This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf repo-rpki.idnic.net/repo/8d703b80-2e78-4d11-ab74-08017e422d6e/0/C33BE6D76C1444B4695CC56D706802967A2A404E.mft File: C33BE6D76C1444B4695CC56D706802967A2A404E.mft (raw, json) Hash identifier: kSD7kmgho3uJ/0Qn305M97DbRe1YQVN4DNT1DSIGAIA= Subject key identifier: 2E:4F:6B:4C:2A:02:3D:D6:5C:DF:2A:2F:FE:5B:95:3A:62:AF:4D:68 Authority key identifier: C3:3B:E6:D7:6C:14:44:B4:69:5C:C5:6D:70:68:02:96:7A:2A:40:4E Certificate issuer: /CN=C33BE6D76C1444B4695CC56D706802967A2A404E Certificate serial: 65AAAFF4F406560D022AE4E831DECC967FB946F0 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/C33BE6D76C1444B4695CC56D706802967A2A404E.cer Subject info access: rsync://repo-rpki.idnic.net/repo/8d703b80-2e78-4d11-ab74-08017e422d6e/0/C33BE6D76C1444B4695CC56D706802967A2A404E.mft Manifest number: 0178 Signing time: Fri 23 Jan 2026 14:21:43 +0000 Manifest this update: Fri 23 Jan 2026 14:16:43 +0000 Manifest next update: Mon 26 Jan 2026 18:05:43 +0000 Files and hashes: 1: 3130332e35352e33302e302f32332d3233203d3e20313530343834.roa (hash: ZuMnDiHxEL/U8SL8BhAZDvs5aB1dq2I0QG/IhKrpVW8=) 2: 3130332e35352e33312e302f32342d3234203d3e20313530343834.roa (hash: tAaom1u9dzc8ncYAUwE5XCycjaJDPimabJR/V9nJlmE=) 3: 3130332e35352e33302e302f32342d3234203d3e20313530343834.roa (hash: aZfOFjCWcMoRejMmCl7p7stqIRB0AZ4Tzh7bIJ8bPos=) 4: C33BE6D76C1444B4695CC56D706802967A2A404E.crl (hash: WHLOw8JxWs5Cna3iXydpNxhP5xIyHvG1fDnx1J/Jknk=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/8d703b80-2e78-4d11-ab74-08017e422d6e/0/C33BE6D76C1444B4695CC56D706802967A2A404E.crl rsync://repo-rpki.idnic.net/repo/8d703b80-2e78-4d11-ab74-08017e422d6e/0/C33BE6D76C1444B4695CC56D706802967A2A404E.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/C33BE6D76C1444B4695CC56D706802967A2A404E.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 26 Jan 2026 18:05:43 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 65:aa:af:f4:f4:06:56:0d:02:2a:e4:e8:31:de:cc:96:7f:b9:46:f0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=C33BE6D76C1444B4695CC56D706802967A2A404E Validity Not Before: Jan 23 14:16:43 2026 GMT Not After : Jan 26 18:05:43 2026 GMT Subject: CN=2E4F6B4C2A023DD65CDF2A2FFE5B953A62AF4D68 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cb:98:63:4d:fe:13:b5:8e:46:59:3a:1a:54:be: 6a:3c:ce:fd:aa:f8:28:eb:ab:a5:38:5e:0e:1a:f0: d3:b6:90:6c:10:43:ab:ef:5e:b3:97:06:1f:bc:f3: 9e:bf:0f:22:25:63:ee:de:72:0b:8e:d5:42:11:3f: e4:7f:9c:64:e5:93:1a:60:bb:29:ff:f5:78:f3:6a: b8:2e:b3:e3:86:0c:e0:e1:96:ec:97:36:78:60:0e: 4b:1a:32:d6:1b:52:67:e3:28:8a:b6:c5:c0:7d:ab: 82:99:31:d1:c5:89:9e:98:1a:e0:f7:c0:f4:dd:15: 44:f7:58:5d:80:ab:85:a8:a5:45:3e:16:30:76:1a: 94:c1:3c:fa:30:73:79:58:6f:19:cd:72:b0:91:50: c5:76:85:e2:5e:f8:29:14:20:48:c4:31:60:19:e9: 26:f3:23:73:35:aa:52:9e:a8:69:45:28:8b:7d:b3: f0:84:0c:69:56:e6:71:6b:6e:41:32:9d:6b:22:3e: 51:75:a7:19:af:49:d4:e0:12:9e:10:e5:2d:63:3e: a2:32:05:c1:7c:c3:cf:f3:ab:2e:f4:0f:a6:da:36: 4c:fb:69:88:59:87:5c:a3:fa:fa:43:21:2a:1b:84: 88:9a:e3:3c:0d:36:0d:09:64:01:7f:2d:00:18:6d: 5c:f3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 2E:4F:6B:4C:2A:02:3D:D6:5C:DF:2A:2F:FE:5B:95:3A:62:AF:4D:68 X509v3 Authority Key Identifier: keyid:C3:3B:E6:D7:6C:14:44:B4:69:5C:C5:6D:70:68:02:96:7A:2A:40:4E X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/8d703b80-2e78-4d11-ab74-08017e422d6e/0/C33BE6D76C1444B4695CC56D706802967A2A404E.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/C33BE6D76C1444B4695CC56D706802967A2A404E.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/8d703b80-2e78-4d11-ab74-08017e422d6e/0/C33BE6D76C1444B4695CC56D706802967A2A404E.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption b6:7d:ee:97:d5:1b:44:66:74:4f:39:ef:f2:31:a7:77:08:e4: 8d:80:b6:8e:2b:21:f4:8c:32:d1:1c:5a:f5:9c:80:13:b5:82: d1:76:de:59:f5:eb:92:eb:93:26:0a:96:e3:c9:d9:69:a8:1c: 69:d7:d1:8d:96:11:d3:a1:b6:61:3e:44:ff:a0:5f:c2:45:ec: c7:38:f2:b5:2a:fb:13:6e:de:1e:30:16:df:39:34:30:1a:3f: 7c:d2:34:4d:32:2d:b8:0a:e3:13:61:dc:fb:d0:ec:4c:2d:7d: ea:fc:05:76:5a:78:7c:3e:94:dc:18:1c:55:50:bb:0b:a9:2b: e6:8b:99:2d:87:4e:13:bc:a7:0c:b1:4d:1e:c2:cc:2e:45:ce: 87:6d:f4:51:39:88:53:88:f7:e9:9a:e9:0c:60:8b:d7:f5:4a: 70:cf:17:b7:1f:2a:12:b3:05:bf:5f:74:73:f3:76:51:d4:cc: 31:9e:9a:50:f6:be:fa:d6:02:84:75:c3:91:e9:38:60:e4:74: 77:15:89:b9:82:af:ff:a7:96:a3:cc:ad:47:e5:87:3f:81:27: 30:db:9c:f8:6f:3e:14:9f:9b:63:ef:ec:ad:fa:8c:34:b8:b0: 58:b6:d1:cc:ef:01:b7:1f:af:81:61:5c:50:18:bc:b3:79:f1: f0:1c:92:f1 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUZaqv9PQGVg0CKuToMd7Mln+5RvAwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoQzMzQkU2RDc2QzE0NDRCNDY5NUNDNTZENzA2ODAyOTY3 QTJBNDA0RTAeFw0yNjAxMjMxNDE2NDNaFw0yNjAxMjYxODA1NDNaMDMxMTAvBgNV BAMTKDJFNEY2QjRDMkEwMjNERDY1Q0RGMkEyRkZFNUI5NTNBNjJBRjRENjgwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDLmGNN/hO1jkZZOhpUvmo8zv2q +Cjrq6U4Xg4a8NO2kGwQQ6vvXrOXBh+8856/DyIlY+7ecguO1UIRP+R/nGTlkxpg uyn/9Xjzargus+OGDODhluyXNnhgDksaMtYbUmfjKIq2xcB9q4KZMdHFiZ6YGuD3 wPTdFUT3WF2Aq4WopUU+FjB2GpTBPPowc3lYbxnNcrCRUMV2heJe+CkUIEjEMWAZ 6SbzI3M1qlKeqGlFKIt9s/CEDGlW5nFrbkEynWsiPlF1pxmvSdTgEp4Q5S1jPqIy BcF8w8/zqy70D6baNkz7aYhZh1yj+vpDISobhIia4zwNNg0JZAF/LQAYbVzzAgMB AAGjggI8MIICODAdBgNVHQ4EFgQULk9rTCoCPdZc3yov/luVOmKvTWgwHwYDVR0j BBgwFoAUwzvm12wURLRpXMVtcGgClnoqQE4wDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby84 ZDcwM2I4MC0yZTc4LTRkMTEtYWI3NC0wODAxN2U0MjJkNmUvMC9DMzNCRTZENzZD MTQ0NEI0Njk1Q0M1NkQ3MDY4MDI5NjdBMkE0MDRFLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvQzMzQkU2RDc2QzE0NDRCNDY5NUNDNTZENzA2ODAyOTY3QTJB NDA0RS5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vOGQ3MDNiODAtMmU3OC00ZDExLWFi NzQtMDgwMTdlNDIyZDZlLzAvQzMzQkU2RDc2QzE0NDRCNDY5NUNDNTZENzA2ODAy OTY3QTJBNDA0RS5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBALZ97pfVG0RmdE857/Ixp3cI5I2Ato4rIfSM MtEcWvWcgBO1gtF23ln165LrkyYKluPJ2WmoHGnX0Y2WEdOhtmE+RP+gX8JF7Mc4 8rUq+xNu3h4wFt85NDAaP3zSNE0yLbgK4xNh3PvQ7Ewtfer8BXZaeHw+lNwYHFVQ uwupK+aLmS2HThO8pwyxTR7CzC5Fzodt9FE5iFOI9+ma6Qxgi9f1SnDPF7cfKhKz Bb9fdHPzdlHUzDGemlD2vvrWAoR1w5HpOGDkdHcVibmCr/+nlqPMrUflhz+BJzDb nPhvPhSfm2Pv7K36jDS4sFi20czvAbcfr4FhXFAYvLN58fAckvE= -----END CERTIFICATE-----Generated at Sun Jan 25 18:36:48 2026 by rpki-client