This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf repo-rpki.idnic.net/repo/bec553b6-9e57-40bd-8d96-a9fdadadd7be/0/52F21143C125B54D950A82C78B375D1FEFC27145.mft File: 52F21143C125B54D950A82C78B375D1FEFC27145.mft (raw, json) Hash identifier: v422Oj2kjxETvnwZkp74bWNPU0+4mgNch5OLqY2feQI= Subject key identifier: DE:75:2E:E1:EE:FE:8C:B4:3F:CF:23:B1:EC:3C:79:65:E0:FF:F8:83 Authority key identifier: 52:F2:11:43:C1:25:B5:4D:95:0A:82:C7:8B:37:5D:1F:EF:C2:71:45 Certificate issuer: /CN=52F21143C125B54D950A82C78B375D1FEFC27145 Certificate serial: 44CD8FA4310ABE652E8615572BE979A64A2CAFBC Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/52F21143C125B54D950A82C78B375D1FEFC27145.cer Subject info access: rsync://repo-rpki.idnic.net/repo/bec553b6-9e57-40bd-8d96-a9fdadadd7be/0/52F21143C125B54D950A82C78B375D1FEFC27145.mft Manifest number: 018D Signing time: Sun 07 Dec 2025 00:52:24 +0000 Manifest this update: Sun 07 Dec 2025 00:47:24 +0000 Manifest next update: Wed 10 Dec 2025 11:35:24 +0000 Files and hashes: 1: 3130332e3231372e3232342e302f32342d3234203d3e20313531303036.roa (hash: IbilM14Tghq0s15Jun72yk+UFwN4B/MVdRN8dmwioxY=) 2: 52F21143C125B54D950A82C78B375D1FEFC27145.crl (hash: Or7l69B0JUxqV99/bljC49JrN6zgQn/Rdbh72h2cBQs=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/bec553b6-9e57-40bd-8d96-a9fdadadd7be/0/52F21143C125B54D950A82C78B375D1FEFC27145.crl rsync://repo-rpki.idnic.net/repo/bec553b6-9e57-40bd-8d96-a9fdadadd7be/0/52F21143C125B54D950A82C78B375D1FEFC27145.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/52F21143C125B54D950A82C78B375D1FEFC27145.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 09 Dec 2025 15:57:52 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 44:cd:8f:a4:31:0a:be:65:2e:86:15:57:2b:e9:79:a6:4a:2c:af:bc Signature Algorithm: sha256WithRSAEncryption Issuer: CN=52F21143C125B54D950A82C78B375D1FEFC27145 Validity Not Before: Dec 7 00:47:24 2025 GMT Not After : Dec 10 11:35:24 2025 GMT Subject: CN=DE752EE1EEFE8CB43FCF23B1EC3C7965E0FFF883 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9f:80:1e:20:8d:1d:ad:b2:73:07:5e:7f:54:f7: 76:dd:41:61:cd:ea:45:10:84:00:bc:30:4f:ad:5e: 2c:1e:2f:7a:c8:bf:20:7d:99:8b:1e:32:2e:e6:98: 72:a9:3a:0f:59:0c:cb:66:5c:be:e0:60:b8:65:14: d2:25:ae:70:f6:d1:ab:3c:a8:48:c7:64:0d:a8:4a: 4d:fc:5c:38:ea:15:2d:fb:66:15:ed:75:ce:93:6b: 8e:07:81:06:98:22:22:9a:13:63:36:9a:c7:d4:6e: 4b:61:42:10:ed:91:2f:13:c1:57:3e:40:0b:3f:86: cc:c5:ae:51:49:12:75:91:79:cf:01:33:41:1e:ee: d1:c4:aa:82:92:d0:f3:69:57:9c:be:78:46:8f:49: c1:c5:8d:c5:cf:ed:4d:92:6f:e4:01:f2:7c:65:37: 95:5e:33:82:1c:a3:c3:51:87:e0:0f:18:55:e0:cf: d7:f3:66:52:19:6c:4d:a1:f8:22:8d:bd:0c:6a:a3: 9d:5d:82:d2:4b:31:4a:9e:e6:19:e0:28:be:45:f9: 74:ad:52:bc:af:5f:d7:71:87:9d:51:da:4c:40:f8: b6:2c:95:40:c8:92:55:63:55:ca:51:ec:01:6d:d4: 8f:74:d5:6d:fa:c7:b4:24:20:0a:26:05:04:53:17: ca:cf Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: DE:75:2E:E1:EE:FE:8C:B4:3F:CF:23:B1:EC:3C:79:65:E0:FF:F8:83 X509v3 Authority Key Identifier: keyid:52:F2:11:43:C1:25:B5:4D:95:0A:82:C7:8B:37:5D:1F:EF:C2:71:45 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/bec553b6-9e57-40bd-8d96-a9fdadadd7be/0/52F21143C125B54D950A82C78B375D1FEFC27145.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/52F21143C125B54D950A82C78B375D1FEFC27145.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/bec553b6-9e57-40bd-8d96-a9fdadadd7be/0/52F21143C125B54D950A82C78B375D1FEFC27145.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 70:46:79:fe:b7:85:d5:a2:80:6e:d4:b3:61:b6:f4:c9:e2:fa: 0b:3e:e9:aa:5c:7f:5e:b3:50:7a:99:cf:46:82:57:a4:aa:33: 4a:ef:6f:06:1e:f9:49:ba:ed:80:f1:05:fd:5c:62:bd:43:0e: 01:2d:d7:aa:54:a2:83:bb:c7:a9:10:18:56:c0:cd:ef:1d:87: 0b:97:f7:36:ef:a9:47:c4:95:e2:e8:b9:5d:8c:e6:9b:f5:73: 14:d8:a4:23:e3:e0:71:f9:4d:1a:87:eb:18:84:30:7c:20:6f: 20:d5:55:7a:88:02:5b:3c:a0:0c:c0:dc:8b:bb:3a:ed:e0:74: ba:76:97:ab:b1:79:d4:59:f7:b5:c0:1d:c2:18:2c:0b:8b:68: 53:ed:32:75:de:fb:31:c7:d0:04:47:9e:73:03:c0:74:fd:45: 29:59:12:66:a1:79:68:05:5f:ba:44:b8:b8:73:75:d4:3e:21: b2:3c:2e:41:16:66:7e:bf:12:19:68:5b:38:9e:ca:5e:d2:85: 63:a3:db:5f:f0:19:20:ae:82:42:33:53:51:5d:d2:4c:24:ae: 7f:8e:60:91:57:6e:fd:a5:f7:67:c4:f2:55:33:2d:03:ab:2d: 7b:48:64:17:de:78:57:e3:7e:6b:86:d7:51:cb:11:67:bf:15: 68:d3:17:62 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIURM2PpDEKvmUuhhVXK+l5pkosr7wwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoNTJGMjExNDNDMTI1QjU0RDk1MEE4MkM3OEIzNzVEMUZF RkMyNzE0NTAeFw0yNTEyMDcwMDQ3MjRaFw0yNTEyMTAxMTM1MjRaMDMxMTAvBgNV BAMTKERFNzUyRUUxRUVGRThDQjQzRkNGMjNCMUVDM0M3OTY1RTBGRkY4ODMwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCfgB4gjR2tsnMHXn9U93bdQWHN 6kUQhAC8ME+tXiweL3rIvyB9mYseMi7mmHKpOg9ZDMtmXL7gYLhlFNIlrnD20as8 qEjHZA2oSk38XDjqFS37ZhXtdc6Ta44HgQaYIiKaE2M2msfUbkthQhDtkS8TwVc+ QAs/hszFrlFJEnWRec8BM0Ee7tHEqoKS0PNpV5y+eEaPScHFjcXP7U2Sb+QB8nxl N5VeM4Ico8NRh+APGFXgz9fzZlIZbE2h+CKNvQxqo51dgtJLMUqe5hngKL5F+XSt UryvX9dxh51R2kxA+LYslUDIklVjVcpR7AFt1I901W36x7QkIAomBQRTF8rPAgMB AAGjggI8MIICODAdBgNVHQ4EFgQU3nUu4e7+jLQ/zyOx7Dx5ZeD/+IMwHwYDVR0j BBgwFoAUUvIRQ8EltU2VCoLHizddH+/CcUUwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby9i ZWM1NTNiNi05ZTU3LTQwYmQtOGQ5Ni1hOWZkYWRhZGQ3YmUvMC81MkYyMTE0M0Mx MjVCNTREOTUwQTgyQzc4QjM3NUQxRkVGQzI3MTQ1LmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvNTJGMjExNDNDMTI1QjU0RDk1MEE4MkM3OEIzNzVEMUZFRkMy NzE0NS5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vYmVjNTUzYjYtOWU1Ny00MGJkLThk OTYtYTlmZGFkYWRkN2JlLzAvNTJGMjExNDNDMTI1QjU0RDk1MEE4MkM3OEIzNzVE MUZFRkMyNzE0NS5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAHBGef63hdWigG7Us2G29Mni+gs+6apcf16z UHqZz0aCV6SqM0rvbwYe+Um67YDxBf1cYr1DDgEt16pUooO7x6kQGFbAze8dhwuX 9zbvqUfEleLouV2M5pv1cxTYpCPj4HH5TRqH6xiEMHwgbyDVVXqIAls8oAzA3Iu7 Ou3gdLp2l6uxedRZ97XAHcIYLAuLaFPtMnXe+zHH0ARHnnMDwHT9RSlZEmaheWgF X7pEuLhzddQ+IbI8LkEWZn6/EhloWzieyl7ShWOj21/wGSCugkIzU1Fd0kwkrn+O YJFXbv2l92fE8lUzLQOrLXtIZBfeeFfjfmuG11HLEWe/FWjTF2I= -----END CERTIFICATE-----Generated at Sun Dec 7 04:25:50 2025 by rpki-client