This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf repo-rpki.idnic.net/repo/ccbfb228-fd05-4afd-87bd-ed580b55036f/0/052EE59C1D4149A77DF1555311C056DCDBC5FF4C.mft File: 052EE59C1D4149A77DF1555311C056DCDBC5FF4C.mft (raw, json) Hash identifier: popcXUgHPGZD0oT4wqYPUknCEh4VZVcldVEt+O5GsAE= Subject key identifier: 65:3E:FD:3A:6E:9F:91:EC:F8:89:2D:FB:94:2E:25:02:86:B9:B1:A2 Authority key identifier: 05:2E:E5:9C:1D:41:49:A7:7D:F1:55:53:11:C0:56:DC:DB:C5:FF:4C Certificate issuer: /CN=052EE59C1D4149A77DF1555311C056DCDBC5FF4C Certificate serial: 7AF33A871EB0B508AF1BEFD2082C0B999C7A2B96 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/052EE59C1D4149A77DF1555311C056DCDBC5FF4C.cer Subject info access: rsync://repo-rpki.idnic.net/repo/ccbfb228-fd05-4afd-87bd-ed580b55036f/0/052EE59C1D4149A77DF1555311C056DCDBC5FF4C.mft Manifest number: 0343 Signing time: Tue 16 Dec 2025 21:02:22 +0000 Manifest this update: Tue 16 Dec 2025 20:57:22 +0000 Manifest next update: Sat 20 Dec 2025 07:00:22 +0000 Files and hashes: 1: 052EE59C1D4149A77DF1555311C056DCDBC5FF4C.crl (hash: SkLaQ6W67Z8nbCY+4jOGvu081yH4CNvpOs7+nNK1fI8=) 2: 3130332e3136312e3139342e302f32332d3233203d3e20313431363232.roa (hash: oZleMN4XSuVHyPBpWgeFkCol07oh2xMRlYa+Uzesyrw=) 3: 3130332e3136312e3139342e302f32342d3234203d3e20313431363232.roa (hash: byxFPyjiQJT5Oo5JN6VrZseWPHWMRktKnANVfaiZKVo=) 4: 3130332e3136312e3139352e302f32342d3234203d3e20313431363232.roa (hash: 3Jf6rjo7oK98mb2AwseOoU04Ietp18eSMPo87t19+zs=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/ccbfb228-fd05-4afd-87bd-ed580b55036f/0/052EE59C1D4149A77DF1555311C056DCDBC5FF4C.crl rsync://repo-rpki.idnic.net/repo/ccbfb228-fd05-4afd-87bd-ed580b55036f/0/052EE59C1D4149A77DF1555311C056DCDBC5FF4C.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/052EE59C1D4149A77DF1555311C056DCDBC5FF4C.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 20 Dec 2025 07:00:22 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 7a:f3:3a:87:1e:b0:b5:08:af:1b:ef:d2:08:2c:0b:99:9c:7a:2b:96 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=052EE59C1D4149A77DF1555311C056DCDBC5FF4C Validity Not Before: Dec 16 20:57:22 2025 GMT Not After : Dec 20 07:00:22 2025 GMT Subject: CN=653EFD3A6E9F91ECF8892DFB942E250286B9B1A2 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b7:62:e3:91:14:cf:5f:0a:44:6a:0a:0f:ce:70: 84:db:4d:42:38:a0:b7:53:44:85:dc:f1:ea:50:5e: 2b:16:94:da:d6:38:29:b1:a0:66:a0:1b:9b:49:c6: 47:35:5b:69:86:b3:e0:7e:a3:88:de:ab:32:fa:dc: c4:cd:83:81:e7:7b:27:03:e7:6e:ad:0b:fb:fb:a7: 22:08:a2:27:1f:7f:95:98:07:6b:3d:78:fd:e9:49: 7c:d7:ec:37:69:d8:38:5a:a2:4a:46:58:3a:03:28: 39:c9:07:7a:60:03:99:4d:5b:4c:c8:49:b0:08:33: 44:9f:28:17:3c:37:9b:7c:c5:7f:f8:31:9c:01:b8: 5e:b9:d9:46:c5:8b:ea:ec:10:b4:b8:04:f8:5f:d7: bf:1a:ea:e0:02:91:61:36:45:a8:ce:c8:b7:3f:b1: 52:a3:d3:84:30:2d:a4:92:59:c6:bf:76:56:e8:29: 40:99:01:b3:ac:9a:01:8a:ff:1e:8c:36:83:95:ca: 8f:8a:ca:74:bd:d8:d6:8e:b8:b7:56:59:00:e7:3c: fb:69:6d:5e:c7:21:a5:fc:cd:74:53:df:d0:fb:79: de:4b:3e:4e:a9:5e:35:e4:7b:e1:82:ae:48:c9:0f: 28:35:a7:60:0c:cb:cf:c7:9d:f1:36:6d:8b:fb:9e: da:eb Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 65:3E:FD:3A:6E:9F:91:EC:F8:89:2D:FB:94:2E:25:02:86:B9:B1:A2 X509v3 Authority Key Identifier: keyid:05:2E:E5:9C:1D:41:49:A7:7D:F1:55:53:11:C0:56:DC:DB:C5:FF:4C X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/ccbfb228-fd05-4afd-87bd-ed580b55036f/0/052EE59C1D4149A77DF1555311C056DCDBC5FF4C.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/052EE59C1D4149A77DF1555311C056DCDBC5FF4C.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/ccbfb228-fd05-4afd-87bd-ed580b55036f/0/052EE59C1D4149A77DF1555311C056DCDBC5FF4C.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 50:16:14:cd:f7:2b:bd:9c:c1:a7:25:c8:59:4c:63:ff:a8:fc: 39:be:c0:13:6d:2a:38:a2:c8:4b:37:46:f6:1d:f7:66:c9:92: 70:0c:27:63:7b:75:cb:e9:9b:5c:18:33:9a:3b:f4:e0:2f:25: 45:cb:20:ab:87:17:c5:18:8a:a9:f2:e9:f9:60:f0:6e:7f:e9: e9:c9:8a:b6:58:6c:7f:a9:54:80:de:e8:f1:56:a3:9b:09:1b: 42:9f:6b:cf:f5:da:1d:de:05:c6:77:35:8b:e3:2f:4a:d0:c9: d1:b6:9d:61:bc:d9:16:27:fa:c1:e4:0e:b2:e5:d5:27:b5:a5: ac:6d:3e:ed:2b:87:c9:17:1a:41:7d:7e:e4:29:2f:22:f8:44: 74:f5:ec:43:57:76:7c:e0:be:84:5c:99:f6:ae:46:ee:83:a1: 32:80:f5:2d:bc:ae:68:92:0a:03:bf:54:d1:9c:e5:6b:35:53: 63:d1:4d:46:fe:b2:a1:81:92:49:de:23:1e:1f:2c:e0:a2:59: a0:94:5a:ce:79:96:75:16:3c:78:0a:59:f5:81:2d:13:ad:87: 7f:78:2f:b8:3c:8d:eb:95:56:a1:20:8f:8e:6e:ea:8e:60:1c: 10:38:75:5d:8d:6e:23:ba:13:a3:fa:ef:69:23:62:1a:c6:68: 6f:c3:7d:5d -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUevM6hx6wtQivG+/SCCwLmZx6K5YwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMDUyRUU1OUMxRDQxNDlBNzdERjE1NTUzMTFDMDU2RENE QkM1RkY0QzAeFw0yNTEyMTYyMDU3MjJaFw0yNTEyMjAwNzAwMjJaMDMxMTAvBgNV BAMTKDY1M0VGRDNBNkU5RjkxRUNGODg5MkRGQjk0MkUyNTAyODZCOUIxQTIwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC3YuORFM9fCkRqCg/OcITbTUI4 oLdTRIXc8epQXisWlNrWOCmxoGagG5tJxkc1W2mGs+B+o4jeqzL63MTNg4HneycD 526tC/v7pyIIoicff5WYB2s9eP3pSXzX7Ddp2DhaokpGWDoDKDnJB3pgA5lNW0zI SbAIM0SfKBc8N5t8xX/4MZwBuF652UbFi+rsELS4BPhf178a6uACkWE2RajOyLc/ sVKj04QwLaSSWca/dlboKUCZAbOsmgGK/x6MNoOVyo+KynS92NaOuLdWWQDnPPtp bV7HIaX8zXRT39D7ed5LPk6pXjXke+GCrkjJDyg1p2AMy8/HnfE2bYv7ntrrAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUZT79Om6fkez4iS37lC4lAoa5saIwHwYDVR0j BBgwFoAUBS7lnB1BSad98VVTEcBW3NvF/0wwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby9j Y2JmYjIyOC1mZDA1LTRhZmQtODdiZC1lZDU4MGI1NTAzNmYvMC8wNTJFRTU5QzFE NDE0OUE3N0RGMTU1NTMxMUMwNTZEQ0RCQzVGRjRDLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvMDUyRUU1OUMxRDQxNDlBNzdERjE1NTUzMTFDMDU2RENEQkM1 RkY0Qy5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vY2NiZmIyMjgtZmQwNS00YWZkLTg3 YmQtZWQ1ODBiNTUwMzZmLzAvMDUyRUU1OUMxRDQxNDlBNzdERjE1NTUzMTFDMDU2 RENEQkM1RkY0Qy5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAFAWFM33K72cwaclyFlMY/+o/Dm+wBNtKjii yEs3RvYd92bJknAMJ2N7dcvpm1wYM5o79OAvJUXLIKuHF8UYiqny6flg8G5/6enJ irZYbH+pVIDe6PFWo5sJG0Kfa8/12h3eBcZ3NYvjL0rQydG2nWG82RYn+sHkDrLl 1Se1paxtPu0rh8kXGkF9fuQpLyL4RHT17ENXdnzgvoRcmfauRu6DoTKA9S28rmiS CgO/VNGc5Ws1U2PRTUb+sqGBkkneIx4fLOCiWaCUWs55lnUWPHgKWfWBLROth394 L7g8jeuVVqEgj45u6o5gHBA4dV2NbiO6E6P672kjYhrGaG/DfV0= -----END CERTIFICATE-----Generated at Thu Dec 18 07:14:14 2025 by rpki-client