This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf repo-rpki.idnic.net/repo/8d703b80-2e78-4d11-ab74-08017e422d6e/0/C33BE6D76C1444B4695CC56D706802967A2A404E.mft File: C33BE6D76C1444B4695CC56D706802967A2A404E.mft (raw, json) Hash identifier: RRYLO4V3lwPbKJjDUtepQma9lCohSGncTMSbbM/o+Qs= Subject key identifier: 5F:97:94:C3:4D:40:EB:A7:05:05:51:2E:F4:72:07:D3:34:7D:FD:C3 Authority key identifier: C3:3B:E6:D7:6C:14:44:B4:69:5C:C5:6D:70:68:02:96:7A:2A:40:4E Certificate issuer: /CN=C33BE6D76C1444B4695CC56D706802967A2A404E Certificate serial: 7C1FD0DE286F35009F541EE1AC2620E90D8EDAD0 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/C33BE6D76C1444B4695CC56D706802967A2A404E.cer Subject info access: rsync://repo-rpki.idnic.net/repo/8d703b80-2e78-4d11-ab74-08017e422d6e/0/C33BE6D76C1444B4695CC56D706802967A2A404E.mft Manifest number: 0162 Signing time: Thu 04 Dec 2025 19:41:46 +0000 Manifest this update: Thu 04 Dec 2025 19:36:46 +0000 Manifest next update: Mon 08 Dec 2025 04:28:46 +0000 Files and hashes: 1: C33BE6D76C1444B4695CC56D706802967A2A404E.crl (hash: soPy2RVC46hrzlsSz7zL9BIOf54P99kNBjTfit9e8Q4=) 2: 3130332e35352e33302e302f32332d3233203d3e20313530343834.roa (hash: ZuMnDiHxEL/U8SL8BhAZDvs5aB1dq2I0QG/IhKrpVW8=) 3: 3130332e35352e33312e302f32342d3234203d3e20313530343834.roa (hash: tAaom1u9dzc8ncYAUwE5XCycjaJDPimabJR/V9nJlmE=) 4: 3130332e35352e33302e302f32342d3234203d3e20313530343834.roa (hash: aZfOFjCWcMoRejMmCl7p7stqIRB0AZ4Tzh7bIJ8bPos=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/8d703b80-2e78-4d11-ab74-08017e422d6e/0/C33BE6D76C1444B4695CC56D706802967A2A404E.crl rsync://repo-rpki.idnic.net/repo/8d703b80-2e78-4d11-ab74-08017e422d6e/0/C33BE6D76C1444B4695CC56D706802967A2A404E.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/C33BE6D76C1444B4695CC56D706802967A2A404E.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 08 Dec 2025 04:28:46 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 7c:1f:d0:de:28:6f:35:00:9f:54:1e:e1:ac:26:20:e9:0d:8e:da:d0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=C33BE6D76C1444B4695CC56D706802967A2A404E Validity Not Before: Dec 4 19:36:46 2025 GMT Not After : Dec 8 04:28:46 2025 GMT Subject: CN=5F9794C34D40EBA70505512EF47207D3347DFDC3 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ce:b1:c7:fa:21:ff:46:4c:01:6d:51:5b:c8:b1: 4f:96:54:67:0d:16:d6:b4:73:eb:e4:ac:75:0b:b1: 92:36:04:e5:66:60:ff:73:03:82:d8:6b:f2:c2:ac: f0:2a:08:ab:f7:5b:8e:4f:78:90:73:58:e7:fe:c4: a2:37:bb:10:cf:fd:8e:59:c3:47:7d:3d:41:8e:30: e2:87:dd:58:6e:31:11:0a:ce:57:0a:2c:04:49:a1: b8:73:c1:f1:57:be:af:48:2f:83:ac:9f:43:b3:cb: 41:cb:eb:d5:6a:61:fa:5e:14:31:d9:3f:b9:0d:45: e1:40:5d:be:05:47:6c:33:2b:a8:36:9a:07:8b:48: 19:84:61:38:7d:0d:3b:43:c5:b1:72:45:16:14:50: 68:39:88:97:8e:cb:2d:39:ef:7f:6a:db:c7:8a:ac: 27:eb:d2:8a:e9:6d:05:09:0e:ec:05:c5:91:6b:df: d2:a7:08:a6:1f:27:b5:ce:2c:79:79:c1:76:97:14: 02:49:07:3e:3d:68:71:11:64:fc:85:b2:26:66:c4: 20:6d:89:52:7b:bd:bb:42:0f:f3:8b:e2:1f:7f:8b: 23:61:45:00:96:10:3e:a9:d8:16:0d:37:62:c3:33: 29:dc:2b:0b:3f:1c:af:3b:1e:2f:14:30:84:47:c5: aa:51 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 5F:97:94:C3:4D:40:EB:A7:05:05:51:2E:F4:72:07:D3:34:7D:FD:C3 X509v3 Authority Key Identifier: keyid:C3:3B:E6:D7:6C:14:44:B4:69:5C:C5:6D:70:68:02:96:7A:2A:40:4E X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/8d703b80-2e78-4d11-ab74-08017e422d6e/0/C33BE6D76C1444B4695CC56D706802967A2A404E.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/C33BE6D76C1444B4695CC56D706802967A2A404E.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/8d703b80-2e78-4d11-ab74-08017e422d6e/0/C33BE6D76C1444B4695CC56D706802967A2A404E.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 40:62:43:1f:36:9d:34:8b:d7:74:b4:f4:e6:f8:62:92:d1:0d: 4c:f7:5f:05:8e:8f:83:ef:75:2b:ad:21:34:4f:9e:a6:e8:e7: 5c:95:ec:20:fc:0a:f0:42:30:d0:ec:37:0c:e8:b2:96:ce:3f: 03:29:21:bd:17:a5:83:8c:4e:ea:99:42:cc:2c:af:0e:1a:3e: 45:81:47:4c:73:64:70:0f:65:7d:90:35:b5:13:62:71:49:f5: be:ac:06:32:0b:0e:39:e9:35:dd:3d:5a:1b:30:61:ca:96:4e: c7:60:e9:83:5c:25:35:23:5d:ca:4f:73:02:41:57:88:04:a8: 83:78:af:d8:6b:ab:c0:00:06:73:ac:5a:3f:01:66:43:c8:5a: 8e:aa:2a:bb:96:9a:0d:0d:30:8b:a8:70:ee:50:7c:31:d5:68: d7:0a:d2:c7:36:19:83:b8:7b:f5:24:ec:49:c3:e7:f0:f4:07: 64:e7:80:d0:1d:38:f7:32:d5:b2:25:89:2d:3d:69:3f:3a:b6: 49:01:d6:e2:72:f5:2c:55:b3:06:c4:b4:e1:e9:dd:2f:41:6c: 6d:97:1f:b1:ad:8c:a2:0e:ac:41:a5:27:8e:ae:9c:81:e0:da: c9:87:6d:e2:e9:65:2a:c8:00:30:f1:d1:b9:ad:1e:0b:21:7c: f4:02:05:b3 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUfB/Q3ihvNQCfVB7hrCYg6Q2O2tAwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoQzMzQkU2RDc2QzE0NDRCNDY5NUNDNTZENzA2ODAyOTY3 QTJBNDA0RTAeFw0yNTEyMDQxOTM2NDZaFw0yNTEyMDgwNDI4NDZaMDMxMTAvBgNV BAMTKDVGOTc5NEMzNEQ0MEVCQTcwNTA1NTEyRUY0NzIwN0QzMzQ3REZEQzMwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDOscf6If9GTAFtUVvIsU+WVGcN Fta0c+vkrHULsZI2BOVmYP9zA4LYa/LCrPAqCKv3W45PeJBzWOf+xKI3uxDP/Y5Z w0d9PUGOMOKH3VhuMREKzlcKLARJobhzwfFXvq9IL4Osn0Ozy0HL69VqYfpeFDHZ P7kNReFAXb4FR2wzK6g2mgeLSBmEYTh9DTtDxbFyRRYUUGg5iJeOyy05739q28eK rCfr0orpbQUJDuwFxZFr39KnCKYfJ7XOLHl5wXaXFAJJBz49aHERZPyFsiZmxCBt iVJ7vbtCD/OL4h9/iyNhRQCWED6p2BYNN2LDMyncKws/HK87Hi8UMIRHxapRAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUX5eUw01A66cFBVEu9HIH0zR9/cMwHwYDVR0j BBgwFoAUwzvm12wURLRpXMVtcGgClnoqQE4wDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby84 ZDcwM2I4MC0yZTc4LTRkMTEtYWI3NC0wODAxN2U0MjJkNmUvMC9DMzNCRTZENzZD MTQ0NEI0Njk1Q0M1NkQ3MDY4MDI5NjdBMkE0MDRFLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvQzMzQkU2RDc2QzE0NDRCNDY5NUNDNTZENzA2ODAyOTY3QTJB NDA0RS5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vOGQ3MDNiODAtMmU3OC00ZDExLWFi NzQtMDgwMTdlNDIyZDZlLzAvQzMzQkU2RDc2QzE0NDRCNDY5NUNDNTZENzA2ODAy OTY3QTJBNDA0RS5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAEBiQx82nTSL13S09Ob4YpLRDUz3XwWOj4Pv dSutITRPnqbo51yV7CD8CvBCMNDsNwzospbOPwMpIb0XpYOMTuqZQswsrw4aPkWB R0xzZHAPZX2QNbUTYnFJ9b6sBjILDjnpNd09WhswYcqWTsdg6YNcJTUjXcpPcwJB V4gEqIN4r9hrq8AABnOsWj8BZkPIWo6qKruWmg0NMIuocO5QfDHVaNcK0sc2GYO4 e/Uk7EnD5/D0B2TngNAdOPcy1bIliS09aT86tkkB1uJy9SxVswbEtOHp3S9BbG2X H7GtjKIOrEGlJ46unIHg2smHbeLpZSrIADDx0bmtHgshfPQCBbM= -----END CERTIFICATE-----Generated at Sun Dec 7 02:10:06 2025 by rpki-client