This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf repo-rpki.idnic.net/repo/7b7ef515-8564-41e8-9d20-2d33d45ccbd6/0/0433DC81885AA9736198E4B13311013B6539B05D.mft File: 0433DC81885AA9736198E4B13311013B6539B05D.mft (raw, json) Hash identifier: 18HOJa/+eemV1/qc5vvMJkvk4lAKg6sjOVIcIgL5TF4= Subject key identifier: 07:E2:83:28:A2:D4:B3:37:6D:FC:E7:3D:9F:A4:C6:52:A3:9F:5C:E7 Authority key identifier: 04:33:DC:81:88:5A:A9:73:61:98:E4:B1:33:11:01:3B:65:39:B0:5D Certificate issuer: /CN=0433DC81885AA9736198E4B13311013B6539B05D Certificate serial: 6A61BFBA7B626B9C45C082B370F990723B2E92A9 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/0433DC81885AA9736198E4B13311013B6539B05D.cer Subject info access: rsync://repo-rpki.idnic.net/repo/7b7ef515-8564-41e8-9d20-2d33d45ccbd6/0/0433DC81885AA9736198E4B13311013B6539B05D.mft Manifest number: 01AE Signing time: Fri 05 Dec 2025 16:31:39 +0000 Manifest this update: Fri 05 Dec 2025 16:26:39 +0000 Manifest next update: Mon 08 Dec 2025 18:14:39 +0000 Files and hashes: 1: 0433DC81885AA9736198E4B13311013B6539B05D.crl (hash: U4Pb1ZdSwl/NpaoKhPR7+BkGRzPgKdjaKlkGnqQgavw=) 2: 3130332e3138372e38372e302f32342d3234203d3e20313439373138.roa (hash: JVhrzlpOZdWSbSjvZPb3ZH9GyBIo1oeTGaYsJmG4pDs=) 3: 3130332e3138372e38362e302f32332d3234203d3e20313439373138.roa (hash: k6AuCQ8Lc9J6Ja31B30aJRSZbO/KYjuOQsr2CPNaQ/Q=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/7b7ef515-8564-41e8-9d20-2d33d45ccbd6/0/0433DC81885AA9736198E4B13311013B6539B05D.crl rsync://repo-rpki.idnic.net/repo/7b7ef515-8564-41e8-9d20-2d33d45ccbd6/0/0433DC81885AA9736198E4B13311013B6539B05D.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/0433DC81885AA9736198E4B13311013B6539B05D.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 08 Dec 2025 18:14:39 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 6a:61:bf:ba:7b:62:6b:9c:45:c0:82:b3:70:f9:90:72:3b:2e:92:a9 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=0433DC81885AA9736198E4B13311013B6539B05D Validity Not Before: Dec 5 16:26:39 2025 GMT Not After : Dec 8 18:14:39 2025 GMT Subject: CN=07E28328A2D4B3376DFCE73D9FA4C652A39F5CE7 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:dc:e0:75:e8:8e:12:50:c7:4d:01:5a:8c:c7:31: f0:ac:37:ff:c3:9e:e7:c4:fb:0b:91:ae:90:3d:68: 38:61:07:b3:4c:ec:29:99:ab:a7:18:e1:a9:3e:4f: dd:ca:cd:d3:31:75:34:b4:25:1d:e7:b9:dc:d2:66: 33:8d:bb:03:bd:10:81:3d:2d:ca:e6:4c:25:6c:4b: a1:19:f9:5e:96:40:39:3e:43:4c:93:d6:0d:40:3b: 9c:71:72:85:4d:34:c7:46:e4:b7:b7:f1:dc:4f:cd: 41:2b:ec:95:6d:ba:5f:0b:9c:ec:db:08:ce:ca:0b: e7:0d:dc:50:5f:98:bd:75:b4:65:a3:24:41:b6:90: af:df:0b:28:89:24:8c:74:86:da:ce:d8:ce:20:d2: f9:fe:38:25:1c:25:3c:3e:88:2c:e2:05:42:d6:c3: 1e:80:7c:4b:df:52:62:82:5c:51:52:e5:a8:d4:99: 7e:64:f2:2f:91:5b:39:2a:50:73:63:b2:ed:d1:b7: be:c1:a7:cd:fd:c6:19:6f:f3:a2:1e:88:0a:a3:ea: 61:e1:2f:46:80:86:03:d0:d6:cc:c9:bd:7b:51:69: 82:89:5f:73:17:f2:44:ed:73:09:59:b7:98:4d:a5: b1:5a:bf:9f:3a:39:31:53:e9:7f:86:e3:f1:6a:ee: 8e:0b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 07:E2:83:28:A2:D4:B3:37:6D:FC:E7:3D:9F:A4:C6:52:A3:9F:5C:E7 X509v3 Authority Key Identifier: keyid:04:33:DC:81:88:5A:A9:73:61:98:E4:B1:33:11:01:3B:65:39:B0:5D X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/7b7ef515-8564-41e8-9d20-2d33d45ccbd6/0/0433DC81885AA9736198E4B13311013B6539B05D.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/0433DC81885AA9736198E4B13311013B6539B05D.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/7b7ef515-8564-41e8-9d20-2d33d45ccbd6/0/0433DC81885AA9736198E4B13311013B6539B05D.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 10:2b:af:e2:65:b8:f9:4a:e7:04:66:b5:76:7a:87:a0:ce:61: b4:08:7a:76:c5:b4:f4:7b:60:56:0c:91:32:de:c5:7a:29:09: 4c:aa:d7:c4:73:48:66:67:cf:a5:f3:ec:c4:91:94:52:fb:dd: 19:a5:7e:fe:98:ff:e9:aa:09:e1:73:cb:82:b1:70:36:c3:97: f3:fb:5e:53:c9:ad:a0:6b:12:8f:39:c5:9b:c9:ea:9c:fa:63: a7:fe:ab:83:b8:1f:06:8c:23:74:15:6f:f1:88:f5:fa:68:63: 0e:60:5c:f3:13:81:e7:9a:fb:87:e7:89:91:b5:df:8c:47:08: a9:20:0e:6a:86:6d:0b:2a:0f:4f:b7:46:0d:14:d7:62:59:23: 8f:80:31:76:75:96:b8:c9:0f:60:2f:1a:86:45:e7:98:dd:6a: ae:4b:93:aa:7b:cb:a3:cb:b4:37:51:00:07:b3:ad:01:c6:a3: e4:af:fb:9b:ef:9e:e2:57:e2:05:eb:a4:b1:9b:40:c3:0d:a1: 90:67:10:a0:f7:a8:60:96:9c:62:30:9a:ca:bb:70:27:f8:9f: ef:e5:94:7b:53:2b:2a:b8:fb:1b:be:22:20:e3:71:14:40:22: 63:9c:5e:d8:46:87:0e:e7:b4:db:99:d7:cb:8e:fd:40:26:0e: c3:d9:0d:85 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUamG/untia5xFwIKzcPmQcjsukqkwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMDQzM0RDODE4ODVBQTk3MzYxOThFNEIxMzMxMTAxM0I2 NTM5QjA1RDAeFw0yNTEyMDUxNjI2MzlaFw0yNTEyMDgxODE0MzlaMDMxMTAvBgNV BAMTKDA3RTI4MzI4QTJENEIzMzc2REZDRTczRDlGQTRDNjUyQTM5RjVDRTcwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDc4HXojhJQx00BWozHMfCsN//D nufE+wuRrpA9aDhhB7NM7CmZq6cY4ak+T93KzdMxdTS0JR3nudzSZjONuwO9EIE9 LcrmTCVsS6EZ+V6WQDk+Q0yT1g1AO5xxcoVNNMdG5Le38dxPzUEr7JVtul8LnOzb CM7KC+cN3FBfmL11tGWjJEG2kK/fCyiJJIx0htrO2M4g0vn+OCUcJTw+iCziBULW wx6AfEvfUmKCXFFS5ajUmX5k8i+RWzkqUHNjsu3Rt77Bp839xhlv86IeiAqj6mHh L0aAhgPQ1szJvXtRaYKJX3MX8kTtcwlZt5hNpbFav586OTFT6X+G4/Fq7o4LAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUB+KDKKLUszdt/Oc9n6TGUqOfXOcwHwYDVR0j BBgwFoAUBDPcgYhaqXNhmOSxMxEBO2U5sF0wDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby83 YjdlZjUxNS04NTY0LTQxZTgtOWQyMC0yZDMzZDQ1Y2NiZDYvMC8wNDMzREM4MTg4 NUFBOTczNjE5OEU0QjEzMzExMDEzQjY1MzlCMDVELmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvMDQzM0RDODE4ODVBQTk3MzYxOThFNEIxMzMxMTAxM0I2NTM5 QjA1RC5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vN2I3ZWY1MTUtODU2NC00MWU4LTlk MjAtMmQzM2Q0NWNjYmQ2LzAvMDQzM0RDODE4ODVBQTk3MzYxOThFNEIxMzMxMTAx M0I2NTM5QjA1RC5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBABArr+JluPlK5wRmtXZ6h6DOYbQIenbFtPR7 YFYMkTLexXopCUyq18RzSGZnz6Xz7MSRlFL73Rmlfv6Y/+mqCeFzy4KxcDbDl/P7 XlPJraBrEo85xZvJ6pz6Y6f+q4O4HwaMI3QVb/GI9fpoYw5gXPMTgeea+4fniZG1 34xHCKkgDmqGbQsqD0+3Rg0U12JZI4+AMXZ1lrjJD2AvGoZF55jdaq5Lk6p7y6PL tDdRAAezrQHGo+Sv+5vvnuJX4gXrpLGbQMMNoZBnEKD3qGCWnGIwmsq7cCf4n+/l lHtTKyq4+xu+IiDjcRRAImOcXthGhw7ntNuZ18uO/UAmDsPZDYU= -----END CERTIFICATE-----Generated at Sun Dec 7 01:02:52 2025 by rpki-client