This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf repo-rpki.idnic.net/repo/4c58fb7c-67b8-4bce-96d9-be912e3f73dd/1/33D26363FA5B5B53C17981915CBADB375AE27253.mft File: 33D26363FA5B5B53C17981915CBADB375AE27253.mft (raw, json) Hash identifier: frmL48UAEGnOBpl63KgmazcDA0qSM7AsHBRSSMGb7gA= Subject key identifier: 5C:52:D8:A9:D3:9F:EA:B3:5D:9B:37:94:E5:74:29:66:5F:A4:26:86 Authority key identifier: 33:D2:63:63:FA:5B:5B:53:C1:79:81:91:5C:BA:DB:37:5A:E2:72:53 Certificate issuer: /CN=33D26363FA5B5B53C17981915CBADB375AE27253 Certificate serial: 7B0E673E24C87DCA8B0D59BC347BB4EB2F145005 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/33D26363FA5B5B53C17981915CBADB375AE27253.cer Subject info access: rsync://repo-rpki.idnic.net/repo/4c58fb7c-67b8-4bce-96d9-be912e3f73dd/1/33D26363FA5B5B53C17981915CBADB375AE27253.mft Manifest number: A3 Signing time: Sat 06 Dec 2025 12:31:28 +0000 Manifest this update: Sat 06 Dec 2025 12:26:28 +0000 Manifest next update: Tue 09 Dec 2025 15:07:28 +0000 Files and hashes: 1: 33D26363FA5B5B53C17981915CBADB375AE27253.crl (hash: 2g4NMzsb2XfQNzpXDi3NFjvfceAWrOxXeof+jeASaDU=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/4c58fb7c-67b8-4bce-96d9-be912e3f73dd/1/33D26363FA5B5B53C17981915CBADB375AE27253.crl rsync://repo-rpki.idnic.net/repo/4c58fb7c-67b8-4bce-96d9-be912e3f73dd/1/33D26363FA5B5B53C17981915CBADB375AE27253.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/33D26363FA5B5B53C17981915CBADB375AE27253.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 09 Dec 2025 15:07:28 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 7b:0e:67:3e:24:c8:7d:ca:8b:0d:59:bc:34:7b:b4:eb:2f:14:50:05 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=33D26363FA5B5B53C17981915CBADB375AE27253 Validity Not Before: Dec 6 12:26:28 2025 GMT Not After : Dec 9 15:07:28 2025 GMT Subject: CN=5C52D8A9D39FEAB35D9B3794E57429665FA42686 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bb:cd:6f:3c:36:1c:a5:b7:be:8f:d1:60:86:b4: ea:00:b9:07:80:70:54:91:66:0c:aa:4a:40:a7:7c: 03:27:63:b5:8b:ba:99:64:8d:79:01:60:20:ca:27: b0:79:c6:0c:3d:0b:28:08:90:8d:c9:07:96:03:eb: 4f:a3:34:12:c4:31:36:34:4e:bf:42:2b:43:9e:95: d0:34:dc:e7:b3:32:64:0d:fa:99:66:1c:f8:20:5e: 55:8a:2b:92:4e:d6:eb:ac:94:17:e1:86:a8:6f:26: 13:61:9c:7e:6a:38:4c:3c:a8:77:cf:e2:56:50:37: 17:75:62:64:6f:4d:b9:d4:ef:bd:28:51:3f:5e:13: 54:81:69:d2:8f:e9:0d:3a:95:d3:94:9b:d6:ec:b5: 09:9d:75:4e:0f:a1:0a:9b:b8:13:d8:61:7d:85:48: 0a:4f:10:e0:21:a8:86:01:c6:45:9f:4c:de:f7:3a: 1c:ad:8a:22:22:64:c6:d6:64:7a:9c:6c:30:50:3e: db:1f:e7:35:b4:7a:9e:f6:a9:88:e5:58:db:f3:70: a6:1c:57:54:db:81:e6:77:4d:6a:e1:1d:e3:c3:bd: c9:92:5f:16:65:5b:77:86:a9:56:19:66:ec:55:21: 88:84:75:1e:49:75:d2:e6:17:39:db:9f:aa:16:d5: 78:41 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 5C:52:D8:A9:D3:9F:EA:B3:5D:9B:37:94:E5:74:29:66:5F:A4:26:86 X509v3 Authority Key Identifier: keyid:33:D2:63:63:FA:5B:5B:53:C1:79:81:91:5C:BA:DB:37:5A:E2:72:53 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/4c58fb7c-67b8-4bce-96d9-be912e3f73dd/1/33D26363FA5B5B53C17981915CBADB375AE27253.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/33D26363FA5B5B53C17981915CBADB375AE27253.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/4c58fb7c-67b8-4bce-96d9-be912e3f73dd/1/33D26363FA5B5B53C17981915CBADB375AE27253.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 63:69:7f:53:51:fc:49:f6:d7:fa:0f:25:2b:bd:a1:77:72:cf: 29:e5:8a:71:8d:09:ba:cc:dd:0b:1f:45:3b:2f:50:3b:d0:a6: 0b:f8:6c:d7:27:49:6a:75:27:99:a9:de:f1:4f:d8:89:8c:d4: 5e:66:85:75:c6:89:2c:81:5c:c0:10:08:08:44:aa:34:b2:21: 06:d2:99:09:68:ba:d0:0b:93:1a:ad:a1:0b:31:d8:15:d5:3d: 54:24:b5:c6:f8:78:a6:aa:77:0c:23:af:19:9f:16:c4:72:9f: da:32:11:1b:8c:be:79:a4:66:fa:40:81:e4:c8:49:87:43:ff: 8a:ce:59:6d:90:16:0f:2e:b7:48:b4:99:51:24:54:69:57:4f: 5d:7e:c4:43:32:93:a0:d6:1e:c9:fb:47:ae:bf:a9:61:8b:34: bf:ef:ba:82:bc:ca:17:f8:5d:61:4a:53:09:f2:b5:07:39:56: 5f:d1:c4:8e:cd:e6:9d:c2:63:e3:bb:4f:a1:b5:fb:aa:35:09: 3f:6b:9f:f2:9e:46:d5:be:37:0f:61:f7:50:34:4e:72:ac:47: 6f:7f:b7:f9:83:59:ae:23:3d:35:7b:9a:d8:75:01:d3:6a:d0: 7b:7d:52:7d:2a:cb:88:c7:4b:8e:d0:80:63:42:17:ca:6c:82: ee:3e:95:90 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUew5nPiTIfcqLDVm8NHu06y8UUAUwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMzNEMjYzNjNGQTVCNUI1M0MxNzk4MTkxNUNCQURCMzc1 QUUyNzI1MzAeFw0yNTEyMDYxMjI2MjhaFw0yNTEyMDkxNTA3MjhaMDMxMTAvBgNV BAMTKDVDNTJEOEE5RDM5RkVBQjM1RDlCMzc5NEU1NzQyOTY2NUZBNDI2ODYwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC7zW88Nhylt76P0WCGtOoAuQeA cFSRZgyqSkCnfAMnY7WLuplkjXkBYCDKJ7B5xgw9CygIkI3JB5YD60+jNBLEMTY0 Tr9CK0OeldA03OezMmQN+plmHPggXlWKK5JO1uuslBfhhqhvJhNhnH5qOEw8qHfP 4lZQNxd1YmRvTbnU770oUT9eE1SBadKP6Q06ldOUm9bstQmddU4PoQqbuBPYYX2F SApPEOAhqIYBxkWfTN73OhytiiIiZMbWZHqcbDBQPtsf5zW0ep72qYjlWNvzcKYc V1TbgeZ3TWrhHePDvcmSXxZlW3eGqVYZZuxVIYiEdR5JddLmFznbn6oW1XhBAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUXFLYqdOf6rNdmzeU5XQpZl+kJoYwHwYDVR0j BBgwFoAUM9JjY/pbW1PBeYGRXLrbN1riclMwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby80 YzU4ZmI3Yy02N2I4LTRiY2UtOTZkOS1iZTkxMmUzZjczZGQvMS8zM0QyNjM2M0ZB NUI1QjUzQzE3OTgxOTE1Q0JBREIzNzVBRTI3MjUzLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvMzNEMjYzNjNGQTVCNUI1M0MxNzk4MTkxNUNCQURCMzc1QUUy NzI1My5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vNGM1OGZiN2MtNjdiOC00YmNlLTk2 ZDktYmU5MTJlM2Y3M2RkLzEvMzNEMjYzNjNGQTVCNUI1M0MxNzk4MTkxNUNCQURC Mzc1QUUyNzI1My5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAGNpf1NR/En21/oPJSu9oXdyzynlinGNCbrM 3QsfRTsvUDvQpgv4bNcnSWp1J5mp3vFP2ImM1F5mhXXGiSyBXMAQCAhEqjSyIQbS mQloutALkxqtoQsx2BXVPVQktcb4eKaqdwwjrxmfFsRyn9oyERuMvnmkZvpAgeTI SYdD/4rOWW2QFg8ut0i0mVEkVGlXT11+xEMyk6DWHsn7R66/qWGLNL/vuoK8yhf4 XWFKUwnytQc5Vl/RxI7N5p3CY+O7T6G1+6o1CT9rn/KeRtW+Nw9h91A0TnKsR29/ t/mDWa4jPTV7mth1AdNq0Ht9Un0qy4jHS47QgGNCF8psgu4+lZA= -----END CERTIFICATE-----Generated at Sun Dec 7 02:16:54 2025 by rpki-client