This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf repo-rpki.idnic.net/repo/a1ee3765-0abb-4ba3-a00d-cbcec8399928/0/52C34A755DF981FDF13789624A2BE028AB5B5DAE.mft File: 52C34A755DF981FDF13789624A2BE028AB5B5DAE.mft (raw, json) Hash identifier: v1G7CKNzWVbVqHgfefDUr62xK5+eR4fWM5QhCl73lD8= Subject key identifier: E0:A5:7C:EC:95:2B:E4:CF:1F:F3:61:1D:BB:0E:92:E1:BE:26:DB:D2 Authority key identifier: 52:C3:4A:75:5D:F9:81:FD:F1:37:89:62:4A:2B:E0:28:AB:5B:5D:AE Certificate issuer: /CN=52C34A755DF981FDF13789624A2BE028AB5B5DAE Certificate serial: 682257AB815E8E600C01DFDC17CE2E27BC6B4543 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/52C34A755DF981FDF13789624A2BE028AB5B5DAE.cer Subject info access: rsync://repo-rpki.idnic.net/repo/a1ee3765-0abb-4ba3-a00d-cbcec8399928/0/52C34A755DF981FDF13789624A2BE028AB5B5DAE.mft Manifest number: 0127 Signing time: Wed 17 Dec 2025 07:51:04 +0000 Manifest this update: Wed 17 Dec 2025 07:46:04 +0000 Manifest next update: Sat 20 Dec 2025 15:57:04 +0000 Files and hashes: 1: 3231302e38372e3131322e302f32342d3234203d3e20313532303533.roa (hash: KmvZNHMkYGjniiDVsPzoqz85biHBg1yoTLWktyy3KyI=) 2: 52C34A755DF981FDF13789624A2BE028AB5B5DAE.crl (hash: EZvivQb47rRZsGzNNEJt1q3DcR06TRPyue7VE3B14wQ=) 3: 3231302e38372e3131332e302f32342d3234203d3e20313532303533.roa (hash: M/ahzHC3ODRI/WG3tVFzAKjzCsCePhBkrqbTyrlIMdA=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/a1ee3765-0abb-4ba3-a00d-cbcec8399928/0/52C34A755DF981FDF13789624A2BE028AB5B5DAE.crl rsync://repo-rpki.idnic.net/repo/a1ee3765-0abb-4ba3-a00d-cbcec8399928/0/52C34A755DF981FDF13789624A2BE028AB5B5DAE.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/52C34A755DF981FDF13789624A2BE028AB5B5DAE.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 20 Dec 2025 15:57:04 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 68:22:57:ab:81:5e:8e:60:0c:01:df:dc:17:ce:2e:27:bc:6b:45:43 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=52C34A755DF981FDF13789624A2BE028AB5B5DAE Validity Not Before: Dec 17 07:46:04 2025 GMT Not After : Dec 20 15:57:04 2025 GMT Subject: CN=E0A57CEC952BE4CF1FF3611DBB0E92E1BE26DBD2 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:eb:7a:e6:a6:cb:23:77:d0:9d:bb:92:51:40:68: 8d:d7:40:0b:ab:24:42:e6:7a:dd:67:44:f8:66:b1: 5d:fc:07:20:62:2c:79:fb:90:be:1c:de:b0:47:bd: e6:56:b8:7e:5d:67:a0:c3:0a:ac:56:48:7d:78:d8: 19:ce:dc:a8:6c:3a:ad:13:1c:99:54:c1:9e:9a:f3: 6d:a6:90:1d:9f:ac:c7:97:ef:a9:f6:1f:5a:8d:42: 29:09:53:92:16:d2:c0:9d:02:79:e1:91:ee:d3:03: b1:32:cc:f4:d4:64:b6:3d:11:a2:13:95:ee:a8:54: 62:33:e4:15:7c:a5:8c:66:78:05:0d:38:72:ba:81: 91:1e:a0:86:58:68:85:dc:09:56:5a:74:66:73:42: ce:b2:73:99:f4:12:4a:99:17:d7:b6:ed:cd:f4:fc: b9:73:6c:a0:78:ab:e5:79:da:ef:9e:a0:95:4e:f8: a8:b3:0f:4e:64:21:0d:de:12:f1:a4:19:39:2d:e0: 37:7d:a9:c4:92:22:ea:b6:e2:68:34:c1:d4:47:6e: 6c:3f:41:a1:7f:ba:02:93:62:5b:ce:59:62:7f:a0: 7c:4f:f0:89:fa:a6:ba:53:bc:4d:63:b5:59:50:a0: 7f:21:30:c7:57:d2:0c:b7:a6:d9:0e:cd:0b:a7:70: 5a:e7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: E0:A5:7C:EC:95:2B:E4:CF:1F:F3:61:1D:BB:0E:92:E1:BE:26:DB:D2 X509v3 Authority Key Identifier: keyid:52:C3:4A:75:5D:F9:81:FD:F1:37:89:62:4A:2B:E0:28:AB:5B:5D:AE X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/a1ee3765-0abb-4ba3-a00d-cbcec8399928/0/52C34A755DF981FDF13789624A2BE028AB5B5DAE.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/52C34A755DF981FDF13789624A2BE028AB5B5DAE.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/a1ee3765-0abb-4ba3-a00d-cbcec8399928/0/52C34A755DF981FDF13789624A2BE028AB5B5DAE.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 0d:c1:59:ea:cb:26:f9:95:04:da:56:cc:00:d7:fe:2d:ef:b5: 38:63:7f:9a:7f:b8:e8:cc:fe:b1:66:54:97:32:44:87:55:a7: d1:b7:ac:8d:43:fb:6c:b6:84:45:24:81:9e:0c:38:9b:cd:6b: 3d:0e:ef:4f:3c:e0:f9:ba:63:f4:92:ee:25:03:a5:1b:c1:0e: 0e:9c:cf:67:f9:1f:13:55:a3:69:90:4c:8f:8b:08:1a:32:34: 82:ed:da:2e:9f:d9:76:6f:ba:52:a2:74:62:1a:ce:76:d9:82: 5e:4d:13:d3:96:65:aa:fc:e7:06:4c:be:50:4b:20:dd:03:62: b3:82:0a:63:ab:ff:2c:5c:b6:a9:d4:b3:a2:d1:9b:c6:f5:fe: c6:ec:a9:23:51:df:1d:0b:02:2b:51:80:27:d4:24:19:99:3a: 33:9d:00:93:18:81:93:6a:4b:a7:ca:39:af:39:f5:25:e6:82: 95:9a:0b:0a:be:bc:e7:64:b3:c4:30:ad:57:1c:b1:5e:0d:31: 18:c5:cf:7c:46:77:a8:dd:f2:37:b7:b7:71:33:4d:b6:2f:bd: 60:fa:fa:9d:b2:01:95:8b:41:1c:00:75:95:a7:c7:3e:1a:69: 54:56:28:6e:10:76:e5:63:76:c1:50:9c:c3:5a:ee:3e:c3:da: 09:fd:87:ed -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUaCJXq4FejmAMAd/cF84uJ7xrRUMwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoNTJDMzRBNzU1REY5ODFGREYxMzc4OTYyNEEyQkUwMjhB QjVCNURBRTAeFw0yNTEyMTcwNzQ2MDRaFw0yNTEyMjAxNTU3MDRaMDMxMTAvBgNV BAMTKEUwQTU3Q0VDOTUyQkU0Q0YxRkYzNjExREJCMEU5MkUxQkUyNkRCRDIwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDreuamyyN30J27klFAaI3XQAur JELmet1nRPhmsV38ByBiLHn7kL4c3rBHveZWuH5dZ6DDCqxWSH142BnO3KhsOq0T HJlUwZ6a822mkB2frMeX76n2H1qNQikJU5IW0sCdAnnhke7TA7EyzPTUZLY9EaIT le6oVGIz5BV8pYxmeAUNOHK6gZEeoIZYaIXcCVZadGZzQs6yc5n0EkqZF9e27c30 /LlzbKB4q+V52u+eoJVO+KizD05kIQ3eEvGkGTkt4Dd9qcSSIuq24mg0wdRHbmw/ QaF/ugKTYlvOWWJ/oHxP8In6prpTvE1jtVlQoH8hMMdX0gy3ptkOzQuncFrnAgMB AAGjggI8MIICODAdBgNVHQ4EFgQU4KV87JUr5M8f82Eduw6S4b4m29IwHwYDVR0j BBgwFoAUUsNKdV35gf3xN4liSivgKKtbXa4wDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby9h MWVlMzc2NS0wYWJiLTRiYTMtYTAwZC1jYmNlYzgzOTk5MjgvMC81MkMzNEE3NTVE Rjk4MUZERjEzNzg5NjI0QTJCRTAyOEFCNUI1REFFLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvNTJDMzRBNzU1REY5ODFGREYxMzc4OTYyNEEyQkUwMjhBQjVC NURBRS5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vYTFlZTM3NjUtMGFiYi00YmEzLWEw MGQtY2JjZWM4Mzk5OTI4LzAvNTJDMzRBNzU1REY5ODFGREYxMzc4OTYyNEEyQkUw MjhBQjVCNURBRS5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAA3BWerLJvmVBNpWzADX/i3vtThjf5p/uOjM /rFmVJcyRIdVp9G3rI1D+2y2hEUkgZ4MOJvNaz0O70884Pm6Y/SS7iUDpRvBDg6c z2f5HxNVo2mQTI+LCBoyNILt2i6f2XZvulKidGIaznbZgl5NE9OWZar85wZMvlBL IN0DYrOCCmOr/yxctqnUs6LRm8b1/sbsqSNR3x0LAitRgCfUJBmZOjOdAJMYgZNq S6fKOa859SXmgpWaCwq+vOdks8QwrVccsV4NMRjFz3xGd6jd8je3t3EzTbYvvWD6 +p2yAZWLQRwAdZWnxz4aaVRWKG4QduVjdsFQnMNa7j7D2gn9h+0= -----END CERTIFICATE-----Generated at Wed Dec 17 17:50:19 2025 by rpki-client