This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf repo-rpki.idnic.net/repo/31224247-347f-4a57-a79a-cb2c21c9170e/0/52FA38C22CA0987CE48A3BD5191FFDA2AD39DB3B.mft File: 52FA38C22CA0987CE48A3BD5191FFDA2AD39DB3B.mft (raw, json) Hash identifier: b8CBUf/0vVjR53aMSP6bZzwhP3o7GsdsZS2GT2Cb2qY= Subject key identifier: 5C:59:7B:83:8D:C6:87:16:78:B0:48:28:8A:17:6D:85:55:4F:6A:62 Authority key identifier: 52:FA:38:C2:2C:A0:98:7C:E4:8A:3B:D5:19:1F:FD:A2:AD:39:DB:3B Certificate issuer: /CN=52FA38C22CA0987CE48A3BD5191FFDA2AD39DB3B Certificate serial: 6AB66FE4AAD79777E41B25AA406F989178B3AF22 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/52FA38C22CA0987CE48A3BD5191FFDA2AD39DB3B.cer Subject info access: rsync://repo-rpki.idnic.net/repo/31224247-347f-4a57-a79a-cb2c21c9170e/0/52FA38C22CA0987CE48A3BD5191FFDA2AD39DB3B.mft Manifest number: EB Signing time: Fri 05 Dec 2025 13:22:20 +0000 Manifest this update: Fri 05 Dec 2025 13:17:20 +0000 Manifest next update: Tue 09 Dec 2025 00:42:20 +0000 Files and hashes: 1: 52FA38C22CA0987CE48A3BD5191FFDA2AD39DB3B.crl (hash: HOkO3XEa6FGx6TwfMV+OzhJUmQLR+cLk8SmyT5SeFl0=) 2: 3231302e38372e3132332e302f32342d3234203d3e20313532303634.roa (hash: cxNzmi6v2p99HHhR+ggQ6n1CG/x3GBlPxyYmKXCdmXo=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/31224247-347f-4a57-a79a-cb2c21c9170e/0/52FA38C22CA0987CE48A3BD5191FFDA2AD39DB3B.crl rsync://repo-rpki.idnic.net/repo/31224247-347f-4a57-a79a-cb2c21c9170e/0/52FA38C22CA0987CE48A3BD5191FFDA2AD39DB3B.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/52FA38C22CA0987CE48A3BD5191FFDA2AD39DB3B.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 09 Dec 2025 00:42:20 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 6a:b6:6f:e4:aa:d7:97:77:e4:1b:25:aa:40:6f:98:91:78:b3:af:22 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=52FA38C22CA0987CE48A3BD5191FFDA2AD39DB3B Validity Not Before: Dec 5 13:17:20 2025 GMT Not After : Dec 9 00:42:20 2025 GMT Subject: CN=5C597B838DC6871678B048288A176D85554F6A62 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:96:92:fb:1c:70:eb:f1:e8:aa:64:99:5d:b2:47: 15:95:10:ec:60:65:9d:cb:45:c6:d2:55:ec:0c:0e: 2f:ed:17:46:e1:f6:2b:94:1f:ea:1f:6b:08:63:b7: 85:e2:22:9c:dc:e5:3a:18:e9:b9:70:b0:55:d5:89: b5:95:81:f3:07:eb:53:b6:53:6d:87:83:5f:89:90: 3f:0c:4f:dc:23:12:e7:57:ee:af:66:b5:54:71:57: 2d:26:90:d7:d4:b7:b3:14:fe:8e:81:4a:0c:1e:2d: b6:0e:75:82:4e:55:10:ae:70:2a:19:32:f2:2b:15: 98:2b:59:13:2a:d1:b2:de:c3:f2:2d:c5:09:3c:7f: db:db:7e:7d:26:78:9d:a6:17:33:6c:11:de:54:94: 1f:1a:e1:af:ff:82:91:69:1e:6f:44:aa:90:36:d1: ff:cd:0b:54:31:5a:6e:7f:13:1e:37:a5:09:df:8d: 7b:48:65:3c:2d:b5:ea:b8:6f:39:32:2b:63:10:51: 2e:af:c4:df:3b:f0:8f:10:76:b3:89:e5:8c:1e:b0: 67:25:f5:28:9b:f9:b9:48:f9:6c:1f:93:48:a4:b6: ef:61:39:34:15:f9:c2:44:a2:92:79:f2:46:b9:9d: 40:2f:73:7c:e2:ba:21:17:30:2c:07:be:a6:69:4e: ee:7f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 5C:59:7B:83:8D:C6:87:16:78:B0:48:28:8A:17:6D:85:55:4F:6A:62 X509v3 Authority Key Identifier: keyid:52:FA:38:C2:2C:A0:98:7C:E4:8A:3B:D5:19:1F:FD:A2:AD:39:DB:3B X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/31224247-347f-4a57-a79a-cb2c21c9170e/0/52FA38C22CA0987CE48A3BD5191FFDA2AD39DB3B.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/52FA38C22CA0987CE48A3BD5191FFDA2AD39DB3B.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/31224247-347f-4a57-a79a-cb2c21c9170e/0/52FA38C22CA0987CE48A3BD5191FFDA2AD39DB3B.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 40:cc:0a:e3:50:d7:49:07:70:8c:96:81:14:ea:7c:f8:a2:4b: e1:39:42:3f:89:21:2e:79:1e:af:9f:c5:b3:0c:a5:65:e7:b9: f6:9e:0c:83:50:f6:57:28:cb:0a:9a:2c:63:82:84:8f:0f:58: 86:8d:cb:e0:36:bc:91:fc:ef:33:76:8d:0b:d5:33:d7:e1:15: 89:0f:09:74:61:90:a6:ec:06:22:56:14:75:5f:dc:0e:84:41: 00:47:47:89:7c:12:6f:da:30:5a:44:ca:38:b7:86:5a:c8:ef: f8:0a:29:7e:c9:b7:21:69:e8:64:0e:f2:01:18:30:e5:3a:64: 2e:fe:99:86:db:5b:89:67:42:e0:55:3f:71:3c:0f:e4:ef:f5: 1e:6b:07:c0:a1:93:4e:d4:77:0c:1e:79:26:d1:54:ff:56:12: 8a:d4:79:cc:b3:02:fb:cd:1f:75:26:f6:69:1c:26:c6:46:92: 93:62:61:45:9c:d8:6e:86:ba:d2:02:f8:35:4f:9f:63:59:4a: b5:da:a7:3f:2b:ef:4d:b8:fb:e5:bd:f5:33:40:8d:ed:75:d1: ba:3f:98:ae:b2:1f:1d:91:f6:42:23:41:1c:74:8f:60:3e:ef: 7d:38:92:c7:cf:bb:9c:1c:e8:56:08:22:36:86:7f:58:b4:9a: 58:03:2f:89 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUarZv5KrXl3fkGyWqQG+YkXizryIwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoNTJGQTM4QzIyQ0EwOTg3Q0U0OEEzQkQ1MTkxRkZEQTJB RDM5REIzQjAeFw0yNTEyMDUxMzE3MjBaFw0yNTEyMDkwMDQyMjBaMDMxMTAvBgNV BAMTKDVDNTk3QjgzOERDNjg3MTY3OEIwNDgyODhBMTc2RDg1NTU0RjZBNjIwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCWkvsccOvx6KpkmV2yRxWVEOxg ZZ3LRcbSVewMDi/tF0bh9iuUH+ofawhjt4XiIpzc5ToY6blwsFXVibWVgfMH61O2 U22Hg1+JkD8MT9wjEudX7q9mtVRxVy0mkNfUt7MU/o6BSgweLbYOdYJOVRCucCoZ MvIrFZgrWRMq0bLew/ItxQk8f9vbfn0meJ2mFzNsEd5UlB8a4a//gpFpHm9EqpA2 0f/NC1QxWm5/Ex43pQnfjXtIZTwtteq4bzkyK2MQUS6vxN878I8QdrOJ5YwesGcl 9Sib+blI+Wwfk0iktu9hOTQV+cJEopJ58ka5nUAvc3ziuiEXMCwHvqZpTu5/AgMB AAGjggI8MIICODAdBgNVHQ4EFgQUXFl7g43GhxZ4sEgoihdthVVPamIwHwYDVR0j BBgwFoAUUvo4wiygmHzkijvVGR/9oq052zswDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby8z MTIyNDI0Ny0zNDdmLTRhNTctYTc5YS1jYjJjMjFjOTE3MGUvMC81MkZBMzhDMjJD QTA5ODdDRTQ4QTNCRDUxOTFGRkRBMkFEMzlEQjNCLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvNTJGQTM4QzIyQ0EwOTg3Q0U0OEEzQkQ1MTkxRkZEQTJBRDM5 REIzQi5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vMzEyMjQyNDctMzQ3Zi00YTU3LWE3 OWEtY2IyYzIxYzkxNzBlLzAvNTJGQTM4QzIyQ0EwOTg3Q0U0OEEzQkQ1MTkxRkZE QTJBRDM5REIzQi5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAEDMCuNQ10kHcIyWgRTqfPiiS+E5Qj+JIS55 Hq+fxbMMpWXnufaeDINQ9lcoywqaLGOChI8PWIaNy+A2vJH87zN2jQvVM9fhFYkP CXRhkKbsBiJWFHVf3A6EQQBHR4l8Em/aMFpEyji3hlrI7/gKKX7JtyFp6GQO8gEY MOU6ZC7+mYbbW4lnQuBVP3E8D+Tv9R5rB8Chk07UdwweeSbRVP9WEorUecyzAvvN H3Um9mkcJsZGkpNiYUWc2G6GutIC+DVPn2NZSrXapz8r7024++W99TNAje110bo/ mK6yHx2R9kIjQRx0j2A+7304ksfPu5wc6FYIIjaGf1i0mlgDL4k= -----END CERTIFICATE-----Generated at Sun Dec 7 00:50:50 2025 by rpki-client