This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf repo-rpki.idnic.net/repo/2490345e-2d57-4349-b78f-c8b18a442445/0/33FD31277D728C6A6715B913D5A4795CA79CAAD9.mft File: 33FD31277D728C6A6715B913D5A4795CA79CAAD9.mft (raw, json) Hash identifier: R+wcQ7IDkCW9dqYW8qlw9p8FMmOuMSEzFwDmP3ec7iE= Subject key identifier: D0:AD:EA:11:EB:D5:23:98:D2:15:49:6B:8C:C1:43:A7:43:EB:3F:9D Authority key identifier: 33:FD:31:27:7D:72:8C:6A:67:15:B9:13:D5:A4:79:5C:A7:9C:AA:D9 Certificate issuer: /CN=33FD31277D728C6A6715B913D5A4795CA79CAAD9 Certificate serial: 5452A719FD1B407BE26BAC7C0593155C397CE7C5 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/33FD31277D728C6A6715B913D5A4795CA79CAAD9.cer Subject info access: rsync://repo-rpki.idnic.net/repo/2490345e-2d57-4349-b78f-c8b18a442445/0/33FD31277D728C6A6715B913D5A4795CA79CAAD9.mft Manifest number: 04CB Signing time: Sat 06 Dec 2025 19:00:43 +0000 Manifest this update: Sat 06 Dec 2025 18:55:43 +0000 Manifest next update: Tue 09 Dec 2025 21:19:43 +0000 Files and hashes: 1: 323430363a633634303a3a2f33322d3332203d3e20313431313337.roa (hash: 5V8TdCs3cgs+nmmoF4z5Y22rIV0qGc1uTgZVGMrslKU=) 2: 323430363a633634303a313a3a2f34382d3438203d3e20313431313337.roa (hash: Mt5SrkBl0TnCuOW6KjiUo7KU17URT0CCUG/IFHUWPhI=) 3: 3130332e3135382e3235322e302f32342d3234203d3e20313431313337.roa (hash: laLJUGonDC43HjG3ZGNawYIEQ9ln67j38UngxvM2zgQ=) 4: 323430363a633634303a323a3a2f34382d3438203d3e20313431313337.roa (hash: DTVsh2XoacQGQ0M4VZPcXWe9xYvlSB7Zv3KJ/YTK1Yw=) 5: 3130332e3135382e3235332e302f32342d3234203d3e20313431313337.roa (hash: Hp5JXQrEPxCMGP++NvFxm2uvusi9TtoQlGvA7/UOH1I=) 6: 33FD31277D728C6A6715B913D5A4795CA79CAAD9.crl (hash: PyRPsPvSQCN8EvyHT+ZZgi9pklMMtius1hTtvg23tiM=) 7: 3130332e3135382e3235322e302f32332d3233203d3e20313431313337.roa (hash: MfxGUIrhtjjGajjX90ABbBqTVuaaEFP6XuBr1Yslsx0=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/2490345e-2d57-4349-b78f-c8b18a442445/0/33FD31277D728C6A6715B913D5A4795CA79CAAD9.crl rsync://repo-rpki.idnic.net/repo/2490345e-2d57-4349-b78f-c8b18a442445/0/33FD31277D728C6A6715B913D5A4795CA79CAAD9.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/33FD31277D728C6A6715B913D5A4795CA79CAAD9.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 09 Dec 2025 15:57:52 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 54:52:a7:19:fd:1b:40:7b:e2:6b:ac:7c:05:93:15:5c:39:7c:e7:c5 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=33FD31277D728C6A6715B913D5A4795CA79CAAD9 Validity Not Before: Dec 6 18:55:43 2025 GMT Not After : Dec 9 21:19:43 2025 GMT Subject: CN=D0ADEA11EBD52398D215496B8CC143A743EB3F9D Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e5:2a:68:05:9b:5c:e7:00:ec:40:37:5f:2c:d9: 00:81:e3:9b:e9:20:ee:3c:4a:bd:9f:4a:31:17:01: 79:cc:e5:4a:b5:75:be:74:1d:a8:ba:6d:98:40:48: 5a:cb:c7:47:78:1d:6e:32:34:a8:e9:89:20:07:78: 90:d6:98:96:29:80:b5:78:fc:9d:29:75:56:5b:e0: 24:82:fe:ab:73:f2:51:a9:85:a2:9d:da:71:38:63: 72:d2:0e:77:d5:18:c6:13:a4:7b:83:23:ab:1c:65: b0:09:a9:10:3f:f3:32:aa:46:31:49:a3:93:dc:7d: 06:d9:49:f1:bd:12:b0:53:03:54:99:d2:3d:08:28: bd:36:de:89:05:a2:19:78:72:de:21:97:66:6c:d6: 9f:de:01:8e:e8:8c:4e:56:c7:6c:2b:ae:28:d3:1b: 48:f2:95:7e:65:7c:ca:6e:6e:c5:65:bb:d6:41:e1: 60:c4:ea:60:b3:ca:91:4d:0d:61:2f:78:69:d3:b4: 7c:54:ee:82:20:86:df:e0:db:a5:99:b1:6a:e2:11: df:ef:3f:cc:de:27:aa:c4:09:9b:03:5c:b8:a1:dc: b1:e2:00:fe:8d:67:6e:1d:ab:36:86:ea:22:70:be: d2:ce:b3:5a:5d:d5:0f:d1:fb:01:55:09:19:88:7f: 75:4f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D0:AD:EA:11:EB:D5:23:98:D2:15:49:6B:8C:C1:43:A7:43:EB:3F:9D X509v3 Authority Key Identifier: keyid:33:FD:31:27:7D:72:8C:6A:67:15:B9:13:D5:A4:79:5C:A7:9C:AA:D9 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/2490345e-2d57-4349-b78f-c8b18a442445/0/33FD31277D728C6A6715B913D5A4795CA79CAAD9.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/33FD31277D728C6A6715B913D5A4795CA79CAAD9.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/2490345e-2d57-4349-b78f-c8b18a442445/0/33FD31277D728C6A6715B913D5A4795CA79CAAD9.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 25:97:48:46:16:e5:ed:32:0c:bd:9e:d7:31:12:4e:45:3c:1c: 91:05:67:bc:d0:c6:90:d5:7b:7c:fc:40:2d:83:6e:e2:7a:05: bb:9e:a5:d9:4d:3b:c0:f4:10:a5:6d:cb:f8:6d:b1:22:b9:95: 98:1d:fd:17:05:c7:a1:e3:5a:c4:75:21:07:71:ba:98:cd:b4: b0:d8:1e:57:e4:1f:e4:86:8c:af:e6:d4:b2:b9:f2:25:bc:f3: 9d:7f:e6:e2:3a:8c:74:b7:74:78:c3:f8:eb:76:06:4b:03:dc: 0b:30:4c:1c:2a:23:1b:5d:c5:3d:00:50:06:1a:45:ed:91:27: 90:44:29:dc:1b:8c:1f:61:ab:a0:2f:1d:04:91:76:c6:62:86: 2c:a2:93:d2:d8:be:8a:6b:ac:1d:91:6d:5c:21:b4:e5:23:a4: 28:6e:c8:8b:bd:44:da:b8:09:3d:e3:e1:d1:99:2d:6e:0f:23: a0:0d:ce:40:8d:64:3b:c8:a8:14:81:96:6f:e6:34:0b:c7:5a: 1a:8b:29:6f:85:11:fb:d0:72:5d:ab:d3:6d:86:a3:3e:99:43: 53:92:6e:46:52:2f:62:db:58:18:61:07:8f:98:8b:a4:20:c0: e5:91:db:91:1c:bd:43:3c:7c:f0:6c:6f:25:56:80:b8:72:0c: 06:87:b2:a6 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUVFKnGf0bQHvia6x8BZMVXDl858UwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMzNGRDMxMjc3RDcyOEM2QTY3MTVCOTEzRDVBNDc5NUNB NzlDQUFEOTAeFw0yNTEyMDYxODU1NDNaFw0yNTEyMDkyMTE5NDNaMDMxMTAvBgNV BAMTKEQwQURFQTExRUJENTIzOThEMjE1NDk2QjhDQzE0M0E3NDNFQjNGOUQwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDlKmgFm1znAOxAN18s2QCB45vp IO48Sr2fSjEXAXnM5Uq1db50Hai6bZhASFrLx0d4HW4yNKjpiSAHeJDWmJYpgLV4 /J0pdVZb4CSC/qtz8lGphaKd2nE4Y3LSDnfVGMYTpHuDI6scZbAJqRA/8zKqRjFJ o5PcfQbZSfG9ErBTA1SZ0j0IKL023okFohl4ct4hl2Zs1p/eAY7ojE5Wx2wrrijT G0jylX5lfMpubsVlu9ZB4WDE6mCzypFNDWEveGnTtHxU7oIght/g26WZsWriEd/v P8zeJ6rECZsDXLih3LHiAP6NZ24dqzaG6iJwvtLOs1pd1Q/R+wFVCRmIf3VPAgMB AAGjggI8MIICODAdBgNVHQ4EFgQU0K3qEevVI5jSFUlrjMFDp0PrP50wHwYDVR0j BBgwFoAUM/0xJ31yjGpnFbkT1aR5XKecqtkwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby8y NDkwMzQ1ZS0yZDU3LTQzNDktYjc4Zi1jOGIxOGE0NDI0NDUvMC8zM0ZEMzEyNzdE NzI4QzZBNjcxNUI5MTNENUE0Nzk1Q0E3OUNBQUQ5LmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvMzNGRDMxMjc3RDcyOEM2QTY3MTVCOTEzRDVBNDc5NUNBNzlD QUFEOS5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vMjQ5MDM0NWUtMmQ1Ny00MzQ5LWI3 OGYtYzhiMThhNDQyNDQ1LzAvMzNGRDMxMjc3RDcyOEM2QTY3MTVCOTEzRDVBNDc5 NUNBNzlDQUFEOS5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBACWXSEYW5e0yDL2e1zESTkU8HJEFZ7zQxpDV e3z8QC2DbuJ6BbuepdlNO8D0EKVty/htsSK5lZgd/RcFx6HjWsR1IQdxupjNtLDY HlfkH+SGjK/m1LK58iW8851/5uI6jHS3dHjD+Ot2BksD3AswTBwqIxtdxT0AUAYa Re2RJ5BEKdwbjB9hq6AvHQSRdsZihiyik9LYvoprrB2RbVwhtOUjpChuyIu9RNq4 CT3j4dGZLW4PI6ANzkCNZDvIqBSBlm/mNAvHWhqLKW+FEfvQcl2r022Goz6ZQ1OS bkZSL2LbWBhhB4+Yi6QgwOWR25EcvUM8fPBsbyVWgLhyDAaHsqY= -----END CERTIFICATE-----Generated at Sun Dec 7 01:44:31 2025 by rpki-client