This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf repo-rpki.idnic.net/repo/03908782-4520-45b4-99ed-193e51df51c3/0/52E77B06BC2691C613C7A9872EE1E28FCB8AA245.mft File: 52E77B06BC2691C613C7A9872EE1E28FCB8AA245.mft (raw, json) Hash identifier: W3M1Yf+ix1eyv81Wym6Hj8yjxpBbksGG2yAPsClZ2OE= Subject key identifier: 55:C8:55:25:36:95:F7:3A:E8:3F:0C:BF:30:72:00:E5:BB:07:E9:70 Authority key identifier: 52:E7:7B:06:BC:26:91:C6:13:C7:A9:87:2E:E1:E2:8F:CB:8A:A2:45 Certificate issuer: /CN=52E77B06BC2691C613C7A9872EE1E28FCB8AA245 Certificate serial: 4C32F94C38BF790CDC0E9825EE0250CE46251066 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/52E77B06BC2691C613C7A9872EE1E28FCB8AA245.cer Subject info access: rsync://repo-rpki.idnic.net/repo/03908782-4520-45b4-99ed-193e51df51c3/0/52E77B06BC2691C613C7A9872EE1E28FCB8AA245.mft Manifest number: 028F Signing time: Mon 22 Dec 2025 15:01:20 +0000 Manifest this update: Mon 22 Dec 2025 14:56:20 +0000 Manifest next update: Thu 25 Dec 2025 19:01:20 +0000 Files and hashes: 1: 3130332e3138302e3136352e302f32342d3234203d3e20313338313331.roa (hash: UDP5vaqP++IAcM6lMBhTtGhgbdITohHwdo+pbRZf5tI=) 2: 52E77B06BC2691C613C7A9872EE1E28FCB8AA245.crl (hash: FTOCrY+hnsyh6lmnSPAziblzUz0G5X9D/JI1aNWZO7E=) 3: 3130332e3138302e3136342e302f32332d3233203d3e20313338313331.roa (hash: YBihOSXIj0+TsV9w8FB5TlmuTjj67BcUuD5PWZy4luk=) 4: 3130332e3138302e3136342e302f32342d3234203d3e20313338313331.roa (hash: fKMeJeAwMbkwf1kmZ/AB9YQDJH0OhHULVGJWeX+RPu0=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/03908782-4520-45b4-99ed-193e51df51c3/0/52E77B06BC2691C613C7A9872EE1E28FCB8AA245.crl rsync://repo-rpki.idnic.net/repo/03908782-4520-45b4-99ed-193e51df51c3/0/52E77B06BC2691C613C7A9872EE1E28FCB8AA245.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/52E77B06BC2691C613C7A9872EE1E28FCB8AA245.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 25 Dec 2025 19:01:20 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 4c:32:f9:4c:38:bf:79:0c:dc:0e:98:25:ee:02:50:ce:46:25:10:66 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=52E77B06BC2691C613C7A9872EE1E28FCB8AA245 Validity Not Before: Dec 22 14:56:20 2025 GMT Not After : Dec 25 19:01:20 2025 GMT Subject: CN=55C855253695F73AE83F0CBF307200E5BB07E970 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d1:d0:41:76:34:2c:1e:62:88:d3:d6:b0:89:bf: 9c:82:98:cb:a2:cb:d3:0c:8e:cd:86:15:45:1e:3c: c7:78:85:99:46:25:eb:fe:49:ce:80:bc:cd:43:11: 2e:9f:a1:47:ab:ff:d5:4e:51:eb:37:eb:e3:f4:29: 67:d6:e2:db:5c:56:01:af:87:76:18:7c:ae:1e:9f: cb:e7:b8:56:56:47:88:9a:f9:0a:03:a7:ed:5f:95: 54:c9:2d:0a:55:de:35:26:16:2b:84:ec:bb:a8:94: 34:23:63:d2:a4:4b:d1:52:77:ea:74:65:14:6e:62: 5c:86:7c:42:ec:22:ec:61:b7:bd:b9:8b:1d:be:9d: 28:a2:98:06:1a:69:63:ae:dd:98:ec:bd:d4:a9:5e: 69:34:96:a0:00:23:d4:07:8f:fa:36:ec:39:b7:13: 05:0d:e2:ab:c4:90:96:c9:0e:f2:32:fe:34:1f:7b: c1:54:07:c0:5b:bb:b2:a9:d2:09:83:8e:08:b8:dd: 08:1e:db:4a:51:31:94:ba:6a:9a:94:c0:e6:13:3e: 92:6d:64:6d:ab:32:c1:fc:80:6e:1e:ba:55:09:7c: de:20:ce:0e:08:fc:5e:d9:48:e9:bf:2f:30:ff:b4: 6b:35:98:68:b3:2c:cb:d3:79:23:e2:d5:dc:51:38: 82:d7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 55:C8:55:25:36:95:F7:3A:E8:3F:0C:BF:30:72:00:E5:BB:07:E9:70 X509v3 Authority Key Identifier: keyid:52:E7:7B:06:BC:26:91:C6:13:C7:A9:87:2E:E1:E2:8F:CB:8A:A2:45 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/03908782-4520-45b4-99ed-193e51df51c3/0/52E77B06BC2691C613C7A9872EE1E28FCB8AA245.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/52E77B06BC2691C613C7A9872EE1E28FCB8AA245.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/03908782-4520-45b4-99ed-193e51df51c3/0/52E77B06BC2691C613C7A9872EE1E28FCB8AA245.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 16:e7:41:0c:27:2e:c2:81:65:b8:d0:54:af:07:ba:7a:4c:5d: cb:6d:46:62:9d:02:73:c8:d2:00:08:58:fd:74:56:f1:ed:f7: 65:f9:99:87:43:a5:9e:22:07:9f:b0:53:b7:19:a1:8b:9c:18: ae:95:76:a5:3c:ad:14:d5:a9:62:ca:17:e6:ef:f9:16:e6:8a: 23:fa:b7:46:27:69:ef:fc:ce:df:ab:c1:74:21:cf:e2:29:3f: c1:05:9f:31:7c:37:f4:d4:10:8d:eb:d2:c4:87:ec:54:8a:35: e5:25:04:ff:ad:40:86:ea:32:c5:ee:f9:d0:b4:b1:36:16:e3: cf:8d:73:73:cc:7e:36:bb:49:c1:04:a7:d0:93:ad:93:67:7e: 06:cc:48:79:86:a8:e9:c8:60:ae:0a:d7:b7:ae:0f:93:f8:19: 16:1b:c6:ae:11:a4:bc:f3:53:0e:a2:d8:8a:72:70:32:29:a1: df:b2:06:3f:c0:12:1a:78:44:d3:15:88:62:a1:b8:80:70:49: 12:71:90:f8:53:7f:de:e7:c3:a7:65:90:79:c0:2f:bf:d1:f7: 91:36:5e:d3:b9:8c:13:b6:88:72:a4:84:2f:f4:5b:c1:16:f4: e4:fc:16:ec:83:51:bf:56:cb:c8:a1:d5:cc:13:8e:b0:67:a9: 24:7f:4e:a8 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUTDL5TDi/eQzcDpgl7gJQzkYlEGYwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoNTJFNzdCMDZCQzI2OTFDNjEzQzdBOTg3MkVFMUUyOEZD QjhBQTI0NTAeFw0yNTEyMjIxNDU2MjBaFw0yNTEyMjUxOTAxMjBaMDMxMTAvBgNV BAMTKDU1Qzg1NTI1MzY5NUY3M0FFODNGMENCRjMwNzIwMEU1QkIwN0U5NzAwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDR0EF2NCweYojT1rCJv5yCmMui y9MMjs2GFUUePMd4hZlGJev+Sc6AvM1DES6foUer/9VOUes36+P0KWfW4ttcVgGv h3YYfK4en8vnuFZWR4ia+QoDp+1flVTJLQpV3jUmFiuE7LuolDQjY9KkS9FSd+p0 ZRRuYlyGfELsIuxht725ix2+nSiimAYaaWOu3ZjsvdSpXmk0lqAAI9QHj/o27Dm3 EwUN4qvEkJbJDvIy/jQfe8FUB8Bbu7Kp0gmDjgi43Qge20pRMZS6apqUwOYTPpJt ZG2rMsH8gG4eulUJfN4gzg4I/F7ZSOm/LzD/tGs1mGizLMvTeSPi1dxROILXAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUVchVJTaV9zroPwy/MHIA5bsH6XAwHwYDVR0j BBgwFoAUUud7BrwmkcYTx6mHLuHij8uKokUwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby8w MzkwODc4Mi00NTIwLTQ1YjQtOTllZC0xOTNlNTFkZjUxYzMvMC81MkU3N0IwNkJD MjY5MUM2MTNDN0E5ODcyRUUxRTI4RkNCOEFBMjQ1LmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvNTJFNzdCMDZCQzI2OTFDNjEzQzdBOTg3MkVFMUUyOEZDQjhB QTI0NS5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vMDM5MDg3ODItNDUyMC00NWI0LTk5 ZWQtMTkzZTUxZGY1MWMzLzAvNTJFNzdCMDZCQzI2OTFDNjEzQzdBOTg3MkVFMUUy OEZDQjhBQTI0NS5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBABbnQQwnLsKBZbjQVK8HunpMXcttRmKdAnPI 0gAIWP10VvHt92X5mYdDpZ4iB5+wU7cZoYucGK6VdqU8rRTVqWLKF+bv+RbmiiP6 t0Ynae/8zt+rwXQhz+IpP8EFnzF8N/TUEI3r0sSH7FSKNeUlBP+tQIbqMsXu+dC0 sTYW48+Nc3PMfja7ScEEp9CTrZNnfgbMSHmGqOnIYK4K17euD5P4GRYbxq4RpLzz Uw6i2IpycDIpod+yBj/AEhp4RNMViGKhuIBwSRJxkPhTf97nw6dlkHnAL7/R95E2 XtO5jBO2iHKkhC/0W8EW9OT8FuyDUb9Wy8ih1cwTjrBnqSR/Tqg= -----END CERTIFICATE-----Generated at Wed Dec 24 16:04:43 2025 by rpki-client