This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf repo-rpki.idnic.net/repo/9b733dcf-9f5e-4775-9ce7-9dd525b44b86/1/33D2F1EAE44634CCF2B028FDCA2A11513D83B42D.mft File: 33D2F1EAE44634CCF2B028FDCA2A11513D83B42D.mft (raw, json) Hash identifier: U42plboC/ga2OaDIP0dFNPzU1m75o6z5cFzERRsxFcg= Subject key identifier: C5:E1:AA:12:3F:C5:59:D0:3E:6F:34:63:16:C2:56:68:DA:7D:71:3A Authority key identifier: 33:D2:F1:EA:E4:46:34:CC:F2:B0:28:FD:CA:2A:11:51:3D:83:B4:2D Certificate issuer: /CN=33D2F1EAE44634CCF2B028FDCA2A11513D83B42D Certificate serial: 67F781479A82FC09A7E34DF41C490D987C9E6655 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/33D2F1EAE44634CCF2B028FDCA2A11513D83B42D.cer Subject info access: rsync://repo-rpki.idnic.net/repo/9b733dcf-9f5e-4775-9ce7-9dd525b44b86/1/33D2F1EAE44634CCF2B028FDCA2A11513D83B42D.mft Manifest number: F4 Signing time: Sat 24 Jan 2026 00:12:35 +0000 Manifest this update: Sat 24 Jan 2026 00:07:35 +0000 Manifest next update: Tue 27 Jan 2026 05:23:35 +0000 Files and hashes: 1: 33D2F1EAE44634CCF2B028FDCA2A11513D83B42D.crl (hash: yUzNAQDX24ZVTw7arGGbKj1J1tKQF/K9WyW6NS269MM=) 2: 323030313a6466333a643334303a3a2f34382d3438203d3e20313532373439.roa (hash: Y6M3Rf10ondFVRavAz+BHrKvcEeqI6mWIsztyFy7iY4=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/9b733dcf-9f5e-4775-9ce7-9dd525b44b86/1/33D2F1EAE44634CCF2B028FDCA2A11513D83B42D.crl rsync://repo-rpki.idnic.net/repo/9b733dcf-9f5e-4775-9ce7-9dd525b44b86/1/33D2F1EAE44634CCF2B028FDCA2A11513D83B42D.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/33D2F1EAE44634CCF2B028FDCA2A11513D83B42D.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 27 Jan 2026 05:23:35 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 67:f7:81:47:9a:82:fc:09:a7:e3:4d:f4:1c:49:0d:98:7c:9e:66:55 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=33D2F1EAE44634CCF2B028FDCA2A11513D83B42D Validity Not Before: Jan 24 00:07:35 2026 GMT Not After : Jan 27 05:23:35 2026 GMT Subject: CN=C5E1AA123FC559D03E6F346316C25668DA7D713A Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d0:1e:a4:e3:43:b2:d3:bc:80:ff:fc:43:c2:ff: 4e:58:c5:7d:91:3d:8e:c2:0f:c0:45:73:ee:bb:8d: 11:de:19:8a:8d:78:de:3a:66:11:fa:c7:29:4b:27: ac:11:84:b5:7e:7b:45:c1:81:32:50:6e:ee:a2:33: e7:7d:67:fb:ab:fb:df:96:30:b5:15:f1:78:19:ed: 59:9e:47:78:62:43:06:0a:1f:59:99:eb:57:7b:a8: 57:0d:ad:4c:c3:d4:88:e4:73:91:13:0c:88:19:bf: a8:4a:fc:3b:be:4e:c8:db:96:e5:aa:30:24:a1:91: 6d:b0:f1:00:00:b4:ae:36:d7:12:92:1a:6e:96:c2: 98:11:2c:f4:d9:0e:eb:ff:7b:c5:9a:8e:b0:4e:64: d7:27:46:71:61:4d:17:fe:87:b0:75:e8:e8:c6:92: 75:04:11:08:b0:58:0f:b6:76:eb:1c:1b:91:95:ae: 14:0b:80:4a:35:4b:7e:ba:b1:f9:de:b6:33:d0:b6: ae:2f:03:8d:22:d3:53:1c:10:9a:eb:43:b9:6d:51: 6c:cc:9f:d6:61:6e:1c:81:fa:51:cb:b3:80:46:c4: cd:62:58:4e:bf:77:b1:25:fc:87:3e:7c:13:3b:33: 61:08:d8:47:10:4b:74:4d:05:be:cd:eb:b6:1d:70: 18:49 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: C5:E1:AA:12:3F:C5:59:D0:3E:6F:34:63:16:C2:56:68:DA:7D:71:3A X509v3 Authority Key Identifier: keyid:33:D2:F1:EA:E4:46:34:CC:F2:B0:28:FD:CA:2A:11:51:3D:83:B4:2D X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/9b733dcf-9f5e-4775-9ce7-9dd525b44b86/1/33D2F1EAE44634CCF2B028FDCA2A11513D83B42D.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/33D2F1EAE44634CCF2B028FDCA2A11513D83B42D.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/9b733dcf-9f5e-4775-9ce7-9dd525b44b86/1/33D2F1EAE44634CCF2B028FDCA2A11513D83B42D.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 20:0f:0e:3d:e2:fd:30:5c:7d:a9:e4:4b:fa:ab:1a:e4:da:16: bc:9e:6f:33:32:9a:2d:7b:c9:3a:fe:1c:60:ca:b1:a1:5e:79: aa:6f:60:cb:7e:4b:14:0f:cf:9c:76:3b:f8:99:a9:46:31:ef: 0c:8d:5c:5a:07:54:3f:10:3e:3d:f6:08:4c:49:88:c9:90:7d: c5:2d:70:27:91:51:49:ef:5a:3c:9c:e8:54:91:ae:5f:06:9e: 5f:0e:ec:73:46:9e:f9:58:26:52:50:64:d9:26:ad:90:ee:f9: 16:7f:bd:1e:de:31:9e:19:f2:7d:c7:42:be:b5:25:ef:d3:bc: ff:03:1d:a7:5a:ed:8d:67:5f:a6:b3:c3:81:59:3d:51:56:88: 80:eb:fb:e5:7b:7f:84:38:3b:bb:6f:ca:a1:d6:76:e5:4e:e8: 4f:d8:d6:70:7f:03:f3:f7:8c:87:34:b0:0a:c9:77:20:13:65: 0f:ba:b9:f4:a5:13:02:3f:43:72:f4:2b:0d:1b:d4:d9:74:b4: 59:f9:67:0b:e1:9f:b4:8f:61:81:b6:26:f8:ae:46:ff:39:d3: 62:8d:0f:fd:40:2c:13:6e:7b:73:b0:b2:72:ce:d5:6e:a6:69: ca:7c:a2:58:80:4c:81:77:b6:54:9c:08:47:c1:4c:f8:85:c8: 77:48:c0:27 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUZ/eBR5qC/Amn4030HEkNmHyeZlUwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMzNEMkYxRUFFNDQ2MzRDQ0YyQjAyOEZEQ0EyQTExNTEz RDgzQjQyRDAeFw0yNjAxMjQwMDA3MzVaFw0yNjAxMjcwNTIzMzVaMDMxMTAvBgNV BAMTKEM1RTFBQTEyM0ZDNTU5RDAzRTZGMzQ2MzE2QzI1NjY4REE3RDcxM0EwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDQHqTjQ7LTvID//EPC/05YxX2R PY7CD8BFc+67jRHeGYqNeN46ZhH6xylLJ6wRhLV+e0XBgTJQbu6iM+d9Z/ur+9+W MLUV8XgZ7VmeR3hiQwYKH1mZ61d7qFcNrUzD1Ijkc5ETDIgZv6hK/Du+TsjbluWq MCShkW2w8QAAtK421xKSGm6WwpgRLPTZDuv/e8WajrBOZNcnRnFhTRf+h7B16OjG knUEEQiwWA+2duscG5GVrhQLgEo1S366sfnetjPQtq4vA40i01McEJrrQ7ltUWzM n9ZhbhyB+lHLs4BGxM1iWE6/d7El/Ic+fBM7M2EI2EcQS3RNBb7N67YdcBhJAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUxeGqEj/FWdA+bzRjFsJWaNp9cTowHwYDVR0j BBgwFoAUM9Lx6uRGNMzysCj9yioRUT2DtC0wDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby85 YjczM2RjZi05ZjVlLTQ3NzUtOWNlNy05ZGQ1MjViNDRiODYvMS8zM0QyRjFFQUU0 NDYzNENDRjJCMDI4RkRDQTJBMTE1MTNEODNCNDJELmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvMzNEMkYxRUFFNDQ2MzRDQ0YyQjAyOEZEQ0EyQTExNTEzRDgz QjQyRC5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vOWI3MzNkY2YtOWY1ZS00Nzc1LTlj ZTctOWRkNTI1YjQ0Yjg2LzEvMzNEMkYxRUFFNDQ2MzRDQ0YyQjAyOEZEQ0EyQTEx NTEzRDgzQjQyRC5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBACAPDj3i/TBcfankS/qrGuTaFryebzMymi17 yTr+HGDKsaFeeapvYMt+SxQPz5x2O/iZqUYx7wyNXFoHVD8QPj32CExJiMmQfcUt cCeRUUnvWjyc6FSRrl8Gnl8O7HNGnvlYJlJQZNkmrZDu+RZ/vR7eMZ4Z8n3HQr61 Je/TvP8DHada7Y1nX6azw4FZPVFWiIDr++V7f4Q4O7tvyqHWduVO6E/Y1nB/A/P3 jIc0sArJdyATZQ+6ufSlEwI/Q3L0Kw0b1Nl0tFn5Zwvhn7SPYYG2JviuRv8502KN D/1ALBNue3OwsnLO1W6macp8oliATIF3tlScCEfBTPiFyHdIwCc= -----END CERTIFICATE-----Generated at Mon Jan 26 01:13:48 2026 by rpki-client