This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf repo-rpki.idnic.net/repo/4c58fb7c-67b8-4bce-96d9-be912e3f73dd/1/33D26363FA5B5B53C17981915CBADB375AE27253.mft File: 33D26363FA5B5B53C17981915CBADB375AE27253.mft (raw, json) Hash identifier: 4CMgiRZdIQaRo9LwOqvD9i/NlqZOcs/AI1TFwvMJt4g= Subject key identifier: CB:B7:FB:94:B2:46:25:4E:D2:3E:61:7B:6A:BC:12:26:E9:D7:5B:73 Authority key identifier: 33:D2:63:63:FA:5B:5B:53:C1:79:81:91:5C:BA:DB:37:5A:E2:72:53 Certificate issuer: /CN=33D26363FA5B5B53C17981915CBADB375AE27253 Certificate serial: 2235536C6148B14425FFDA793FAFEEF2DE5FEE3C Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/33D26363FA5B5B53C17981915CBADB375AE27253.cer Subject info access: rsync://repo-rpki.idnic.net/repo/4c58fb7c-67b8-4bce-96d9-be912e3f73dd/1/33D26363FA5B5B53C17981915CBADB375AE27253.mft Manifest number: B9 Signing time: Sun 25 Jan 2026 08:31:27 +0000 Manifest this update: Sun 25 Jan 2026 08:26:27 +0000 Manifest next update: Wed 28 Jan 2026 16:33:27 +0000 Files and hashes: 1: 33D26363FA5B5B53C17981915CBADB375AE27253.crl (hash: pXAoAD0F++S11qeDm8UKsrhE/K/Sej3B8XD0Bz2Mm+I=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/4c58fb7c-67b8-4bce-96d9-be912e3f73dd/1/33D26363FA5B5B53C17981915CBADB375AE27253.crl rsync://repo-rpki.idnic.net/repo/4c58fb7c-67b8-4bce-96d9-be912e3f73dd/1/33D26363FA5B5B53C17981915CBADB375AE27253.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/33D26363FA5B5B53C17981915CBADB375AE27253.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 28 Jan 2026 14:00:57 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 22:35:53:6c:61:48:b1:44:25:ff:da:79:3f:af:ee:f2:de:5f:ee:3c Signature Algorithm: sha256WithRSAEncryption Issuer: CN=33D26363FA5B5B53C17981915CBADB375AE27253 Validity Not Before: Jan 25 08:26:27 2026 GMT Not After : Jan 28 16:33:27 2026 GMT Subject: CN=CBB7FB94B246254ED23E617B6ABC1226E9D75B73 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bc:4b:e2:a5:a6:4c:00:01:29:22:54:71:07:2b: 06:2a:3d:a5:15:bc:7c:45:33:c9:c0:75:b4:ba:fa: 02:56:a1:2c:66:cb:d5:7d:42:fd:a1:28:97:a8:b9: f1:76:e4:6e:77:59:a7:dc:28:c3:59:35:3b:37:88: fa:19:8a:70:21:6a:43:70:75:0b:8a:a6:cb:97:0c: 89:e4:23:ff:4a:bc:94:2e:f1:ad:7b:46:1b:05:c4: 7e:51:f6:24:df:d8:93:c7:1e:80:07:f1:a7:93:0e: 51:ba:1c:40:9f:88:ad:3f:eb:57:fe:9d:40:09:e7: d9:42:71:00:46:e1:ec:8a:d3:c9:e0:db:78:1e:0d: 5e:70:16:07:0f:54:59:9b:61:65:92:bf:c8:79:0b: 0c:fa:d1:a3:75:ad:e3:02:18:64:f7:87:b5:51:1a: 38:2e:33:f0:68:57:52:1e:74:3e:d0:d4:d9:d9:f6: 4a:ff:ef:de:02:5a:dc:51:24:88:47:a4:c6:4c:5e: 94:25:08:c3:db:ed:35:b4:02:1f:15:01:31:48:3b: f7:ff:b0:13:3c:f2:27:cc:d6:55:cd:54:d6:c7:83: d9:89:d7:82:5b:ba:ec:ba:02:50:58:ed:c1:5b:98: 68:cc:7c:09:32:0c:08:e1:1f:e5:84:0a:ba:c7:4e: 2a:e7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: CB:B7:FB:94:B2:46:25:4E:D2:3E:61:7B:6A:BC:12:26:E9:D7:5B:73 X509v3 Authority Key Identifier: keyid:33:D2:63:63:FA:5B:5B:53:C1:79:81:91:5C:BA:DB:37:5A:E2:72:53 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/4c58fb7c-67b8-4bce-96d9-be912e3f73dd/1/33D26363FA5B5B53C17981915CBADB375AE27253.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/33D26363FA5B5B53C17981915CBADB375AE27253.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/4c58fb7c-67b8-4bce-96d9-be912e3f73dd/1/33D26363FA5B5B53C17981915CBADB375AE27253.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption b8:82:6c:09:e5:4f:67:a6:6b:48:b6:59:6a:2f:68:fd:30:01: 2c:c3:ab:b1:23:08:76:73:c8:18:2b:d1:94:bb:b6:8d:43:17: 0a:a0:80:d9:86:78:52:9a:6d:a7:d4:de:0f:15:93:ca:21:ec: 06:9b:59:f6:a9:b6:19:71:d6:07:72:d9:15:ea:ec:56:a7:ba: ea:25:67:22:54:5d:15:10:a2:f1:67:fd:48:c3:26:3c:71:28: ee:8b:e3:de:76:4e:af:9f:d1:7a:6d:31:e3:ae:35:7b:59:83: 30:74:98:b2:cc:90:3f:d1:45:0a:63:e8:2c:86:58:e4:d8:6f: da:f8:e4:32:2b:ed:29:7d:3c:4d:c7:d7:b1:4b:05:03:f5:0b: 0f:88:ec:39:5f:e1:df:7c:a0:a4:af:fd:20:d4:92:7b:e5:dc: d4:37:d4:19:f5:91:71:d4:79:8e:7e:2d:72:20:4b:43:21:4b: c4:ae:b2:b6:0e:9b:2a:e6:45:c9:3b:26:87:8d:38:ce:91:56: 85:53:c2:cc:4a:c9:56:73:6a:4b:23:11:78:1b:2e:e3:a9:36: 91:b5:e0:09:d7:7c:ea:5e:bb:20:02:5b:83:97:2c:49:b1:b4: 89:bd:ad:0c:a5:2e:6a:56:cb:3b:70:b2:42:2e:a6:41:ad:8c: 61:97:86:8b -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUIjVTbGFIsUQl/9p5P6/u8t5f7jwwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMzNEMjYzNjNGQTVCNUI1M0MxNzk4MTkxNUNCQURCMzc1 QUUyNzI1MzAeFw0yNjAxMjUwODI2MjdaFw0yNjAxMjgxNjMzMjdaMDMxMTAvBgNV BAMTKENCQjdGQjk0QjI0NjI1NEVEMjNFNjE3QjZBQkMxMjI2RTlENzVCNzMwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC8S+KlpkwAASkiVHEHKwYqPaUV vHxFM8nAdbS6+gJWoSxmy9V9Qv2hKJeoufF25G53WafcKMNZNTs3iPoZinAhakNw dQuKpsuXDInkI/9KvJQu8a17RhsFxH5R9iTf2JPHHoAH8aeTDlG6HECfiK0/61f+ nUAJ59lCcQBG4eyK08ng23geDV5wFgcPVFmbYWWSv8h5Cwz60aN1reMCGGT3h7VR GjguM/BoV1IedD7Q1NnZ9kr/794CWtxRJIhHpMZMXpQlCMPb7TW0Ah8VATFIO/f/ sBM88ifM1lXNVNbHg9mJ14Jbuuy6AlBY7cFbmGjMfAkyDAjhH+WECrrHTirnAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUy7f7lLJGJU7SPmF7arwSJunXW3MwHwYDVR0j BBgwFoAUM9JjY/pbW1PBeYGRXLrbN1riclMwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby80 YzU4ZmI3Yy02N2I4LTRiY2UtOTZkOS1iZTkxMmUzZjczZGQvMS8zM0QyNjM2M0ZB NUI1QjUzQzE3OTgxOTE1Q0JBREIzNzVBRTI3MjUzLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvMzNEMjYzNjNGQTVCNUI1M0MxNzk4MTkxNUNCQURCMzc1QUUy NzI1My5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vNGM1OGZiN2MtNjdiOC00YmNlLTk2 ZDktYmU5MTJlM2Y3M2RkLzEvMzNEMjYzNjNGQTVCNUI1M0MxNzk4MTkxNUNCQURC Mzc1QUUyNzI1My5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBALiCbAnlT2ema0i2WWovaP0wASzDq7EjCHZz yBgr0ZS7to1DFwqggNmGeFKabafU3g8Vk8oh7AabWfapthlx1gdy2RXq7Fanuuol ZyJUXRUQovFn/UjDJjxxKO6L4952Tq+f0XptMeOuNXtZgzB0mLLMkD/RRQpj6CyG WOTYb9r45DIr7Sl9PE3H17FLBQP1Cw+I7Dlf4d98oKSv/SDUknvl3NQ31Bn1kXHU eY5+LXIgS0MhS8SusrYOmyrmRck7JoeNOM6RVoVTwsxKyVZzaksjEXgbLuOpNpG1 4AnXfOpeuyACW4OXLEmxtIm9rQylLmpWyztwskIupkGtjGGXhos= -----END CERTIFICATE-----Generated at Sun Jan 25 21:49:28 2026 by rpki-client