This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf repo-rpki.idnic.net/repo/03ade9c0-cde1-47f0-9cd2-4a57bdde14e8/0/33EF8ED81E12A39E325D47325D8FDA76CC497040.mft File: 33EF8ED81E12A39E325D47325D8FDA76CC497040.mft (raw, json) Hash identifier: U62M8n5VBkb/FvglSWeB/TX29CE4/cl3pkUPiuEDsS4= Subject key identifier: 75:1E:53:18:D2:63:44:C0:62:25:AA:A9:FE:59:90:47:34:F6:4E:74 Authority key identifier: 33:EF:8E:D8:1E:12:A3:9E:32:5D:47:32:5D:8F:DA:76:CC:49:70:40 Certificate issuer: /CN=33EF8ED81E12A39E325D47325D8FDA76CC497040 Certificate serial: 4C52C101D6CDD4931FBA2E009855F2339DD9ADCB Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/33EF8ED81E12A39E325D47325D8FDA76CC497040.cer Subject info access: rsync://repo-rpki.idnic.net/repo/03ade9c0-cde1-47f0-9cd2-4a57bdde14e8/0/33EF8ED81E12A39E325D47325D8FDA76CC497040.mft Manifest number: 0223 Signing time: Fri 05 Dec 2025 23:11:58 +0000 Manifest this update: Fri 05 Dec 2025 23:06:58 +0000 Manifest next update: Tue 09 Dec 2025 09:11:58 +0000 Files and hashes: 1: 33EF8ED81E12A39E325D47325D8FDA76CC497040.crl (hash: gzv+kNCzWKkOabj9l473ORy9mu0OVxfGUXgB3RLwkRI=) 2: 3130332e3138382e3136392e302f32342d3234203d3e203538383231.roa (hash: vv/vovF/hb4Z1SuWQuWHcDR4S/nQChh3Okt6YN7Aqwg=) 3: 3130332e3138382e3136382e302f32342d3234203d3e20313439373235.roa (hash: 2Vcw1BQIrq+euE8oM1Q4TIy+/+OqP6RefIW+9ae0TaY=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/03ade9c0-cde1-47f0-9cd2-4a57bdde14e8/0/33EF8ED81E12A39E325D47325D8FDA76CC497040.crl rsync://repo-rpki.idnic.net/repo/03ade9c0-cde1-47f0-9cd2-4a57bdde14e8/0/33EF8ED81E12A39E325D47325D8FDA76CC497040.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/33EF8ED81E12A39E325D47325D8FDA76CC497040.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 09 Dec 2025 09:11:58 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 4c:52:c1:01:d6:cd:d4:93:1f:ba:2e:00:98:55:f2:33:9d:d9:ad:cb Signature Algorithm: sha256WithRSAEncryption Issuer: CN=33EF8ED81E12A39E325D47325D8FDA76CC497040 Validity Not Before: Dec 5 23:06:58 2025 GMT Not After : Dec 9 09:11:58 2025 GMT Subject: CN=751E5318D26344C06225AAA9FE59904734F64E74 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c0:60:55:aa:22:5a:d0:f4:2c:56:62:39:21:0a: db:a3:29:28:19:db:4b:d5:ec:4d:f1:f6:70:91:1e: 13:5e:3d:d3:f6:42:83:71:18:42:92:bb:ef:09:30: e0:61:b9:2e:3b:ab:3a:ba:df:a0:06:57:ff:d1:cc: e8:52:a4:25:d1:b9:ad:fc:23:b2:39:93:bf:59:7c: b5:2f:55:9a:d1:1f:9e:7f:5d:aa:ea:e7:c7:ee:c5: 02:21:56:c9:52:ce:37:ec:2c:18:25:a3:e1:8d:58: 3f:0d:bd:8d:4b:b4:69:28:ff:a9:b6:5e:2d:86:be: 43:cc:20:a1:68:3d:e7:81:e7:bf:a4:80:5a:4f:8e: 8a:03:2b:3d:25:c7:1d:f9:2a:d4:29:71:d6:9f:7b: cf:c9:e6:28:cf:78:93:d9:71:ab:03:99:8e:12:53: 93:c0:a2:3f:93:f5:67:55:6b:23:5e:8f:9b:c4:9c: f2:b9:bd:02:3b:2b:d9:b6:83:1e:2b:c4:6a:7e:d7: 0c:79:e5:dc:65:d7:ae:25:5f:ef:22:8b:a4:b0:32: ec:9b:3e:2b:92:c1:3f:a6:15:39:90:69:2a:42:d1: 3e:be:22:d8:6a:6f:97:11:8e:49:bb:1f:bf:3a:6f: 2b:d6:55:24:e1:c0:7b:d2:cc:b1:22:1b:58:af:9b: 63:69 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 75:1E:53:18:D2:63:44:C0:62:25:AA:A9:FE:59:90:47:34:F6:4E:74 X509v3 Authority Key Identifier: keyid:33:EF:8E:D8:1E:12:A3:9E:32:5D:47:32:5D:8F:DA:76:CC:49:70:40 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/03ade9c0-cde1-47f0-9cd2-4a57bdde14e8/0/33EF8ED81E12A39E325D47325D8FDA76CC497040.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/33EF8ED81E12A39E325D47325D8FDA76CC497040.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/03ade9c0-cde1-47f0-9cd2-4a57bdde14e8/0/33EF8ED81E12A39E325D47325D8FDA76CC497040.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption ab:cb:5e:08:cd:db:0c:eb:54:fd:23:3f:d4:82:10:a6:f2:fc: d0:d6:f6:c2:62:f3:52:91:5d:38:ad:bd:e2:56:54:bc:5b:1c: d6:ee:61:d4:6b:db:33:e2:ef:be:c7:8c:9e:6c:e3:a7:4a:a8: db:71:ca:8d:34:0b:d2:9a:b6:52:0d:5f:ea:3a:20:f1:f9:00: 3f:a3:30:61:68:cf:dd:4e:05:5d:5d:86:c1:08:50:ce:7f:ef: 9f:2d:f9:0b:bf:a1:64:af:01:71:d2:91:03:4d:3e:90:5e:05: e7:93:25:5c:35:75:5c:18:9f:2c:86:45:29:72:39:d8:b3:ff: 24:72:22:8d:72:b2:0d:5e:39:78:f0:51:f4:7d:36:a1:b2:a5: 3b:d6:b2:b6:d1:9a:49:20:ca:6f:c5:04:81:ef:5e:6b:61:db: c4:ba:a4:d1:9a:c7:12:a0:8f:06:1c:5e:46:cb:28:3a:10:0d: 09:3f:73:5d:51:85:b5:f7:d9:9b:b2:c6:51:fc:c1:d4:9d:5b: 6d:46:76:25:91:28:57:82:d4:2f:c5:9e:12:e5:82:7e:09:78: a0:88:2b:8e:a1:2e:4a:b7:07:71:87:09:00:c2:26:74:6d:e3: 2d:71:a1:4b:d3:6a:e4:32:24:7c:9d:18:38:1f:05:0e:59:e0: ca:ca:e5:4c -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUTFLBAdbN1JMfui4AmFXyM53ZrcswDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMzNFRjhFRDgxRTEyQTM5RTMyNUQ0NzMyNUQ4RkRBNzZD QzQ5NzA0MDAeFw0yNTEyMDUyMzA2NThaFw0yNTEyMDkwOTExNThaMDMxMTAvBgNV BAMTKDc1MUU1MzE4RDI2MzQ0QzA2MjI1QUFBOUZFNTk5MDQ3MzRGNjRFNzQwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDAYFWqIlrQ9CxWYjkhCtujKSgZ 20vV7E3x9nCRHhNePdP2QoNxGEKSu+8JMOBhuS47qzq636AGV//RzOhSpCXRua38 I7I5k79ZfLUvVZrRH55/Xarq58fuxQIhVslSzjfsLBglo+GNWD8NvY1LtGko/6m2 Xi2GvkPMIKFoPeeB57+kgFpPjooDKz0lxx35KtQpcdafe8/J5ijPeJPZcasDmY4S U5PAoj+T9WdVayNej5vEnPK5vQI7K9m2gx4rxGp+1wx55dxl164lX+8ii6SwMuyb PiuSwT+mFTmQaSpC0T6+Ithqb5cRjkm7H786byvWVSThwHvSzLEiG1ivm2NpAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUdR5TGNJjRMBiJaqp/lmQRzT2TnQwHwYDVR0j BBgwFoAUM++O2B4So54yXUcyXY/adsxJcEAwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby8w M2FkZTljMC1jZGUxLTQ3ZjAtOWNkMi00YTU3YmRkZTE0ZTgvMC8zM0VGOEVEODFF MTJBMzlFMzI1RDQ3MzI1RDhGREE3NkNDNDk3MDQwLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvMzNFRjhFRDgxRTEyQTM5RTMyNUQ0NzMyNUQ4RkRBNzZDQzQ5 NzA0MC5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vMDNhZGU5YzAtY2RlMS00N2YwLTlj ZDItNGE1N2JkZGUxNGU4LzAvMzNFRjhFRDgxRTEyQTM5RTMyNUQ0NzMyNUQ4RkRB NzZDQzQ5NzA0MC5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAKvLXgjN2wzrVP0jP9SCEKby/NDW9sJi81KR XTitveJWVLxbHNbuYdRr2zPi777HjJ5s46dKqNtxyo00C9KatlINX+o6IPH5AD+j MGFoz91OBV1dhsEIUM5/758t+Qu/oWSvAXHSkQNNPpBeBeeTJVw1dVwYnyyGRSly Odiz/yRyIo1ysg1eOXjwUfR9NqGypTvWsrbRmkkgym/FBIHvXmth28S6pNGaxxKg jwYcXkbLKDoQDQk/c11RhbX32ZuyxlH8wdSdW21GdiWRKFeC1C/FnhLlgn4JeKCI K46hLkq3B3GHCQDCJnRt4y1xoUvTauQyJHydGDgfBQ5Z4MrK5Uw= -----END CERTIFICATE-----Generated at Sun Dec 7 00:12:17 2025 by rpki-client