This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf repo-rpki.idnic.net/repo/a0fe163c-14d5-4e31-ac20-c04e3e44c34f/0/52DC1412C6708ADA13DE89F150FA8C5BEF205DCB.mft File: 52DC1412C6708ADA13DE89F150FA8C5BEF205DCB.mft (raw, json) Hash identifier: DBMYs3zA2N75pdbnDvx2mbQ9gw6YhW4Iqz9rUHwpzao= Subject key identifier: 5D:D7:0C:D5:32:1A:D0:11:98:BF:D8:C7:F4:D4:6B:98:98:50:7E:26 Authority key identifier: 52:DC:14:12:C6:70:8A:DA:13:DE:89:F1:50:FA:8C:5B:EF:20:5D:CB Certificate issuer: /CN=52DC1412C6708ADA13DE89F150FA8C5BEF205DCB Certificate serial: 2A224F9F4FD8B79A7C61FB4D6D6E059D0EA96184 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/52DC1412C6708ADA13DE89F150FA8C5BEF205DCB.cer Subject info access: rsync://repo-rpki.idnic.net/repo/a0fe163c-14d5-4e31-ac20-c04e3e44c34f/0/52DC1412C6708ADA13DE89F150FA8C5BEF205DCB.mft Manifest number: 0414 Signing time: Tue 23 Dec 2025 23:03:08 +0000 Manifest this update: Tue 23 Dec 2025 22:58:08 +0000 Manifest next update: Sat 27 Dec 2025 03:52:08 +0000 Files and hashes: 1: 52DC1412C6708ADA13DE89F150FA8C5BEF205DCB.crl (hash: jR4kjzh47j5LLGj6Y2QZ2woAN4+lZS/KIfnG1jaXcjw=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/a0fe163c-14d5-4e31-ac20-c04e3e44c34f/0/52DC1412C6708ADA13DE89F150FA8C5BEF205DCB.crl rsync://repo-rpki.idnic.net/repo/a0fe163c-14d5-4e31-ac20-c04e3e44c34f/0/52DC1412C6708ADA13DE89F150FA8C5BEF205DCB.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/52DC1412C6708ADA13DE89F150FA8C5BEF205DCB.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 27 Dec 2025 03:52:08 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2a:22:4f:9f:4f:d8:b7:9a:7c:61:fb:4d:6d:6e:05:9d:0e:a9:61:84 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=52DC1412C6708ADA13DE89F150FA8C5BEF205DCB Validity Not Before: Dec 23 22:58:08 2025 GMT Not After : Dec 27 03:52:08 2025 GMT Subject: CN=5DD70CD5321AD01198BFD8C7F4D46B9898507E26 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ef:d3:59:8e:c4:ca:3c:e1:23:4f:b7:a4:44:da: dd:0f:53:56:fd:0e:7d:9f:4f:a9:87:25:ee:d0:bf: dc:f1:ab:d2:42:98:e6:74:d2:b1:60:cb:2c:7c:b3: fe:e8:cb:6a:87:15:39:95:83:fc:ec:99:62:d9:47: 5f:30:91:a1:8c:8a:85:1e:46:e5:51:bc:5e:27:46: 7b:5e:22:1b:c1:ce:0c:86:13:58:f9:87:ff:60:01: 13:b2:51:f2:ff:13:7f:de:ae:18:2f:6e:f8:78:dc: 11:f9:4d:0b:87:9b:3d:72:64:cf:3c:16:a1:95:e4: 4b:b2:4b:be:df:df:0d:73:a6:28:fd:1e:9b:64:9f: f0:5b:a5:91:d2:77:e6:ab:2b:11:47:00:1d:27:8b: f8:9c:79:f5:49:73:22:e3:4f:f3:eb:76:88:bd:f5: 56:90:b1:c3:8c:2e:02:ed:71:62:89:17:85:71:a7: e2:84:e1:da:98:57:12:b3:cb:50:ba:87:3e:75:ef: 30:40:b5:ce:1d:22:73:d5:ae:f2:2a:52:68:5e:51: 77:0b:09:d2:21:d6:f5:d4:46:a2:4b:5e:8f:c7:2d: 27:df:ce:94:eb:79:b7:e1:37:0d:6b:af:e3:c4:62: 6e:eb:7e:b4:26:06:17:00:92:c0:40:05:c7:d2:24: d9:a1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 5D:D7:0C:D5:32:1A:D0:11:98:BF:D8:C7:F4:D4:6B:98:98:50:7E:26 X509v3 Authority Key Identifier: keyid:52:DC:14:12:C6:70:8A:DA:13:DE:89:F1:50:FA:8C:5B:EF:20:5D:CB X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/a0fe163c-14d5-4e31-ac20-c04e3e44c34f/0/52DC1412C6708ADA13DE89F150FA8C5BEF205DCB.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/52DC1412C6708ADA13DE89F150FA8C5BEF205DCB.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/a0fe163c-14d5-4e31-ac20-c04e3e44c34f/0/52DC1412C6708ADA13DE89F150FA8C5BEF205DCB.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 95:7c:50:14:a0:52:19:b9:b1:b7:15:e7:26:42:bf:0c:9b:1d: 6e:90:5f:82:18:c1:58:1d:1a:34:a3:97:d9:7f:98:b4:e5:af: 74:4c:3f:cb:b3:49:09:a5:a1:a8:ca:e2:93:92:bb:4a:fa:d4: 71:2a:53:54:57:99:c4:f8:cc:ec:97:e2:57:d0:d8:19:07:ad: c8:31:06:72:7e:bb:82:15:d5:85:d7:71:4a:f0:b2:44:a4:73: 0c:25:10:91:c7:24:9b:85:61:14:5b:37:58:f7:e2:44:ef:0d: 76:32:45:97:c4:dd:64:ed:3a:25:83:73:10:05:9e:a2:2d:fe: 39:0b:30:3a:66:02:fb:df:9a:0e:d7:0a:63:fc:60:a1:9e:bb: 04:39:ae:97:43:cf:5f:df:73:a7:56:89:5d:54:e8:d0:ba:74: 20:97:18:38:58:a6:d1:16:6d:dd:b1:dd:8d:a1:43:70:00:48: 72:81:cc:a8:9e:00:9a:b6:a8:06:32:6c:f0:6a:67:52:f4:25: 8d:35:6f:82:e6:c6:5e:ab:e3:9d:67:60:40:c4:52:24:e3:c5: 41:4b:35:91:b0:1e:1b:18:ef:17:86:aa:f3:c4:0b:f1:83:2e: 32:12:ae:dc:db:c6:4d:77:66:94:01:f4:51:07:60:0f:4c:68: ff:55:4b:64 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUKiJPn0/Yt5p8YftNbW4FnQ6pYYQwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoNTJEQzE0MTJDNjcwOEFEQTEzREU4OUYxNTBGQThDNUJF RjIwNURDQjAeFw0yNTEyMjMyMjU4MDhaFw0yNTEyMjcwMzUyMDhaMDMxMTAvBgNV BAMTKDVERDcwQ0Q1MzIxQUQwMTE5OEJGRDhDN0Y0RDQ2Qjk4OTg1MDdFMjYwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDv01mOxMo84SNPt6RE2t0PU1b9 Dn2fT6mHJe7Qv9zxq9JCmOZ00rFgyyx8s/7oy2qHFTmVg/zsmWLZR18wkaGMioUe RuVRvF4nRnteIhvBzgyGE1j5h/9gAROyUfL/E3/erhgvbvh43BH5TQuHmz1yZM88 FqGV5EuyS77f3w1zpij9Hptkn/BbpZHSd+arKxFHAB0ni/icefVJcyLjT/Prdoi9 9VaQscOMLgLtcWKJF4Vxp+KE4dqYVxKzy1C6hz517zBAtc4dInPVrvIqUmheUXcL CdIh1vXURqJLXo/HLSffzpTrebfhNw1rr+PEYm7rfrQmBhcAksBABcfSJNmhAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUXdcM1TIa0BGYv9jH9NRrmJhQfiYwHwYDVR0j BBgwFoAUUtwUEsZwitoT3onxUPqMW+8gXcswDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby9h MGZlMTYzYy0xNGQ1LTRlMzEtYWMyMC1jMDRlM2U0NGMzNGYvMC81MkRDMTQxMkM2 NzA4QURBMTNERTg5RjE1MEZBOEM1QkVGMjA1RENCLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvNTJEQzE0MTJDNjcwOEFEQTEzREU4OUYxNTBGQThDNUJFRjIw NURDQi5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vYTBmZTE2M2MtMTRkNS00ZTMxLWFj MjAtYzA0ZTNlNDRjMzRmLzAvNTJEQzE0MTJDNjcwOEFEQTEzREU4OUYxNTBGQThD NUJFRjIwNURDQi5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAJV8UBSgUhm5sbcV5yZCvwybHW6QX4IYwVgd GjSjl9l/mLTlr3RMP8uzSQmloajK4pOSu0r61HEqU1RXmcT4zOyX4lfQ2BkHrcgx BnJ+u4IV1YXXcUrwskSkcwwlEJHHJJuFYRRbN1j34kTvDXYyRZfE3WTtOiWDcxAF nqIt/jkLMDpmAvvfmg7XCmP8YKGeuwQ5rpdDz1/fc6dWiV1U6NC6dCCXGDhYptEW bd2x3Y2hQ3AASHKBzKieAJq2qAYybPBqZ1L0JY01b4Lmxl6r451nYEDEUiTjxUFL NZGwHhsY7xeGqvPEC/GDLjISrtzbxk13ZpQB9FEHYA9MaP9VS2Q= -----END CERTIFICATE-----Generated at Wed Dec 24 22:05:58 2025 by rpki-client