6:7e:e3:98:4a:d1:62:aa:b7:80:88:c9: 18:93:06:44:11:66:a7:9f:55:89:0a:7a:ad:5d:75: 79:46:db:ff:a1:63:1e:28:6b:7f:4a:44:f4:8e:61: 12:e2:e5:b0:4f:c6:70:99:23:2c:41:85:cb:a8:55: ed:98:7a:b4:ed:cc:4d:df:7e:ef:02:10:8e:d1:b1: 69:8f:04:c0:cb:55:46:25:58:b4:0f:e8:9c:c6:6e: 32:7c:a4:ef:77:40:27:1b:e8:3c:e2:0d:60:8f:1b: 15:6d:47:f5:7b:ae:f7:5f:c6:0c:44:69:72:ee:4b: f0:cf:0a:02:de:ed:06:9f:00:2f:a9:34:47:3c:be: d7:f5:72:ce:09:89:66:34:d1:2c:e7:93:13:b5:a5: 55:2b:88:e2:6c:c5:52:97:7f:13:ff:eb:c0:8a:52: b6:3b:73:75:6c:a9:22:fc:5f:ec:1d:14:7d:80:8e: b0:c1:d9:c3:8e:3d:79:64:cc:d0:de:a6:7c:52:c2: 03:31 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: F0:61:1C:E9:C1:3D:F9:4B:79:0F:F4:B0:5A:A1:29:40:68:2E:04:72 X509v3 Authority Key Identifier: keyid:52:C3:4A:75:5D:F9:81:FD:F1:37:89:62:4A:2B:E0:28:AB:5B:5D:AE X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/a1ee3765-0abb-4ba3-a00d-cbcec8399928/0/52C34A755DF981FDF13789624A2BE028AB5B5DAE.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/52C34A755DF981FDF13789624A2BE028AB5B5DAE.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/a1ee3765-0abb-4ba3-a00d-cbcec8399928/0/52C34A755DF981FDF13789624A2BE028AB5B5DAE.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 14:50:ce:02:1b:e6:ec:94:ff:ca:ba:07:9e:02:09:d4:33:4d: 27:e2:71:6e:0c:da:18:70:ce:e2:d9:dd:fb:06:f6:0d:cd:d5: 76:cb:d1:17:72:35:a7:fe:ee:47:27:54:33:25:43:29:43:87: db:d3:14:15:21:c0:a0:47:19:74:ff:14:94:f5:ba:04:1c:cd: d3:72:b3:56:5e:4b:22:a9:0d:f0:85:1f:b3:48:bd:f6:71:6a: a4:c2:ff:69:a6:69:89:e7:ea:cd:06:4f:bb:ff:56:d2:ad:32: 89:ce:b5:6f:b7:ad:23:b1:48:4e:35:5d:17:79:92:cc:5a:2c: d5:ad:84:ca:2f:bf:51:91:73:65:1d:43:78:4a:06:03:ba:23: d2:85:3d:03:85:fe:76:87:57:a5:04:36:ae:91:81:f1:2d:aa: 8d:38:4c:62:f7:e5:3b:2c:87:12:0e:71:d1:86:6c:9f:1f:8e: b7:e1:5b:93:bc:06:6e:a5:49:e9:b0:5c:89:d0:05:96:7a:ae: 90:1e:a1:64:a1:b0:49:7a:e4:2f:f3:99:c2:e1:fb:57:03:c2: 0d:3f:3b:d3:06:16:3f:1e:27:cf:94:68:58:b4:18:8e:cb:a2: 1c:d8:f5:7f:1e:39:48:85:a8:bd:c4:e1:74:8e:4c:bf:b6:42: 23:3f:25:a9 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUbB8RKCVh0G93rJDOoaPnv7ACOXkwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoNTJDMzRBNzU1REY5ODFGREYxMzc4OTYyNEEyQkUwMjhB QjVCNURBRTAeFw0yNTEyMDEwODA3MzZaFw0yNTEyMDQxNDMyMzZaMDMxMTAvBgNV BAMTKEYwNjExQ0U5QzEzREY5NEI3OTBGRjRCMDVBQTEyOTQwNjgyRTA0NzIwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDDiEUvSnp6Kb6gXQs0VFYw4I+g m+qGHqeo9yRy3flVkWhUVQzDwjmdfuESbqm9vFF3D+wQBpNql8bRaWWJOOZ+45hK 0WKqt4CIyRiTBkQRZqefVYkKeq1ddXlG2/+hYx4oa39KRPSOYRLi5bBPxnCZIyxB hcuoVe2YerTtzE3ffu8CEI7RsWmPBMDLVUYlWLQP6JzGbjJ8pO93QCcb6DziDWCP GxVtR/V7rvdfxgxEaXLuS/DPCgLe7QafAC+pNEc8vtf1cs4JiWY00SznkxO1pVUr iOJsxVKXfxP/68CKUrY7c3VsqSL8X+wdFH2AjrDB2cOOPXlkzNDepnxSwgMxAgMB AAGjggI8MIICODAdBgNVHQ4EFgQU8GEc6cE9+Ut5D/SwWqEpQGguBHIwHwYDVR0j BBgwFoAUUsNKdV35gf3xN4liSivgKKtbXa4wDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby9h MWVlMzc2NS0wYWJiLTRiYTMtYTAwZC1jYmNlYzgzOTk5MjgvMC81MkMzNEE3NTVE Rjk4MUZERjEzNzg5NjI0QTJCRTAyOEFCNUI1REFFLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvNTJDMzRBNzU1REY5ODFGREYxMzc4OTYyNEEyQkUwMjhBQjVC NURBRS5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vYTFlZTM3NjUtMGFiYi00YmEzLWEw MGQtY2JjZWM4Mzk5OTI4LzAvNTJDMzRBNzU1REY5ODFGREYxMzc4OTYyNEEyQkUw MjhBQjVCNURBRS5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBABRQzgIb5uyU/8q6B54CCdQzTSficW4M2hhw zuLZ3fsG9g3N1XbL0RdyNaf+7kcnVDMlQylDh9vTFBUhwKBHGXT/FJT1ugQczdNy s1ZeSyKpDfCFH7NIvfZxaqTC/2mmaYnn6s0GT7v/VtKtMonOtW+3rSOxSE41XRd5 ksxaLNWthMovv1GRc2UdQ3hKBgO6I9KFPQOF/naHV6UENq6RgfEtqo04TGL35Tss hxIOcdGGbJ8fjrfhW5O8Bm6lSemwXInQBZZ6rpAeoWShsEl65C/zmcLh+1cDwg0/ O9MGFj8eJ8+UaFi0GI7LohzY9X8eOUiFqL3E4XSOTL+2QiM/Jak= -----END CERTIFICATE-----Generated at Wed Dec 3 14:43:42 2025 by rpki-client