This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf repo-rpki.idnic.net/repo/bec553b6-9e57-40bd-8d96-a9fdadadd7be/0/52F21143C125B54D950A82C78B375D1FEFC27145.mft File: 52F21143C125B54D950A82C78B375D1FEFC27145.mft (raw, json) Hash identifier: CruulyO5DaKfl2mKQFQdki1H6ZQNUS1b5WJDykddN38= Subject key identifier: 36:56:38:DF:B1:A8:36:22:65:50:35:7D:4B:FA:10:48:85:05:81:DB Authority key identifier: 52:F2:11:43:C1:25:B5:4D:95:0A:82:C7:8B:37:5D:1F:EF:C2:71:45 Certificate issuer: /CN=52F21143C125B54D950A82C78B375D1FEFC27145 Certificate serial: 0F1B9528AE0687C6A5ECA4174D8F10A738AA2BB5 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/52F21143C125B54D950A82C78B375D1FEFC27145.cer Subject info access: rsync://repo-rpki.idnic.net/repo/bec553b6-9e57-40bd-8d96-a9fdadadd7be/0/52F21143C125B54D950A82C78B375D1FEFC27145.mft Manifest number: 018B Signing time: Tue 02 Dec 2025 14:55:03 +0000 Manifest this update: Tue 02 Dec 2025 14:50:03 +0000 Manifest next update: Fri 05 Dec 2025 15:18:03 +0000 Files and hashes: 1: 3130332e3231372e3232342e302f32342d3234203d3e20313531303036.roa (hash: IbilM14Tghq0s15Jun72yk+UFwN4B/MVdRN8dmwioxY=) 2: 52F21143C125B54D950A82C78B375D1FEFC27145.crl (hash: s0VJfvg4KpnqbKd07x1eSCMUdGZpTGm1HTzDpldGDFU=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/bec553b6-9e57-40bd-8d96-a9fdadadd7be/0/52F21143C125B54D950A82C78B375D1FEFC27145.crl rsync://repo-rpki.idnic.net/repo/bec553b6-9e57-40bd-8d96-a9fdadadd7be/0/52F21143C125B54D950A82C78B375D1FEFC27145.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/52F21143C125B54D950A82C78B375D1FEFC27145.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 05 Dec 2025 15:18:03 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 0f:1b:95:28:ae:06:87:c6:a5:ec:a4:17:4d:8f:10:a7:38:aa:2b:b5 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=52F21143C125B54D950A82C78B375D1FEFC27145 Validity Not Before: Dec 2 14:50:03 2025 GMT Not After : Dec 5 15:18:03 2025 GMT Subject: CN=365638DFB1A836226550357D4BFA1048850581DB Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cd:12:bc:68:d7:6e:ab:8e:9c:24:26:39:91:ae: 70:b8:d7:78:dd:e0:d4:60:ce:5e:cc:51:b1:3e:81: 91:8e:4c:3c:65:c0:22:18:7f:34:b8:3e:5e:d3:74: a7:82:59:cd:10:f6:e0:44:5c:d4:5e:52:bd:16:b8: ef:00:05:94:75:07:3e:d6:1a:91:5d:78:27:59:d7: 44:a7:6f:b1:0c:fe:7d:5e:ad:d5:06:0f:e1:21:ea: 3a:f5:d3:2d:7a:10:98:62:9a:49:35:04:aa:09:c4: 34:ef:10:90:5a:9c:90:ef:a9:db:2a:ab:f3:d1:84: 9d:48:44:e1:3e:7a:d8:2e:b2:db:0d:fe:e6:9c:34: f5:a7:bd:fb:1a:76:d3:a2:e8:14:22:f5:75:44:3c: 56:00:06:55:e4:b2:c1:8b:4f:59:c2:8d:5c:84:4b: aa:02:9f:97:8c:08:82:87:33:0e:f1:c5:96:89:1f: 25:2b:3f:55:ea:fa:12:3a:02:f1:04:c9:0e:b5:f1: 59:99:bb:0c:54:fd:e5:16:bc:4c:05:76:b8:69:5c: 81:84:c8:b3:fb:4a:f7:a4:c6:dd:68:a3:69:3a:bd: d0:eb:b3:aa:58:25:36:92:a7:6d:6f:73:fe:73:05: 00:fa:90:e7:92:8d:92:07:dc:6b:c1:fa:54:3b:06: 18:2b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 36:56:38:DF:B1:A8:36:22:65:50:35:7D:4B:FA:10:48:85:05:81:DB X509v3 Authority Key Identifier: keyid:52:F2:11:43:C1:25:B5:4D:95:0A:82:C7:8B:37:5D:1F:EF:C2:71:45 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/bec553b6-9e57-40bd-8d96-a9fdadadd7be/0/52F21143C125B54D950A82C78B375D1FEFC27145.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/52F21143C125B54D950A82C78B375D1FEFC27145.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/bec553b6-9e57-40bd-8d96-a9fdadadd7be/0/52F21143C125B54D950A82C78B375D1FEFC27145.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 64:bd:96:13:ba:a6:0e:b3:6f:ed:1b:ec:a8:69:25:b7:32:90: 9c:50:c9:19:05:1c:c1:27:ea:7b:23:00:3f:8a:7b:13:a4:45: 48:3c:23:87:fe:91:af:81:22:1f:b6:3a:8e:5d:c8:1a:5e:93: 94:0d:fc:1c:c1:42:90:d3:c9:69:b7:a7:cf:ea:fe:12:93:19: f2:d4:af:86:f5:f8:3c:ca:20:70:05:e6:d6:c7:71:7f:01:58: 6e:46:55:a7:ad:2a:f1:5c:f4:a6:f0:80:9b:f2:ba:38:58:49: 41:85:21:cb:88:94:d1:11:24:90:97:56:19:e5:c2:c8:7a:aa: f0:96:58:7d:17:a5:77:05:f7:fc:84:95:0b:5b:06:a5:38:05: 27:34:de:91:33:ed:24:28:91:25:0f:af:35:ee:e7:bf:4f:3e: c3:cb:6f:08:e3:b4:95:1c:a5:4e:1d:e4:14:1a:80:47:d8:58: 75:08:18:b5:9e:83:77:db:4c:e5:b6:48:21:aa:0b:aa:47:45: cf:32:92:e1:c6:c5:d3:29:d0:93:9d:94:7e:ed:03:80:87:b9: c8:69:27:01:4b:86:7e:f0:62:7d:90:a0:07:ff:ed:96:26:a1: 0f:bb:6a:1c:6f:07:c4:09:0a:ba:59:2f:93:81:43:3a:dc:16: 73:a4:6a:49 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUDxuVKK4Gh8al7KQXTY8QpziqK7UwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoNTJGMjExNDNDMTI1QjU0RDk1MEE4MkM3OEIzNzVEMUZF RkMyNzE0NTAeFw0yNTEyMDIxNDUwMDNaFw0yNTEyMDUxNTE4MDNaMDMxMTAvBgNV BAMTKDM2NTYzOERGQjFBODM2MjI2NTUwMzU3RDRCRkExMDQ4ODUwNTgxREIwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDNErxo126rjpwkJjmRrnC413jd 4NRgzl7MUbE+gZGOTDxlwCIYfzS4Pl7TdKeCWc0Q9uBEXNReUr0WuO8ABZR1Bz7W GpFdeCdZ10Snb7EM/n1erdUGD+Eh6jr10y16EJhimkk1BKoJxDTvEJBanJDvqdsq q/PRhJ1IROE+etgustsN/uacNPWnvfsadtOi6BQi9XVEPFYABlXkssGLT1nCjVyE S6oCn5eMCIKHMw7xxZaJHyUrP1Xq+hI6AvEEyQ618VmZuwxU/eUWvEwFdrhpXIGE yLP7Svekxt1oo2k6vdDrs6pYJTaSp21vc/5zBQD6kOeSjZIH3GvB+lQ7BhgrAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUNlY437GoNiJlUDV9S/oQSIUFgdswHwYDVR0j BBgwFoAUUvIRQ8EltU2VCoLHizddH+/CcUUwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby9i ZWM1NTNiNi05ZTU3LTQwYmQtOGQ5Ni1hOWZkYWRhZGQ3YmUvMC81MkYyMTE0M0Mx MjVCNTREOTUwQTgyQzc4QjM3NUQxRkVGQzI3MTQ1LmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvNTJGMjExNDNDMTI1QjU0RDk1MEE4MkM3OEIzNzVEMUZFRkMy NzE0NS5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vYmVjNTUzYjYtOWU1Ny00MGJkLThk OTYtYTlmZGFkYWRkN2JlLzAvNTJGMjExNDNDMTI1QjU0RDk1MEE4MkM3OEIzNzVE MUZFRkMyNzE0NS5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAGS9lhO6pg6zb+0b7KhpJbcykJxQyRkFHMEn 6nsjAD+KexOkRUg8I4f+ka+BIh+2Oo5dyBpek5QN/BzBQpDTyWm3p8/q/hKTGfLU r4b1+DzKIHAF5tbHcX8BWG5GVaetKvFc9KbwgJvyujhYSUGFIcuIlNERJJCXVhnl wsh6qvCWWH0XpXcF9/yElQtbBqU4BSc03pEz7SQokSUPrzXu579PPsPLbwjjtJUc pU4d5BQagEfYWHUIGLWeg3fbTOW2SCGqC6pHRc8ykuHGxdMp0JOdlH7tA4CHuchp JwFLhn7wYn2QoAf/7ZYmoQ+7ahxvB8QJCrpZL5OBQzrcFnOkakk= -----END CERTIFICATE-----Generated at Wed Dec 3 14:46:04 2025 by rpki-client