This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf repo-rpki.idnic.net/repo/52ac0ca5-5ce7-4e6e-9fff-7213ef1ef364/0/AF52E716DE71EEA9353FEA92FBF72DA2106A594C.mft File: AF52E716DE71EEA9353FEA92FBF72DA2106A594C.mft (raw, json) Hash identifier: HbUh0YmLHqimNzTng8VkmoSjMXlz5itr+OeaNxVEYRs= Subject key identifier: 7A:D5:7D:D9:73:A6:99:56:77:DF:9D:EF:95:3A:DB:9A:AA:32:32:D3 Authority key identifier: AF:52:E7:16:DE:71:EE:A9:35:3F:EA:92:FB:F7:2D:A2:10:6A:59:4C Certificate issuer: /CN=AF52E716DE71EEA9353FEA92FBF72DA2106A594C Certificate serial: 5A527DB1C2DEC3764DB919EAC2BBD7AB48D4CA4D Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/AF52E716DE71EEA9353FEA92FBF72DA2106A594C.cer Subject info access: rsync://repo-rpki.idnic.net/repo/52ac0ca5-5ce7-4e6e-9fff-7213ef1ef364/0/AF52E716DE71EEA9353FEA92FBF72DA2106A594C.mft Manifest number: 0546 Signing time: Sat 24 Jan 2026 02:51:18 +0000 Manifest this update: Sat 24 Jan 2026 02:46:18 +0000 Manifest next update: Tue 27 Jan 2026 07:01:18 +0000 Files and hashes: 1: AF52E716DE71EEA9353FEA92FBF72DA2106A594C.crl (hash: 4Tj9na0WZPUfArQs2hTH8URgS7b2z11OO/0NGO//CgY=) 2: 3130332e35352e33362e302f32322d3234203d3e20313336303532.roa (hash: Co7QnH1utLTo+OaXOBXDzn1d7u1X3FX72sJ2/V1LcRI=) 3: 3130332e3233362e3230312e302f32342d3234203d3e20313336303532.roa (hash: NJ/fZulIyr1e7dyoj8v3tiz901wVBYZYjvKtkVFLK3I=) 4: 323030313a6466373a373430303a3a2f34382d3438203d3e20313336303532.roa (hash: q884sNHCW5gx53DgOjtLJ9QZQAoxktWTxQd/7H0Tgro=) 5: 3130332e32382e35322e302f32332d3234203d3e20313336303532.roa (hash: jH+vIlrKU7PfFq1iZrO7cUj2zjNXd2QDgqmIURJ9hHo=) 6: 3130332e31352e3232362e302f32342d3234203d3e20313336303532.roa (hash: 92iPAvFoV8ZIni26oBvQBCMwojDuPtSnBMptGXhyF7g=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/52ac0ca5-5ce7-4e6e-9fff-7213ef1ef364/0/AF52E716DE71EEA9353FEA92FBF72DA2106A594C.crl rsync://repo-rpki.idnic.net/repo/52ac0ca5-5ce7-4e6e-9fff-7213ef1ef364/0/AF52E716DE71EEA9353FEA92FBF72DA2106A594C.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/AF52E716DE71EEA9353FEA92FBF72DA2106A594C.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 27 Jan 2026 07:01:18 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 5a:52:7d:b1:c2:de:c3:76:4d:b9:19:ea:c2:bb:d7:ab:48:d4:ca:4d Signature Algorithm: sha256WithRSAEncryption Issuer: CN=AF52E716DE71EEA9353FEA92FBF72DA2106A594C Validity Not Before: Jan 24 02:46:18 2026 GMT Not After : Jan 27 07:01:18 2026 GMT Subject: CN=7AD57DD973A6995677DF9DEF953ADB9AAA3232D3 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c8:30:e8:d6:73:9b:2e:0d:6b:4f:02:26:d0:ad: 18:f2:f9:4a:65:07:a2:9d:5f:39:d4:00:ac:05:bd: 28:82:ae:d9:a3:d6:f8:eb:f1:48:34:ae:8c:6c:2c: af:21:68:72:22:87:b0:fa:ae:f3:c0:fd:6e:93:44: c9:2c:ca:ff:1f:b4:7d:c3:e6:ac:07:90:ad:52:ee: 66:45:ea:e4:ee:cc:1f:82:2a:db:af:55:48:1e:b0: 2d:eb:42:f3:38:7d:39:94:04:7c:c6:dc:9c:a9:f0: 30:18:5e:40:88:5c:6f:d2:31:4a:3d:35:66:50:4f: 6b:d8:2b:fd:98:e0:b8:79:37:57:30:22:dd:fa:b0: fa:58:2f:a2:6d:da:c9:b4:18:71:4d:85:16:06:05: 63:8a:ec:ae:90:f6:82:ca:19:33:13:d7:14:b2:f0: 6b:41:8f:20:54:0e:71:1c:4e:46:3a:e0:5f:86:fc: 7d:43:f1:a3:0d:3f:36:01:24:d6:c4:ea:92:c1:00: 57:fc:8c:d1:a0:92:a8:4c:cb:5f:22:a7:ab:be:21: c9:9d:4c:28:23:6b:2e:8d:fa:21:e6:3f:10:e2:20: 7e:b9:fc:b8:91:f1:5e:7b:55:1a:f3:0e:f2:30:2b: 5e:91:c1:72:fe:ae:2f:1a:a9:63:e3:86:04:5f:47: a8:ad Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 7A:D5:7D:D9:73:A6:99:56:77:DF:9D:EF:95:3A:DB:9A:AA:32:32:D3 X509v3 Authority Key Identifier: keyid:AF:52:E7:16:DE:71:EE:A9:35:3F:EA:92:FB:F7:2D:A2:10:6A:59:4C X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/52ac0ca5-5ce7-4e6e-9fff-7213ef1ef364/0/AF52E716DE71EEA9353FEA92FBF72DA2106A594C.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/AF52E716DE71EEA9353FEA92FBF72DA2106A594C.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/52ac0ca5-5ce7-4e6e-9fff-7213ef1ef364/0/AF52E716DE71EEA9353FEA92FBF72DA2106A594C.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 9f:ca:c9:c8:8f:f4:6a:59:e2:6b:8f:17:3c:79:95:d3:cf:d7: 81:a5:91:09:81:e9:d9:0c:0a:6e:1b:fe:76:02:04:fb:8a:ec: 13:8d:01:88:ee:57:c1:4a:02:5e:36:2a:e6:ba:a6:69:04:01: 0d:20:ec:eb:1f:68:f0:da:1b:04:8f:03:6c:f2:11:70:4a:f4: 05:a0:e3:6c:db:24:f5:d6:04:2d:ed:43:af:52:d5:67:47:cf: 5b:71:1a:97:69:b7:6d:3f:f2:8d:17:85:cd:ec:f4:dc:bd:8c: 21:e2:5e:bd:2c:33:e5:88:1a:c7:35:6d:3b:f5:fe:e3:e6:96: d8:56:af:06:a1:e9:72:22:21:1c:cc:33:ab:5c:15:73:5e:e4: d5:eb:c8:fd:62:59:83:37:39:2c:33:33:b3:00:78:36:33:43: e8:7b:6d:29:60:fc:de:ea:fd:fe:4f:54:b1:2d:e2:e2:db:a6: 8b:c9:8b:74:bb:f0:a4:e5:79:9d:3d:b8:2e:ef:73:e9:a3:32: 63:5b:26:47:e6:c7:7d:54:a3:c4:3d:7b:d6:c2:e2:29:0d:49: ee:87:6a:fe:4d:62:6d:b3:e3:ad:43:d6:bb:ec:ea:c0:83:f8: 4b:4c:b3:52:c0:86:68:9b:f4:5c:37:7f:e0:47:cd:b5:6e:97: eb:51:15:94 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUWlJ9scLew3ZNuRnqwrvXq0jUyk0wDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoQUY1MkU3MTZERTcxRUVBOTM1M0ZFQTkyRkJGNzJEQTIx MDZBNTk0QzAeFw0yNjAxMjQwMjQ2MThaFw0yNjAxMjcwNzAxMThaMDMxMTAvBgNV BAMTKDdBRDU3REQ5NzNBNjk5NTY3N0RGOURFRjk1M0FEQjlBQUEzMjMyRDMwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDIMOjWc5suDWtPAibQrRjy+Upl B6KdXznUAKwFvSiCrtmj1vjr8Ug0roxsLK8haHIih7D6rvPA/W6TRMksyv8ftH3D 5qwHkK1S7mZF6uTuzB+CKtuvVUgesC3rQvM4fTmUBHzG3Jyp8DAYXkCIXG/SMUo9 NWZQT2vYK/2Y4Lh5N1cwIt36sPpYL6Jt2sm0GHFNhRYGBWOK7K6Q9oLKGTMT1xSy 8GtBjyBUDnEcTkY64F+G/H1D8aMNPzYBJNbE6pLBAFf8jNGgkqhMy18ip6u+Icmd TCgjay6N+iHmPxDiIH65/LiR8V57VRrzDvIwK16RwXL+ri8aqWPjhgRfR6itAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUetV92XOmmVZ3353vlTrbmqoyMtMwHwYDVR0j BBgwFoAUr1LnFt5x7qk1P+qS+/ctohBqWUwwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby81 MmFjMGNhNS01Y2U3LTRlNmUtOWZmZi03MjEzZWYxZWYzNjQvMC9BRjUyRTcxNkRF NzFFRUE5MzUzRkVBOTJGQkY3MkRBMjEwNkE1OTRDLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvQUY1MkU3MTZERTcxRUVBOTM1M0ZFQTkyRkJGNzJEQTIxMDZB NTk0Qy5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vNTJhYzBjYTUtNWNlNy00ZTZlLTlm ZmYtNzIxM2VmMWVmMzY0LzAvQUY1MkU3MTZERTcxRUVBOTM1M0ZFQTkyRkJGNzJE QTIxMDZBNTk0Qy5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAJ/KyciP9GpZ4muPFzx5ldPP14GlkQmB6dkM Cm4b/nYCBPuK7BONAYjuV8FKAl42Kua6pmkEAQ0g7OsfaPDaGwSPA2zyEXBK9AWg 42zbJPXWBC3tQ69S1WdHz1txGpdpt20/8o0Xhc3s9Ny9jCHiXr0sM+WIGsc1bTv1 /uPmlthWrwah6XIiIRzMM6tcFXNe5NXryP1iWYM3OSwzM7MAeDYzQ+h7bSlg/N7q /f5PVLEt4uLbpovJi3S78KTleZ09uC7vc+mjMmNbJkfmx31Uo8Q9e9bC4ikNSe6H av5NYm2z461D1rvs6sCD+EtMs1LAhmib9Fw3f+BHzbVul+tRFZQ= -----END CERTIFICATE-----Generated at Sun Jan 25 20:39:04 2026 by rpki-client