This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf repo-rpki.idnic.net/repo/9b733dcf-9f5e-4775-9ce7-9dd525b44b86/1/33D2F1EAE44634CCF2B028FDCA2A11513D83B42D.mft File: 33D2F1EAE44634CCF2B028FDCA2A11513D83B42D.mft (raw, json) Hash identifier: uzpIfWlw8B8kpvaaPqoXvOwuiV2+VM6YYTXqy9iS0cc= Subject key identifier: A7:DF:72:E1:8F:97:64:3B:2A:C3:C2:DC:3D:22:51:9B:12:68:59:FC Authority key identifier: 33:D2:F1:EA:E4:46:34:CC:F2:B0:28:FD:CA:2A:11:51:3D:83:B4:2D Certificate issuer: /CN=33D2F1EAE44634CCF2B028FDCA2A11513D83B42D Certificate serial: 0A2CA742606F69F03620A93D187DD860736792C0 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/33D2F1EAE44634CCF2B028FDCA2A11513D83B42D.cer Subject info access: rsync://repo-rpki.idnic.net/repo/9b733dcf-9f5e-4775-9ce7-9dd525b44b86/1/33D2F1EAE44634CCF2B028FDCA2A11513D83B42D.mft Manifest number: DE Signing time: Thu 04 Dec 2025 17:12:24 +0000 Manifest this update: Thu 04 Dec 2025 17:07:24 +0000 Manifest next update: Mon 08 Dec 2025 01:51:24 +0000 Files and hashes: 1: 323030313a6466333a643334303a3a2f34382d3438203d3e20313532373439.roa (hash: Y6M3Rf10ondFVRavAz+BHrKvcEeqI6mWIsztyFy7iY4=) 2: 33D2F1EAE44634CCF2B028FDCA2A11513D83B42D.crl (hash: 9i5nF+tPepImpMkLg2fcrhmDYpQtdCAhPPFUYkZy3Tc=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/9b733dcf-9f5e-4775-9ce7-9dd525b44b86/1/33D2F1EAE44634CCF2B028FDCA2A11513D83B42D.crl rsync://repo-rpki.idnic.net/repo/9b733dcf-9f5e-4775-9ce7-9dd525b44b86/1/33D2F1EAE44634CCF2B028FDCA2A11513D83B42D.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/33D2F1EAE44634CCF2B028FDCA2A11513D83B42D.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 08 Dec 2025 01:51:24 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 0a:2c:a7:42:60:6f:69:f0:36:20:a9:3d:18:7d:d8:60:73:67:92:c0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=33D2F1EAE44634CCF2B028FDCA2A11513D83B42D Validity Not Before: Dec 4 17:07:24 2025 GMT Not After : Dec 8 01:51:24 2025 GMT Subject: CN=A7DF72E18F97643B2AC3C2DC3D22519B126859FC Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9a:9f:d2:7d:cb:97:56:de:90:e7:50:6c:fd:1a: 18:27:6c:bf:d7:64:d3:0a:be:5a:1e:b1:d5:b2:6a: 40:38:27:40:22:fd:a8:c6:88:ac:1d:6c:82:8a:97: 76:b0:29:70:6b:22:65:94:fb:c1:47:73:da:13:af: 75:83:50:a2:f4:b2:50:38:9e:1a:bd:ba:59:89:f7: 62:51:a5:01:97:2d:ed:e9:2d:da:e6:96:f3:8a:57: 74:c4:a4:ca:39:3d:69:02:a5:a6:4e:ad:9c:00:63: 8b:a9:14:6d:4f:66:71:05:66:a9:22:3f:ca:e9:66: fb:a7:ec:a6:42:3e:23:6c:02:30:1f:53:ac:fe:20: cd:ab:1f:c5:39:0b:7d:97:3e:d2:28:18:72:3f:a0: ef:fb:17:31:dd:d4:d5:f7:04:4d:0d:76:62:b1:f7: ad:a6:02:c5:b5:d2:da:99:d3:d3:99:a1:14:7a:dc: 21:dc:ed:ab:ff:fc:cf:67:0b:e7:e2:ca:f7:f1:6a: f6:4b:ec:30:b8:35:be:ed:2c:29:f4:4f:dd:34:bf: a2:bc:5e:da:55:da:51:b5:8f:f5:f7:1e:48:5c:63: ec:c4:71:02:37:74:3a:c6:48:b5:8e:8f:48:03:84: 69:ee:0e:d4:67:a6:46:ce:f7:aa:eb:be:ac:97:5a: 2d:29 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: A7:DF:72:E1:8F:97:64:3B:2A:C3:C2:DC:3D:22:51:9B:12:68:59:FC X509v3 Authority Key Identifier: keyid:33:D2:F1:EA:E4:46:34:CC:F2:B0:28:FD:CA:2A:11:51:3D:83:B4:2D X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/9b733dcf-9f5e-4775-9ce7-9dd525b44b86/1/33D2F1EAE44634CCF2B028FDCA2A11513D83B42D.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/33D2F1EAE44634CCF2B028FDCA2A11513D83B42D.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/9b733dcf-9f5e-4775-9ce7-9dd525b44b86/1/33D2F1EAE44634CCF2B028FDCA2A11513D83B42D.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption e2:fb:8a:67:29:88:5a:e2:c4:94:13:a3:94:d9:df:4f:25:4f: 9a:55:cd:63:00:95:7e:1f:4e:f3:ce:6c:52:b7:49:3b:e0:61: 4d:f7:e0:09:67:b6:48:bc:76:ff:ce:e5:09:bb:bf:eb:77:3c: 9a:d7:0e:d5:27:40:9c:25:0e:14:b1:33:d5:ba:64:f0:fc:04: b7:51:53:14:82:e6:51:11:1e:c7:1a:04:84:a7:f1:75:17:78: ea:ab:90:e1:4e:60:37:a1:5f:60:e9:54:86:64:65:1e:6f:3c: 0a:20:57:91:40:8c:be:8f:b1:bf:18:4b:16:73:7e:7e:9a:93: 30:08:a4:09:93:6f:7f:b1:7a:c1:2b:fa:f5:9d:9e:c0:9a:db: d4:b6:85:5b:0d:b3:12:2c:83:f3:5d:ee:11:94:43:51:f8:58: 9e:1c:41:3d:89:13:bf:d2:a1:75:25:f1:b3:c6:4f:b6:ee:38: 34:6b:79:31:3d:0f:94:74:08:d7:2e:40:c8:6d:b4:89:81:b9: 0a:01:f4:a0:f3:50:4d:bd:a2:09:9f:77:de:58:d7:69:71:36: 86:9e:ee:05:8b:4d:5f:0d:28:05:be:21:9b:cc:90:21:86:66: 4a:00:cf:0d:56:63:f6:f5:ff:42:78:78:0e:c3:6a:22:32:45: eb:2e:ef:03 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUCiynQmBvafA2IKk9GH3YYHNnksAwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMzNEMkYxRUFFNDQ2MzRDQ0YyQjAyOEZEQ0EyQTExNTEz RDgzQjQyRDAeFw0yNTEyMDQxNzA3MjRaFw0yNTEyMDgwMTUxMjRaMDMxMTAvBgNV BAMTKEE3REY3MkUxOEY5NzY0M0IyQUMzQzJEQzNEMjI1MTlCMTI2ODU5RkMwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCan9J9y5dW3pDnUGz9GhgnbL/X ZNMKvloesdWyakA4J0Ai/ajGiKwdbIKKl3awKXBrImWU+8FHc9oTr3WDUKL0slA4 nhq9ulmJ92JRpQGXLe3pLdrmlvOKV3TEpMo5PWkCpaZOrZwAY4upFG1PZnEFZqki P8rpZvun7KZCPiNsAjAfU6z+IM2rH8U5C32XPtIoGHI/oO/7FzHd1NX3BE0NdmKx 962mAsW10tqZ09OZoRR63CHc7av//M9nC+fiyvfxavZL7DC4Nb7tLCn0T900v6K8 XtpV2lG1j/X3HkhcY+zEcQI3dDrGSLWOj0gDhGnuDtRnpkbO96rrvqyXWi0pAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUp99y4Y+XZDsqw8LcPSJRmxJoWfwwHwYDVR0j BBgwFoAUM9Lx6uRGNMzysCj9yioRUT2DtC0wDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby85 YjczM2RjZi05ZjVlLTQ3NzUtOWNlNy05ZGQ1MjViNDRiODYvMS8zM0QyRjFFQUU0 NDYzNENDRjJCMDI4RkRDQTJBMTE1MTNEODNCNDJELmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvMzNEMkYxRUFFNDQ2MzRDQ0YyQjAyOEZEQ0EyQTExNTEzRDgz QjQyRC5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vOWI3MzNkY2YtOWY1ZS00Nzc1LTlj ZTctOWRkNTI1YjQ0Yjg2LzEvMzNEMkYxRUFFNDQ2MzRDQ0YyQjAyOEZEQ0EyQTEx NTEzRDgzQjQyRC5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAOL7imcpiFrixJQTo5TZ308lT5pVzWMAlX4f TvPObFK3STvgYU334Alntki8dv/O5Qm7v+t3PJrXDtUnQJwlDhSxM9W6ZPD8BLdR UxSC5lERHscaBISn8XUXeOqrkOFOYDehX2DpVIZkZR5vPAogV5FAjL6Psb8YSxZz fn6akzAIpAmTb3+xesEr+vWdnsCa29S2hVsNsxIsg/Nd7hGUQ1H4WJ4cQT2JE7/S oXUl8bPGT7buODRreTE9D5R0CNcuQMhttImBuQoB9KDzUE29ogmfd95Y12lxNoae 7gWLTV8NKAW+IZvMkCGGZkoAzw1WY/b1/0J4eA7DaiIyResu7wM= -----END CERTIFICATE-----Generated at Sun Dec 7 02:09:43 2025 by rpki-client