This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf repo-rpki.idnic.net/repo/03ade9c0-cde1-47f0-9cd2-4a57bdde14e8/0/33EF8ED81E12A39E325D47325D8FDA76CC497040.mft File: 33EF8ED81E12A39E325D47325D8FDA76CC497040.mft (raw, json) Hash identifier: l4TNeTWmOEl3xxlTATqRZOfHvemWLqPLok++iLgCoDA= Subject key identifier: D8:E2:46:03:5B:08:91:B0:3D:2D:81:D5:97:F3:AE:FD:88:A8:0F:9B Authority key identifier: 33:EF:8E:D8:1E:12:A3:9E:32:5D:47:32:5D:8F:DA:76:CC:49:70:40 Certificate issuer: /CN=33EF8ED81E12A39E325D47325D8FDA76CC497040 Certificate serial: 787A39B3C2F913A1C7F111CD01780DC7156BF800 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/33EF8ED81E12A39E325D47325D8FDA76CC497040.cer Subject info access: rsync://repo-rpki.idnic.net/repo/03ade9c0-cde1-47f0-9cd2-4a57bdde14e8/0/33EF8ED81E12A39E325D47325D8FDA76CC497040.mft Manifest number: 0239 Signing time: Sat 24 Jan 2026 22:02:04 +0000 Manifest this update: Sat 24 Jan 2026 21:57:04 +0000 Manifest next update: Wed 28 Jan 2026 05:01:04 +0000 Files and hashes: 1: 33EF8ED81E12A39E325D47325D8FDA76CC497040.crl (hash: dq1rjBWbyYILIpTUmTVv5AzIGJdwdCXBvumOfXxiOZA=) 2: 3130332e3138382e3136382e302f32342d3234203d3e20313439373235.roa (hash: 2Vcw1BQIrq+euE8oM1Q4TIy+/+OqP6RefIW+9ae0TaY=) 3: 3130332e3138382e3136392e302f32342d3234203d3e203538383231.roa (hash: vv/vovF/hb4Z1SuWQuWHcDR4S/nQChh3Okt6YN7Aqwg=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/03ade9c0-cde1-47f0-9cd2-4a57bdde14e8/0/33EF8ED81E12A39E325D47325D8FDA76CC497040.crl rsync://repo-rpki.idnic.net/repo/03ade9c0-cde1-47f0-9cd2-4a57bdde14e8/0/33EF8ED81E12A39E325D47325D8FDA76CC497040.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/33EF8ED81E12A39E325D47325D8FDA76CC497040.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 28 Jan 2026 05:01:04 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 78:7a:39:b3:c2:f9:13:a1:c7:f1:11:cd:01:78:0d:c7:15:6b:f8:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=33EF8ED81E12A39E325D47325D8FDA76CC497040 Validity Not Before: Jan 24 21:57:04 2026 GMT Not After : Jan 28 05:01:04 2026 GMT Subject: CN=D8E246035B0891B03D2D81D597F3AEFD88A80F9B Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:f8:9f:36:37:77:51:33:82:b2:5d:fe:c9:ba:42: be:05:8a:10:f6:dd:80:c4:a2:0c:b5:ce:8b:aa:86: 9f:f8:6b:ea:a0:89:d8:0c:82:92:31:9c:b3:d9:84: 3e:75:ed:40:58:f4:94:31:d6:f0:bf:76:a2:c1:51: f3:1b:df:77:49:e8:be:64:53:5c:61:22:c3:c8:f3: c8:db:ae:ad:82:d0:c7:0d:c2:50:e5:43:7b:2c:00: b5:32:03:f6:77:44:4d:df:f0:1c:67:e9:38:51:35: bf:82:42:ac:94:67:5d:0f:39:6e:0c:82:8e:ce:0c: 77:9c:e1:35:a2:40:9f:32:b3:4f:c0:85:e2:7e:ca: 9a:33:2a:bc:5b:5b:01:63:31:dd:dd:06:ec:bb:3d: af:32:d6:39:67:3e:3a:b6:ad:42:31:30:14:43:62: bc:8f:1d:0d:94:36:29:7b:b2:ab:cb:cc:3f:b0:7e: c7:e3:15:c5:da:9d:c8:68:95:59:26:64:88:28:48: d9:77:34:dd:a5:9c:b3:b1:7a:5d:05:9d:bd:a5:ef: 0a:fd:dc:60:a4:b5:a4:10:bc:b7:cc:41:d0:5f:b1: 92:e7:9e:fb:c8:91:58:a8:15:ff:4b:35:e6:ee:ba: ba:0a:f6:2f:a3:fb:a1:cc:63:3b:68:e6:0c:46:2c: b9:3b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D8:E2:46:03:5B:08:91:B0:3D:2D:81:D5:97:F3:AE:FD:88:A8:0F:9B X509v3 Authority Key Identifier: keyid:33:EF:8E:D8:1E:12:A3:9E:32:5D:47:32:5D:8F:DA:76:CC:49:70:40 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/03ade9c0-cde1-47f0-9cd2-4a57bdde14e8/0/33EF8ED81E12A39E325D47325D8FDA76CC497040.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/33EF8ED81E12A39E325D47325D8FDA76CC497040.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/03ade9c0-cde1-47f0-9cd2-4a57bdde14e8/0/33EF8ED81E12A39E325D47325D8FDA76CC497040.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 62:07:cb:56:04:b1:2e:f3:0c:63:6e:e0:94:a1:f8:f0:3e:76: ea:aa:aa:51:fa:aa:60:e1:46:a8:d3:68:07:45:e0:31:e8:81: 72:13:f2:ea:01:f4:e0:49:b7:8f:9a:87:29:ad:e2:dc:12:8c: f8:62:00:32:f5:86:ef:9c:12:5d:a8:e6:62:ba:5c:9d:d2:7a: bc:91:7e:a3:2b:7b:dc:b1:5c:2b:2e:d9:c1:80:4c:1e:85:5a: b2:2f:7e:e5:a7:a3:09:be:c4:6a:b3:9e:c1:b1:c1:4e:6d:8f: b5:56:b7:6a:ae:07:d5:b8:21:49:7a:37:52:75:1e:dd:ac:33: 66:d7:a7:29:e0:04:e3:ce:e4:be:02:6c:89:36:ee:05:00:6b: fd:a9:3c:b2:e2:88:28:32:7d:87:ce:13:21:1b:4e:1d:da:65: 6f:3c:35:54:9e:4b:fc:61:d2:cf:ef:f9:95:e3:8c:e3:8f:26: 28:46:8d:34:1b:8e:b2:c3:61:b5:4d:e3:44:9e:c8:a6:a3:4c: ee:c8:19:22:e6:fc:01:81:51:43:4e:a5:42:ac:7a:14:eb:d5: a9:cb:90:05:ab:49:14:1b:9f:a8:16:b3:64:39:e4:2d:bf:d6: 7d:c6:6d:99:11:4a:ce:94:1b:e7:5c:29:b6:44:81:cb:d8:e6: 14:74:c9:ba -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUeHo5s8L5E6HH8RHNAXgNxxVr+AAwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMzNFRjhFRDgxRTEyQTM5RTMyNUQ0NzMyNUQ4RkRBNzZD QzQ5NzA0MDAeFw0yNjAxMjQyMTU3MDRaFw0yNjAxMjgwNTAxMDRaMDMxMTAvBgNV BAMTKEQ4RTI0NjAzNUIwODkxQjAzRDJEODFENTk3RjNBRUZEODhBODBGOUIwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQD4nzY3d1EzgrJd/sm6Qr4FihD2 3YDEogy1zouqhp/4a+qgidgMgpIxnLPZhD517UBY9JQx1vC/dqLBUfMb33dJ6L5k U1xhIsPI88jbrq2C0McNwlDlQ3ssALUyA/Z3RE3f8Bxn6ThRNb+CQqyUZ10POW4M go7ODHec4TWiQJ8ys0/AheJ+ypozKrxbWwFjMd3dBuy7Pa8y1jlnPjq2rUIxMBRD YryPHQ2UNil7sqvLzD+wfsfjFcXancholVkmZIgoSNl3NN2lnLOxel0Fnb2l7wr9 3GCktaQQvLfMQdBfsZLnnvvIkVioFf9LNebuuroK9i+j+6HMYzto5gxGLLk7AgMB AAGjggI8MIICODAdBgNVHQ4EFgQU2OJGA1sIkbA9LYHVl/Ou/YioD5swHwYDVR0j BBgwFoAUM++O2B4So54yXUcyXY/adsxJcEAwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby8w M2FkZTljMC1jZGUxLTQ3ZjAtOWNkMi00YTU3YmRkZTE0ZTgvMC8zM0VGOEVEODFF MTJBMzlFMzI1RDQ3MzI1RDhGREE3NkNDNDk3MDQwLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvMzNFRjhFRDgxRTEyQTM5RTMyNUQ0NzMyNUQ4RkRBNzZDQzQ5 NzA0MC5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vMDNhZGU5YzAtY2RlMS00N2YwLTlj ZDItNGE1N2JkZGUxNGU4LzAvMzNFRjhFRDgxRTEyQTM5RTMyNUQ0NzMyNUQ4RkRB NzZDQzQ5NzA0MC5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAGIHy1YEsS7zDGNu4JSh+PA+duqqqlH6qmDh RqjTaAdF4DHogXIT8uoB9OBJt4+ahymt4twSjPhiADL1hu+cEl2o5mK6XJ3SeryR fqMre9yxXCsu2cGATB6FWrIvfuWnowm+xGqznsGxwU5tj7VWt2quB9W4IUl6N1J1 Ht2sM2bXpyngBOPO5L4CbIk27gUAa/2pPLLiiCgyfYfOEyEbTh3aZW88NVSeS/xh 0s/v+ZXjjOOPJihGjTQbjrLDYbVN40SeyKajTO7IGSLm/AGBUUNOpUKsehTr1anL kAWrSRQbn6gWs2Q55C2/1n3GbZkRSs6UG+dcKbZEgcvY5hR0ybo= -----END CERTIFICATE-----Generated at Mon Jan 26 05:39:11 2026 by rpki-client