This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf repo-rpki.idnic.net/repo/47df2ad0-6e99-44a7-a068-500656ffb00f/0/532A4A6EA252E9D1CFF57481A5A86B35CE0DD21F.mft File: 532A4A6EA252E9D1CFF57481A5A86B35CE0DD21F.mft (raw, json) Hash identifier: sBlascdInhxSClQmEudSCuZr7dZgkvQraHEfyDco6og= Subject key identifier: 26:12:05:F7:1A:CF:A8:B4:76:BA:35:B7:6D:E7:F9:45:31:F6:41:81 Authority key identifier: 53:2A:4A:6E:A2:52:E9:D1:CF:F5:74:81:A5:A8:6B:35:CE:0D:D2:1F Certificate issuer: /CN=532A4A6EA252E9D1CFF57481A5A86B35CE0DD21F Certificate serial: 7E955BDBF82E8081F04708F5B7871078AFEBF623 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/532A4A6EA252E9D1CFF57481A5A86B35CE0DD21F.cer Subject info access: rsync://repo-rpki.idnic.net/repo/47df2ad0-6e99-44a7-a068-500656ffb00f/0/532A4A6EA252E9D1CFF57481A5A86B35CE0DD21F.mft Manifest number: 01D1 Signing time: Fri 05 Dec 2025 16:31:12 +0000 Manifest this update: Fri 05 Dec 2025 16:26:12 +0000 Manifest next update: Mon 08 Dec 2025 16:40:12 +0000 Files and hashes: 1: 3130332e3132392e32362e302f32332d3234203d3e20313335343738.roa (hash: Sbm29pNNDtrirUa5TWrnPomraWgx9d4wS4uCAUKgspQ=) 2: 532A4A6EA252E9D1CFF57481A5A86B35CE0DD21F.crl (hash: UbeTNxb1LYAftsuYyLMhZ5XNH363lNBZfw+X6n/kWjs=) 3: 3130332e3132392e32342e302f32332d3234203d3e20313335343738.roa (hash: acHkQDc68Jj27op6u+60Ox/pAf3ZpE5ZeAF+XMaxR0M=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/47df2ad0-6e99-44a7-a068-500656ffb00f/0/532A4A6EA252E9D1CFF57481A5A86B35CE0DD21F.crl rsync://repo-rpki.idnic.net/repo/47df2ad0-6e99-44a7-a068-500656ffb00f/0/532A4A6EA252E9D1CFF57481A5A86B35CE0DD21F.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/532A4A6EA252E9D1CFF57481A5A86B35CE0DD21F.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 08 Dec 2025 16:40:12 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 7e:95:5b:db:f8:2e:80:81:f0:47:08:f5:b7:87:10:78:af:eb:f6:23 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=532A4A6EA252E9D1CFF57481A5A86B35CE0DD21F Validity Not Before: Dec 5 16:26:12 2025 GMT Not After : Dec 8 16:40:12 2025 GMT Subject: CN=261205F71ACFA8B476BA35B76DE7F94531F64181 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cd:c2:59:b8:b7:04:2b:cc:4c:3c:0d:b9:e7:61: f5:24:37:1e:b8:c2:7a:be:7c:c2:4d:0b:4b:e4:95: 17:4c:3b:f5:c6:06:80:42:48:12:8b:8c:6a:52:b2: 74:bd:e4:e7:76:e2:7d:9f:aa:ed:e0:eb:56:24:39: ae:36:0a:6a:c6:a3:bb:06:18:9c:bc:64:15:09:4b: d9:7b:e5:38:d9:65:c8:35:ff:fc:de:11:f9:b5:d6: b3:64:5f:be:b7:ea:ea:3b:8f:6d:39:eb:6f:26:be: b9:84:6f:b3:c3:da:2b:d8:97:77:c8:70:1b:c5:7f: a7:b8:d5:89:52:00:a4:bb:02:ae:46:55:34:dc:83: 37:3d:61:b4:0b:b5:24:80:cc:31:07:a5:2e:ec:7a: 61:62:bc:86:3e:4d:3b:d5:7b:b1:cf:92:9e:f2:95: 1b:cf:f8:4a:e9:ee:ec:01:8e:43:86:5a:4d:67:40: 7b:dd:bd:37:31:e7:30:ca:ae:c0:53:58:05:16:e7: 7d:5a:d0:a7:49:9c:8b:1f:c6:2a:d5:fb:ff:7d:26: f0:b7:55:a6:65:1b:f0:2e:51:6c:32:70:7a:db:9c: e8:20:85:a5:01:85:5c:ce:e7:42:1c:f7:e3:44:0f: 72:53:b6:3a:2f:65:80:fc:68:dc:76:e6:da:2f:ee: 2c:55 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 26:12:05:F7:1A:CF:A8:B4:76:BA:35:B7:6D:E7:F9:45:31:F6:41:81 X509v3 Authority Key Identifier: keyid:53:2A:4A:6E:A2:52:E9:D1:CF:F5:74:81:A5:A8:6B:35:CE:0D:D2:1F X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/47df2ad0-6e99-44a7-a068-500656ffb00f/0/532A4A6EA252E9D1CFF57481A5A86B35CE0DD21F.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/532A4A6EA252E9D1CFF57481A5A86B35CE0DD21F.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/47df2ad0-6e99-44a7-a068-500656ffb00f/0/532A4A6EA252E9D1CFF57481A5A86B35CE0DD21F.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 82:60:56:eb:65:77:60:bf:44:2f:5a:0b:55:df:1f:e6:b2:6e: 79:14:b2:7c:6b:73:52:7d:66:ce:6a:0d:51:d0:81:1c:10:ac: 63:d9:5e:de:e8:97:b6:2c:69:d4:94:9e:14:42:0f:e2:3e:38: 7a:70:66:3c:9f:1b:6c:4d:b6:69:4e:6b:ee:f1:d5:da:bf:b3: e7:2c:21:be:1b:9a:cc:3d:4b:6e:a2:32:14:0d:20:61:5a:27: 6c:76:fd:f7:5f:be:13:ce:7e:08:95:12:b8:05:b1:e3:a7:e9: ac:53:a3:ab:7d:ad:44:2e:a8:cb:8a:06:d6:32:db:d6:9a:61: 79:c9:b7:47:94:ff:04:6b:6e:12:78:f6:d0:77:23:5f:34:59: 27:9d:0c:8a:dc:16:ca:26:55:f6:85:92:47:3a:39:df:d3:a8: a2:14:d4:7e:61:b7:27:09:70:57:d2:e7:a3:fa:c6:b4:e8:29: 80:5b:cc:04:85:5e:f8:3f:73:b6:fd:b0:e3:d6:9c:cd:20:ad: 5e:55:19:d0:fe:d3:f3:bd:b8:4f:20:da:ca:59:01:0a:c3:15: 1d:26:51:ff:96:23:34:d9:ca:2f:de:f5:b3:01:02:96:d0:43: a2:08:9f:5b:84:3c:41:45:02:9e:fb:36:ca:7c:48:80:6c:fb: bf:ca:85:12 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUfpVb2/gugIHwRwj1t4cQeK/r9iMwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoNTMyQTRBNkVBMjUyRTlEMUNGRjU3NDgxQTVBODZCMzVD RTBERDIxRjAeFw0yNTEyMDUxNjI2MTJaFw0yNTEyMDgxNjQwMTJaMDMxMTAvBgNV BAMTKDI2MTIwNUY3MUFDRkE4QjQ3NkJBMzVCNzZERTdGOTQ1MzFGNjQxODEwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDNwlm4twQrzEw8DbnnYfUkNx64 wnq+fMJNC0vklRdMO/XGBoBCSBKLjGpSsnS95Od24n2fqu3g61YkOa42CmrGo7sG GJy8ZBUJS9l75TjZZcg1//zeEfm11rNkX7636uo7j205628mvrmEb7PD2ivYl3fI cBvFf6e41YlSAKS7Aq5GVTTcgzc9YbQLtSSAzDEHpS7semFivIY+TTvVe7HPkp7y lRvP+Erp7uwBjkOGWk1nQHvdvTcx5zDKrsBTWAUW531a0KdJnIsfxirV+/99JvC3 VaZlG/AuUWwycHrbnOgghaUBhVzO50Ic9+NED3JTtjovZYD8aNx25tov7ixVAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUJhIF9xrPqLR2ujW3bef5RTH2QYEwHwYDVR0j BBgwFoAUUypKbqJS6dHP9XSBpahrNc4N0h8wDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby80 N2RmMmFkMC02ZTk5LTQ0YTctYTA2OC01MDA2NTZmZmIwMGYvMC81MzJBNEE2RUEy NTJFOUQxQ0ZGNTc0ODFBNUE4NkIzNUNFMEREMjFGLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvNTMyQTRBNkVBMjUyRTlEMUNGRjU3NDgxQTVBODZCMzVDRTBE RDIxRi5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vNDdkZjJhZDAtNmU5OS00NGE3LWEw NjgtNTAwNjU2ZmZiMDBmLzAvNTMyQTRBNkVBMjUyRTlEMUNGRjU3NDgxQTVBODZC MzVDRTBERDIxRi5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAIJgVutld2C/RC9aC1XfH+aybnkUsnxrc1J9 Zs5qDVHQgRwQrGPZXt7ol7YsadSUnhRCD+I+OHpwZjyfG2xNtmlOa+7x1dq/s+cs Ib4bmsw9S26iMhQNIGFaJ2x2/fdfvhPOfgiVErgFseOn6axTo6t9rUQuqMuKBtYy 29aaYXnJt0eU/wRrbhJ49tB3I180WSedDIrcFsomVfaFkkc6Od/TqKIU1H5htycJ cFfS56P6xrToKYBbzASFXvg/c7b9sOPWnM0grV5VGdD+0/O9uE8g2spZAQrDFR0m Uf+WIzTZyi/e9bMBApbQQ6IIn1uEPEFFAp77Nsp8SIBs+7/KhRI= -----END CERTIFICATE-----Generated at Sat Dec 6 23:16:17 2025 by rpki-client