This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

$ rpki-client -vvf repo-rpki.idnic.net/repo/03908782-4520-45b4-99ed-193e51df51c3/0/52E77B06BC2691C613C7A9872EE1E28FCB8AA245.mft
File: 52E77B06BC2691C613C7A9872EE1E28FCB8AA245.mft (raw, json)
Hash identifier: HP1olBU+S88kZEdVuiopwnR0MY/voMoe7f2VBAgDk10=
Subject key identifier: 73:7D:92:E9:AB:26:6C:AC:B4:C8:D5:DE:E5:62:A8:CB:23:43:C1:7E
Authority key identifier: 52:E7:7B:06:BC:26:91:C6:13:C7:A9:87:2E:E1:E2:8F:CB:8A:A2:45
Certificate issuer: /CN=52E77B06BC2691C613C7A9872EE1E28FCB8AA245
Certificate serial: 5000500F4C5EAA8A9E85C13870C30CF3C8EB4F26
Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/52E77B06BC2691C613C7A9872EE1E28FCB8AA245.cer
Subject info access: rsync://repo-rpki.idnic.net/repo/03908782-4520-45b4-99ed-193e51df51c3/0/52E77B06BC2691C613C7A9872EE1E28FCB8AA245.mft
Manifest number: 029E
Signing time: Sun 25 Jan 2026 05:30:55 +0000
Manifest this update: Sun 25 Jan 2026 05:25:55 +0000
Manifest next update: Wed 28 Jan 2026 13:30:55 +0000
Files and hashes: 1: 52E77B06BC2691C613C7A9872EE1E28FCB8AA245.crl (hash: 1twnv/q/8DvKpZ/+8KeJDKKkn0JP+SOkAyL2b+TClaE=)
2: 3130332e3138302e3136342e302f32332d3233203d3e20313338313331.roa (hash: YBihOSXIj0+TsV9w8FB5TlmuTjj67BcUuD5PWZy4luk=)
3: 3130332e3138302e3136342e302f32342d3234203d3e20313338313331.roa (hash: fKMeJeAwMbkwf1kmZ/AB9YQDJH0OhHULVGJWeX+RPu0=)
4: 3130332e3138302e3136352e302f32342d3234203d3e20313338313331.roa (hash: UDP5vaqP++IAcM6lMBhTtGhgbdITohHwdo+pbRZf5tI=)
Validation: OK
Signature path: rsync://repo-rpki.idnic.net/repo/03908782-4520-45b4-99ed-193e51df51c3/0/52E77B06BC2691C613C7A9872EE1E28FCB8AA245.crl
rsync://repo-rpki.idnic.net/repo/03908782-4520-45b4-99ed-193e51df51c3/0/52E77B06BC2691C613C7A9872EE1E28FCB8AA245.mft
rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/52E77B06BC2691C613C7A9872EE1E28FCB8AA245.cer
rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl
rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Wed 28 Jan 2026 13:30:55 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
50:00:50:0f:4c:5e:aa:8a:9e:85:c1:38:70:c3:0c:f3:c8:eb:4f:26
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=52E77B06BC2691C613C7A9872EE1E28FCB8AA245
Validity
Not Before: Jan 25 05:25:55 2026 GMT
Not After : Jan 28 13:30:55 2026 GMT
Subject: CN=737D92E9AB266CACB4C8D5DEE562A8CB2343C17E
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:af:80:09:77:0b:b9:c9:b2:9e:c1:55:97:69:55:
29:f0:46:77:c0:f6:87:61:dc:db:dd:c2:08:66:6c:
68:94:88:a3:09:d4:b2:85:0d:3c:5a:53:46:89:56:
85:1e:a4:30:0a:70:b1:bd:c6:17:7a:6f:70:85:88:
48:e6:3a:02:1d:19:56:dd:77:f2:10:08:df:7e:4c:
44:31:fe:5d:64:8c:f0:bb:06:7d:ba:3e:5a:2d:9d:
6e:31:84:ae:cf:d3:59:c7:1a:ab:d4:c6:e1:35:cd:
b6:59:91:c6:19:81:d0:91:b9:78:a6:dc:cc:a7:84:
18:9f:50:db:96:3e:7f:b4:b8:12:4f:34:ca:a6:b5:
64:7d:da:8f:25:63:dc:6a:29:21:cb:05:62:9d:8b:
93:f5:53:41:a0:58:fc:3a:f4:af:50:de:e8:59:cd:
2c:f4:13:67:d9:52:ef:56:4f:6b:eb:70:df:dd:80:
b5:a3:ec:21:0b:c6:82:f0:07:34:9e:49:56:e5:e0:
e9:67:36:b0:0f:d2:21:11:cd:31:9a:14:6d:a3:ed:
ef:3e:c7:94:45:18:77:6c:6c:5b:ab:2e:e5:44:d7:
7a:8b:df:10:58:a4:3c:86:16:34:e4:c5:00:2b:f3:
96:cf:4e:74:e0:ab:9d:68:17:49:96:9f:d8:bb:59:
eb:93
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
73:7D:92:E9:AB:26:6C:AC:B4:C8:D5:DE:E5:62:A8:CB:23:43:C1:7E
X509v3 Authority Key Identifier:
keyid:52:E7:7B:06:BC:26:91:C6:13:C7:A9:87:2E:E1:E2:8F:CB:8A:A2:45
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://repo-rpki.idnic.net/repo/03908782-4520-45b4-99ed-193e51df51c3/0/52E77B06BC2691C613C7A9872EE1E28FCB8AA245.crl
Authority Information Access:
CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/52E77B06BC2691C613C7A9872EE1E28FCB8AA245.cer
Subject Information Access:
Signed Object - URI:rsync://repo-rpki.idnic.net/repo/03908782-4520-45b4-99ed-193e51df51c3/0/52E77B06BC2691C613C7A9872EE1E28FCB8AA245.mft
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
7f:d0:d6:b1:f3:dd:a5:70:eb:e7:f4:00:18:40:07:3b:27:31:
92:94:0b:d1:4a:2b:38:17:e2:35:97:3e:db:c7:06:8f:72:ff:
ad:77:1e:2f:c4:be:ef:cb:ac:d1:2d:5b:62:c5:79:55:e6:fe:
a3:e0:ac:08:da:3f:5c:61:45:32:4b:e1:ff:2d:37:6e:22:b8:
fb:3d:85:58:37:6d:74:86:0c:75:25:0f:90:44:28:95:18:f4:
6a:a0:00:14:51:83:34:9f:ec:f7:1a:89:f7:57:95:41:91:54:
14:0d:b7:a4:d4:41:68:f5:ba:58:d7:be:6d:d5:b3:f0:0b:9f:
09:36:d4:25:82:b1:5d:d3:ae:dd:af:d0:ba:9c:84:8c:e8:fd:
29:16:96:5c:1f:5c:fc:9b:55:b8:34:d1:6a:fa:9c:7f:63:51:
0d:d3:15:34:e0:35:73:e5:45:18:17:53:00:c1:c2:34:08:04:
9d:a9:3a:a2:e3:56:e4:e8:a9:0b:11:5b:b5:af:71:da:35:32:
2c:de:7f:3f:0c:21:7c:37:a5:73:c6:c1:14:fd:c9:c0:e2:ae:
68:8b:fd:c8:09:98:41:18:cd:0b:2f:c6:db:16:15:2d:fe:ae:
f1:b8:78:51:3a:12:25:27:70:25:ef:5e:12:b1:41:4d:74:fb:
11:3d:f7:94
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jan 26 09:29:09 2026 by rpki-client