This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf repo-rpki.idnic.net/repo/47df2ad0-6e99-44a7-a068-500656ffb00f/0/532A4A6EA252E9D1CFF57481A5A86B35CE0DD21F.mft File: 532A4A6EA252E9D1CFF57481A5A86B35CE0DD21F.mft (raw, json) Hash identifier: jjzBtH2k2lVBJGxWh1NXL2a0rrBw8dTpdK3RaaI+qVs= Subject key identifier: 51:0E:AD:7C:60:DA:DD:F5:88:AA:D1:C4:40:40:44:5B:4B:FE:2C:DA Authority key identifier: 53:2A:4A:6E:A2:52:E9:D1:CF:F5:74:81:A5:A8:6B:35:CE:0D:D2:1F Certificate issuer: /CN=532A4A6EA252E9D1CFF57481A5A86B35CE0DD21F Certificate serial: 4EC39F3DE4AD0BBD00F922292D0D4E21AC92911B Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/532A4A6EA252E9D1CFF57481A5A86B35CE0DD21F.cer Subject info access: rsync://repo-rpki.idnic.net/repo/47df2ad0-6e99-44a7-a068-500656ffb00f/0/532A4A6EA252E9D1CFF57481A5A86B35CE0DD21F.mft Manifest number: 01D7 Signing time: Thu 18 Dec 2025 22:11:45 +0000 Manifest this update: Thu 18 Dec 2025 22:06:45 +0000 Manifest next update: Mon 22 Dec 2025 06:31:45 +0000 Files and hashes: 1: 3130332e3132392e32362e302f32332d3234203d3e20313335343738.roa (hash: Sbm29pNNDtrirUa5TWrnPomraWgx9d4wS4uCAUKgspQ=) 2: 532A4A6EA252E9D1CFF57481A5A86B35CE0DD21F.crl (hash: +TXFFh7Ee+EAZF0cFBxuXWmh+2LcOuapETYUfphNmO0=) 3: 3130332e3132392e32342e302f32332d3234203d3e20313335343738.roa (hash: acHkQDc68Jj27op6u+60Ox/pAf3ZpE5ZeAF+XMaxR0M=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/47df2ad0-6e99-44a7-a068-500656ffb00f/0/532A4A6EA252E9D1CFF57481A5A86B35CE0DD21F.crl rsync://repo-rpki.idnic.net/repo/47df2ad0-6e99-44a7-a068-500656ffb00f/0/532A4A6EA252E9D1CFF57481A5A86B35CE0DD21F.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/532A4A6EA252E9D1CFF57481A5A86B35CE0DD21F.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 22 Dec 2025 03:43:10 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 4e:c3:9f:3d:e4:ad:0b:bd:00:f9:22:29:2d:0d:4e:21:ac:92:91:1b Signature Algorithm: sha256WithRSAEncryption Issuer: CN=532A4A6EA252E9D1CFF57481A5A86B35CE0DD21F Validity Not Before: Dec 18 22:06:45 2025 GMT Not After : Dec 22 06:31:45 2025 GMT Subject: CN=510EAD7C60DADDF588AAD1C44040445B4BFE2CDA Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ca:87:f3:89:a3:a4:72:92:10:48:ea:1d:48:7a: 1f:d0:ff:f8:1f:a1:96:da:f8:19:67:ad:98:72:04: 58:5a:a8:46:28:e4:04:c0:42:e7:c5:48:c6:6b:6b: 45:08:a9:ce:30:89:c5:e8:de:f4:b9:b4:b6:7a:77: 3e:bf:35:44:f4:50:ee:53:16:9c:d9:36:f4:5a:4a: 93:bf:4a:1e:88:c7:52:4c:c6:6b:96:a8:40:b9:17: 77:8e:4e:f6:82:9d:8b:96:93:3a:ce:fc:12:4e:0f: 21:16:44:e6:de:d4:da:79:31:9b:89:1e:ba:8c:0d: 3b:47:a7:88:61:5b:62:7b:3c:82:a9:36:91:9d:19: 79:84:c4:1b:b8:9a:5a:4d:42:25:40:e9:bb:23:bd: 2e:55:e6:2c:57:25:95:6d:0b:c0:b5:5c:89:65:53: 24:c4:d0:7a:90:40:29:e9:67:41:28:52:10:e6:01: 3e:f2:9c:8b:d1:2d:fb:60:5e:f0:c8:9c:ab:24:0c: b5:79:68:06:4c:cb:70:88:42:20:bf:d9:61:aa:b5: 62:a7:3c:24:5c:9f:9a:b2:b6:a3:70:17:52:81:8a: 36:d2:2b:9c:ad:0a:63:34:04:e7:36:b9:31:60:a9: 99:43:83:6d:df:ec:af:f3:01:18:00:6b:f9:b7:4d: da:f9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 51:0E:AD:7C:60:DA:DD:F5:88:AA:D1:C4:40:40:44:5B:4B:FE:2C:DA X509v3 Authority Key Identifier: keyid:53:2A:4A:6E:A2:52:E9:D1:CF:F5:74:81:A5:A8:6B:35:CE:0D:D2:1F X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/47df2ad0-6e99-44a7-a068-500656ffb00f/0/532A4A6EA252E9D1CFF57481A5A86B35CE0DD21F.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/532A4A6EA252E9D1CFF57481A5A86B35CE0DD21F.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/47df2ad0-6e99-44a7-a068-500656ffb00f/0/532A4A6EA252E9D1CFF57481A5A86B35CE0DD21F.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 12:bf:88:f5:e8:f3:44:04:1b:03:d0:1d:61:f5:75:96:2a:ef: 14:11:a8:0e:02:21:cd:f9:19:ce:9c:a0:93:b0:9a:04:25:96: 1e:8a:bf:be:5f:db:9d:4c:9d:19:aa:17:6f:fb:5f:84:19:cb: 12:87:60:f0:6d:f8:d9:23:5b:5d:47:5e:dd:11:24:39:6a:70: 73:b4:2a:54:78:ec:92:38:94:64:44:52:65:6f:c2:6d:5d:d5: d0:87:1c:56:bf:5f:a6:94:e8:74:28:3b:99:e6:58:01:28:09: e8:70:bb:93:38:40:09:c6:47:7c:70:bf:6b:59:82:86:b4:ca: b0:27:24:1e:c4:c0:78:7a:0e:af:b2:e0:61:1d:98:d9:94:69: c6:8f:b5:bd:8e:84:49:cf:89:00:49:81:94:b0:b0:8d:c9:a7: 94:5d:0a:ae:c5:78:bc:cf:24:32:1b:fb:99:cf:1b:50:58:e6: e5:45:d2:04:d3:1d:48:b9:5a:4a:7f:80:96:12:0f:06:60:cd: a2:80:d6:21:06:f8:c9:51:06:0e:e7:47:3c:9f:db:69:ba:98: 90:80:58:b5:ab:c4:d3:84:10:0d:09:56:78:4f:87:f3:83:3e: 83:26:a5:f1:8e:49:95:3e:2a:d1:33:67:36:bd:c8:27:40:96: 2a:9a:1c:b9 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUTsOfPeStC70A+SIpLQ1OIaySkRswDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoNTMyQTRBNkVBMjUyRTlEMUNGRjU3NDgxQTVBODZCMzVD RTBERDIxRjAeFw0yNTEyMTgyMjA2NDVaFw0yNTEyMjIwNjMxNDVaMDMxMTAvBgNV BAMTKDUxMEVBRDdDNjBEQURERjU4OEFBRDFDNDQwNDA0NDVCNEJGRTJDREEwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDKh/OJo6RykhBI6h1Ieh/Q//gf oZba+BlnrZhyBFhaqEYo5ATAQufFSMZra0UIqc4wicXo3vS5tLZ6dz6/NUT0UO5T FpzZNvRaSpO/Sh6Ix1JMxmuWqEC5F3eOTvaCnYuWkzrO/BJODyEWRObe1Np5MZuJ HrqMDTtHp4hhW2J7PIKpNpGdGXmExBu4mlpNQiVA6bsjvS5V5ixXJZVtC8C1XIll UyTE0HqQQCnpZ0EoUhDmAT7ynIvRLftgXvDInKskDLV5aAZMy3CIQiC/2WGqtWKn PCRcn5qytqNwF1KBijbSK5ytCmM0BOc2uTFgqZlDg23f7K/zARgAa/m3Tdr5AgMB AAGjggI8MIICODAdBgNVHQ4EFgQUUQ6tfGDa3fWIqtHEQEBEW0v+LNowHwYDVR0j BBgwFoAUUypKbqJS6dHP9XSBpahrNc4N0h8wDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby80 N2RmMmFkMC02ZTk5LTQ0YTctYTA2OC01MDA2NTZmZmIwMGYvMC81MzJBNEE2RUEy NTJFOUQxQ0ZGNTc0ODFBNUE4NkIzNUNFMEREMjFGLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvNTMyQTRBNkVBMjUyRTlEMUNGRjU3NDgxQTVBODZCMzVDRTBE RDIxRi5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vNDdkZjJhZDAtNmU5OS00NGE3LWEw NjgtNTAwNjU2ZmZiMDBmLzAvNTMyQTRBNkVBMjUyRTlEMUNGRjU3NDgxQTVBODZC MzVDRTBERDIxRi5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBABK/iPXo80QEGwPQHWH1dZYq7xQRqA4CIc35 Gc6coJOwmgQllh6Kv75f251MnRmqF2/7X4QZyxKHYPBt+NkjW11HXt0RJDlqcHO0 KlR47JI4lGREUmVvwm1d1dCHHFa/X6aU6HQoO5nmWAEoCehwu5M4QAnGR3xwv2tZ goa0yrAnJB7EwHh6Dq+y4GEdmNmUacaPtb2OhEnPiQBJgZSwsI3Jp5RdCq7FeLzP JDIb+5nPG1BY5uVF0gTTHUi5Wkp/gJYSDwZgzaKA1iEG+MlRBg7nRzyf22m6mJCA WLWrxNOEEA0JVnhPh/ODPoMmpfGOSZU+KtEzZza9yCdAliqaHLk= -----END CERTIFICATE-----Generated at Fri Dec 19 17:30:57 2025 by rpki-client