This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf repo-rpki.idnic.net/repo/ccbfb228-fd05-4afd-87bd-ed580b55036f/0/052EE59C1D4149A77DF1555311C056DCDBC5FF4C.mft
File:                     052EE59C1D4149A77DF1555311C056DCDBC5FF4C.mft (raw, json)
Hash identifier:          YVAYnw22d5zSnJfyr6riCY625jN1uqZiVn1bpxnL2BQ=
Subject key identifier:   48:C5:A7:80:49:6F:3C:E5:4B:80:88:C5:81:53:08:0A:99:D2:90:8C
Authority key identifier: 05:2E:E5:9C:1D:41:49:A7:7D:F1:55:53:11:C0:56:DC:DB:C5:FF:4C
Certificate issuer:       /CN=052EE59C1D4149A77DF1555311C056DCDBC5FF4C
Certificate serial:       621478D5ED7232065B4713AA20F41787BAC43140
Authority info access:    rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/052EE59C1D4149A77DF1555311C056DCDBC5FF4C.cer
Subject info access:      rsync://repo-rpki.idnic.net/repo/ccbfb228-fd05-4afd-87bd-ed580b55036f/0/052EE59C1D4149A77DF1555311C056DCDBC5FF4C.mft
Manifest number:          033E
Signing time:             Fri 05 Dec 2025 23:42:04 +0000
Manifest this update:     Fri 05 Dec 2025 23:37:04 +0000
Manifest next update:     Tue 09 Dec 2025 05:00:04 +0000
Files and hashes:         1: 3130332e3136312e3139342e302f32342d3234203d3e20313431363232.roa (hash: byxFPyjiQJT5Oo5JN6VrZseWPHWMRktKnANVfaiZKVo=)
                          2: 052EE59C1D4149A77DF1555311C056DCDBC5FF4C.crl (hash: 3S4G5qvdQUqEGw6KgzyRtfWn5ngYwEHds+a7DeTTkj0=)
                          3: 3130332e3136312e3139342e302f32332d3233203d3e20313431363232.roa (hash: oZleMN4XSuVHyPBpWgeFkCol07oh2xMRlYa+Uzesyrw=)
                          4: 3130332e3136312e3139352e302f32342d3234203d3e20313431363232.roa (hash: 3Jf6rjo7oK98mb2AwseOoU04Ietp18eSMPo87t19+zs=)
Validation:               OK
Signature path:           rsync://repo-rpki.idnic.net/repo/ccbfb228-fd05-4afd-87bd-ed580b55036f/0/052EE59C1D4149A77DF1555311C056DCDBC5FF4C.crl
                          rsync://repo-rpki.idnic.net/repo/ccbfb228-fd05-4afd-87bd-ed580b55036f/0/052EE59C1D4149A77DF1555311C056DCDBC5FF4C.mft
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/052EE59C1D4149A77DF1555311C056DCDBC5FF4C.cer
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Tue 09 Dec 2025 05:00:04 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            62:14:78:d5:ed:72:32:06:5b:47:13:aa:20:f4:17:87:ba:c4:31:40
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=052EE59C1D4149A77DF1555311C056DCDBC5FF4C
        Validity
            Not Before: Dec  5 23:37:04 2025 GMT
            Not After : Dec  9 05:00:04 2025 GMT
        Subject: CN=48C5A780496F3CE54B8088C58153080A99D2908C
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9c:c5:e1:fb:04:22:ee:1e:1b:f7:7b:8a:92:9d:
                    2d:62:59:a8:82:92:a9:9e:1f:2b:1b:1c:a9:ed:1a:
                    86:ac:fa:fb:fd:3a:8f:bb:e8:09:82:c8:03:be:d0:
                    81:56:97:9e:5b:3c:e6:f2:9f:82:fe:cf:d6:52:73:
                    11:83:2e:c9:10:6f:7a:71:85:52:b7:1b:d1:44:26:
                    60:63:cc:c4:01:07:c3:61:d6:da:64:fb:67:eb:f7:
                    cc:72:b2:6d:e2:81:c4:ca:7e:d8:f4:89:10:f7:64:
                    5a:28:4d:15:f7:6c:7c:df:a4:ea:ff:48:c4:78:73:
                    c2:73:fe:5d:1f:8e:b5:54:e8:03:17:72:50:8d:a8:
                    ed:a5:c8:89:46:5e:fd:3c:e6:bb:ac:c1:3f:79:6b:
                    4a:5d:f7:b2:7a:3f:db:4b:fe:5e:18:fc:ce:4b:fd:
                    a0:44:05:d7:b3:aa:ae:9c:b6:f0:17:a3:13:26:b1:
                    5a:4f:34:07:c3:b6:cc:de:bc:50:e9:1d:c4:80:7a:
                    5a:93:22:8a:4f:0c:e6:22:2f:46:da:4e:6c:94:57:
                    ca:db:a7:33:6f:bc:64:4f:3a:c8:4c:de:0a:03:75:
                    1d:8b:a5:96:3a:b1:63:19:a7:4c:af:ba:48:54:3e:
                    d1:1d:a4:94:18:22:35:ca:e2:84:c3:0f:ab:87:3c:
                    ec:73
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                48:C5:A7:80:49:6F:3C:E5:4B:80:88:C5:81:53:08:0A:99:D2:90:8C
            X509v3 Authority Key Identifier:
                keyid:05:2E:E5:9C:1D:41:49:A7:7D:F1:55:53:11:C0:56:DC:DB:C5:FF:4C

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repo-rpki.idnic.net/repo/ccbfb228-fd05-4afd-87bd-ed580b55036f/0/052EE59C1D4149A77DF1555311C056DCDBC5FF4C.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/052EE59C1D4149A77DF1555311C056DCDBC5FF4C.cer

            Subject Information Access:
                Signed Object - URI:rsync://repo-rpki.idnic.net/repo/ccbfb228-fd05-4afd-87bd-ed580b55036f/0/052EE59C1D4149A77DF1555311C056DCDBC5FF4C.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         51:b9:e8:f1:74:14:df:29:c8:98:38:8e:2e:8e:a1:02:2a:12:
         b1:5c:ff:9e:9e:be:1e:19:53:09:e4:81:09:a8:b4:ba:3d:77:
         d5:27:51:03:ba:ad:d3:0c:1f:5e:a9:02:e6:a1:3d:15:f8:93:
         a2:23:21:ee:7f:b4:9f:22:f5:ad:f3:30:06:0f:44:cc:00:07:
         9e:d7:77:0e:81:d8:33:87:c6:ef:42:fb:d7:2c:3e:fb:d4:e7:
         9d:9c:6f:9c:38:23:ee:1a:56:e4:be:a6:87:f9:02:61:89:34:
         cc:0c:7e:89:88:19:7e:5c:03:5f:c4:87:ff:a2:fe:ee:71:ac:
         64:d2:75:3f:9a:d5:71:00:04:45:47:c4:4c:11:1c:4c:d9:06:
         31:9b:02:ee:e6:92:4c:87:e2:c1:cc:6c:6d:70:3f:c7:44:e4:
         5f:0f:ce:5c:d5:06:0c:5d:ab:6c:5f:69:f0:f8:58:4c:a6:b5:
         af:fe:de:a5:33:c7:27:27:fa:ea:50:45:bb:38:1b:ea:41:af:
         0a:6d:6b:6f:cc:77:43:ab:d1:99:35:92:3e:f3:54:58:f5:87:
         a2:62:02:f1:29:37:2e:ec:76:8e:bf:85:5d:79:32:c8:62:00:
         8e:6d:28:3e:70:8d:05:bc:fb:68:e8:ed:81:78:d0:77:9b:06:
         62:bb:e0:6a
-----BEGIN CERTIFICATE-----
MIIFMjCCBBqgAwIBAgIUYhR41e1yMgZbRxOqIPQXh7rEMUAwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoMDUyRUU1OUMxRDQxNDlBNzdERjE1NTUzMTFDMDU2RENE
QkM1RkY0QzAeFw0yNTEyMDUyMzM3MDRaFw0yNTEyMDkwNTAwMDRaMDMxMTAvBgNV
BAMTKDQ4QzVBNzgwNDk2RjNDRTU0QjgwODhDNTgxNTMwODBBOTlEMjkwOEMwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCcxeH7BCLuHhv3e4qSnS1iWaiC
kqmeHysbHKntGoas+vv9Oo+76AmCyAO+0IFWl55bPObyn4L+z9ZScxGDLskQb3px
hVK3G9FEJmBjzMQBB8Nh1tpk+2fr98xysm3igcTKftj0iRD3ZFooTRX3bHzfpOr/
SMR4c8Jz/l0fjrVU6AMXclCNqO2lyIlGXv085ruswT95a0pd97J6P9tL/l4Y/M5L
/aBEBdezqq6ctvAXoxMmsVpPNAfDtszevFDpHcSAelqTIopPDOYiL0baTmyUV8rb
pzNvvGRPOshM3goDdR2LpZY6sWMZp0yvukhUPtEdpJQYIjXK4oTDD6uHPOxzAgMB
AAGjggI8MIICODAdBgNVHQ4EFgQUSMWngElvPOVLgIjFgVMICpnSkIwwHwYDVR0j
BBgwFoAUBS7lnB1BSad98VVTEcBW3NvF/0wwDgYDVR0PAQH/BAQDAgeAMIGFBgNV
HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby9j
Y2JmYjIyOC1mZDA1LTRhZmQtODdiZC1lZDU4MGI1NTAzNmYvMC8wNTJFRTU5QzFE
NDE0OUE3N0RGMTU1NTMxMUMwNTZEQ0RCQzVGRjRDLmNybDB0BggrBgEFBQcBAQRo
MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv
L0lETklDLUlELzIvMDUyRUU1OUMxRDQxNDlBNzdERjE1NTUzMTFDMDU2RENEQkM1
RkY0Qy5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6
Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vY2NiZmIyMjgtZmQwNS00YWZkLTg3
YmQtZWQ1ODBiNTUwMzZmLzAvMDUyRUU1OUMxRDQxNDlBNzdERjE1NTUzMTFDMDU2
RENEQkM1RkY0Qy5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF
BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC
BQAwDQYJKoZIhvcNAQELBQADggEBAFG56PF0FN8pyJg4ji6OoQIqErFc/56evh4Z
UwnkgQmotLo9d9UnUQO6rdMMH16pAuahPRX4k6IjIe5/tJ8i9a3zMAYPRMwAB57X
dw6B2DOHxu9C+9csPvvU552cb5w4I+4aVuS+pof5AmGJNMwMfomIGX5cA1/Eh/+i
/u5xrGTSdT+a1XEABEVHxEwRHEzZBjGbAu7mkkyH4sHMbG1wP8dE5F8PzlzVBgxd
q2xfafD4WEymta/+3qUzxycn+upQRbs4G+pBrwpta2/Md0Or0Zk1kj7zVFj1h6Ji
AvEpNy7sdo6/hV15MshiAI5tKD5wjQW8+2jo7YF40HebBmK74Go=
-----END CERTIFICATE-----
Generated at Sun Dec 7 01:44:45 2025 by rpki-client