This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf repo-rpki.idnic.net/repo/31224247-347f-4a57-a79a-cb2c21c9170e/0/52FA38C22CA0987CE48A3BD5191FFDA2AD39DB3B.mft File: 52FA38C22CA0987CE48A3BD5191FFDA2AD39DB3B.mft (raw, json) Hash identifier: JfiXsygOQ6PRHPXQ/G+9xZRCANqa1xNvCWWaIOGVc+s= Subject key identifier: 8B:36:66:8F:7A:18:C4:97:D9:7B:AC:40:F6:BB:89:70:C9:02:A1:0C Authority key identifier: 52:FA:38:C2:2C:A0:98:7C:E4:8A:3B:D5:19:1F:FD:A2:AD:39:DB:3B Certificate issuer: /CN=52FA38C22CA0987CE48A3BD5191FFDA2AD39DB3B Certificate serial: 1F2C66D7A84A3F51AC7F00F1B6ED036ED5FE170F Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/52FA38C22CA0987CE48A3BD5191FFDA2AD39DB3B.cer Subject info access: rsync://repo-rpki.idnic.net/repo/31224247-347f-4a57-a79a-cb2c21c9170e/0/52FA38C22CA0987CE48A3BD5191FFDA2AD39DB3B.mft Manifest number: 0102 Signing time: Sun 25 Jan 2026 14:52:18 +0000 Manifest this update: Sun 25 Jan 2026 14:47:18 +0000 Manifest next update: Wed 28 Jan 2026 16:12:18 +0000 Files and hashes: 1: 3231302e38372e3132332e302f32342d3234203d3e20313532303634.roa (hash: cxNzmi6v2p99HHhR+ggQ6n1CG/x3GBlPxyYmKXCdmXo=) 2: 52FA38C22CA0987CE48A3BD5191FFDA2AD39DB3B.crl (hash: jzeyivk4KbOGNZImcBNX6nCmH8ZwiaJRqGDh7woeZ+A=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/31224247-347f-4a57-a79a-cb2c21c9170e/0/52FA38C22CA0987CE48A3BD5191FFDA2AD39DB3B.crl rsync://repo-rpki.idnic.net/repo/31224247-347f-4a57-a79a-cb2c21c9170e/0/52FA38C22CA0987CE48A3BD5191FFDA2AD39DB3B.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/52FA38C22CA0987CE48A3BD5191FFDA2AD39DB3B.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 28 Jan 2026 14:00:57 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1f:2c:66:d7:a8:4a:3f:51:ac:7f:00:f1:b6:ed:03:6e:d5:fe:17:0f Signature Algorithm: sha256WithRSAEncryption Issuer: CN=52FA38C22CA0987CE48A3BD5191FFDA2AD39DB3B Validity Not Before: Jan 25 14:47:18 2026 GMT Not After : Jan 28 16:12:18 2026 GMT Subject: CN=8B36668F7A18C497D97BAC40F6BB8970C902A10C Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:98:69:95:10:f7:27:e0:e1:f3:c9:76:32:2f:b4: 06:0c:a1:e7:d8:dd:3d:01:cd:dd:d5:36:19:9d:cf: 7e:da:6c:3f:40:48:27:25:1c:fe:66:c2:79:08:d6: 13:d7:46:e8:3a:45:8d:6b:dd:7b:4d:aa:99:db:64: ea:5d:5e:86:29:5d:a9:5e:af:8f:ce:46:70:f2:dd: d6:88:c6:c2:1d:ab:fc:7a:41:85:c3:54:53:8a:de: 4e:8e:46:f0:ca:66:a4:18:83:b8:5e:01:28:4f:12: f3:dd:5a:63:55:32:33:df:6c:cf:f8:8e:a6:28:fe: f4:46:29:68:27:4f:d3:44:eb:27:fa:09:7c:46:cc: c8:0c:b9:be:62:b0:1e:52:4c:48:f4:e2:a9:db:37: d3:e9:f5:50:5f:21:da:0b:99:c5:bb:74:96:e4:c3: 8a:3c:96:ff:d4:1c:f0:3d:41:5a:c7:c6:72:86:c4: ec:d5:e7:19:eb:79:7c:74:b1:32:7a:c9:71:ba:3b: e1:7b:47:ef:e3:a7:a8:69:6c:16:cf:44:bc:cb:0c: 9b:16:20:06:ce:ba:ef:48:e6:46:12:1b:a4:ec:76: 6d:58:b4:a2:0b:71:bf:44:dd:60:8a:b7:cb:bc:9b: 8a:d7:8b:60:cb:5a:6c:95:d4:3e:30:66:8a:f0:d2: a8:89 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 8B:36:66:8F:7A:18:C4:97:D9:7B:AC:40:F6:BB:89:70:C9:02:A1:0C X509v3 Authority Key Identifier: keyid:52:FA:38:C2:2C:A0:98:7C:E4:8A:3B:D5:19:1F:FD:A2:AD:39:DB:3B X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/31224247-347f-4a57-a79a-cb2c21c9170e/0/52FA38C22CA0987CE48A3BD5191FFDA2AD39DB3B.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/52FA38C22CA0987CE48A3BD5191FFDA2AD39DB3B.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/31224247-347f-4a57-a79a-cb2c21c9170e/0/52FA38C22CA0987CE48A3BD5191FFDA2AD39DB3B.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 84:76:1b:db:af:79:d4:46:90:3d:fb:35:41:4a:91:ee:50:22: bd:46:46:cc:53:40:59:14:bb:5a:94:23:64:15:87:7c:4b:6b: c9:9a:af:3c:1d:68:4c:62:ef:2e:55:de:af:33:20:5b:77:aa: d0:d0:97:41:6f:70:32:6b:e0:c9:b7:ad:c5:3b:44:74:c7:07: 2f:65:f2:53:f0:9e:64:4f:c7:76:3a:24:50:85:c6:53:3e:0a: 97:25:6d:c3:e3:a8:15:4f:56:7d:0c:f5:4c:6b:ee:b9:19:df: 23:9f:ad:97:8f:50:10:99:40:c9:81:79:59:03:d4:51:bf:ca: 07:20:8c:a8:c8:4f:f9:4b:78:84:77:4e:50:4d:0c:d6:5e:a8: 77:7d:62:4b:7e:9c:e8:27:50:30:48:d3:12:c3:da:42:b6:43: b2:d6:8e:d5:ac:9e:a1:78:cc:ca:6b:99:f0:4f:79:db:03:11: 2d:ca:05:03:30:f7:82:da:96:33:4b:07:f0:47:05:97:77:72: 8e:c6:1c:dd:fd:98:bd:55:74:c9:b9:0e:b0:fe:78:5e:55:0e: 99:0f:27:d8:48:e3:14:a2:39:40:0f:d5:5d:78:5a:ba:21:62: ce:c6:4f:65:e8:4b:1f:e1:99:93:bb:41:40:62:15:ec:b3:7f: 5a:8f:d2:94 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUHyxm16hKP1GsfwDxtu0DbtX+Fw8wDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoNTJGQTM4QzIyQ0EwOTg3Q0U0OEEzQkQ1MTkxRkZEQTJB RDM5REIzQjAeFw0yNjAxMjUxNDQ3MThaFw0yNjAxMjgxNjEyMThaMDMxMTAvBgNV BAMTKDhCMzY2NjhGN0ExOEM0OTdEOTdCQUM0MEY2QkI4OTcwQzkwMkExMEMwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCYaZUQ9yfg4fPJdjIvtAYMoefY 3T0Bzd3VNhmdz37abD9ASCclHP5mwnkI1hPXRug6RY1r3XtNqpnbZOpdXoYpXale r4/ORnDy3daIxsIdq/x6QYXDVFOK3k6ORvDKZqQYg7heAShPEvPdWmNVMjPfbM/4 jqYo/vRGKWgnT9NE6yf6CXxGzMgMub5isB5STEj04qnbN9Pp9VBfIdoLmcW7dJbk w4o8lv/UHPA9QVrHxnKGxOzV5xnreXx0sTJ6yXG6O+F7R+/jp6hpbBbPRLzLDJsW IAbOuu9I5kYSG6Tsdm1YtKILcb9E3WCKt8u8m4rXi2DLWmyV1D4wZorw0qiJAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUizZmj3oYxJfZe6xA9ruJcMkCoQwwHwYDVR0j BBgwFoAUUvo4wiygmHzkijvVGR/9oq052zswDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby8z MTIyNDI0Ny0zNDdmLTRhNTctYTc5YS1jYjJjMjFjOTE3MGUvMC81MkZBMzhDMjJD QTA5ODdDRTQ4QTNCRDUxOTFGRkRBMkFEMzlEQjNCLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvNTJGQTM4QzIyQ0EwOTg3Q0U0OEEzQkQ1MTkxRkZEQTJBRDM5 REIzQi5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vMzEyMjQyNDctMzQ3Zi00YTU3LWE3 OWEtY2IyYzIxYzkxNzBlLzAvNTJGQTM4QzIyQ0EwOTg3Q0U0OEEzQkQ1MTkxRkZE QTJBRDM5REIzQi5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAIR2G9uvedRGkD37NUFKke5QIr1GRsxTQFkU u1qUI2QVh3xLa8marzwdaExi7y5V3q8zIFt3qtDQl0FvcDJr4Mm3rcU7RHTHBy9l 8lPwnmRPx3Y6JFCFxlM+CpclbcPjqBVPVn0M9Uxr7rkZ3yOfrZePUBCZQMmBeVkD 1FG/ygcgjKjIT/lLeIR3TlBNDNZeqHd9Ykt+nOgnUDBI0xLD2kK2Q7LWjtWsnqF4 zMprmfBPedsDES3KBQMw94LaljNLB/BHBZd3co7GHN39mL1VdMm5DrD+eF5VDpkP J9hI4xSiOUAP1V14WrohYs7GT2XoSx/hmZO7QUBiFeyzf1qP0pQ= -----END CERTIFICATE-----Generated at Mon Jan 26 02:28:23 2026 by rpki-client