This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf repo-rpki.idnic.net/repo/ccbfb228-fd05-4afd-87bd-ed580b55036f/0/052EE59C1D4149A77DF1555311C056DCDBC5FF4C.mft File: 052EE59C1D4149A77DF1555311C056DCDBC5FF4C.mft (raw, json) Hash identifier: 3ENdlnC/vf7zSflm/PIBTZChbe5bWr3yxHmtKgi8ULQ= Subject key identifier: 84:8C:18:25:B4:25:9B:B1:A7:66:86:27:2E:9D:B8:4C:D6:2E:92:7D Authority key identifier: 05:2E:E5:9C:1D:41:49:A7:7D:F1:55:53:11:C0:56:DC:DB:C5:FF:4C Certificate issuer: /CN=052EE59C1D4149A77DF1555311C056DCDBC5FF4C Certificate serial: 11DA087A9B4AB61AE27C30A1CAF27F16D6BDF48E Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/052EE59C1D4149A77DF1555311C056DCDBC5FF4C.cer Subject info access: rsync://repo-rpki.idnic.net/repo/ccbfb228-fd05-4afd-87bd-ed580b55036f/0/052EE59C1D4149A77DF1555311C056DCDBC5FF4C.mft Manifest number: 033C Signing time: Mon 01 Dec 2025 16:32:06 +0000 Manifest this update: Mon 01 Dec 2025 16:27:06 +0000 Manifest next update: Thu 04 Dec 2025 20:43:06 +0000 Files and hashes: 1: 3130332e3136312e3139342e302f32342d3234203d3e20313431363232.roa (hash: byxFPyjiQJT5Oo5JN6VrZseWPHWMRktKnANVfaiZKVo=) 2: 3130332e3136312e3139352e302f32342d3234203d3e20313431363232.roa (hash: 3Jf6rjo7oK98mb2AwseOoU04Ietp18eSMPo87t19+zs=) 3: 3130332e3136312e3139342e302f32332d3233203d3e20313431363232.roa (hash: oZleMN4XSuVHyPBpWgeFkCol07oh2xMRlYa+Uzesyrw=) 4: 052EE59C1D4149A77DF1555311C056DCDBC5FF4C.crl (hash: KQRhROjWoysahZR5I2LQUr/6yGod4UY82s1q3DVNJAM=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/ccbfb228-fd05-4afd-87bd-ed580b55036f/0/052EE59C1D4149A77DF1555311C056DCDBC5FF4C.crl rsync://repo-rpki.idnic.net/repo/ccbfb228-fd05-4afd-87bd-ed580b55036f/0/052EE59C1D4149A77DF1555311C056DCDBC5FF4C.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/052EE59C1D4149A77DF1555311C056DCDBC5FF4C.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 04 Dec 2025 20:43:06 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 11:da:08:7a:9b:4a:b6:1a:e2:7c:30:a1:ca:f2:7f:16:d6:bd:f4:8e Signature Algorithm: sha256WithRSAEncryption Issuer: CN=052EE59C1D4149A77DF1555311C056DCDBC5FF4C Validity Not Before: Dec 1 16:27:06 2025 GMT Not After : Dec 4 20:43:06 2025 GMT Subject: CN=848C1825B4259BB1A76686272E9DB84CD62E927D Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d8:dd:c7:08:58:ad:33:66:d0:3e:06:57:97:25: f7:c2:f3:e6:45:71:26:42:c0:fb:c8:b6:8a:15:48: 78:c1:ce:42:9d:ba:08:47:4d:d7:dd:e4:ba:38:98: 38:fa:67:2a:d7:ac:e0:cb:72:e8:a0:e5:cb:85:93: 2f:e6:12:b9:84:0d:c3:da:1a:d0:40:29:2d:6c:8e: c7:c6:f8:cb:da:66:1b:e2:1f:c8:f7:cb:51:21:55: 4a:b8:de:2f:3d:31:f3:6a:12:2c:b2:e5:b4:ce:7d: 77:74:73:4b:53:3e:2b:1f:05:6d:16:24:e9:43:09: ad:5a:e1:f5:4f:8e:b4:60:b8:50:22:ea:7a:9b:7e: bf:5b:1a:c3:d3:8f:98:cd:75:8c:d9:79:58:72:5c: 1a:02:6a:e6:8f:9e:d8:b4:c6:35:0e:76:3c:1f:f7: f9:92:e4:1c:a5:f7:bb:3e:52:b4:bb:04:6e:46:0d: 25:07:65:b7:97:7a:ee:38:29:c1:06:cc:5f:41:46: bd:2b:62:e6:b3:c6:b9:42:d7:9a:28:7d:a7:4c:1e: 9a:76:33:d3:07:a5:ea:f5:ab:6b:07:1b:be:cc:29: d2:7e:2f:df:aa:15:53:b9:ae:8e:ae:8f:ed:61:8e: d2:d9:9b:e2:35:0d:8f:5a:17:54:02:a3:8a:a0:4d: e8:d7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 84:8C:18:25:B4:25:9B:B1:A7:66:86:27:2E:9D:B8:4C:D6:2E:92:7D X509v3 Authority Key Identifier: keyid:05:2E:E5:9C:1D:41:49:A7:7D:F1:55:53:11:C0:56:DC:DB:C5:FF:4C X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/ccbfb228-fd05-4afd-87bd-ed580b55036f/0/052EE59C1D4149A77DF1555311C056DCDBC5FF4C.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/052EE59C1D4149A77DF1555311C056DCDBC5FF4C.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/ccbfb228-fd05-4afd-87bd-ed580b55036f/0/052EE59C1D4149A77DF1555311C056DCDBC5FF4C.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption cc:eb:b9:e4:5a:03:75:ee:45:3b:1a:01:d9:92:73:80:d8:63: e5:98:05:5e:d3:79:f7:eb:76:7c:2d:99:32:fd:86:c1:6b:54: 46:c9:e9:db:15:14:f5:f4:03:3d:04:0b:a6:5c:17:b6:ee:84: e5:5c:ef:65:89:0c:1b:2d:d6:a8:9a:98:af:8a:86:89:c2:1c: d8:cf:78:99:08:a0:2a:b3:cb:f8:ff:b6:ac:d9:41:f5:05:4b: 9b:84:35:65:c2:9c:27:a0:6f:eb:ff:8e:a6:35:64:8f:cd:20: 3f:2d:5d:87:67:05:2d:5c:bb:8f:33:aa:67:f0:5b:37:f0:4c: bb:15:f4:8e:9b:61:5b:0b:22:36:fe:06:89:83:d5:41:56:c2: 47:f3:91:5a:00:c4:1f:a2:d4:64:51:bb:95:0a:13:e7:7f:bd: cd:93:35:7c:89:4c:ae:e2:5b:74:40:f2:37:d2:63:b7:d0:7d: 93:5e:6f:10:07:1f:ab:2b:e5:cb:7e:f8:31:fb:24:75:75:66: cf:bf:39:89:10:49:8c:af:b9:21:62:a8:cb:7e:3d:d1:53:a3: 11:00:12:c9:c3:5d:00:d5:ff:27:5a:b8:fc:71:9f:5d:45:21: d0:52:43:5b:81:5b:f4:fb:09:ce:df:af:49:3e:31:63:2b:f0: b8:a1:15:9d -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUEdoIeptKthrifDChyvJ/Fta99I4wDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMDUyRUU1OUMxRDQxNDlBNzdERjE1NTUzMTFDMDU2RENE QkM1RkY0QzAeFw0yNTEyMDExNjI3MDZaFw0yNTEyMDQyMDQzMDZaMDMxMTAvBgNV BAMTKDg0OEMxODI1QjQyNTlCQjFBNzY2ODYyNzJFOURCODRDRDYyRTkyN0QwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDY3ccIWK0zZtA+BleXJffC8+ZF cSZCwPvItooVSHjBzkKdughHTdfd5Lo4mDj6ZyrXrODLcuig5cuFky/mErmEDcPa GtBAKS1sjsfG+MvaZhviH8j3y1EhVUq43i89MfNqEiyy5bTOfXd0c0tTPisfBW0W JOlDCa1a4fVPjrRguFAi6nqbfr9bGsPTj5jNdYzZeVhyXBoCauaPnti0xjUOdjwf 9/mS5Byl97s+UrS7BG5GDSUHZbeXeu44KcEGzF9BRr0rYuazxrlC15oofadMHpp2 M9MHper1q2sHG77MKdJ+L9+qFVO5ro6uj+1hjtLZm+I1DY9aF1QCo4qgTejXAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUhIwYJbQlm7GnZoYnLp24TNYukn0wHwYDVR0j BBgwFoAUBS7lnB1BSad98VVTEcBW3NvF/0wwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby9j Y2JmYjIyOC1mZDA1LTRhZmQtODdiZC1lZDU4MGI1NTAzNmYvMC8wNTJFRTU5QzFE NDE0OUE3N0RGMTU1NTMxMUMwNTZEQ0RCQzVGRjRDLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvMDUyRUU1OUMxRDQxNDlBNzdERjE1NTUzMTFDMDU2RENEQkM1 RkY0Qy5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vY2NiZmIyMjgtZmQwNS00YWZkLTg3 YmQtZWQ1ODBiNTUwMzZmLzAvMDUyRUU1OUMxRDQxNDlBNzdERjE1NTUzMTFDMDU2 RENEQkM1RkY0Qy5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAMzrueRaA3XuRTsaAdmSc4DYY+WYBV7Teffr dnwtmTL9hsFrVEbJ6dsVFPX0Az0EC6ZcF7buhOVc72WJDBst1qiamK+KhonCHNjP eJkIoCqzy/j/tqzZQfUFS5uENWXCnCegb+v/jqY1ZI/NID8tXYdnBS1cu48zqmfw WzfwTLsV9I6bYVsLIjb+BomD1UFWwkfzkVoAxB+i1GRRu5UKE+d/vc2TNXyJTK7i W3RA8jfSY7fQfZNebxAHH6sr5ct++DH7JHV1Zs+/OYkQSYyvuSFiqMt+PdFToxEA EsnDXQDV/ydauPxxn11FIdBSQ1uBW/T7Cc7fr0k+MWMr8LihFZ0= -----END CERTIFICATE-----Generated at Wed Dec 3 14:44:08 2025 by rpki-client