This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf repo-rpki.idnic.net/repo/bec553b6-9e57-40bd-8d96-a9fdadadd7be/0/52F21143C125B54D950A82C78B375D1FEFC27145.mft File: 52F21143C125B54D950A82C78B375D1FEFC27145.mft (raw, json) Hash identifier: w21LxY2EA4G/cpEtxVoqqzPg79j2lP2j9HMx/SLXWpE= Subject key identifier: DB:8E:D7:34:A6:92:75:7B:83:2D:A1:49:A0:D8:B6:DF:82:57:9C:67 Authority key identifier: 52:F2:11:43:C1:25:B5:4D:95:0A:82:C7:8B:37:5D:1F:EF:C2:71:45 Certificate issuer: /CN=52F21143C125B54D950A82C78B375D1FEFC27145 Certificate serial: 5AD25EACDEE2C006C4D7A66AB55337D87B320B1F Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/52F21143C125B54D950A82C78B375D1FEFC27145.cer Subject info access: rsync://repo-rpki.idnic.net/repo/bec553b6-9e57-40bd-8d96-a9fdadadd7be/0/52F21143C125B54D950A82C78B375D1FEFC27145.mft Manifest number: 01A6 Signing time: Sun 01 Feb 2026 21:52:27 +0000 Manifest this update: Sun 01 Feb 2026 21:47:27 +0000 Manifest next update: Wed 04 Feb 2026 22:36:27 +0000 Files and hashes: 1: 52F21143C125B54D950A82C78B375D1FEFC27145.crl (hash: 0reN49Tofbx6KxbHYj0GcS1ptAktphBHMWP3sxyn6n4=) 2: 3130332e3231372e3232342e302f32342d3234203d3e20313531303036.roa (hash: IbilM14Tghq0s15Jun72yk+UFwN4B/MVdRN8dmwioxY=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/bec553b6-9e57-40bd-8d96-a9fdadadd7be/0/52F21143C125B54D950A82C78B375D1FEFC27145.crl rsync://repo-rpki.idnic.net/repo/bec553b6-9e57-40bd-8d96-a9fdadadd7be/0/52F21143C125B54D950A82C78B375D1FEFC27145.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/52F21143C125B54D950A82C78B375D1FEFC27145.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 04 Feb 2026 22:36:27 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 5a:d2:5e:ac:de:e2:c0:06:c4:d7:a6:6a:b5:53:37:d8:7b:32:0b:1f Signature Algorithm: sha256WithRSAEncryption Issuer: CN=52F21143C125B54D950A82C78B375D1FEFC27145 Validity Not Before: Feb 1 21:47:27 2026 GMT Not After : Feb 4 22:36:27 2026 GMT Subject: CN=DB8ED734A692757B832DA149A0D8B6DF82579C67 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c7:41:17:c9:d8:70:e1:2e:0b:60:72:8e:e1:51: b1:3a:dd:f8:6f:21:7e:77:21:bb:c0:3c:28:98:8e: 2a:38:72:2b:38:e3:09:8c:1b:ec:eb:23:45:bb:d8: 31:a9:7c:1d:ec:48:b2:5f:d1:f5:7f:cb:0d:4a:a8: c7:a2:b1:c8:2d:3c:b3:d7:15:48:7b:1a:9c:13:f2: d1:52:b5:c8:d9:74:4c:4f:90:dc:c7:0a:46:ce:bd: 91:08:09:67:0f:a7:27:98:5f:b2:98:b4:ea:c7:48: 8d:11:26:93:d2:14:e4:7a:68:9a:b4:12:20:dd:e6: 2f:7f:be:4d:ec:19:df:a7:a7:d4:3a:58:9d:88:f9: 09:aa:00:33:76:d2:1f:27:15:35:53:ea:ea:7a:db: d3:ee:a2:56:1c:05:cc:74:61:66:23:02:5a:c7:db: b0:0f:4b:99:27:e3:e8:c7:36:08:d2:99:d7:ce:18: e4:0c:6a:e2:40:52:a8:ab:74:b9:8b:b9:9d:17:65: 9e:e4:b3:d2:2d:79:aa:05:b5:d3:60:4a:a1:2a:0e: ee:c4:dd:b1:d9:e7:6e:57:0a:22:79:f1:3d:a6:55: 09:b4:eb:a0:c2:10:9c:43:dd:2d:36:37:5b:17:3c: 52:31:15:41:ef:7a:eb:3c:28:56:fc:15:76:9b:fa: ed:19 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: DB:8E:D7:34:A6:92:75:7B:83:2D:A1:49:A0:D8:B6:DF:82:57:9C:67 X509v3 Authority Key Identifier: keyid:52:F2:11:43:C1:25:B5:4D:95:0A:82:C7:8B:37:5D:1F:EF:C2:71:45 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/bec553b6-9e57-40bd-8d96-a9fdadadd7be/0/52F21143C125B54D950A82C78B375D1FEFC27145.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/52F21143C125B54D950A82C78B375D1FEFC27145.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/bec553b6-9e57-40bd-8d96-a9fdadadd7be/0/52F21143C125B54D950A82C78B375D1FEFC27145.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 66:a3:1d:44:95:d1:49:6d:f3:4a:c2:f4:ab:1e:d3:98:4a:ed: 2e:b1:98:56:09:ec:1e:f6:37:df:bb:59:2d:a1:ac:00:62:92: f4:1a:d1:ce:4b:49:dd:38:59:43:65:43:ef:04:f7:79:dc:ed: a0:53:18:46:18:a2:ee:a6:10:e3:30:0b:56:be:4e:cf:90:13: db:f9:26:fe:d8:c7:bf:fd:63:80:1a:25:e5:23:63:00:c4:f3: 8a:29:77:d7:f8:b9:87:85:f6:2d:35:d1:52:84:c6:51:32:49: 82:0d:c3:09:27:58:04:80:9d:81:db:c1:7d:e9:aa:0e:f7:f7: e5:5f:bd:1b:bd:63:5d:f3:4e:60:29:5e:f4:a2:92:11:96:34: 91:f1:fb:83:3d:a8:f5:d0:72:93:1d:32:4f:1d:d4:f1:fa:0f: 7a:7f:b0:72:45:46:ce:bd:a4:e2:45:ec:92:7a:5f:fb:55:8a: b3:27:46:32:28:a7:08:b1:f4:7e:6d:ac:f5:91:8e:41:07:46: b9:20:b9:ed:ac:a7:05:40:53:49:5d:7c:62:0c:09:2b:6a:86: 5f:8a:da:52:47:cb:48:c0:f4:63:2f:4e:25:b8:85:1c:dd:19: a6:86:ad:f7:b4:f9:36:99:51:c8:9a:46:d5:3d:04:76:cf:a9: c7:69:2a:c6 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUWtJerN7iwAbE16ZqtVM32HsyCx8wDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoNTJGMjExNDNDMTI1QjU0RDk1MEE4MkM3OEIzNzVEMUZF RkMyNzE0NTAeFw0yNjAyMDEyMTQ3MjdaFw0yNjAyMDQyMjM2MjdaMDMxMTAvBgNV BAMTKERCOEVENzM0QTY5Mjc1N0I4MzJEQTE0OUEwRDhCNkRGODI1NzlDNjcwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDHQRfJ2HDhLgtgco7hUbE63fhv IX53IbvAPCiYjio4cis44wmMG+zrI0W72DGpfB3sSLJf0fV/yw1KqMeiscgtPLPX FUh7GpwT8tFStcjZdExPkNzHCkbOvZEICWcPpyeYX7KYtOrHSI0RJpPSFOR6aJq0 EiDd5i9/vk3sGd+np9Q6WJ2I+QmqADN20h8nFTVT6up629PuolYcBcx0YWYjAlrH 27APS5kn4+jHNgjSmdfOGOQMauJAUqirdLmLuZ0XZZ7ks9IteaoFtdNgSqEqDu7E 3bHZ525XCiJ58T2mVQm066DCEJxD3S02N1sXPFIxFUHveus8KFb8FXab+u0ZAgMB AAGjggI8MIICODAdBgNVHQ4EFgQU247XNKaSdXuDLaFJoNi234JXnGcwHwYDVR0j BBgwFoAUUvIRQ8EltU2VCoLHizddH+/CcUUwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby9i ZWM1NTNiNi05ZTU3LTQwYmQtOGQ5Ni1hOWZkYWRhZGQ3YmUvMC81MkYyMTE0M0Mx MjVCNTREOTUwQTgyQzc4QjM3NUQxRkVGQzI3MTQ1LmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvNTJGMjExNDNDMTI1QjU0RDk1MEE4MkM3OEIzNzVEMUZFRkMy NzE0NS5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vYmVjNTUzYjYtOWU1Ny00MGJkLThk OTYtYTlmZGFkYWRkN2JlLzAvNTJGMjExNDNDMTI1QjU0RDk1MEE4MkM3OEIzNzVE MUZFRkMyNzE0NS5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAGajHUSV0Ult80rC9Kse05hK7S6xmFYJ7B72 N9+7WS2hrABikvQa0c5LSd04WUNlQ+8E93nc7aBTGEYYou6mEOMwC1a+Ts+QE9v5 Jv7Yx7/9Y4AaJeUjYwDE84opd9f4uYeF9i010VKExlEySYINwwknWASAnYHbwX3p qg739+VfvRu9Y13zTmApXvSikhGWNJHx+4M9qPXQcpMdMk8d1PH6D3p/sHJFRs69 pOJF7JJ6X/tVirMnRjIopwix9H5trPWRjkEHRrkgue2spwVAU0ldfGIMCStqhl+K 2lJHy0jA9GMvTiW4hRzdGaaGrfe0+TaZUciaRtU9BHbPqcdpKsY= -----END CERTIFICATE-----Generated at Mon Feb 2 12:49:46 2026 by rpki-client