This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf repo-rpki.idnic.net/repo/837694b7-3256-4666-a3fe-6e82e783b1e1/0/3C52D4A86ABDDD0D6DA631737F78DC205EEC239B.mft File: 3C52D4A86ABDDD0D6DA631737F78DC205EEC239B.mft (raw, json) Hash identifier: XVyL/WOg+k9lX2mGdd64ShnpGgjjFZhwpQ/COaUaZ7c= Subject key identifier: B6:2C:E6:F1:95:11:64:B8:F4:3D:5A:60:4E:98:05:22:D7:56:D2:A7 Authority key identifier: 3C:52:D4:A8:6A:BD:DD:0D:6D:A6:31:73:7F:78:DC:20:5E:EC:23:9B Certificate issuer: /CN=3C52D4A86ABDDD0D6DA631737F78DC205EEC239B Certificate serial: 56D2746798168176EF1C02FAFB3684DE7BD22D5C Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/3C52D4A86ABDDD0D6DA631737F78DC205EEC239B.cer Subject info access: rsync://repo-rpki.idnic.net/repo/837694b7-3256-4666-a3fe-6e82e783b1e1/0/3C52D4A86ABDDD0D6DA631737F78DC205EEC239B.mft Manifest number: 01DD Signing time: Sat 06 Dec 2025 12:40:43 +0000 Manifest this update: Sat 06 Dec 2025 12:35:43 +0000 Manifest next update: Tue 09 Dec 2025 21:57:43 +0000 Files and hashes: 1: 3C52D4A86ABDDD0D6DA631737F78DC205EEC239B.crl (hash: kolA/wtxwrR1xCR5rl75PhzZWrDKpZorlem8dps5W94=) 2: 3130332e35342e3137302e302f32342d3234203d3e20313336303532.roa (hash: CpTR92roiSPDW46ulFPgC4ZnSRc5NkRxg7oSv8ZLm9M=) 3: 3130332e35342e3137312e302f32342d3234203d3e20313431303731.roa (hash: A15JvoKxrrNNly8QbNKG17HNlGfUgFoFqcNw47K8k1o=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/837694b7-3256-4666-a3fe-6e82e783b1e1/0/3C52D4A86ABDDD0D6DA631737F78DC205EEC239B.crl rsync://repo-rpki.idnic.net/repo/837694b7-3256-4666-a3fe-6e82e783b1e1/0/3C52D4A86ABDDD0D6DA631737F78DC205EEC239B.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/3C52D4A86ABDDD0D6DA631737F78DC205EEC239B.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 09 Dec 2025 15:57:52 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 56:d2:74:67:98:16:81:76:ef:1c:02:fa:fb:36:84:de:7b:d2:2d:5c Signature Algorithm: sha256WithRSAEncryption Issuer: CN=3C52D4A86ABDDD0D6DA631737F78DC205EEC239B Validity Not Before: Dec 6 12:35:43 2025 GMT Not After : Dec 9 21:57:43 2025 GMT Subject: CN=B62CE6F1951164B8F43D5A604E980522D756D2A7 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a2:d9:52:98:f1:c6:82:3a:28:ec:3b:af:85:4a: e5:af:8c:80:6b:4d:67:af:d2:52:0f:c7:77:c9:2f: 32:57:2b:31:51:4a:d9:f3:c6:43:8b:79:fd:a6:43: 9e:c2:60:78:c2:f3:44:a3:b6:d4:03:3f:75:47:77: 5a:be:84:db:a7:7e:b3:26:cd:b6:55:5c:4d:90:05: c0:ad:c2:26:89:3a:f7:3e:de:ff:aa:f4:fb:57:58: fc:5c:65:38:b1:ef:c0:e3:eb:d1:8a:78:6b:53:a1: 5a:aa:25:1f:30:8b:82:ba:fb:f2:97:a7:28:cc:6c: 91:92:b9:a0:06:33:a2:6d:7f:65:f9:ea:28:eb:8f: f1:5a:46:9d:b6:4a:59:37:44:f8:03:89:bc:5c:da: dc:e6:8b:01:27:5f:da:5d:8b:51:59:12:87:73:08: ed:15:19:fb:79:1c:66:e5:b6:c3:76:b3:20:21:91: 21:ef:e1:5c:84:ea:77:20:b4:fe:1c:04:d0:b2:b2: 86:8a:a2:4c:00:6f:ef:f1:5d:f7:0f:20:2a:97:da: 3f:4f:8f:af:ec:77:ee:90:87:5e:48:63:85:60:85: 4d:47:7d:ac:ff:ba:ca:73:a4:d5:3c:fc:28:69:33: 11:65:51:73:f9:01:0a:7e:37:82:5a:db:43:ca:30: 6d:9b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: B6:2C:E6:F1:95:11:64:B8:F4:3D:5A:60:4E:98:05:22:D7:56:D2:A7 X509v3 Authority Key Identifier: keyid:3C:52:D4:A8:6A:BD:DD:0D:6D:A6:31:73:7F:78:DC:20:5E:EC:23:9B X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/837694b7-3256-4666-a3fe-6e82e783b1e1/0/3C52D4A86ABDDD0D6DA631737F78DC205EEC239B.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/3C52D4A86ABDDD0D6DA631737F78DC205EEC239B.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/837694b7-3256-4666-a3fe-6e82e783b1e1/0/3C52D4A86ABDDD0D6DA631737F78DC205EEC239B.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 05:73:8e:24:2c:55:f0:3b:fe:60:b6:c5:b8:7b:3e:5c:28:4f: 91:74:ca:94:86:65:0e:28:23:dc:31:e5:fa:c5:6a:55:af:29: f7:89:5f:82:b2:db:e8:e8:11:8f:9a:51:5d:cc:bf:c0:12:be: 2d:ae:0c:7a:cc:ce:cd:2a:24:a6:0f:de:98:df:48:2f:19:b1: 5d:94:d4:bb:c5:94:32:ff:94:81:5e:db:8f:19:7b:a7:4b:9f: 96:1c:21:dd:eb:04:e4:c6:14:9b:a3:e3:7f:18:0a:f8:6c:7b: bb:54:3f:ff:59:34:26:f2:6d:15:9b:6b:ed:73:36:33:ad:b9: ba:13:20:b9:b1:85:c0:3a:af:71:13:f8:8d:51:26:c9:50:e4: e3:3c:f0:d3:b6:01:5f:d0:06:71:c0:fb:a9:bc:40:44:f4:32: 66:61:bc:99:a6:03:c6:4b:79:96:c0:a9:05:97:15:4f:61:84: 9f:85:f8:d7:e4:58:53:30:28:dc:9b:b3:5f:5f:00:52:35:4b: 30:d7:99:f6:ce:7b:23:06:94:ee:12:98:f2:92:e3:e7:d8:0f: 8c:b5:1a:f4:0d:27:af:90:87:4a:ae:2a:3a:c7:01:57:1e:ef: 41:23:bc:ca:35:75:c9:8e:7f:83:85:5b:13:54:54:87:62:a0: b9:94:ff:81 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUVtJ0Z5gWgXbvHAL6+zaE3nvSLVwwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoM0M1MkQ0QTg2QUJEREQwRDZEQTYzMTczN0Y3OERDMjA1 RUVDMjM5QjAeFw0yNTEyMDYxMjM1NDNaFw0yNTEyMDkyMTU3NDNaMDMxMTAvBgNV BAMTKEI2MkNFNkYxOTUxMTY0QjhGNDNENUE2MDRFOTgwNTIyRDc1NkQyQTcwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCi2VKY8caCOijsO6+FSuWvjIBr TWev0lIPx3fJLzJXKzFRStnzxkOLef2mQ57CYHjC80SjttQDP3VHd1q+hNunfrMm zbZVXE2QBcCtwiaJOvc+3v+q9PtXWPxcZTix78Dj69GKeGtToVqqJR8wi4K6+/KX pyjMbJGSuaAGM6Jtf2X56ijrj/FaRp22Slk3RPgDibxc2tzmiwEnX9pdi1FZEodz CO0VGft5HGbltsN2syAhkSHv4VyE6ncgtP4cBNCysoaKokwAb+/xXfcPICqX2j9P j6/sd+6Qh15IY4VghU1Hfaz/uspzpNU8/ChpMxFlUXP5AQp+N4Ja20PKMG2bAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUtizm8ZURZLj0PVpgTpgFItdW0qcwHwYDVR0j BBgwFoAUPFLUqGq93Q1tpjFzf3jcIF7sI5swDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby84 Mzc2OTRiNy0zMjU2LTQ2NjYtYTNmZS02ZTgyZTc4M2IxZTEvMC8zQzUyRDRBODZB QkRERDBENkRBNjMxNzM3Rjc4REMyMDVFRUMyMzlCLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvM0M1MkQ0QTg2QUJEREQwRDZEQTYzMTczN0Y3OERDMjA1RUVD MjM5Qi5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vODM3Njk0YjctMzI1Ni00NjY2LWEz ZmUtNmU4MmU3ODNiMWUxLzAvM0M1MkQ0QTg2QUJEREQwRDZEQTYzMTczN0Y3OERD MjA1RUVDMjM5Qi5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAAVzjiQsVfA7/mC2xbh7PlwoT5F0ypSGZQ4o I9wx5frFalWvKfeJX4Ky2+joEY+aUV3Mv8ASvi2uDHrMzs0qJKYP3pjfSC8ZsV2U 1LvFlDL/lIFe248Ze6dLn5YcId3rBOTGFJuj438YCvhse7tUP/9ZNCbybRWba+1z NjOtuboTILmxhcA6r3ET+I1RJslQ5OM88NO2AV/QBnHA+6m8QET0MmZhvJmmA8ZL eZbAqQWXFU9hhJ+F+NfkWFMwKNybs19fAFI1SzDXmfbOeyMGlO4SmPKS4+fYD4y1 GvQNJ6+Qh0quKjrHAVce70EjvMo1dcmOf4OFWxNUVIdioLmU/4E= -----END CERTIFICATE-----Generated at Sat Dec 6 18:35:35 2025 by rpki-client