This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf repo-rpki.idnic.net/repo/a1ee3765-0abb-4ba3-a00d-cbcec8399928/0/52C34A755DF981FDF13789624A2BE028AB5B5DAE.mft File: 52C34A755DF981FDF13789624A2BE028AB5B5DAE.mft (raw, json) Hash identifier: Whz5TXymLoRqaf91JfNCQtq94w0CT1VL1+ui8MZ3U1w= Subject key identifier: E4:3C:F8:48:28:53:08:AC:3D:53:C4:CD:02:D0:DE:2A:22:6D:05:DE Authority key identifier: 52:C3:4A:75:5D:F9:81:FD:F1:37:89:62:4A:2B:E0:28:AB:5B:5D:AE Certificate issuer: /CN=52C34A755DF981FDF13789624A2BE028AB5B5DAE Certificate serial: 7284BA55E146DFFAC31FBD39437DB8A2B0D1C20F Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/52C34A755DF981FDF13789624A2BE028AB5B5DAE.cer Subject info access: rsync://repo-rpki.idnic.net/repo/a1ee3765-0abb-4ba3-a00d-cbcec8399928/0/52C34A755DF981FDF13789624A2BE028AB5B5DAE.mft Manifest number: 0128 Signing time: Fri 19 Dec 2025 16:01:06 +0000 Manifest this update: Fri 19 Dec 2025 15:56:06 +0000 Manifest next update: Mon 22 Dec 2025 19:38:06 +0000 Files and hashes: 1: 3231302e38372e3131322e302f32342d3234203d3e20313532303533.roa (hash: KmvZNHMkYGjniiDVsPzoqz85biHBg1yoTLWktyy3KyI=) 2: 3231302e38372e3131332e302f32342d3234203d3e20313532303533.roa (hash: M/ahzHC3ODRI/WG3tVFzAKjzCsCePhBkrqbTyrlIMdA=) 3: 52C34A755DF981FDF13789624A2BE028AB5B5DAE.crl (hash: veZSuJDBH5ki/835N1V+euU6EYjEqYS4OZe+oShEiR4=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/a1ee3765-0abb-4ba3-a00d-cbcec8399928/0/52C34A755DF981FDF13789624A2BE028AB5B5DAE.crl rsync://repo-rpki.idnic.net/repo/a1ee3765-0abb-4ba3-a00d-cbcec8399928/0/52C34A755DF981FDF13789624A2BE028AB5B5DAE.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/52C34A755DF981FDF13789624A2BE028AB5B5DAE.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 22 Dec 2025 19:38:06 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 72:84:ba:55:e1:46:df:fa:c3:1f:bd:39:43:7d:b8:a2:b0:d1:c2:0f Signature Algorithm: sha256WithRSAEncryption Issuer: CN=52C34A755DF981FDF13789624A2BE028AB5B5DAE Validity Not Before: Dec 19 15:56:06 2025 GMT Not After : Dec 22 19:38:06 2025 GMT Subject: CN=E43CF848285308AC3D53C4CD02D0DE2A226D05DE Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:95:43:cc:92:c1:47:fb:b7:f8:58:45:52:36:22: 8d:00:f3:18:8e:7c:dd:d9:54:81:dd:ab:4b:c0:44: d3:89:02:83:16:4a:fe:78:2e:8c:4b:e9:bb:22:88: 82:cd:af:6a:33:02:00:dc:91:f8:ce:2e:af:9f:58: f5:e3:7e:83:93:a1:34:de:36:f7:af:72:15:dd:60: 0f:ee:4c:a5:fa:5e:21:b2:08:7f:19:cc:23:85:35: c5:69:6d:06:ac:13:0c:49:80:8d:d3:4f:a1:d5:80: af:70:8c:3d:e6:3b:d2:dc:5a:3a:57:8a:a5:d2:b2: 09:1a:b3:24:8d:fd:7c:e7:67:e8:59:89:e6:ee:97: 96:23:b4:ec:bd:69:10:2f:8e:dc:ec:19:10:8b:3a: 1d:c4:7b:9c:45:82:26:0a:4d:d8:0e:4f:32:68:2a: 31:7b:eb:6b:f2:28:0e:37:e1:28:c4:64:d1:a5:fd: 29:de:38:c7:87:ed:1f:1b:a4:af:ae:20:fb:9a:ff: 86:5f:53:e8:fb:96:bf:2a:12:b4:05:8b:45:1b:5a: 8b:c0:a1:ce:b1:15:5e:3d:98:62:ee:83:a5:c2:35: 32:0d:00:53:9c:87:f2:48:6c:55:cd:60:ef:41:55: 3b:03:73:25:b6:59:af:75:e9:02:43:ae:a3:e4:87: 5d:3f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: E4:3C:F8:48:28:53:08:AC:3D:53:C4:CD:02:D0:DE:2A:22:6D:05:DE X509v3 Authority Key Identifier: keyid:52:C3:4A:75:5D:F9:81:FD:F1:37:89:62:4A:2B:E0:28:AB:5B:5D:AE X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/a1ee3765-0abb-4ba3-a00d-cbcec8399928/0/52C34A755DF981FDF13789624A2BE028AB5B5DAE.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/52C34A755DF981FDF13789624A2BE028AB5B5DAE.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/a1ee3765-0abb-4ba3-a00d-cbcec8399928/0/52C34A755DF981FDF13789624A2BE028AB5B5DAE.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 8c:67:da:74:1a:69:53:4c:ff:0c:81:c5:69:8e:80:61:84:02: bc:ed:7b:31:a8:d1:40:ec:ed:c8:73:6f:66:fc:19:6a:4f:a1: 9d:47:c7:62:50:fc:71:4f:56:19:a9:d2:0e:88:23:a1:e7:e9: 75:d8:8c:17:cf:6d:4f:23:a0:43:b0:5e:ed:03:76:c1:e6:1e: 21:82:30:13:28:2d:4c:03:a5:87:a9:b2:28:85:de:8a:73:ac: 14:ab:49:f0:6f:b1:67:80:71:73:fd:bf:19:76:fb:e9:17:c4: 2d:c2:6a:46:74:8f:a4:d0:22:45:37:08:fd:5a:f7:70:e4:3b: bd:2d:24:d7:53:3e:51:c9:8e:06:b4:e2:9f:bf:5b:2a:71:5c: 64:f4:3a:95:7b:e4:2c:03:7d:ee:34:75:11:3c:49:c6:e4:9b: d0:fe:2c:cc:35:5d:3d:cd:48:5b:9e:4d:62:ba:de:43:04:af: 33:24:cf:ef:da:dc:69:33:cd:12:11:76:01:ec:67:3f:f0:7c: 15:16:0d:d6:7e:0f:77:eb:23:58:12:a6:bc:b9:9f:e3:24:7c: b2:f3:ac:82:8f:df:37:db:b9:bd:08:b4:77:e1:37:19:a0:5a: 9c:d3:9a:63:b3:8d:f7:da:f1:ed:45:eb:68:ea:db:78:8a:6c: 3a:a1:68:be -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUcoS6VeFG3/rDH705Q324orDRwg8wDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoNTJDMzRBNzU1REY5ODFGREYxMzc4OTYyNEEyQkUwMjhB QjVCNURBRTAeFw0yNTEyMTkxNTU2MDZaFw0yNTEyMjIxOTM4MDZaMDMxMTAvBgNV BAMTKEU0M0NGODQ4Mjg1MzA4QUMzRDUzQzRDRDAyRDBERTJBMjI2RDA1REUwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCVQ8ySwUf7t/hYRVI2Io0A8xiO fN3ZVIHdq0vARNOJAoMWSv54LoxL6bsiiILNr2ozAgDckfjOLq+fWPXjfoOToTTe NvevchXdYA/uTKX6XiGyCH8ZzCOFNcVpbQasEwxJgI3TT6HVgK9wjD3mO9LcWjpX iqXSsgkasySN/XznZ+hZiebul5YjtOy9aRAvjtzsGRCLOh3Ee5xFgiYKTdgOTzJo KjF762vyKA434SjEZNGl/SneOMeH7R8bpK+uIPua/4ZfU+j7lr8qErQFi0UbWovA oc6xFV49mGLug6XCNTINAFOch/JIbFXNYO9BVTsDcyW2Wa916QJDrqPkh10/AgMB AAGjggI8MIICODAdBgNVHQ4EFgQU5Dz4SChTCKw9U8TNAtDeKiJtBd4wHwYDVR0j BBgwFoAUUsNKdV35gf3xN4liSivgKKtbXa4wDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby9h MWVlMzc2NS0wYWJiLTRiYTMtYTAwZC1jYmNlYzgzOTk5MjgvMC81MkMzNEE3NTVE Rjk4MUZERjEzNzg5NjI0QTJCRTAyOEFCNUI1REFFLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvNTJDMzRBNzU1REY5ODFGREYxMzc4OTYyNEEyQkUwMjhBQjVC NURBRS5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vYTFlZTM3NjUtMGFiYi00YmEzLWEw MGQtY2JjZWM4Mzk5OTI4LzAvNTJDMzRBNzU1REY5ODFGREYxMzc4OTYyNEEyQkUw MjhBQjVCNURBRS5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAIxn2nQaaVNM/wyBxWmOgGGEArztezGo0UDs 7chzb2b8GWpPoZ1Hx2JQ/HFPVhmp0g6II6Hn6XXYjBfPbU8joEOwXu0DdsHmHiGC MBMoLUwDpYepsiiF3opzrBSrSfBvsWeAcXP9vxl2++kXxC3CakZ0j6TQIkU3CP1a 93DkO70tJNdTPlHJjga04p+/WypxXGT0OpV75CwDfe40dRE8Scbkm9D+LMw1XT3N SFueTWK63kMErzMkz+/a3GkzzRIRdgHsZz/wfBUWDdZ+D3frI1gSpry5n+MkfLLz rIKP3zfbub0ItHfhNxmgWpzTmmOzjffa8e1F62jq23iKbDqhaL4= -----END CERTIFICATE-----Generated at Mon Dec 22 01:41:58 2025 by rpki-client