This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf repo-rpki.idnic.net/repo/52ac0ca5-5ce7-4e6e-9fff-7213ef1ef364/0/AF52E716DE71EEA9353FEA92FBF72DA2106A594C.mft File: AF52E716DE71EEA9353FEA92FBF72DA2106A594C.mft (raw, json) Hash identifier: 6h9kwseta/rWntQfvK4eCeNHC/qbJ56OqQk0DXY9fYk= Subject key identifier: C8:F2:0C:D4:C9:44:45:6F:73:BA:E8:32:31:8D:B9:25:D7:5F:E1:D2 Authority key identifier: AF:52:E7:16:DE:71:EE:A9:35:3F:EA:92:FB:F7:2D:A2:10:6A:59:4C Certificate issuer: /CN=AF52E716DE71EEA9353FEA92FBF72DA2106A594C Certificate serial: 0B1B758A0F3E431EFCC4A326D5B6E14BD0A77EB1 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/AF52E716DE71EEA9353FEA92FBF72DA2106A594C.cer Subject info access: rsync://repo-rpki.idnic.net/repo/52ac0ca5-5ce7-4e6e-9fff-7213ef1ef364/0/AF52E716DE71EEA9353FEA92FBF72DA2106A594C.mft Manifest number: 0530 Signing time: Sat 06 Dec 2025 01:51:10 +0000 Manifest this update: Sat 06 Dec 2025 01:46:10 +0000 Manifest next update: Tue 09 Dec 2025 07:44:10 +0000 Files and hashes: 1: 323030313a6466373a373430303a3a2f34382d3438203d3e20313336303532.roa (hash: q884sNHCW5gx53DgOjtLJ9QZQAoxktWTxQd/7H0Tgro=) 2: 3130332e31352e3232362e302f32342d3234203d3e20313336303532.roa (hash: 92iPAvFoV8ZIni26oBvQBCMwojDuPtSnBMptGXhyF7g=) 3: AF52E716DE71EEA9353FEA92FBF72DA2106A594C.crl (hash: EIF58q5uDCDEkq4+9n+1CZomP9Pi8T0Ar3cDTX0U4rQ=) 4: 3130332e32382e35322e302f32332d3234203d3e20313336303532.roa (hash: jH+vIlrKU7PfFq1iZrO7cUj2zjNXd2QDgqmIURJ9hHo=) 5: 3130332e3233362e3230312e302f32342d3234203d3e20313336303532.roa (hash: NJ/fZulIyr1e7dyoj8v3tiz901wVBYZYjvKtkVFLK3I=) 6: 3130332e35352e33362e302f32322d3234203d3e20313336303532.roa (hash: Co7QnH1utLTo+OaXOBXDzn1d7u1X3FX72sJ2/V1LcRI=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/52ac0ca5-5ce7-4e6e-9fff-7213ef1ef364/0/AF52E716DE71EEA9353FEA92FBF72DA2106A594C.crl rsync://repo-rpki.idnic.net/repo/52ac0ca5-5ce7-4e6e-9fff-7213ef1ef364/0/AF52E716DE71EEA9353FEA92FBF72DA2106A594C.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/AF52E716DE71EEA9353FEA92FBF72DA2106A594C.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 09 Dec 2025 07:44:10 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 0b:1b:75:8a:0f:3e:43:1e:fc:c4:a3:26:d5:b6:e1:4b:d0:a7:7e:b1 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=AF52E716DE71EEA9353FEA92FBF72DA2106A594C Validity Not Before: Dec 6 01:46:10 2025 GMT Not After : Dec 9 07:44:10 2025 GMT Subject: CN=C8F20CD4C944456F73BAE832318DB925D75FE1D2 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b2:bb:3a:9d:a8:8b:61:74:02:49:3c:5a:27:df: 2d:97:55:81:6d:c1:44:7c:82:98:1a:a0:f3:37:f5: 93:43:2b:fc:71:4e:7c:ed:a6:fe:37:d8:a7:82:4f: 77:f9:b7:a9:61:cb:70:f4:03:81:76:e8:d1:b2:f9: 1d:1e:0e:38:0c:6b:bb:d0:df:0b:29:f3:16:0e:8e: 31:7b:43:69:9b:bf:c3:31:ca:e0:57:da:13:08:8a: e7:45:82:53:0a:ad:35:f5:93:e5:8e:4a:24:f7:04: d4:fc:a1:f3:c7:db:ed:7b:dd:9d:77:17:a6:99:26: 6e:a9:e2:f3:59:6c:1f:14:8f:14:ab:c7:1e:e8:82: 2f:e4:83:f4:37:65:a3:b5:97:62:df:79:be:e2:2c: 9b:0f:4a:a1:06:3b:39:3b:a2:9f:01:7e:ca:b2:12: cb:06:26:74:3f:6d:00:f8:73:0e:9c:a0:8d:95:72: f3:fd:2f:a8:d1:23:48:d7:87:08:0d:b2:88:71:a1: 79:ba:ba:df:41:c3:85:6c:41:56:1f:38:7b:21:4f: 55:f4:34:87:12:67:4c:22:b6:66:50:a5:7d:bd:b6: f8:c0:9a:d1:5d:8e:f8:45:62:09:be:d6:b8:f4:61: 8a:2d:2e:9e:a6:eb:ec:a1:55:04:e5:7e:0d:14:da: c4:fb Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: C8:F2:0C:D4:C9:44:45:6F:73:BA:E8:32:31:8D:B9:25:D7:5F:E1:D2 X509v3 Authority Key Identifier: keyid:AF:52:E7:16:DE:71:EE:A9:35:3F:EA:92:FB:F7:2D:A2:10:6A:59:4C X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/52ac0ca5-5ce7-4e6e-9fff-7213ef1ef364/0/AF52E716DE71EEA9353FEA92FBF72DA2106A594C.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/AF52E716DE71EEA9353FEA92FBF72DA2106A594C.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/52ac0ca5-5ce7-4e6e-9fff-7213ef1ef364/0/AF52E716DE71EEA9353FEA92FBF72DA2106A594C.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 6b:f0:db:ed:c0:a6:6f:48:ce:6b:fb:0f:67:34:a9:2d:4d:9d: 83:e4:9c:e4:a2:7d:7f:b5:61:91:d4:f5:05:29:32:0f:5f:2a: a0:5b:4a:05:1f:a4:ac:d5:e9:e2:91:24:f3:88:f2:32:3c:5a: 11:e7:e2:cd:92:fd:71:78:7f:cb:f6:63:a6:0b:b4:da:5a:20: 03:68:ef:ca:0d:aa:6c:93:9d:21:89:01:53:6d:57:e6:ab:18: cf:37:35:3a:54:70:3c:73:e3:cc:40:c7:d6:f0:e5:5b:6d:03: aa:98:ca:2f:68:9c:a6:70:56:c5:0b:73:c5:a7:05:2c:96:c5: 1a:88:6d:8e:c0:32:b6:52:4d:5a:00:f2:f6:85:02:ae:bd:8e: ea:30:68:03:a5:7c:14:38:39:02:8a:44:ce:a1:df:43:55:37: 43:22:8e:3b:d0:05:62:99:c6:a2:50:86:59:21:f9:26:2f:f9: 77:47:bb:f6:cb:06:47:43:31:22:c0:ab:fd:4a:cd:97:4d:b3: a2:c6:dd:7e:30:2f:d0:94:b6:1c:a4:14:ae:9f:ae:3a:cb:bd: 9d:6c:a2:13:58:a8:d5:10:dd:75:26:06:55:46:e8:d6:04:c4: 60:f1:0c:09:be:dc:40:9b:64:c0:84:7b:2e:4b:fe:44:e4:07: ff:f5:46:de -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUCxt1ig8+Qx78xKMm1bbhS9CnfrEwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoQUY1MkU3MTZERTcxRUVBOTM1M0ZFQTkyRkJGNzJEQTIx MDZBNTk0QzAeFw0yNTEyMDYwMTQ2MTBaFw0yNTEyMDkwNzQ0MTBaMDMxMTAvBgNV BAMTKEM4RjIwQ0Q0Qzk0NDQ1NkY3M0JBRTgzMjMxOERCOTI1RDc1RkUxRDIwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCyuzqdqIthdAJJPFon3y2XVYFt wUR8gpgaoPM39ZNDK/xxTnztpv432KeCT3f5t6lhy3D0A4F26NGy+R0eDjgMa7vQ 3wsp8xYOjjF7Q2mbv8MxyuBX2hMIiudFglMKrTX1k+WOSiT3BNT8ofPH2+173Z13 F6aZJm6p4vNZbB8UjxSrxx7ogi/kg/Q3ZaO1l2Lfeb7iLJsPSqEGOzk7op8Bfsqy EssGJnQ/bQD4cw6coI2VcvP9L6jRI0jXhwgNsohxoXm6ut9Bw4VsQVYfOHshT1X0 NIcSZ0witmZQpX29tvjAmtFdjvhFYgm+1rj0YYotLp6m6+yhVQTlfg0U2sT7AgMB AAGjggI8MIICODAdBgNVHQ4EFgQUyPIM1MlERW9zuugyMY25Jddf4dIwHwYDVR0j BBgwFoAUr1LnFt5x7qk1P+qS+/ctohBqWUwwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby81 MmFjMGNhNS01Y2U3LTRlNmUtOWZmZi03MjEzZWYxZWYzNjQvMC9BRjUyRTcxNkRF NzFFRUE5MzUzRkVBOTJGQkY3MkRBMjEwNkE1OTRDLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvQUY1MkU3MTZERTcxRUVBOTM1M0ZFQTkyRkJGNzJEQTIxMDZB NTk0Qy5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vNTJhYzBjYTUtNWNlNy00ZTZlLTlm ZmYtNzIxM2VmMWVmMzY0LzAvQUY1MkU3MTZERTcxRUVBOTM1M0ZFQTkyRkJGNzJE QTIxMDZBNTk0Qy5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAGvw2+3Apm9Izmv7D2c0qS1NnYPknOSifX+1 YZHU9QUpMg9fKqBbSgUfpKzV6eKRJPOI8jI8WhHn4s2S/XF4f8v2Y6YLtNpaIANo 78oNqmyTnSGJAVNtV+arGM83NTpUcDxz48xAx9bw5VttA6qYyi9onKZwVsULc8Wn BSyWxRqIbY7AMrZSTVoA8vaFAq69juowaAOlfBQ4OQKKRM6h30NVN0MijjvQBWKZ xqJQhlkh+SYv+XdHu/bLBkdDMSLAq/1KzZdNs6LG3X4wL9CUthykFK6frjrLvZ1s ohNYqNUQ3XUmBlVG6NYExGDxDAm+3ECbZMCEey5L/kTkB//1Rt4= -----END CERTIFICATE-----Generated at Sun Dec 7 07:44:43 2025 by rpki-client