This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf repo-rpki.idnic.net/repo/03908782-4520-45b4-99ed-193e51df51c3/0/52E77B06BC2691C613C7A9872EE1E28FCB8AA245.mft File: 52E77B06BC2691C613C7A9872EE1E28FCB8AA245.mft (raw, json) Hash identifier: UAAAnk3mFpnW1Fljg79UOeJTHXAVeMbDoTtSlja8+Yc= Subject key identifier: 65:A0:29:C2:3D:20:9A:0C:4C:8F:E1:8B:BC:C5:04:2D:5D:EA:B9:1F Authority key identifier: 52:E7:7B:06:BC:26:91:C6:13:C7:A9:87:2E:E1:E2:8F:CB:8A:A2:45 Certificate issuer: /CN=52E77B06BC2691C613C7A9872EE1E28FCB8AA245 Certificate serial: 2B27EF839115A5FAFACEE4B99F3C17BE971CD890 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/52E77B06BC2691C613C7A9872EE1E28FCB8AA245.cer Subject info access: rsync://repo-rpki.idnic.net/repo/03908782-4520-45b4-99ed-193e51df51c3/0/52E77B06BC2691C613C7A9872EE1E28FCB8AA245.mft Manifest number: 0289 Signing time: Mon 08 Dec 2025 20:00:56 +0000 Manifest this update: Mon 08 Dec 2025 19:55:56 +0000 Manifest next update: Fri 12 Dec 2025 04:06:56 +0000 Files and hashes: 1: 3130332e3138302e3136342e302f32332d3233203d3e20313338313331.roa (hash: YBihOSXIj0+TsV9w8FB5TlmuTjj67BcUuD5PWZy4luk=) 2: 52E77B06BC2691C613C7A9872EE1E28FCB8AA245.crl (hash: nKRjvwGXVSTJ++sSocwecaBC/vV/Q5Lyt8BnAsHCM0E=) 3: 3130332e3138302e3136342e302f32342d3234203d3e20313338313331.roa (hash: fKMeJeAwMbkwf1kmZ/AB9YQDJH0OhHULVGJWeX+RPu0=) 4: 3130332e3138302e3136352e302f32342d3234203d3e20313338313331.roa (hash: UDP5vaqP++IAcM6lMBhTtGhgbdITohHwdo+pbRZf5tI=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/03908782-4520-45b4-99ed-193e51df51c3/0/52E77B06BC2691C613C7A9872EE1E28FCB8AA245.crl rsync://repo-rpki.idnic.net/repo/03908782-4520-45b4-99ed-193e51df51c3/0/52E77B06BC2691C613C7A9872EE1E28FCB8AA245.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/52E77B06BC2691C613C7A9872EE1E28FCB8AA245.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 12 Dec 2025 04:06:56 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2b:27:ef:83:91:15:a5:fa:fa:ce:e4:b9:9f:3c:17:be:97:1c:d8:90 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=52E77B06BC2691C613C7A9872EE1E28FCB8AA245 Validity Not Before: Dec 8 19:55:56 2025 GMT Not After : Dec 12 04:06:56 2025 GMT Subject: CN=65A029C23D209A0C4C8FE18BBCC5042D5DEAB91F Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c4:3e:eb:38:58:9f:c8:79:3e:95:2a:16:67:9d: b8:73:bb:85:65:94:42:53:15:94:e1:90:d9:5f:30: d3:68:a4:5e:32:6f:8a:ca:b1:f4:9e:22:71:cd:2a: 91:4e:06:2c:22:90:46:63:1d:07:91:f3:99:7f:7d: 58:18:53:33:7a:83:00:64:c9:aa:34:32:68:f9:7c: e6:36:61:4a:be:7e:f4:2a:86:6a:43:94:34:41:e9: fc:98:32:bb:bd:ae:8b:27:35:e7:f9:93:f4:66:3e: 7a:0a:b4:b3:62:93:47:0e:aa:cd:2f:cd:41:59:3b: 17:09:84:56:aa:9d:73:bd:54:52:61:8f:e7:52:1e: 0f:c4:88:5c:d2:d7:8d:ff:bc:4d:b1:e9:db:a4:f9: 97:e0:97:cc:4b:c8:eb:c0:53:a8:b5:55:e4:52:a9: 4d:a2:03:97:cb:38:be:90:a0:70:14:2c:ea:db:6c: 78:bf:0c:9b:b3:08:70:8b:34:e4:98:ab:d4:97:88: c8:f0:aa:87:81:c3:f2:64:d9:32:68:3e:b8:a9:3c: 7a:da:0d:ed:f6:fc:6e:33:cc:67:b5:bf:a4:52:08: be:fd:04:cd:64:2c:9a:44:58:9a:9e:7f:3c:53:4e: e8:b9:7c:a1:30:4c:c5:f9:f9:1d:e1:fa:de:91:e6: a3:cd Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 65:A0:29:C2:3D:20:9A:0C:4C:8F:E1:8B:BC:C5:04:2D:5D:EA:B9:1F X509v3 Authority Key Identifier: keyid:52:E7:7B:06:BC:26:91:C6:13:C7:A9:87:2E:E1:E2:8F:CB:8A:A2:45 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/03908782-4520-45b4-99ed-193e51df51c3/0/52E77B06BC2691C613C7A9872EE1E28FCB8AA245.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/52E77B06BC2691C613C7A9872EE1E28FCB8AA245.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/03908782-4520-45b4-99ed-193e51df51c3/0/52E77B06BC2691C613C7A9872EE1E28FCB8AA245.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 09:92:c3:a3:a5:4d:b7:3a:2b:85:a1:47:b0:82:1f:a3:2b:92: 43:b5:49:3f:02:77:2a:1c:2d:60:d8:d7:4f:54:23:aa:05:b4: c6:a5:4d:f6:74:1d:c5:09:7d:bd:de:51:c0:21:53:c4:7f:9d: 18:25:45:1e:3d:0f:a9:bc:4d:2d:94:26:1c:9b:b3:1d:96:bd: 29:c2:20:51:2f:48:56:28:4b:38:5f:7d:ce:71:ae:a1:ae:25: 79:00:51:a1:f0:d5:2e:76:2b:18:fc:06:8b:8b:b0:03:32:5a: eb:68:a4:f4:2b:af:e3:89:f3:bc:64:df:53:a5:6f:6b:e9:c5: e8:96:ff:b0:a6:7d:cf:b5:d7:91:6c:41:e6:c3:25:98:15:1b: f3:b2:2f:82:b2:3a:3a:57:a9:b4:9a:e1:54:20:89:85:c5:6a: 03:c1:61:a8:90:46:26:66:ba:66:39:63:12:53:d6:56:df:81: a2:51:7e:d7:93:a0:e4:a5:eb:bc:84:f8:23:c1:5c:e5:95:76: 26:6b:05:04:7f:d2:51:ae:f6:61:d6:05:26:aa:18:5a:89:04: 3f:2a:58:ea:50:94:98:af:bb:0f:24:f7:7a:5f:39:13:dc:e1: 4e:02:60:12:e6:97:c2:92:69:da:ab:46:98:7e:9f:44:b7:a6: 13:b0:cf:f8 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUKyfvg5EVpfr6zuS5nzwXvpcc2JAwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoNTJFNzdCMDZCQzI2OTFDNjEzQzdBOTg3MkVFMUUyOEZD QjhBQTI0NTAeFw0yNTEyMDgxOTU1NTZaFw0yNTEyMTIwNDA2NTZaMDMxMTAvBgNV BAMTKDY1QTAyOUMyM0QyMDlBMEM0QzhGRTE4QkJDQzUwNDJENURFQUI5MUYwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDEPus4WJ/IeT6VKhZnnbhzu4Vl lEJTFZThkNlfMNNopF4yb4rKsfSeInHNKpFOBiwikEZjHQeR85l/fVgYUzN6gwBk yao0Mmj5fOY2YUq+fvQqhmpDlDRB6fyYMru9rosnNef5k/RmPnoKtLNik0cOqs0v zUFZOxcJhFaqnXO9VFJhj+dSHg/EiFzS143/vE2x6duk+Zfgl8xLyOvAU6i1VeRS qU2iA5fLOL6QoHAULOrbbHi/DJuzCHCLNOSYq9SXiMjwqoeBw/Jk2TJoPripPHra De32/G4zzGe1v6RSCL79BM1kLJpEWJqefzxTTui5fKEwTMX5+R3h+t6R5qPNAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUZaApwj0gmgxMj+GLvMUELV3quR8wHwYDVR0j BBgwFoAUUud7BrwmkcYTx6mHLuHij8uKokUwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby8w MzkwODc4Mi00NTIwLTQ1YjQtOTllZC0xOTNlNTFkZjUxYzMvMC81MkU3N0IwNkJD MjY5MUM2MTNDN0E5ODcyRUUxRTI4RkNCOEFBMjQ1LmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvNTJFNzdCMDZCQzI2OTFDNjEzQzdBOTg3MkVFMUUyOEZDQjhB QTI0NS5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vMDM5MDg3ODItNDUyMC00NWI0LTk5 ZWQtMTkzZTUxZGY1MWMzLzAvNTJFNzdCMDZCQzI2OTFDNjEzQzdBOTg3MkVFMUUy OEZDQjhBQTI0NS5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAAmSw6OlTbc6K4WhR7CCH6MrkkO1ST8Cdyoc LWDY109UI6oFtMalTfZ0HcUJfb3eUcAhU8R/nRglRR49D6m8TS2UJhybsx2WvSnC IFEvSFYoSzhffc5xrqGuJXkAUaHw1S52Kxj8BouLsAMyWutopPQrr+OJ87xk31Ol b2vpxeiW/7Cmfc+115FsQebDJZgVG/OyL4KyOjpXqbSa4VQgiYXFagPBYaiQRiZm umY5YxJT1lbfgaJRfteToOSl67yE+CPBXOWVdiZrBQR/0lGu9mHWBSaqGFqJBD8q WOpQlJivuw8k93pfORPc4U4CYBLml8KSadqrRph+n0S3phOwz/g= -----END CERTIFICATE-----Generated at Wed Dec 10 02:50:45 2025 by rpki-client