This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf repo-rpki.idnic.net/repo/a0fe163c-14d5-4e31-ac20-c04e3e44c34f/0/52DC1412C6708ADA13DE89F150FA8C5BEF205DCB.mft File: 52DC1412C6708ADA13DE89F150FA8C5BEF205DCB.mft (raw, json) Hash identifier: f5uRTUxdT/a+eG3RDSEN2mtKkPcQF1Luf9FJtqKd2tY= Subject key identifier: 02:57:6B:7F:62:5C:C8:64:3D:E4:14:95:B9:7B:60:68:A8:66:C5:B5 Authority key identifier: 52:DC:14:12:C6:70:8A:DA:13:DE:89:F1:50:FA:8C:5B:EF:20:5D:CB Certificate issuer: /CN=52DC1412C6708ADA13DE89F150FA8C5BEF205DCB Certificate serial: 74392C7F0782B60AA5A4FCDD3F0C2B909B95947E Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/52DC1412C6708ADA13DE89F150FA8C5BEF205DCB.cer Subject info access: rsync://repo-rpki.idnic.net/repo/a0fe163c-14d5-4e31-ac20-c04e3e44c34f/0/52DC1412C6708ADA13DE89F150FA8C5BEF205DCB.mft Manifest number: 040C Signing time: Sat 06 Dec 2025 10:51:54 +0000 Manifest this update: Sat 06 Dec 2025 10:46:54 +0000 Manifest next update: Tue 09 Dec 2025 16:00:54 +0000 Files and hashes: 1: 52DC1412C6708ADA13DE89F150FA8C5BEF205DCB.crl (hash: FGTT9cFWVKBkIo/o+zGd8IyMSVXJ457csKqAFaVqHTE=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/a0fe163c-14d5-4e31-ac20-c04e3e44c34f/0/52DC1412C6708ADA13DE89F150FA8C5BEF205DCB.crl rsync://repo-rpki.idnic.net/repo/a0fe163c-14d5-4e31-ac20-c04e3e44c34f/0/52DC1412C6708ADA13DE89F150FA8C5BEF205DCB.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/52DC1412C6708ADA13DE89F150FA8C5BEF205DCB.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 09 Dec 2025 15:57:52 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 74:39:2c:7f:07:82:b6:0a:a5:a4:fc:dd:3f:0c:2b:90:9b:95:94:7e Signature Algorithm: sha256WithRSAEncryption Issuer: CN=52DC1412C6708ADA13DE89F150FA8C5BEF205DCB Validity Not Before: Dec 6 10:46:54 2025 GMT Not After : Dec 9 16:00:54 2025 GMT Subject: CN=02576B7F625CC8643DE41495B97B6068A866C5B5 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:be:a5:87:ae:8a:28:09:67:5e:59:1e:29:06:0d: 9c:2d:ee:f2:1c:38:7e:bf:79:81:22:a8:6d:3e:d5: ef:d2:b7:84:7d:7e:8f:34:f1:11:05:d6:ca:e0:32: 02:9f:94:aa:0e:7a:0f:1b:ad:d6:d2:88:99:30:18: ea:be:65:41:e5:40:3c:04:47:f0:bc:54:01:79:00: a4:9a:0b:f3:23:57:d5:47:0c:89:1e:12:2a:4d:66: 58:9f:da:84:d5:d3:ff:b4:74:0f:ba:b8:5e:43:23: 65:d6:48:13:23:4b:20:be:89:9f:cb:21:22:24:2e: 85:f0:f5:1f:18:4b:ea:70:27:51:fa:e1:f6:55:5e: bb:cf:8e:c4:04:6b:7f:b5:eb:bd:29:6e:fd:a9:9d: df:62:3b:76:63:e2:3b:5e:f6:16:59:73:63:9c:af: 2d:3c:7b:0e:af:b7:db:0b:62:ef:37:c0:a2:99:e6: 57:60:ad:16:96:02:8e:b8:f5:52:00:52:d2:bc:0f: 10:2a:d5:dd:99:c7:12:41:42:0e:5f:e9:d9:d7:4e: 88:2d:cc:58:ea:81:42:bc:8e:3e:0f:0b:e8:55:81: 97:4b:40:f7:9a:4b:46:83:8e:0c:a5:e3:39:da:0a: 7d:51:01:59:e9:9e:c9:e4:27:73:ec:15:55:1c:6d: ac:61 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 02:57:6B:7F:62:5C:C8:64:3D:E4:14:95:B9:7B:60:68:A8:66:C5:B5 X509v3 Authority Key Identifier: keyid:52:DC:14:12:C6:70:8A:DA:13:DE:89:F1:50:FA:8C:5B:EF:20:5D:CB X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/a0fe163c-14d5-4e31-ac20-c04e3e44c34f/0/52DC1412C6708ADA13DE89F150FA8C5BEF205DCB.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/52DC1412C6708ADA13DE89F150FA8C5BEF205DCB.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/a0fe163c-14d5-4e31-ac20-c04e3e44c34f/0/52DC1412C6708ADA13DE89F150FA8C5BEF205DCB.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 29:9b:92:1b:48:59:c2:cb:e8:ff:b8:ce:a6:1e:2b:38:46:11: 1a:86:33:b1:0a:6c:66:d0:12:fd:c5:70:ec:d2:5c:9e:ac:70: b0:83:75:fd:03:9f:6b:4d:b5:58:ce:be:ee:bc:b5:58:03:77: 8e:ab:7d:51:15:e3:0b:f1:10:07:b9:9b:6f:3e:a9:06:55:0b: dd:c9:4c:9b:8d:0c:95:59:58:99:57:61:65:a3:f1:10:33:da: 11:7f:0b:9d:10:57:45:80:98:51:ab:da:a4:6a:bf:88:f5:b8: 3d:45:25:0c:1a:11:c9:cf:96:25:b5:70:ef:5a:f4:ae:ff:d9: a4:d0:66:14:df:97:c7:31:92:a7:4e:ba:27:af:6c:10:6e:de: aa:97:69:aa:2b:a6:bb:88:db:4a:a2:7f:c8:95:75:2d:d4:6e: c9:a3:75:50:c4:b2:4c:89:8f:1e:03:c5:da:64:2b:b8:02:a5: a4:97:db:28:20:25:b2:a5:72:ec:26:dd:9f:af:48:77:6c:40: a7:68:73:7e:bb:9e:5f:35:af:da:ab:be:92:b8:b9:bf:67:f9: 43:18:11:ae:80:50:c8:d4:db:32:06:19:13:c3:f9:43:b5:37: 62:b0:d5:d5:9b:c1:c3:30:d4:2c:01:85:d1:8d:fe:00:b3:84: 65:5e:96:0b -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUdDksfweCtgqlpPzdPwwrkJuVlH4wDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoNTJEQzE0MTJDNjcwOEFEQTEzREU4OUYxNTBGQThDNUJF RjIwNURDQjAeFw0yNTEyMDYxMDQ2NTRaFw0yNTEyMDkxNjAwNTRaMDMxMTAvBgNV BAMTKDAyNTc2QjdGNjI1Q0M4NjQzREU0MTQ5NUI5N0I2MDY4QTg2NkM1QjUwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC+pYeuiigJZ15ZHikGDZwt7vIc OH6/eYEiqG0+1e/St4R9fo808REF1srgMgKflKoOeg8brdbSiJkwGOq+ZUHlQDwE R/C8VAF5AKSaC/MjV9VHDIkeEipNZlif2oTV0/+0dA+6uF5DI2XWSBMjSyC+iZ/L ISIkLoXw9R8YS+pwJ1H64fZVXrvPjsQEa3+1670pbv2pnd9iO3Zj4jte9hZZc2Oc ry08ew6vt9sLYu83wKKZ5ldgrRaWAo649VIAUtK8DxAq1d2ZxxJBQg5f6dnXTogt zFjqgUK8jj4PC+hVgZdLQPeaS0aDjgyl4znaCn1RAVnpnsnkJ3PsFVUcbaxhAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUAldrf2JcyGQ95BSVuXtgaKhmxbUwHwYDVR0j BBgwFoAUUtwUEsZwitoT3onxUPqMW+8gXcswDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby9h MGZlMTYzYy0xNGQ1LTRlMzEtYWMyMC1jMDRlM2U0NGMzNGYvMC81MkRDMTQxMkM2 NzA4QURBMTNERTg5RjE1MEZBOEM1QkVGMjA1RENCLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvNTJEQzE0MTJDNjcwOEFEQTEzREU4OUYxNTBGQThDNUJFRjIw NURDQi5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vYTBmZTE2M2MtMTRkNS00ZTMxLWFj MjAtYzA0ZTNlNDRjMzRmLzAvNTJEQzE0MTJDNjcwOEFEQTEzREU4OUYxNTBGQThD NUJFRjIwNURDQi5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBACmbkhtIWcLL6P+4zqYeKzhGERqGM7EKbGbQ Ev3FcOzSXJ6scLCDdf0Dn2tNtVjOvu68tVgDd46rfVEV4wvxEAe5m28+qQZVC93J TJuNDJVZWJlXYWWj8RAz2hF/C50QV0WAmFGr2qRqv4j1uD1FJQwaEcnPliW1cO9a 9K7/2aTQZhTfl8cxkqdOuievbBBu3qqXaaorpruI20qif8iVdS3UbsmjdVDEskyJ jx4DxdpkK7gCpaSX2yggJbKlcuwm3Z+vSHdsQKdoc367nl81r9qrvpK4ub9n+UMY Ea6AUMjU2zIGGRPD+UO1N2Kw1dWbwcMw1CwBhdGN/gCzhGVelgs= -----END CERTIFICATE-----Generated at Sun Dec 7 03:05:46 2025 by rpki-client