This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf repo-rpki.idnic.net/repo/b5eabacd-28eb-4b96-8610-dbb4b06fc8bd/0/52D962F5A9CABE2F4089548951269E5BD5F3249D.mft File: 52D962F5A9CABE2F4089548951269E5BD5F3249D.mft (raw, json) Hash identifier: 7FUJ6yCT08wpLBn9bGhdWF9yyz7F407OB1G6PrTzzsY= Subject key identifier: BA:CF:83:87:98:D2:ED:42:D3:94:58:E9:95:B2:63:58:2F:48:60:FB Authority key identifier: 52:D9:62:F5:A9:CA:BE:2F:40:89:54:89:51:26:9E:5B:D5:F3:24:9D Certificate issuer: /CN=52D962F5A9CABE2F4089548951269E5BD5F3249D Certificate serial: 6C8C0EAD8ED90ABE90896FCAC2C4D6EC97016D87 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/52D962F5A9CABE2F4089548951269E5BD5F3249D.cer Subject info access: rsync://repo-rpki.idnic.net/repo/b5eabacd-28eb-4b96-8610-dbb4b06fc8bd/0/52D962F5A9CABE2F4089548951269E5BD5F3249D.mft Manifest number: C0 Signing time: Wed 24 Dec 2025 13:20:01 +0000 Manifest this update: Wed 24 Dec 2025 13:15:01 +0000 Manifest next update: Sat 27 Dec 2025 21:59:01 +0000 Files and hashes: 1: 3130332e3139312e3135352e302f32342d3234203d3e20313439393236.roa (hash: vIF48KMANXIGE+Lk+ZdIeOLTYmbNmfa3MrBKBvJQqmE=) 2: 3130332e3139312e3135342e302f32342d3234203d3e20313439393236.roa (hash: c4ofB5VSDY4XXKhWxq0LhNmllp1P3fen4sP7Y+RjYTk=) 3: 52D962F5A9CABE2F4089548951269E5BD5F3249D.crl (hash: R9FnDPYnHk6yFkHkgM0NXydqJx2ujOLpMuj7cw7VY8I=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/b5eabacd-28eb-4b96-8610-dbb4b06fc8bd/0/52D962F5A9CABE2F4089548951269E5BD5F3249D.crl rsync://repo-rpki.idnic.net/repo/b5eabacd-28eb-4b96-8610-dbb4b06fc8bd/0/52D962F5A9CABE2F4089548951269E5BD5F3249D.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/52D962F5A9CABE2F4089548951269E5BD5F3249D.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 27 Dec 2025 17:20:12 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 6c:8c:0e:ad:8e:d9:0a:be:90:89:6f:ca:c2:c4:d6:ec:97:01:6d:87 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=52D962F5A9CABE2F4089548951269E5BD5F3249D Validity Not Before: Dec 24 13:15:01 2025 GMT Not After : Dec 27 21:59:01 2025 GMT Subject: CN=BACF838798D2ED42D39458E995B263582F4860FB Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c1:7f:c0:64:c2:16:9f:a7:71:0f:51:c5:49:6c: a4:8f:36:b2:e2:37:20:b4:0f:f0:4f:da:aa:fc:5c: be:5f:5d:ec:71:d1:c3:36:a7:6c:5f:d1:de:d4:fa: e5:7a:f5:ee:f0:a2:5e:a2:d9:b9:e5:99:c3:16:55: bb:d6:ae:18:80:21:0c:a8:c3:9f:43:6c:74:cf:c8: ea:89:59:6d:85:21:68:1a:95:ee:dd:2c:d7:db:fc: 6d:f3:75:c1:e7:8e:24:a4:e7:92:0e:bc:80:e0:fc: 0a:ea:2e:37:5e:a3:cc:e2:46:cf:08:93:85:d8:15: 37:16:07:50:34:06:e1:3d:cc:cf:ab:6f:3d:54:00: e0:5c:dd:31:5f:5d:3e:39:f2:55:22:c4:67:2d:d7: eb:7d:29:7b:b5:ae:76:3f:1a:9f:52:f9:90:93:09: e4:2e:6e:1f:5a:46:67:43:db:06:60:4e:e6:2b:6a: 36:46:3b:c8:8f:fb:9f:92:d7:2a:06:3d:f9:9d:59: 28:e0:d2:88:f4:ae:f2:5f:42:d8:18:56:c6:7f:af: 50:1a:ca:08:5d:10:a4:d0:27:e4:7d:31:aa:32:fc: ca:86:a7:2c:27:d9:6b:3a:78:c6:d1:20:e7:06:ab: 10:19:bf:97:42:7b:ef:95:08:e6:c6:d5:7d:84:1b: b1:3b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: BA:CF:83:87:98:D2:ED:42:D3:94:58:E9:95:B2:63:58:2F:48:60:FB X509v3 Authority Key Identifier: keyid:52:D9:62:F5:A9:CA:BE:2F:40:89:54:89:51:26:9E:5B:D5:F3:24:9D X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/b5eabacd-28eb-4b96-8610-dbb4b06fc8bd/0/52D962F5A9CABE2F4089548951269E5BD5F3249D.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/52D962F5A9CABE2F4089548951269E5BD5F3249D.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/b5eabacd-28eb-4b96-8610-dbb4b06fc8bd/0/52D962F5A9CABE2F4089548951269E5BD5F3249D.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 4b:30:78:56:20:3f:92:fc:09:22:0f:00:20:a8:3f:79:b8:d8: c8:59:00:60:96:b5:cf:61:e7:1e:6b:cb:39:8f:39:04:4b:52: 79:43:0e:62:ad:12:bc:99:2b:db:2a:51:3b:ef:7a:39:f5:ff: ce:ce:7c:47:6f:6a:1d:63:7b:8a:52:97:c0:a8:3d:51:79:f2: c4:39:b5:5e:d9:7c:80:5b:03:0c:0b:6a:e0:a6:3c:a9:46:1a: 25:18:88:a1:fd:9c:e1:5d:41:d7:97:a7:ca:22:9b:97:5c:9e: cd:ea:56:01:d9:74:bb:aa:b6:ca:c9:88:00:a0:01:bf:35:23: 18:2c:a2:06:c0:01:f9:61:88:5e:76:37:c6:c6:98:18:29:99: e6:9c:d9:b7:f4:29:37:bc:30:bc:37:93:51:f4:d6:da:18:f6: e8:27:32:ea:bc:1a:8c:59:d8:1f:60:68:98:d3:fc:10:52:b2: e5:66:85:21:47:cb:f1:0b:6c:c0:b5:e4:b4:dc:e9:14:30:a1: 97:f7:db:aa:59:b0:a7:5c:e8:09:ae:e1:07:38:1d:01:57:96: 10:70:33:65:50:73:3c:19:20:08:03:10:f2:2e:c7:a3:74:f0: 3d:d7:96:46:77:8f:25:c2:45:a0:67:c8:70:82:60:87:e6:a6: a5:41:71:a4 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUbIwOrY7ZCr6QiW/KwsTW7JcBbYcwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoNTJEOTYyRjVBOUNBQkUyRjQwODk1NDg5NTEyNjlFNUJE NUYzMjQ5RDAeFw0yNTEyMjQxMzE1MDFaFw0yNTEyMjcyMTU5MDFaMDMxMTAvBgNV BAMTKEJBQ0Y4Mzg3OThEMkVENDJEMzk0NThFOTk1QjI2MzU4MkY0ODYwRkIwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDBf8Bkwhafp3EPUcVJbKSPNrLi NyC0D/BP2qr8XL5fXexx0cM2p2xf0d7U+uV69e7wol6i2bnlmcMWVbvWrhiAIQyo w59DbHTPyOqJWW2FIWgale7dLNfb/G3zdcHnjiSk55IOvIDg/ArqLjdeo8ziRs8I k4XYFTcWB1A0BuE9zM+rbz1UAOBc3TFfXT458lUixGct1+t9KXu1rnY/Gp9S+ZCT CeQubh9aRmdD2wZgTuYrajZGO8iP+5+S1yoGPfmdWSjg0oj0rvJfQtgYVsZ/r1Aa yghdEKTQJ+R9Maoy/MqGpywn2Ws6eMbRIOcGqxAZv5dCe++VCObG1X2EG7E7AgMB AAGjggI8MIICODAdBgNVHQ4EFgQUus+Dh5jS7ULTlFjplbJjWC9IYPswHwYDVR0j BBgwFoAUUtli9anKvi9AiVSJUSaeW9XzJJ0wDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby9i NWVhYmFjZC0yOGViLTRiOTYtODYxMC1kYmI0YjA2ZmM4YmQvMC81MkQ5NjJGNUE5 Q0FCRTJGNDA4OTU0ODk1MTI2OUU1QkQ1RjMyNDlELmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvNTJEOTYyRjVBOUNBQkUyRjQwODk1NDg5NTEyNjlFNUJENUYz MjQ5RC5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vYjVlYWJhY2QtMjhlYi00Yjk2LTg2 MTAtZGJiNGIwNmZjOGJkLzAvNTJEOTYyRjVBOUNBQkUyRjQwODk1NDg5NTEyNjlF NUJENUYzMjQ5RC5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAEsweFYgP5L8CSIPACCoP3m42MhZAGCWtc9h 5x5ryzmPOQRLUnlDDmKtEryZK9sqUTvvejn1/87OfEdvah1je4pSl8CoPVF58sQ5 tV7ZfIBbAwwLauCmPKlGGiUYiKH9nOFdQdeXp8oim5dcns3qVgHZdLuqtsrJiACg Ab81IxgsogbAAflhiF52N8bGmBgpmeac2bf0KTe8MLw3k1H01toY9ugnMuq8GoxZ 2B9gaJjT/BBSsuVmhSFHy/ELbMC15LTc6RQwoZf326pZsKdc6Amu4Qc4HQFXlhBw M2VQczwZIAgDEPIux6N08D3XlkZ3jyXCRaBnyHCCYIfmpqVBcaQ= -----END CERTIFICATE-----Generated at Wed Dec 24 22:05:06 2025 by rpki-client