This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf repo-rpki.idnic.net/repo/7b7ef515-8564-41e8-9d20-2d33d45ccbd6/0/0433DC81885AA9736198E4B13311013B6539B05D.mft File: 0433DC81885AA9736198E4B13311013B6539B05D.mft (raw, json) Hash identifier: ImWqOriqstAi5lFEKnXnN2mpo05nFj47NDjabg51fvo= Subject key identifier: 7A:B6:40:26:14:07:D4:43:49:DD:8C:1C:E6:D9:A5:3D:8A:17:76:95 Authority key identifier: 04:33:DC:81:88:5A:A9:73:61:98:E4:B1:33:11:01:3B:65:39:B0:5D Certificate issuer: /CN=0433DC81885AA9736198E4B13311013B6539B05D Certificate serial: 5431DE0E6934FC992E84D410E61CF083E3197984 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/0433DC81885AA9736198E4B13311013B6539B05D.cer Subject info access: rsync://repo-rpki.idnic.net/repo/7b7ef515-8564-41e8-9d20-2d33d45ccbd6/0/0433DC81885AA9736198E4B13311013B6539B05D.mft Manifest number: 01C4 Signing time: Sat 24 Jan 2026 08:43:17 +0000 Manifest this update: Sat 24 Jan 2026 08:38:17 +0000 Manifest next update: Tue 27 Jan 2026 16:04:17 +0000 Files and hashes: 1: 3130332e3138372e38372e302f32342d3234203d3e20313439373138.roa (hash: JVhrzlpOZdWSbSjvZPb3ZH9GyBIo1oeTGaYsJmG4pDs=) 2: 0433DC81885AA9736198E4B13311013B6539B05D.crl (hash: kzotc2bzJRGHBOKBPUsUr+lRTx/QudgVzbFbNeSQ3sA=) 3: 3130332e3138372e38362e302f32332d3234203d3e20313439373138.roa (hash: k6AuCQ8Lc9J6Ja31B30aJRSZbO/KYjuOQsr2CPNaQ/Q=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/7b7ef515-8564-41e8-9d20-2d33d45ccbd6/0/0433DC81885AA9736198E4B13311013B6539B05D.crl rsync://repo-rpki.idnic.net/repo/7b7ef515-8564-41e8-9d20-2d33d45ccbd6/0/0433DC81885AA9736198E4B13311013B6539B05D.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/0433DC81885AA9736198E4B13311013B6539B05D.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 27 Jan 2026 16:04:17 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 54:31:de:0e:69:34:fc:99:2e:84:d4:10:e6:1c:f0:83:e3:19:79:84 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=0433DC81885AA9736198E4B13311013B6539B05D Validity Not Before: Jan 24 08:38:17 2026 GMT Not After : Jan 27 16:04:17 2026 GMT Subject: CN=7AB640261407D44349DD8C1CE6D9A53D8A177695 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:be:69:13:6e:ec:a7:84:b7:ab:9c:12:09:91:38: 28:da:43:02:51:f3:af:ed:2c:bd:ea:90:a7:16:fb: df:7e:42:26:5f:bf:4b:bf:d1:9d:2a:20:64:21:8c: 4e:ba:87:c2:50:95:7c:1d:70:11:bf:21:11:d5:eb: 9d:2a:7a:6a:98:6f:00:1c:5e:dc:22:15:c2:e7:b0: c3:94:1d:60:a7:8b:83:7f:e5:dd:bd:71:e6:ea:66: 9b:cb:d2:e8:4e:cd:5d:28:c3:42:30:4b:c2:19:bd: 0d:0e:03:77:55:01:d7:02:d8:7c:a0:38:35:7b:94: de:42:be:7b:1e:b9:85:c7:6f:14:28:e8:1d:67:34: 39:c8:61:a1:42:39:e1:c6:45:42:e4:1b:8c:4c:45: a9:ae:53:39:3d:df:96:18:ff:dc:cc:15:15:b5:f4: 7f:a2:5b:df:4e:be:f3:57:89:6e:9a:e4:d6:19:f4: db:fa:1c:6a:3e:c6:91:ca:66:7a:22:4a:c7:6f:6b: cc:8c:79:28:3d:49:99:50:fd:b4:6d:ed:69:02:09: 43:90:88:cd:cd:14:c0:92:c8:18:51:0a:1e:a8:21: 31:52:ee:e4:27:b1:60:24:15:d6:b9:ef:de:41:88: 83:45:12:9d:98:40:37:83:63:d5:28:dc:65:a2:e9: c8:d1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 7A:B6:40:26:14:07:D4:43:49:DD:8C:1C:E6:D9:A5:3D:8A:17:76:95 X509v3 Authority Key Identifier: keyid:04:33:DC:81:88:5A:A9:73:61:98:E4:B1:33:11:01:3B:65:39:B0:5D X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/7b7ef515-8564-41e8-9d20-2d33d45ccbd6/0/0433DC81885AA9736198E4B13311013B6539B05D.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/0433DC81885AA9736198E4B13311013B6539B05D.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/7b7ef515-8564-41e8-9d20-2d33d45ccbd6/0/0433DC81885AA9736198E4B13311013B6539B05D.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 7b:4b:fc:af:bc:87:28:3e:85:8c:42:eb:8f:dd:06:0e:2c:3f: aa:1b:d6:78:e2:cb:66:ec:9a:1b:e9:a4:11:7a:28:ca:73:5d: 3b:fe:49:3a:8a:89:28:36:eb:a8:d1:15:54:59:ca:4f:3b:e0: 75:8f:14:bc:ea:d3:36:15:db:23:ed:88:f2:0e:0f:f7:1a:ba: 7b:91:cc:12:f7:5b:31:e0:84:3b:c2:3d:af:21:6e:1e:96:22: 04:10:05:c3:8a:ff:37:1c:68:5c:9d:89:e1:84:65:12:e6:d0: 83:4f:67:80:8b:d5:15:a3:f9:4c:24:a0:85:05:f0:58:25:a0: 7d:82:f1:4f:d1:ea:b2:b4:c9:88:df:8b:51:cd:e7:dd:e7:24: 11:62:ee:10:22:4f:5b:a2:bc:c7:01:c3:10:21:15:82:06:96: 00:f4:fb:b8:42:34:3d:77:44:e6:19:f9:10:8c:84:6f:98:0b: ed:00:8b:06:78:ad:ed:b6:26:8b:bf:ca:84:35:ee:9e:3a:2f: 47:55:5d:0a:57:49:e5:d4:42:75:a8:9d:18:66:b0:25:92:31: 61:52:9f:c5:fb:34:80:1b:34:4b:68:a6:c9:a4:fd:d9:ab:1d: 5d:f0:49:d0:69:30:11:e8:06:e1:f3:5d:44:35:3c:8f:1c:c8: 5f:06:39:bb -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUVDHeDmk0/JkuhNQQ5hzwg+MZeYQwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMDQzM0RDODE4ODVBQTk3MzYxOThFNEIxMzMxMTAxM0I2 NTM5QjA1RDAeFw0yNjAxMjQwODM4MTdaFw0yNjAxMjcxNjA0MTdaMDMxMTAvBgNV BAMTKDdBQjY0MDI2MTQwN0Q0NDM0OUREOEMxQ0U2RDlBNTNEOEExNzc2OTUwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC+aRNu7KeEt6ucEgmROCjaQwJR 86/tLL3qkKcW+99+QiZfv0u/0Z0qIGQhjE66h8JQlXwdcBG/IRHV650qemqYbwAc XtwiFcLnsMOUHWCni4N/5d29cebqZpvL0uhOzV0ow0IwS8IZvQ0OA3dVAdcC2Hyg ODV7lN5CvnseuYXHbxQo6B1nNDnIYaFCOeHGRULkG4xMRamuUzk935YY/9zMFRW1 9H+iW99OvvNXiW6a5NYZ9Nv6HGo+xpHKZnoiSsdva8yMeSg9SZlQ/bRt7WkCCUOQ iM3NFMCSyBhRCh6oITFS7uQnsWAkFda5795BiINFEp2YQDeDY9Uo3GWi6cjRAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUerZAJhQH1ENJ3Ywc5tmlPYoXdpUwHwYDVR0j BBgwFoAUBDPcgYhaqXNhmOSxMxEBO2U5sF0wDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby83 YjdlZjUxNS04NTY0LTQxZTgtOWQyMC0yZDMzZDQ1Y2NiZDYvMC8wNDMzREM4MTg4 NUFBOTczNjE5OEU0QjEzMzExMDEzQjY1MzlCMDVELmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvMDQzM0RDODE4ODVBQTk3MzYxOThFNEIxMzMxMTAxM0I2NTM5 QjA1RC5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vN2I3ZWY1MTUtODU2NC00MWU4LTlk MjAtMmQzM2Q0NWNjYmQ2LzAvMDQzM0RDODE4ODVBQTk3MzYxOThFNEIxMzMxMTAx M0I2NTM5QjA1RC5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAHtL/K+8hyg+hYxC64/dBg4sP6ob1njiy2bs mhvppBF6KMpzXTv+STqKiSg266jRFVRZyk874HWPFLzq0zYV2yPtiPIOD/caunuR zBL3WzHghDvCPa8hbh6WIgQQBcOK/zccaFydieGEZRLm0INPZ4CL1RWj+UwkoIUF 8FgloH2C8U/R6rK0yYjfi1HN593nJBFi7hAiT1uivMcBwxAhFYIGlgD0+7hCND13 ROYZ+RCMhG+YC+0AiwZ4re22Jou/yoQ17p46L0dVXQpXSeXUQnWonRhmsCWSMWFS n8X7NIAbNEtopsmk/dmrHV3wSdBpMBHoBuHzXUQ1PI8cyF8GObs= -----END CERTIFICATE-----Generated at Sun Jan 25 21:44:50 2026 by rpki-client