This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

$ rpki-client -vvf repo-rpki.idnic.net/repo/03908782-4520-45b4-99ed-193e51df51c3/0/52E77B06BC2691C613C7A9872EE1E28FCB8AA245.mft
File: 52E77B06BC2691C613C7A9872EE1E28FCB8AA245.mft (raw, json)
Hash identifier: +kJg2lVfEgANBorWgQ82kL35WONJi1xyWuMupU8YHK4=
Subject key identifier: AB:6F:B2:F6:F7:7C:47:73:95:8B:3C:50:71:59:2B:1C:49:9F:33:1C
Authority key identifier: 52:E7:7B:06:BC:26:91:C6:13:C7:A9:87:2E:E1:E2:8F:CB:8A:A2:45
Certificate issuer: /CN=52E77B06BC2691C613C7A9872EE1E28FCB8AA245
Certificate serial: 752E7819162629B7AD8C10B3431AA15D7A87A5CF
Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/52E77B06BC2691C613C7A9872EE1E28FCB8AA245.cer
Subject info access: rsync://repo-rpki.idnic.net/repo/03908782-4520-45b4-99ed-193e51df51c3/0/52E77B06BC2691C613C7A9872EE1E28FCB8AA245.mft
Manifest number: 0288
Signing time: Sat 06 Dec 2025 18:30:54 +0000
Manifest this update: Sat 06 Dec 2025 18:25:54 +0000
Manifest next update: Tue 09 Dec 2025 19:54:54 +0000
Files and hashes: 1: 52E77B06BC2691C613C7A9872EE1E28FCB8AA245.crl (hash: lDYxBivXpMZ9n+oYyugtcBue2m67r/fT7NLdHRg0IZ8=)
2: 3130332e3138302e3136352e302f32342d3234203d3e20313338313331.roa (hash: UDP5vaqP++IAcM6lMBhTtGhgbdITohHwdo+pbRZf5tI=)
3: 3130332e3138302e3136342e302f32342d3234203d3e20313338313331.roa (hash: fKMeJeAwMbkwf1kmZ/AB9YQDJH0OhHULVGJWeX+RPu0=)
4: 3130332e3138302e3136342e302f32332d3233203d3e20313338313331.roa (hash: YBihOSXIj0+TsV9w8FB5TlmuTjj67BcUuD5PWZy4luk=)
Validation: OK
Signature path: rsync://repo-rpki.idnic.net/repo/03908782-4520-45b4-99ed-193e51df51c3/0/52E77B06BC2691C613C7A9872EE1E28FCB8AA245.crl
rsync://repo-rpki.idnic.net/repo/03908782-4520-45b4-99ed-193e51df51c3/0/52E77B06BC2691C613C7A9872EE1E28FCB8AA245.mft
rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/52E77B06BC2691C613C7A9872EE1E28FCB8AA245.cer
rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl
rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Tue 09 Dec 2025 15:57:52 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
75:2e:78:19:16:26:29:b7:ad:8c:10:b3:43:1a:a1:5d:7a:87:a5:cf
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=52E77B06BC2691C613C7A9872EE1E28FCB8AA245
Validity
Not Before: Dec 6 18:25:54 2025 GMT
Not After : Dec 9 19:54:54 2025 GMT
Subject: CN=AB6FB2F6F77C4773958B3C5071592B1C499F331C
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c8:da:03:d3:87:1d:06:a8:fd:b1:b9:0e:57:2c:
62:f0:1d:d8:36:4c:bc:53:c5:ab:bd:41:f1:35:be:
85:ee:84:6d:fe:a9:17:c4:a8:ea:25:6a:b1:b7:57:
0f:01:a1:08:1c:a8:e9:b0:da:23:6b:ab:fd:7e:f7:
6c:49:65:93:4a:15:0d:0d:d5:76:e5:f7:27:4c:be:
13:60:96:a4:83:44:d9:1b:a5:49:b8:f6:3d:14:87:
e9:20:37:9a:5d:53:c2:4b:58:79:2b:78:a6:14:13:
1a:9c:0b:93:de:f3:47:72:9b:c7:0b:61:35:40:40:
00:cc:fe:03:cb:b5:10:e4:4a:a3:04:26:92:da:8d:
2f:6e:3b:38:50:fb:e6:5d:f5:92:d1:51:d9:90:ad:
b7:0e:fe:76:8d:2b:00:8c:b1:15:2c:d1:6c:ef:b0:
59:9b:41:ef:9d:9c:8f:2a:f3:66:aa:e0:68:3c:fb:
e1:8c:4c:d7:ef:ce:00:a3:f3:25:bb:68:3b:90:34:
bb:64:9b:f6:d4:e8:be:66:3a:61:b5:04:21:95:4c:
67:75:d8:de:32:3b:7c:a1:f0:87:56:cf:5f:98:40:
01:53:f4:ba:30:88:25:d3:d6:54:38:b8:d3:fd:5e:
c3:d6:45:0a:c0:ff:c2:ad:6b:4f:21:5a:bd:64:1f:
08:ef
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
AB:6F:B2:F6:F7:7C:47:73:95:8B:3C:50:71:59:2B:1C:49:9F:33:1C
X509v3 Authority Key Identifier:
keyid:52:E7:7B:06:BC:26:91:C6:13:C7:A9:87:2E:E1:E2:8F:CB:8A:A2:45
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://repo-rpki.idnic.net/repo/03908782-4520-45b4-99ed-193e51df51c3/0/52E77B06BC2691C613C7A9872EE1E28FCB8AA245.crl
Authority Information Access:
CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/52E77B06BC2691C613C7A9872EE1E28FCB8AA245.cer
Subject Information Access:
Signed Object - URI:rsync://repo-rpki.idnic.net/repo/03908782-4520-45b4-99ed-193e51df51c3/0/52E77B06BC2691C613C7A9872EE1E28FCB8AA245.mft
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
98:98:10:b8:2e:6f:92:7d:f3:71:7b:81:e8:0a:e6:f7:09:fd:
2e:c2:33:b1:cf:28:30:78:b9:9e:0f:ff:0e:aa:68:41:d3:e2:
a3:86:72:74:e3:55:f4:f5:b8:b4:69:f7:40:55:e2:08:53:61:
05:b4:b1:c8:f2:96:f8:b5:47:70:8d:78:6c:ee:47:c6:01:80:
ed:92:5e:23:18:5d:5a:c4:9e:dd:4a:05:16:86:31:f2:cc:42:
0e:f9:1e:bd:60:fb:e4:1b:ce:1a:9e:9d:8f:4d:cd:65:26:2c:
d9:11:59:d0:c7:17:5b:29:b2:01:d6:12:0b:12:a4:03:fd:6b:
7b:fb:c3:e4:b4:ae:7f:e5:43:69:4e:e6:77:24:d7:7a:85:57:
df:87:55:2e:23:09:6e:28:b6:2d:61:36:47:af:83:90:6c:3b:
76:81:73:64:87:d3:35:9f:a6:0f:4a:6e:22:e2:36:bb:9f:d2:
7f:65:ad:d4:8a:e1:da:03:a0:e2:71:2c:97:b6:f6:40:7a:0d:
26:79:34:fe:5a:34:ba:af:08:52:d5:51:1f:5e:fa:07:7a:5e:
79:ab:79:9d:dc:6c:49:c4:94:f5:c0:1a:a3:cb:7f:96:87:8f:
b6:73:e2:46:90:c6:a7:0c:e0:63:ff:d2:c9:ec:d6:6b:19:49:
fe:8a:71:e6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Dec 7 02:51:14 2025 by rpki-client