This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf repo-rpki.idnic.net/repo/2490345e-2d57-4349-b78f-c8b18a442445/0/33FD31277D728C6A6715B913D5A4795CA79CAAD9.mft File: 33FD31277D728C6A6715B913D5A4795CA79CAAD9.mft (raw, json) Hash identifier: 1MEUpLmF5bT3pR6KyyloKwbpvQk+ddukXb8ecGCT+Uc= Subject key identifier: CE:3E:A2:E3:0E:83:29:D9:44:5D:5A:9B:0E:F9:88:C6:A9:9E:F7:A5 Authority key identifier: 33:FD:31:27:7D:72:8C:6A:67:15:B9:13:D5:A4:79:5C:A7:9C:AA:D9 Certificate issuer: /CN=33FD31277D728C6A6715B913D5A4795CA79CAAD9 Certificate serial: 6A7AB6BBEF93D1A71F889612A7BC53C277A07880 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/33FD31277D728C6A6715B913D5A4795CA79CAAD9.cer Subject info access: rsync://repo-rpki.idnic.net/repo/2490345e-2d57-4349-b78f-c8b18a442445/0/33FD31277D728C6A6715B913D5A4795CA79CAAD9.mft Manifest number: 04E1 Signing time: Sun 25 Jan 2026 01:10:44 +0000 Manifest this update: Sun 25 Jan 2026 01:05:44 +0000 Manifest next update: Wed 28 Jan 2026 08:35:44 +0000 Files and hashes: 1: 323430363a633634303a3a2f33322d3332203d3e20313431313337.roa (hash: 5V8TdCs3cgs+nmmoF4z5Y22rIV0qGc1uTgZVGMrslKU=) 2: 33FD31277D728C6A6715B913D5A4795CA79CAAD9.crl (hash: Z72GcU2xlvEUiqhrnpCJurt13IE27708nr6+HknJ/N8=) 3: 3130332e3135382e3235332e302f32342d3234203d3e20313431313337.roa (hash: Hp5JXQrEPxCMGP++NvFxm2uvusi9TtoQlGvA7/UOH1I=) 4: 323430363a633634303a323a3a2f34382d3438203d3e20313431313337.roa (hash: DTVsh2XoacQGQ0M4VZPcXWe9xYvlSB7Zv3KJ/YTK1Yw=) 5: 323430363a633634303a313a3a2f34382d3438203d3e20313431313337.roa (hash: Mt5SrkBl0TnCuOW6KjiUo7KU17URT0CCUG/IFHUWPhI=) 6: 3130332e3135382e3235322e302f32332d3233203d3e20313431313337.roa (hash: MfxGUIrhtjjGajjX90ABbBqTVuaaEFP6XuBr1Yslsx0=) 7: 3130332e3135382e3235322e302f32342d3234203d3e20313431313337.roa (hash: laLJUGonDC43HjG3ZGNawYIEQ9ln67j38UngxvM2zgQ=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/2490345e-2d57-4349-b78f-c8b18a442445/0/33FD31277D728C6A6715B913D5A4795CA79CAAD9.crl rsync://repo-rpki.idnic.net/repo/2490345e-2d57-4349-b78f-c8b18a442445/0/33FD31277D728C6A6715B913D5A4795CA79CAAD9.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/33FD31277D728C6A6715B913D5A4795CA79CAAD9.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 28 Jan 2026 08:35:44 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 6a:7a:b6:bb:ef:93:d1:a7:1f:88:96:12:a7:bc:53:c2:77:a0:78:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=33FD31277D728C6A6715B913D5A4795CA79CAAD9 Validity Not Before: Jan 25 01:05:44 2026 GMT Not After : Jan 28 08:35:44 2026 GMT Subject: CN=CE3EA2E30E8329D9445D5A9B0EF988C6A99EF7A5 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ae:0b:ad:91:85:e9:28:ca:f4:8a:40:b2:89:37: 4c:b9:2f:ca:90:b1:0b:fc:b5:49:d4:c5:75:e8:2d: 71:7b:13:a4:79:e1:1c:de:76:b8:5d:07:f0:b9:8e: 16:cd:cf:1f:47:38:81:75:be:ce:60:7c:86:52:da: f5:f8:84:a5:b0:b9:8e:c3:f1:27:14:06:ff:3f:04: 9d:9f:f7:60:01:f9:26:23:90:ee:81:02:32:06:dc: dd:84:8f:19:03:ca:92:73:95:7c:a7:98:50:9a:b5: b8:e6:ab:cf:09:f6:73:1a:2a:0c:55:d3:83:fa:20: bc:06:1d:be:b3:8b:67:8f:1d:92:5f:e1:e9:02:79: 1b:a0:e4:f7:66:29:5f:d4:54:3c:9c:bd:22:1e:7d: 55:bb:89:5e:0a:02:cd:f4:c6:60:d0:43:78:2f:45: 9a:3a:9a:f8:f6:d5:1a:ee:f9:e0:ae:88:25:df:35: 1e:89:ac:69:1e:e0:ac:1a:e6:65:f1:50:1c:b2:d5: fd:49:85:16:6f:71:a9:84:9f:3f:89:72:18:02:17: 5d:4f:fc:9a:cd:38:a9:07:63:35:73:e2:f2:b4:ed: 19:7b:65:69:4f:fa:46:f4:1e:8e:75:2a:a0:17:79: e3:2c:75:ea:5c:e6:90:0f:24:bd:eb:e1:4c:9f:57: 00:af Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: CE:3E:A2:E3:0E:83:29:D9:44:5D:5A:9B:0E:F9:88:C6:A9:9E:F7:A5 X509v3 Authority Key Identifier: keyid:33:FD:31:27:7D:72:8C:6A:67:15:B9:13:D5:A4:79:5C:A7:9C:AA:D9 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/2490345e-2d57-4349-b78f-c8b18a442445/0/33FD31277D728C6A6715B913D5A4795CA79CAAD9.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/33FD31277D728C6A6715B913D5A4795CA79CAAD9.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/2490345e-2d57-4349-b78f-c8b18a442445/0/33FD31277D728C6A6715B913D5A4795CA79CAAD9.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 70:10:69:bd:31:cb:07:1a:97:82:07:58:16:17:76:4b:f7:a4: e6:1b:05:0b:ca:1a:be:11:e0:1a:94:cd:82:fe:15:ea:b2:02: f2:f4:e9:ea:b3:13:a4:d0:33:69:5f:ac:95:bb:e1:ea:79:8f: 04:5d:4b:ef:0a:56:f0:1a:b4:94:51:4b:ef:0e:90:36:8e:63: f4:17:17:5d:a8:83:09:bb:e1:76:59:ba:30:52:31:72:b4:bd: c3:3f:35:bc:2a:d2:a3:11:a3:bc:f6:20:59:35:11:9f:4f:21: e5:09:c4:ec:9d:7b:04:16:62:9f:91:8f:31:ee:aa:39:a1:9f: e0:60:d9:b7:c2:0d:20:9c:ea:af:6f:7d:b3:45:57:68:54:3c: dd:39:0a:fc:c4:16:a3:ec:e3:92:d0:a0:2b:02:f6:f9:9f:be: fc:ea:a5:8b:f6:ff:73:5f:c4:65:2f:b4:3c:aa:9a:08:98:06: a3:b2:a6:4b:4f:21:7f:f6:80:60:4e:cc:0f:0f:f5:32:5f:65: 61:ff:05:80:c9:0e:84:5f:48:cc:1c:38:65:04:00:06:7c:8f: df:78:11:7c:d0:e2:74:94:be:21:c0:49:e6:78:8f:b1:40:28: 66:72:d3:f3:d9:af:ec:6e:bd:c4:d8:80:13:67:47:cc:e0:27: ed:d2:fc:a5 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUanq2u++T0acfiJYSp7xTwnegeIAwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMzNGRDMxMjc3RDcyOEM2QTY3MTVCOTEzRDVBNDc5NUNB NzlDQUFEOTAeFw0yNjAxMjUwMTA1NDRaFw0yNjAxMjgwODM1NDRaMDMxMTAvBgNV BAMTKENFM0VBMkUzMEU4MzI5RDk0NDVENUE5QjBFRjk4OEM2QTk5RUY3QTUwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCuC62RhekoyvSKQLKJN0y5L8qQ sQv8tUnUxXXoLXF7E6R54RzedrhdB/C5jhbNzx9HOIF1vs5gfIZS2vX4hKWwuY7D 8ScUBv8/BJ2f92AB+SYjkO6BAjIG3N2EjxkDypJzlXynmFCatbjmq88J9nMaKgxV 04P6ILwGHb6zi2ePHZJf4ekCeRug5PdmKV/UVDycvSIefVW7iV4KAs30xmDQQ3gv RZo6mvj21Rru+eCuiCXfNR6JrGke4Kwa5mXxUByy1f1JhRZvcamEnz+JchgCF11P /JrNOKkHYzVz4vK07Rl7ZWlP+kb0Ho51KqAXeeMsdepc5pAPJL3r4UyfVwCvAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUzj6i4w6DKdlEXVqbDvmIxqme96UwHwYDVR0j BBgwFoAUM/0xJ31yjGpnFbkT1aR5XKecqtkwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby8y NDkwMzQ1ZS0yZDU3LTQzNDktYjc4Zi1jOGIxOGE0NDI0NDUvMC8zM0ZEMzEyNzdE NzI4QzZBNjcxNUI5MTNENUE0Nzk1Q0E3OUNBQUQ5LmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvMzNGRDMxMjc3RDcyOEM2QTY3MTVCOTEzRDVBNDc5NUNBNzlD QUFEOS5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vMjQ5MDM0NWUtMmQ1Ny00MzQ5LWI3 OGYtYzhiMThhNDQyNDQ1LzAvMzNGRDMxMjc3RDcyOEM2QTY3MTVCOTEzRDVBNDc5 NUNBNzlDQUFEOS5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAHAQab0xywcal4IHWBYXdkv3pOYbBQvKGr4R 4BqUzYL+FeqyAvL06eqzE6TQM2lfrJW74ep5jwRdS+8KVvAatJRRS+8OkDaOY/QX F12ogwm74XZZujBSMXK0vcM/Nbwq0qMRo7z2IFk1EZ9PIeUJxOydewQWYp+RjzHu qjmhn+Bg2bfCDSCc6q9vfbNFV2hUPN05CvzEFqPs45LQoCsC9vmfvvzqpYv2/3Nf xGUvtDyqmgiYBqOypktPIX/2gGBOzA8P9TJfZWH/BYDJDoRfSMwcOGUEAAZ8j994 EXzQ4nSUviHASeZ4j7FAKGZy0/PZr+xuvcTYgBNnR8zgJ+3S/KU= -----END CERTIFICATE-----Generated at Sun Jan 25 18:36:55 2026 by rpki-client