This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

$ rpki-client -vvf repo-rpki.idnic.net/repo/657e89e8-53aa-44f6-b6d8-5879078bf664/0/52145183B5BE1A663FBC5C228102541AC61F9F86.mft
File: 52145183B5BE1A663FBC5C228102541AC61F9F86.mft (raw, json)
Hash identifier: jfZg6F8CsrVGC5DAvCk9Hy1CmOD9sPJwGaToANtWjA4=
Subject key identifier: B6:2F:EF:08:0B:3C:D1:60:25:37:C8:28:8B:3B:02:E5:60:FD:A9:AE
Authority key identifier: 52:14:51:83:B5:BE:1A:66:3F:BC:5C:22:81:02:54:1A:C6:1F:9F:86
Certificate issuer: /CN=52145183B5BE1A663FBC5C228102541AC61F9F86
Certificate serial: 62EDBD797C049108633064B72C0D86F96F9CC494
Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/52145183B5BE1A663FBC5C228102541AC61F9F86.cer
Subject info access: rsync://repo-rpki.idnic.net/repo/657e89e8-53aa-44f6-b6d8-5879078bf664/0/52145183B5BE1A663FBC5C228102541AC61F9F86.mft
Manifest number: 04E9
Signing time: Sat 06 Dec 2025 14:01:47 +0000
Manifest this update: Sat 06 Dec 2025 13:56:47 +0000
Manifest next update: Tue 09 Dec 2025 21:26:47 +0000
Files and hashes: 1: 3130332e3135372e37382e302f32332d3234203d3e20313431313134.roa (hash: ejH4Jptb2+nXxwdyhxr2eLVcxmTdzu5eDGJeQynArtM=)
2: 52145183B5BE1A663FBC5C228102541AC61F9F86.crl (hash: waOHfGrFEHFifKHBPmqZYGPNV5hz0KQGZq5tMmG7FE4=)
3: 323430363a396163303a3a2f33322d3438203d3e20313431313134.roa (hash: I8J+VKjZlzAYUjuoXbFTNBgkY4GMxQkjdom4zb/4W0c=)
Validation: OK
Signature path: rsync://repo-rpki.idnic.net/repo/657e89e8-53aa-44f6-b6d8-5879078bf664/0/52145183B5BE1A663FBC5C228102541AC61F9F86.crl
rsync://repo-rpki.idnic.net/repo/657e89e8-53aa-44f6-b6d8-5879078bf664/0/52145183B5BE1A663FBC5C228102541AC61F9F86.mft
rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/52145183B5BE1A663FBC5C228102541AC61F9F86.cer
rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl
rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Tue 09 Dec 2025 15:57:52 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
62:ed:bd:79:7c:04:91:08:63:30:64:b7:2c:0d:86:f9:6f:9c:c4:94
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=52145183B5BE1A663FBC5C228102541AC61F9F86
Validity
Not Before: Dec 6 13:56:47 2025 GMT
Not After : Dec 9 21:26:47 2025 GMT
Subject: CN=B62FEF080B3CD1602537C8288B3B02E560FDA9AE
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ad:f1:44:8a:f4:b4:59:06:b9:fc:3d:02:10:8e:
2a:5f:53:df:5c:50:78:a9:bd:10:c8:37:18:a2:42:
7d:42:fc:f7:02:bd:8d:a9:8a:19:a1:0f:a4:f2:90:
23:39:5b:86:d4:40:9f:7d:eb:46:7d:37:a4:b4:09:
71:0f:db:c6:76:92:e9:9c:6c:01:b2:e4:4a:03:52:
d4:72:45:eb:58:cd:49:c9:81:11:72:d7:d8:5e:48:
28:23:aa:78:2d:d4:5e:db:bd:6e:29:6f:53:d7:36:
45:50:e0:45:d1:ca:88:16:9d:0e:4c:4b:fe:50:b9:
bb:d0:6f:db:bc:40:93:c1:6c:74:fc:09:5d:d9:01:
11:22:fa:a5:a2:1a:42:2e:29:4f:5b:55:d9:7e:c4:
73:1b:50:79:5b:d0:2c:89:54:80:bd:b8:0d:b4:26:
bb:4f:f1:28:9d:4c:44:7c:6d:8f:d8:e6:ef:e8:c8:
72:25:bb:05:c0:f5:1c:8b:c4:ea:73:93:05:2c:ea:
f5:43:46:c2:f9:8d:b8:b7:71:c5:4c:5b:21:0b:8f:
dd:bf:09:76:52:bc:a2:f0:62:42:51:dc:f6:84:cb:
b1:77:a5:f4:61:cf:93:e8:70:cc:4f:68:13:52:06:
86:a3:65:3b:9c:bd:14:06:1f:53:48:23:49:03:46:
bc:9d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B6:2F:EF:08:0B:3C:D1:60:25:37:C8:28:8B:3B:02:E5:60:FD:A9:AE
X509v3 Authority Key Identifier:
keyid:52:14:51:83:B5:BE:1A:66:3F:BC:5C:22:81:02:54:1A:C6:1F:9F:86
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://repo-rpki.idnic.net/repo/657e89e8-53aa-44f6-b6d8-5879078bf664/0/52145183B5BE1A663FBC5C228102541AC61F9F86.crl
Authority Information Access:
CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/52145183B5BE1A663FBC5C228102541AC61F9F86.cer
Subject Information Access:
Signed Object - URI:rsync://repo-rpki.idnic.net/repo/657e89e8-53aa-44f6-b6d8-5879078bf664/0/52145183B5BE1A663FBC5C228102541AC61F9F86.mft
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
91:2a:a6:a9:34:62:cc:55:4c:b9:44:e4:e9:bd:45:20:0c:49:
68:e1:1d:bd:6a:de:1b:75:10:a9:75:1f:a0:3c:c9:73:76:35:
08:7e:cc:fd:ff:a0:1f:d8:02:e7:0f:09:1f:7b:dc:88:1b:3d:
8d:46:51:75:be:4b:6d:5a:3c:99:b3:e4:8c:ae:d1:fe:ec:f9:
d6:bf:c7:50:17:73:5e:f5:ed:67:5a:15:aa:66:93:4d:2a:eb:
cb:f5:3c:d1:8d:31:a2:81:fc:fc:44:54:8e:61:59:32:c0:bf:
1f:cd:4c:62:30:80:17:74:c7:42:06:f6:89:28:b4:e5:4a:6b:
be:fe:6a:c7:19:4b:aa:90:a4:2c:da:a8:4c:a0:78:5a:04:7f:
49:16:18:2c:29:fa:cd:97:48:6d:b0:c5:97:f1:4d:4e:5d:02:
61:2c:5d:02:59:6c:d9:f4:f9:86:72:56:e2:5a:21:5d:25:2c:
45:97:1c:13:a5:60:06:83:67:f7:36:57:03:70:b2:5a:f1:29:
50:88:21:96:46:9f:73:58:b2:8a:dc:b6:d9:c8:11:9b:c0:d2:
d6:fa:db:6f:52:05:e4:53:53:90:b4:88:90:a4:55:7e:6a:6d:
e1:82:2c:62:17:db:00:9c:37:8b:0a:92:4e:16:83:36:bc:48:
1a:87:41:2f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Dec 7 04:34:32 2025 by rpki-client