This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf repo-rpki.idnic.net/repo/3baf365e-05de-4c39-bf96-83e939bed7df/0/33F0041B7CC6D4139AB23B3CD10C56E51233C589.mft File: 33F0041B7CC6D4139AB23B3CD10C56E51233C589.mft (raw, json) Hash identifier: AOoi0TISYoZPIhC16vvZmUjTkt2Bl4LdBa0oDDQbnOw= Subject key identifier: F2:01:47:35:1C:7F:F1:B3:6D:6C:3C:97:32:4C:80:AB:3B:F7:C8:19 Authority key identifier: 33:F0:04:1B:7C:C6:D4:13:9A:B2:3B:3C:D1:0C:56:E5:12:33:C5:89 Certificate issuer: /CN=33F0041B7CC6D4139AB23B3CD10C56E51233C589 Certificate serial: 29BD60C29A2C9F6E813AB1F71DB65BD9018082EC Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/33F0041B7CC6D4139AB23B3CD10C56E51233C589.cer Subject info access: rsync://repo-rpki.idnic.net/repo/3baf365e-05de-4c39-bf96-83e939bed7df/0/33F0041B7CC6D4139AB23B3CD10C56E51233C589.mft Manifest number: 0542 Signing time: Sat 24 Jan 2026 08:31:53 +0000 Manifest this update: Sat 24 Jan 2026 08:26:53 +0000 Manifest next update: Tue 27 Jan 2026 15:03:53 +0000 Files and hashes: 1: 3130332e3135322e372e302f32342d3234203d3e20313430343236.roa (hash: SqOaXQt4sheoHjLEWCQY+hr/jk21P7Mbb0/p3ua6+Wo=) 2: 33F0041B7CC6D4139AB23B3CD10C56E51233C589.crl (hash: 76grjBSbBs4SIpK97lhzs1WBYWoqL6B/T5Csy1KW4tw=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/3baf365e-05de-4c39-bf96-83e939bed7df/0/33F0041B7CC6D4139AB23B3CD10C56E51233C589.crl rsync://repo-rpki.idnic.net/repo/3baf365e-05de-4c39-bf96-83e939bed7df/0/33F0041B7CC6D4139AB23B3CD10C56E51233C589.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/33F0041B7CC6D4139AB23B3CD10C56E51233C589.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 27 Jan 2026 15:03:53 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 29:bd:60:c2:9a:2c:9f:6e:81:3a:b1:f7:1d:b6:5b:d9:01:80:82:ec Signature Algorithm: sha256WithRSAEncryption Issuer: CN=33F0041B7CC6D4139AB23B3CD10C56E51233C589 Validity Not Before: Jan 24 08:26:53 2026 GMT Not After : Jan 27 15:03:53 2026 GMT Subject: CN=F20147351C7FF1B36D6C3C97324C80AB3BF7C819 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a8:ee:52:d8:92:00:f1:c7:b6:d0:ef:c6:1b:1f: 40:e3:02:0e:bb:61:d5:1e:d8:c8:62:8a:88:fc:23: a0:a4:03:4d:ea:5c:ca:6a:0b:79:d4:ff:bf:68:69: d2:3e:79:df:d8:f4:2e:8b:80:01:66:39:69:06:9a: 34:e9:a8:78:93:9f:3a:c8:fe:17:0b:e9:a7:6b:d0: 95:c6:56:e8:8e:13:0c:71:f6:a6:a9:0a:81:c6:a0: 64:62:29:0a:ae:fd:88:c9:7a:0c:81:5a:c7:dd:f1: 8e:69:c0:98:31:4f:7d:14:76:21:53:30:c1:10:de: e1:72:a5:a7:d3:6e:48:77:0c:30:3e:3c:46:88:5e: 07:ca:1a:96:c0:db:af:53:85:b3:1e:de:0a:bb:c8: 32:11:1a:ff:5a:a4:56:99:b9:1b:0b:4e:62:bd:9c: 14:d4:9f:dc:87:7c:9a:35:60:aa:59:51:d7:dc:e5: ad:a2:1f:a0:f6:81:5f:f0:d0:f5:ba:62:65:a1:60: f2:3a:90:41:13:9f:83:00:36:ae:38:31:f5:4a:e3: 76:7a:f8:0d:1e:7d:8f:01:79:2f:af:88:5b:5c:53: 3a:23:de:f7:d2:b9:d9:26:28:95:d3:6e:46:61:eb: d6:2d:05:af:19:0c:b1:57:2c:34:4c:2d:7c:e1:7a: a3:cb Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: F2:01:47:35:1C:7F:F1:B3:6D:6C:3C:97:32:4C:80:AB:3B:F7:C8:19 X509v3 Authority Key Identifier: keyid:33:F0:04:1B:7C:C6:D4:13:9A:B2:3B:3C:D1:0C:56:E5:12:33:C5:89 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/3baf365e-05de-4c39-bf96-83e939bed7df/0/33F0041B7CC6D4139AB23B3CD10C56E51233C589.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/33F0041B7CC6D4139AB23B3CD10C56E51233C589.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/3baf365e-05de-4c39-bf96-83e939bed7df/0/33F0041B7CC6D4139AB23B3CD10C56E51233C589.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 45:f7:39:1f:6b:bf:7e:7c:fa:89:6c:38:c4:16:11:98:86:46: a6:b6:2d:85:31:2c:97:d4:52:56:2c:a5:09:3b:c2:6c:63:08: 53:02:ad:a5:7f:0c:15:84:59:dc:56:5b:79:b8:b9:53:a9:76: 05:96:a5:e3:36:8f:7e:2b:f9:16:c4:a8:de:38:a4:8f:dd:01: 5f:f2:48:97:81:62:7e:32:81:fe:f6:36:75:2f:89:2c:dd:61: 11:c2:8d:25:66:ee:bb:85:42:91:88:d5:64:cb:c6:a3:a2:79: f7:9d:a4:e1:67:91:63:9a:6a:d3:07:d0:1a:c2:4a:c8:4c:65: f7:d5:7b:84:5e:c9:0c:d6:6b:89:73:94:a0:a9:09:3f:10:aa: 31:f8:8d:2d:cc:e9:66:6f:cc:6c:a5:73:b5:76:f2:9d:c2:e7: a9:a5:c5:8c:ea:3b:e5:2e:34:c8:e1:cc:b7:d9:a7:d5:61:e6: 6e:01:74:eb:18:40:6c:d7:b8:57:a4:fb:6d:2d:4c:5b:a2:d0: 1a:78:5e:ea:98:ab:7d:29:a5:9c:56:a7:6c:3a:3f:39:9f:9a: 83:9d:4c:e6:42:3a:74:26:fa:f6:06:b6:fc:5e:af:df:60:5f: 1d:81:bf:2a:20:3b:54:50:bd:73:da:22:69:83:e1:bd:2c:03: ed:7c:d2:68 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUKb1gwposn26BOrH3HbZb2QGAguwwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMzNGMDA0MUI3Q0M2RDQxMzlBQjIzQjNDRDEwQzU2RTUx MjMzQzU4OTAeFw0yNjAxMjQwODI2NTNaFw0yNjAxMjcxNTAzNTNaMDMxMTAvBgNV BAMTKEYyMDE0NzM1MUM3RkYxQjM2RDZDM0M5NzMyNEM4MEFCM0JGN0M4MTkwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCo7lLYkgDxx7bQ78YbH0DjAg67 YdUe2Mhiioj8I6CkA03qXMpqC3nU/79oadI+ed/Y9C6LgAFmOWkGmjTpqHiTnzrI /hcL6adr0JXGVuiOEwxx9qapCoHGoGRiKQqu/YjJegyBWsfd8Y5pwJgxT30UdiFT MMEQ3uFypafTbkh3DDA+PEaIXgfKGpbA269ThbMe3gq7yDIRGv9apFaZuRsLTmK9 nBTUn9yHfJo1YKpZUdfc5a2iH6D2gV/w0PW6YmWhYPI6kEETn4MANq44MfVK43Z6 +A0efY8BeS+viFtcUzoj3vfSudkmKJXTbkZh69YtBa8ZDLFXLDRMLXzheqPLAgMB AAGjggI8MIICODAdBgNVHQ4EFgQU8gFHNRx/8bNtbDyXMkyAqzv3yBkwHwYDVR0j BBgwFoAUM/AEG3zG1BOasjs80QxW5RIzxYkwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby8z YmFmMzY1ZS0wNWRlLTRjMzktYmY5Ni04M2U5MzliZWQ3ZGYvMC8zM0YwMDQxQjdD QzZENDEzOUFCMjNCM0NEMTBDNTZFNTEyMzNDNTg5LmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvMzNGMDA0MUI3Q0M2RDQxMzlBQjIzQjNDRDEwQzU2RTUxMjMz QzU4OS5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vM2JhZjM2NWUtMDVkZS00YzM5LWJm OTYtODNlOTM5YmVkN2RmLzAvMzNGMDA0MUI3Q0M2RDQxMzlBQjIzQjNDRDEwQzU2 RTUxMjMzQzU4OS5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAEX3OR9rv358+olsOMQWEZiGRqa2LYUxLJfU UlYspQk7wmxjCFMCraV/DBWEWdxWW3m4uVOpdgWWpeM2j34r+RbEqN44pI/dAV/y SJeBYn4ygf72NnUviSzdYRHCjSVm7ruFQpGI1WTLxqOiefedpOFnkWOaatMH0BrC SshMZffVe4ReyQzWa4lzlKCpCT8QqjH4jS3M6WZvzGylc7V28p3C56mlxYzqO+Uu NMjhzLfZp9Vh5m4BdOsYQGzXuFek+20tTFui0Bp4XuqYq30ppZxWp2w6PzmfmoOd TOZCOnQm+vYGtvxer99gXx2BvyogO1RQvXPaImmD4b0sA+180mg= -----END CERTIFICATE-----Generated at Sun Jan 25 18:54:04 2026 by rpki-client