This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf repo-rpki.idnic.net/repo/a1ee3765-0abb-4ba3-a00d-cbcec8399928/0/52C34A755DF981FDF13789624A2BE028AB5B5DAE.mft File: 52C34A755DF981FDF13789624A2BE028AB5B5DAE.mft (raw, json) Hash identifier: fL+AmFSe13iRKcCPWs+LwXV/PqMi4KCDiVSsm9VgTWg= Subject key identifier: 54:53:29:5D:99:87:FC:EF:BD:08:DB:FB:4A:56:F0:00:EA:F6:CE:FF Authority key identifier: 52:C3:4A:75:5D:F9:81:FD:F1:37:89:62:4A:2B:E0:28:AB:5B:5D:AE Certificate issuer: /CN=52C34A755DF981FDF13789624A2BE028AB5B5DAE Certificate serial: 39CB4992A7C6698A23007FF18FD96AFDB4D1272C Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/52C34A755DF981FDF13789624A2BE028AB5B5DAE.cer Subject info access: rsync://repo-rpki.idnic.net/repo/a1ee3765-0abb-4ba3-a00d-cbcec8399928/0/52C34A755DF981FDF13789624A2BE028AB5B5DAE.mft Manifest number: 0122 Signing time: Fri 05 Dec 2025 20:21:06 +0000 Manifest this update: Fri 05 Dec 2025 20:16:06 +0000 Manifest next update: Tue 09 Dec 2025 03:31:06 +0000 Files and hashes: 1: 3231302e38372e3131332e302f32342d3234203d3e20313532303533.roa (hash: M/ahzHC3ODRI/WG3tVFzAKjzCsCePhBkrqbTyrlIMdA=) 2: 52C34A755DF981FDF13789624A2BE028AB5B5DAE.crl (hash: PDK0wvwUIktOe6TchwYFKowulfAgfqE/5wNLzLdCw74=) 3: 3231302e38372e3131322e302f32342d3234203d3e20313532303533.roa (hash: KmvZNHMkYGjniiDVsPzoqz85biHBg1yoTLWktyy3KyI=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/a1ee3765-0abb-4ba3-a00d-cbcec8399928/0/52C34A755DF981FDF13789624A2BE028AB5B5DAE.crl rsync://repo-rpki.idnic.net/repo/a1ee3765-0abb-4ba3-a00d-cbcec8399928/0/52C34A755DF981FDF13789624A2BE028AB5B5DAE.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/52C34A755DF981FDF13789624A2BE028AB5B5DAE.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 09 Dec 2025 03:31:06 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 39:cb:49:92:a7:c6:69:8a:23:00:7f:f1:8f:d9:6a:fd:b4:d1:27:2c Signature Algorithm: sha256WithRSAEncryption Issuer: CN=52C34A755DF981FDF13789624A2BE028AB5B5DAE Validity Not Before: Dec 5 20:16:06 2025 GMT Not After : Dec 9 03:31:06 2025 GMT Subject: CN=5453295D9987FCEFBD08DBFB4A56F000EAF6CEFF Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bd:4b:10:f6:b9:d3:3c:46:b8:b9:19:a9:83:f0: 21:9f:1b:b6:93:a6:02:87:df:13:61:29:43:9b:78: 3e:85:05:87:a3:f6:fa:90:4b:75:40:3a:74:a8:60: 3f:c3:6e:96:ff:d7:30:e1:43:14:7c:50:0f:b1:72: 08:29:6f:87:8c:f6:ff:d3:db:ab:b8:80:b0:d4:6a: fb:c7:ea:16:67:4b:b3:92:a9:7b:a8:ca:28:88:a3: 0c:17:da:43:14:10:9f:06:1b:05:39:56:19:b7:2b: 39:35:31:52:1b:9a:36:92:cb:34:d0:e9:b7:2e:bf: 3d:a2:35:54:fc:a4:ba:42:8d:38:1b:5b:18:94:65: 6d:1b:59:44:50:21:98:7c:19:bd:c5:7c:a2:f5:46: 82:0c:22:47:66:97:2c:c7:fa:3d:f3:9a:a1:02:c7: d2:77:12:c5:a1:9c:71:04:b1:46:67:56:db:94:e8: 90:fe:62:a2:d5:dc:36:8e:db:fa:ac:0a:a2:b6:2a: f4:e9:39:01:36:58:c4:89:5c:c9:fb:e3:20:0e:97: 8c:f7:7d:88:5a:61:46:95:e2:10:5b:b5:18:69:a2: 20:a8:8f:2d:b6:1a:25:4a:12:82:41:f4:5f:11:44: 3e:37:90:ca:04:26:63:b2:03:1b:a4:70:a7:92:09: d9:77 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 54:53:29:5D:99:87:FC:EF:BD:08:DB:FB:4A:56:F0:00:EA:F6:CE:FF X509v3 Authority Key Identifier: keyid:52:C3:4A:75:5D:F9:81:FD:F1:37:89:62:4A:2B:E0:28:AB:5B:5D:AE X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/a1ee3765-0abb-4ba3-a00d-cbcec8399928/0/52C34A755DF981FDF13789624A2BE028AB5B5DAE.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/52C34A755DF981FDF13789624A2BE028AB5B5DAE.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/a1ee3765-0abb-4ba3-a00d-cbcec8399928/0/52C34A755DF981FDF13789624A2BE028AB5B5DAE.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 88:a5:a4:62:45:78:69:b7:05:c9:23:00:2c:dc:30:f3:6c:4a: 14:b1:c3:b7:5c:10:9f:31:c8:e9:16:66:9c:99:2b:07:5c:2f: c4:cd:cc:1b:b4:06:d7:47:fe:cd:ed:7e:60:2d:9f:ef:ea:4d: 31:58:91:95:2f:03:59:8c:ab:eb:f9:e0:d6:b6:a8:b0:ba:d5: 70:01:f4:83:a2:b4:e4:f0:17:3d:49:7a:c7:62:39:73:ce:51: a7:69:34:2c:d8:16:e9:07:0f:e8:07:19:cc:3a:91:d9:71:24: 8c:29:cc:a7:c1:43:1a:49:89:f4:96:83:54:3a:1d:1f:8b:b1: 53:07:c1:db:ed:22:95:74:d2:b2:b5:28:6a:3c:17:8f:76:a3: 84:8c:4d:e2:28:4b:a4:d4:6a:e2:13:13:60:22:4e:ce:70:45: 2a:73:38:32:94:69:62:7e:1c:46:2c:20:a4:0a:7d:89:13:c3: b9:f1:d3:57:e2:1a:cb:87:b0:8f:0d:d0:99:06:d3:f7:55:25: ce:23:b0:10:4b:f1:63:3c:98:ba:66:d0:56:71:42:bc:d6:26: f4:16:26:31:53:10:cc:ab:ae:6d:af:53:9e:8d:95:25:58:2b: ef:93:d1:65:39:b4:71:5e:dc:2f:d1:43:ba:24:4a:85:30:d6: e2:81:16:f0 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUOctJkqfGaYojAH/xj9lq/bTRJywwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoNTJDMzRBNzU1REY5ODFGREYxMzc4OTYyNEEyQkUwMjhB QjVCNURBRTAeFw0yNTEyMDUyMDE2MDZaFw0yNTEyMDkwMzMxMDZaMDMxMTAvBgNV BAMTKDU0NTMyOTVEOTk4N0ZDRUZCRDA4REJGQjRBNTZGMDAwRUFGNkNFRkYwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC9SxD2udM8Rri5GamD8CGfG7aT pgKH3xNhKUObeD6FBYej9vqQS3VAOnSoYD/Dbpb/1zDhQxR8UA+xcggpb4eM9v/T 26u4gLDUavvH6hZnS7OSqXuoyiiIowwX2kMUEJ8GGwU5Vhm3Kzk1MVIbmjaSyzTQ 6bcuvz2iNVT8pLpCjTgbWxiUZW0bWURQIZh8Gb3FfKL1RoIMIkdmlyzH+j3zmqEC x9J3EsWhnHEEsUZnVtuU6JD+YqLV3DaO2/qsCqK2KvTpOQE2WMSJXMn74yAOl4z3 fYhaYUaV4hBbtRhpoiCojy22GiVKEoJB9F8RRD43kMoEJmOyAxukcKeSCdl3AgMB AAGjggI8MIICODAdBgNVHQ4EFgQUVFMpXZmH/O+9CNv7SlbwAOr2zv8wHwYDVR0j BBgwFoAUUsNKdV35gf3xN4liSivgKKtbXa4wDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby9h MWVlMzc2NS0wYWJiLTRiYTMtYTAwZC1jYmNlYzgzOTk5MjgvMC81MkMzNEE3NTVE Rjk4MUZERjEzNzg5NjI0QTJCRTAyOEFCNUI1REFFLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvNTJDMzRBNzU1REY5ODFGREYxMzc4OTYyNEEyQkUwMjhBQjVC NURBRS5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vYTFlZTM3NjUtMGFiYi00YmEzLWEw MGQtY2JjZWM4Mzk5OTI4LzAvNTJDMzRBNzU1REY5ODFGREYxMzc4OTYyNEEyQkUw MjhBQjVCNURBRS5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAIilpGJFeGm3BckjACzcMPNsShSxw7dcEJ8x yOkWZpyZKwdcL8TNzBu0BtdH/s3tfmAtn+/qTTFYkZUvA1mMq+v54Na2qLC61XAB 9IOitOTwFz1JesdiOXPOUadpNCzYFukHD+gHGcw6kdlxJIwpzKfBQxpJifSWg1Q6 HR+LsVMHwdvtIpV00rK1KGo8F492o4SMTeIoS6TUauITE2AiTs5wRSpzODKUaWJ+ HEYsIKQKfYkTw7nx01fiGsuHsI8N0JkG0/dVJc4jsBBL8WM8mLpm0FZxQrzWJvQW JjFTEMyrrm2vU56NlSVYK++T0WU5tHFe3C/RQ7okSoUw1uKBFvA= -----END CERTIFICATE-----Generated at Sat Dec 6 22:52:40 2025 by rpki-client