This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf repo-rpki.idnic.net/repo/bec553b6-9e57-40bd-8d96-a9fdadadd7be/0/52F21143C125B54D950A82C78B375D1FEFC27145.mft File: 52F21143C125B54D950A82C78B375D1FEFC27145.mft (raw, json) Hash identifier: YFUTc43vGOflalNM72DrCDbNi0nHhgnlSf1Yc32SOak= Subject key identifier: 87:9B:32:26:52:45:97:07:4A:6C:2B:FF:D9:74:4F:F3:21:C5:A2:85 Authority key identifier: 52:F2:11:43:C1:25:B5:4D:95:0A:82:C7:8B:37:5D:1F:EF:C2:71:45 Certificate issuer: /CN=52F21143C125B54D950A82C78B375D1FEFC27145 Certificate serial: 732AE23B6B1567A9C57B5E203DDA872DE65B9778 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/52F21143C125B54D950A82C78B375D1FEFC27145.cer Subject info access: rsync://repo-rpki.idnic.net/repo/bec553b6-9e57-40bd-8d96-a9fdadadd7be/0/52F21143C125B54D950A82C78B375D1FEFC27145.mft Manifest number: 01A2 Signing time: Fri 23 Jan 2026 13:12:24 +0000 Manifest this update: Fri 23 Jan 2026 13:07:24 +0000 Manifest next update: Mon 26 Jan 2026 23:05:24 +0000 Files and hashes: 1: 3130332e3231372e3232342e302f32342d3234203d3e20313531303036.roa (hash: IbilM14Tghq0s15Jun72yk+UFwN4B/MVdRN8dmwioxY=) 2: 52F21143C125B54D950A82C78B375D1FEFC27145.crl (hash: 6MNyQGdbqkCb1a3jkdrul1c6441E9X5KsSRr9KNBLek=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/bec553b6-9e57-40bd-8d96-a9fdadadd7be/0/52F21143C125B54D950A82C78B375D1FEFC27145.crl rsync://repo-rpki.idnic.net/repo/bec553b6-9e57-40bd-8d96-a9fdadadd7be/0/52F21143C125B54D950A82C78B375D1FEFC27145.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/52F21143C125B54D950A82C78B375D1FEFC27145.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 26 Jan 2026 23:05:24 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 73:2a:e2:3b:6b:15:67:a9:c5:7b:5e:20:3d:da:87:2d:e6:5b:97:78 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=52F21143C125B54D950A82C78B375D1FEFC27145 Validity Not Before: Jan 23 13:07:24 2026 GMT Not After : Jan 26 23:05:24 2026 GMT Subject: CN=879B3226524597074A6C2BFFD9744FF321C5A285 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cf:f4:1b:81:79:27:d6:cb:ba:ad:2c:f0:6d:88: 97:21:61:24:71:6d:7d:45:90:28:f5:6c:a1:75:1f: 13:7f:58:81:45:4e:f0:81:08:0d:cc:6f:15:bb:02: 9f:e7:81:2b:c7:b2:60:85:f0:2c:40:df:8d:80:10: d4:84:1f:4a:60:ad:95:7a:8f:2f:1e:0e:08:66:0e: 7f:1d:64:63:13:e2:4c:78:d1:4e:bc:10:86:2d:f2: b1:8a:12:e0:81:43:f4:d1:ed:0f:03:b9:f2:8e:aa: cb:b6:92:e4:26:05:50:16:03:b9:41:1c:25:fa:61: 15:cc:4d:ac:69:11:54:89:f7:5a:01:89:eb:4e:d7: 41:6c:ec:41:63:f2:ec:2b:58:4a:80:b7:ed:1e:b6: 61:ce:56:07:ca:01:67:dd:33:12:65:35:78:d8:7b: 87:0f:a3:03:ed:01:30:df:02:97:d1:82:43:1d:bf: f3:a1:5e:a2:cb:8f:0a:62:6c:33:c8:05:0a:55:36: 65:84:e5:7b:ca:76:b1:34:fb:ec:5b:53:40:dd:44: 35:08:ec:05:9c:c7:3d:b8:bc:3f:01:fa:ea:4c:a2: a0:b6:b2:0c:77:f9:4b:c9:2b:5f:01:9b:03:37:64: 48:be:8a:3f:08:5d:4f:f7:97:bb:a7:e2:1e:6f:77: b5:39 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 87:9B:32:26:52:45:97:07:4A:6C:2B:FF:D9:74:4F:F3:21:C5:A2:85 X509v3 Authority Key Identifier: keyid:52:F2:11:43:C1:25:B5:4D:95:0A:82:C7:8B:37:5D:1F:EF:C2:71:45 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/bec553b6-9e57-40bd-8d96-a9fdadadd7be/0/52F21143C125B54D950A82C78B375D1FEFC27145.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/52F21143C125B54D950A82C78B375D1FEFC27145.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/bec553b6-9e57-40bd-8d96-a9fdadadd7be/0/52F21143C125B54D950A82C78B375D1FEFC27145.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 57:42:7a:82:9f:18:6e:cb:9c:3a:88:29:8b:5b:e6:58:72:3c: c3:eb:5f:ea:3c:df:92:d6:2e:22:00:c9:81:96:bc:8e:8d:a8: 3a:8c:9a:78:17:6f:36:28:14:13:f8:cf:3d:2f:4e:6d:e2:0f: 7e:30:4d:3a:19:3a:d9:9e:af:47:54:32:17:61:12:d0:88:18: 0d:14:67:46:60:84:a0:a4:66:30:fb:f3:35:61:87:a4:36:64: 00:54:07:00:cb:1b:b8:df:02:92:5d:e3:dc:7d:ff:d7:6c:e9: 09:a3:31:04:ff:72:a4:ab:f7:15:9c:35:80:d2:f1:51:ec:c4: d7:af:48:2b:bd:f5:7d:fe:aa:0f:f5:77:19:5e:66:f4:3c:60: 1d:6c:4b:2c:a0:a0:dc:ae:bd:fb:30:8c:4d:a9:f3:2f:55:a0: 7e:85:b9:fa:99:40:5c:c9:e0:8f:7d:bd:ce:1d:7c:e0:ca:97: 2f:4a:46:7b:a4:d2:69:76:b8:cd:63:a7:8f:90:63:3d:25:da: 25:c6:ff:04:40:16:67:64:f0:0b:b2:6c:45:d2:ef:d1:d6:3a: db:4d:54:18:23:c1:05:fd:73:5d:6a:c1:87:a0:37:f9:95:4e: 34:c7:ee:d8:d2:33:e5:63:18:d9:94:6e:11:e2:ff:91:3e:b4: 36:45:dd:59 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUcyriO2sVZ6nFe14gPdqHLeZbl3gwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoNTJGMjExNDNDMTI1QjU0RDk1MEE4MkM3OEIzNzVEMUZF RkMyNzE0NTAeFw0yNjAxMjMxMzA3MjRaFw0yNjAxMjYyMzA1MjRaMDMxMTAvBgNV BAMTKDg3OUIzMjI2NTI0NTk3MDc0QTZDMkJGRkQ5NzQ0RkYzMjFDNUEyODUwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDP9BuBeSfWy7qtLPBtiJchYSRx bX1FkCj1bKF1HxN/WIFFTvCBCA3MbxW7Ap/ngSvHsmCF8CxA342AENSEH0pgrZV6 jy8eDghmDn8dZGMT4kx40U68EIYt8rGKEuCBQ/TR7Q8DufKOqsu2kuQmBVAWA7lB HCX6YRXMTaxpEVSJ91oBietO10Fs7EFj8uwrWEqAt+0etmHOVgfKAWfdMxJlNXjY e4cPowPtATDfApfRgkMdv/OhXqLLjwpibDPIBQpVNmWE5XvKdrE0++xbU0DdRDUI 7AWcxz24vD8B+upMoqC2sgx3+UvJK18BmwM3ZEi+ij8IXU/3l7un4h5vd7U5AgMB AAGjggI8MIICODAdBgNVHQ4EFgQUh5syJlJFlwdKbCv/2XRP8yHFooUwHwYDVR0j BBgwFoAUUvIRQ8EltU2VCoLHizddH+/CcUUwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby9i ZWM1NTNiNi05ZTU3LTQwYmQtOGQ5Ni1hOWZkYWRhZGQ3YmUvMC81MkYyMTE0M0Mx MjVCNTREOTUwQTgyQzc4QjM3NUQxRkVGQzI3MTQ1LmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvNTJGMjExNDNDMTI1QjU0RDk1MEE4MkM3OEIzNzVEMUZFRkMy NzE0NS5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vYmVjNTUzYjYtOWU1Ny00MGJkLThk OTYtYTlmZGFkYWRkN2JlLzAvNTJGMjExNDNDMTI1QjU0RDk1MEE4MkM3OEIzNzVE MUZFRkMyNzE0NS5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAFdCeoKfGG7LnDqIKYtb5lhyPMPrX+o835LW LiIAyYGWvI6NqDqMmngXbzYoFBP4zz0vTm3iD34wTToZOtmer0dUMhdhEtCIGA0U Z0ZghKCkZjD78zVhh6Q2ZABUBwDLG7jfApJd49x9/9ds6QmjMQT/cqSr9xWcNYDS 8VHsxNevSCu99X3+qg/1dxleZvQ8YB1sSyygoNyuvfswjE2p8y9VoH6FufqZQFzJ 4I99vc4dfODKly9KRnuk0ml2uM1jp4+QYz0l2iXG/wRAFmdk8AuybEXS79HWOttN VBgjwQX9c11qwYegN/mVTjTH7tjSM+VjGNmUbhHi/5E+tDZF3Vk= -----END CERTIFICATE-----Generated at Sun Jan 25 18:48:09 2026 by rpki-client