This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf repo-rpki.idnic.net/repo/ccbfb228-fd05-4afd-87bd-ed580b55036f/0/052EE59C1D4149A77DF1555311C056DCDBC5FF4C.mft File: 052EE59C1D4149A77DF1555311C056DCDBC5FF4C.mft (raw, json) Hash identifier: X5BU3bXkzZGBe+UiU9tiF0tyS+Z0dOaAhWgatz4EObY= Subject key identifier: E9:4F:AD:CD:2C:B6:7A:13:F0:BE:90:C3:3C:0B:5E:6A:7D:3D:1C:29 Authority key identifier: 05:2E:E5:9C:1D:41:49:A7:7D:F1:55:53:11:C0:56:DC:DB:C5:FF:4C Certificate issuer: /CN=052EE59C1D4149A77DF1555311C056DCDBC5FF4C Certificate serial: 48E54068273C525CC5C7F94C955832B24A8B6D7D Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/052EE59C1D4149A77DF1555311C056DCDBC5FF4C.cer Subject info access: rsync://repo-rpki.idnic.net/repo/ccbfb228-fd05-4afd-87bd-ed580b55036f/0/052EE59C1D4149A77DF1555311C056DCDBC5FF4C.mft Manifest number: 0342 Signing time: Sun 14 Dec 2025 20:22:10 +0000 Manifest this update: Sun 14 Dec 2025 20:17:10 +0000 Manifest next update: Wed 17 Dec 2025 21:02:10 +0000 Files and hashes: 1: 3130332e3136312e3139352e302f32342d3234203d3e20313431363232.roa (hash: 3Jf6rjo7oK98mb2AwseOoU04Ietp18eSMPo87t19+zs=) 2: 3130332e3136312e3139342e302f32342d3234203d3e20313431363232.roa (hash: byxFPyjiQJT5Oo5JN6VrZseWPHWMRktKnANVfaiZKVo=) 3: 3130332e3136312e3139342e302f32332d3233203d3e20313431363232.roa (hash: oZleMN4XSuVHyPBpWgeFkCol07oh2xMRlYa+Uzesyrw=) 4: 052EE59C1D4149A77DF1555311C056DCDBC5FF4C.crl (hash: NtcPlVhZk+R6KmNwfc5vI+oZtkVVV/TWuNXv5bJD0Y0=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/ccbfb228-fd05-4afd-87bd-ed580b55036f/0/052EE59C1D4149A77DF1555311C056DCDBC5FF4C.crl rsync://repo-rpki.idnic.net/repo/ccbfb228-fd05-4afd-87bd-ed580b55036f/0/052EE59C1D4149A77DF1555311C056DCDBC5FF4C.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/052EE59C1D4149A77DF1555311C056DCDBC5FF4C.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 17 Dec 2025 21:02:10 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 48:e5:40:68:27:3c:52:5c:c5:c7:f9:4c:95:58:32:b2:4a:8b:6d:7d Signature Algorithm: sha256WithRSAEncryption Issuer: CN=052EE59C1D4149A77DF1555311C056DCDBC5FF4C Validity Not Before: Dec 14 20:17:10 2025 GMT Not After : Dec 17 21:02:10 2025 GMT Subject: CN=E94FADCD2CB67A13F0BE90C33C0B5E6A7D3D1C29 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d0:dc:7e:9c:f7:9a:30:31:f6:dd:13:72:0c:c7: 90:ac:40:52:9c:12:d2:a6:7b:7b:b7:f0:60:ad:d6: 1b:fe:c8:92:4c:5c:73:7e:62:dd:54:b5:17:a5:80: 52:64:4a:49:c1:7a:8b:95:79:b7:4d:d0:12:a3:7c: 4d:59:1f:ff:55:7a:14:ba:5c:bd:53:6e:7c:22:3f: 8b:e8:5e:96:39:70:42:19:35:f8:b1:ce:f6:19:e0: db:87:83:2f:fe:01:72:d0:fc:9f:ad:b2:23:7b:6b: 2a:74:71:da:a0:2e:da:ef:93:04:42:16:fe:44:0e: b4:77:59:d7:81:46:f5:6e:3f:98:97:e2:df:f4:61: 50:59:3a:7b:86:d3:c2:90:82:9a:16:f7:7b:90:0c: b1:77:4a:cc:ad:20:1b:46:81:be:4d:11:95:55:5e: 6a:06:5f:bc:64:61:81:c3:b1:95:6d:90:04:a1:96: aa:10:13:e3:22:e6:42:1b:f8:f6:ac:85:ae:80:11: 99:ee:dd:ff:2f:35:0a:2c:fb:fb:0f:b1:26:88:12: ff:58:89:34:b4:30:02:2b:65:68:79:10:98:0c:fa: 69:f6:91:df:96:b3:2b:94:2a:6f:15:32:2d:ae:72: b9:54:41:33:cf:9b:93:cd:d2:76:25:30:da:9d:81: bf:fb Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: E9:4F:AD:CD:2C:B6:7A:13:F0:BE:90:C3:3C:0B:5E:6A:7D:3D:1C:29 X509v3 Authority Key Identifier: keyid:05:2E:E5:9C:1D:41:49:A7:7D:F1:55:53:11:C0:56:DC:DB:C5:FF:4C X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/ccbfb228-fd05-4afd-87bd-ed580b55036f/0/052EE59C1D4149A77DF1555311C056DCDBC5FF4C.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/052EE59C1D4149A77DF1555311C056DCDBC5FF4C.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/ccbfb228-fd05-4afd-87bd-ed580b55036f/0/052EE59C1D4149A77DF1555311C056DCDBC5FF4C.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 81:df:94:6c:fb:b0:df:fe:b9:70:80:38:76:5e:d7:af:6e:76: f9:ad:bf:3c:a9:44:82:47:12:55:a1:ef:41:8a:16:e5:c1:1f: 3b:14:c5:d9:96:c9:ec:58:fd:6d:e3:c5:34:7a:47:6d:93:65: 16:56:e4:69:b3:7f:c8:c8:0a:ac:ab:0b:7c:39:a7:78:84:e2: bd:50:f8:c7:9f:fb:34:6f:0f:8d:0b:5d:c3:92:85:bd:3b:02: 42:13:c7:d2:a4:eb:8f:52:91:a7:7e:b4:66:d1:b1:6a:1c:ce: 24:1e:ee:f2:3d:57:5b:89:c6:51:90:91:c3:a4:1a:b8:8d:bc: 8e:b2:5c:8f:22:99:d1:b1:8d:bd:56:8a:50:52:bf:60:eb:9d: fd:ec:ba:d4:f0:e5:9a:4c:e1:95:2c:ec:61:22:ee:ae:ca:d4: 64:49:1d:60:5b:ae:5e:ba:f1:91:32:00:02:f2:4c:5c:f5:5c: 58:60:62:32:92:c5:8c:fc:62:5b:62:bf:b0:48:81:29:f2:64: dc:b3:95:98:4f:bd:6e:05:44:ac:32:d0:90:58:86:20:8e:2f: 5c:4a:45:34:8a:19:0c:17:48:6e:a3:8b:14:5d:0e:34:fd:31: 54:31:2f:fa:e0:24:d4:0e:15:77:db:17:b6:c3:e3:f9:d2:be: a8:8f:b5:b8 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUSOVAaCc8UlzFx/lMlVgyskqLbX0wDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMDUyRUU1OUMxRDQxNDlBNzdERjE1NTUzMTFDMDU2RENE QkM1RkY0QzAeFw0yNTEyMTQyMDE3MTBaFw0yNTEyMTcyMTAyMTBaMDMxMTAvBgNV BAMTKEU5NEZBRENEMkNCNjdBMTNGMEJFOTBDMzNDMEI1RTZBN0QzRDFDMjkwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDQ3H6c95owMfbdE3IMx5CsQFKc EtKme3u38GCt1hv+yJJMXHN+Yt1UtRelgFJkSknBeouVebdN0BKjfE1ZH/9VehS6 XL1TbnwiP4voXpY5cEIZNfixzvYZ4NuHgy/+AXLQ/J+tsiN7ayp0cdqgLtrvkwRC Fv5EDrR3WdeBRvVuP5iX4t/0YVBZOnuG08KQgpoW93uQDLF3SsytIBtGgb5NEZVV XmoGX7xkYYHDsZVtkAShlqoQE+Mi5kIb+Pasha6AEZnu3f8vNQos+/sPsSaIEv9Y iTS0MAIrZWh5EJgM+mn2kd+WsyuUKm8VMi2ucrlUQTPPm5PN0nYlMNqdgb/7AgMB AAGjggI8MIICODAdBgNVHQ4EFgQU6U+tzSy2ehPwvpDDPAtean09HCkwHwYDVR0j BBgwFoAUBS7lnB1BSad98VVTEcBW3NvF/0wwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby9j Y2JmYjIyOC1mZDA1LTRhZmQtODdiZC1lZDU4MGI1NTAzNmYvMC8wNTJFRTU5QzFE NDE0OUE3N0RGMTU1NTMxMUMwNTZEQ0RCQzVGRjRDLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvMDUyRUU1OUMxRDQxNDlBNzdERjE1NTUzMTFDMDU2RENEQkM1 RkY0Qy5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vY2NiZmIyMjgtZmQwNS00YWZkLTg3 YmQtZWQ1ODBiNTUwMzZmLzAvMDUyRUU1OUMxRDQxNDlBNzdERjE1NTUzMTFDMDU2 RENEQkM1RkY0Qy5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAIHflGz7sN/+uXCAOHZe169udvmtvzypRIJH ElWh70GKFuXBHzsUxdmWyexY/W3jxTR6R22TZRZW5Gmzf8jICqyrC3w5p3iE4r1Q +Mef+zRvD40LXcOShb07AkITx9Kk649Skad+tGbRsWocziQe7vI9V1uJxlGQkcOk GriNvI6yXI8imdGxjb1WilBSv2Drnf3sutTw5ZpM4ZUs7GEi7q7K1GRJHWBbrl66 8ZEyAALyTFz1XFhgYjKSxYz8Yltiv7BIgSnyZNyzlZhPvW4FRKwy0JBYhiCOL1xK RTSKGQwXSG6jixRdDjT9MVQxL/rgJNQOFXfbF7bD4/nSvqiPtbg= -----END CERTIFICATE-----Generated at Mon Dec 15 13:41:24 2025 by rpki-client