This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf repo-rpki.idnic.net/repo/a062111d-0a13-4407-af33-34c22a9d7aec/0/7033B8C0DC6A80E5CC4686B93BA393AFCE571B42.mft File: 7033B8C0DC6A80E5CC4686B93BA393AFCE571B42.mft (raw, json) Hash identifier: B9aZBEjSbgHRkSE9tueBIGmYb2v89PwJw2jy4dcUbIo= Subject key identifier: 98:8D:A9:72:A9:CD:20:69:A8:92:C9:C4:66:57:82:19:0F:D0:FD:23 Authority key identifier: 70:33:B8:C0:DC:6A:80:E5:CC:46:86:B9:3B:A3:93:AF:CE:57:1B:42 Certificate issuer: /CN=7033B8C0DC6A80E5CC4686B93BA393AFCE571B42 Certificate serial: 0F1A411E4DECBABB57D308F1253045C499FF4E95 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/7033B8C0DC6A80E5CC4686B93BA393AFCE571B42.cer Subject info access: rsync://repo-rpki.idnic.net/repo/a062111d-0a13-4407-af33-34c22a9d7aec/0/7033B8C0DC6A80E5CC4686B93BA393AFCE571B42.mft Manifest number: 88 Signing time: Sun 25 Jan 2026 05:21:34 +0000 Manifest this update: Sun 25 Jan 2026 05:16:34 +0000 Manifest next update: Wed 28 Jan 2026 10:28:34 +0000 Files and hashes: 1: 7033B8C0DC6A80E5CC4686B93BA393AFCE571B42.crl (hash: uSPy6vC89x2CiywPSvwUYZfhUyXPNLOpaui+orA6me0=) 2: 3130332e31372e37362e302f32332d3233203d3e20313331373831.roa (hash: D+JQCz3+j+wwVLgvW5xdKrECzq+QJKVH4ZaDUGKOTUY=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/a062111d-0a13-4407-af33-34c22a9d7aec/0/7033B8C0DC6A80E5CC4686B93BA393AFCE571B42.crl rsync://repo-rpki.idnic.net/repo/a062111d-0a13-4407-af33-34c22a9d7aec/0/7033B8C0DC6A80E5CC4686B93BA393AFCE571B42.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/7033B8C0DC6A80E5CC4686B93BA393AFCE571B42.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 28 Jan 2026 10:28:34 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 0f:1a:41:1e:4d:ec:ba:bb:57:d3:08:f1:25:30:45:c4:99:ff:4e:95 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=7033B8C0DC6A80E5CC4686B93BA393AFCE571B42 Validity Not Before: Jan 25 05:16:34 2026 GMT Not After : Jan 28 10:28:34 2026 GMT Subject: CN=988DA972A9CD2069A892C9C4665782190FD0FD23 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e6:5a:cc:77:28:65:39:ba:f0:e1:d3:e6:b6:5a: e8:7b:f8:64:8e:bc:b6:91:5f:9f:42:09:26:0f:03: a1:46:73:54:fc:1e:91:b9:7b:5f:1b:68:98:9c:37: 87:47:3d:cc:57:4e:06:a8:2d:75:5e:cb:1f:e9:b5: e2:f5:ff:e4:2d:f5:68:85:f5:9b:e6:b8:33:79:88: c5:f1:ac:1d:2e:d6:a3:c8:bd:96:ef:c9:de:85:60: 74:72:35:ba:06:7a:e5:fc:67:4d:c9:f6:ec:92:41: 61:f9:cc:26:3d:f0:6a:a2:50:e7:31:32:2d:3c:d4: c1:d8:e1:00:5d:99:df:7d:b0:d4:ac:95:e3:6b:cf: 3a:37:ca:b6:4e:30:5f:98:4f:e2:82:1f:1a:ae:d4: 30:dc:60:2b:15:db:c9:a9:22:9b:e9:d3:4e:c6:02: 69:e9:43:b5:e8:77:69:1f:6e:52:b5:17:e7:0c:15: ae:fe:83:3a:72:2d:04:3b:3e:2f:9d:b8:6a:10:8c: 23:b0:e7:15:dd:d9:46:3e:64:a7:73:72:2c:67:36: 4c:fe:1a:1f:f0:8f:ae:f9:e1:66:ca:86:23:55:d7: b4:bd:10:79:4c:07:d1:05:90:94:3f:f4:e6:70:88: 4f:d4:58:56:71:a4:07:98:99:6a:d1:cd:01:78:bc: 27:6b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 98:8D:A9:72:A9:CD:20:69:A8:92:C9:C4:66:57:82:19:0F:D0:FD:23 X509v3 Authority Key Identifier: keyid:70:33:B8:C0:DC:6A:80:E5:CC:46:86:B9:3B:A3:93:AF:CE:57:1B:42 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/a062111d-0a13-4407-af33-34c22a9d7aec/0/7033B8C0DC6A80E5CC4686B93BA393AFCE571B42.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/7033B8C0DC6A80E5CC4686B93BA393AFCE571B42.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/a062111d-0a13-4407-af33-34c22a9d7aec/0/7033B8C0DC6A80E5CC4686B93BA393AFCE571B42.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 05:ee:b0:c8:b2:e0:19:0b:8e:23:de:8d:65:bb:a7:36:2e:e6: c5:33:12:ff:d6:0a:41:ee:9f:60:5f:37:e2:b3:61:f4:82:2c: 6d:91:e4:df:08:5d:90:e1:ec:8c:c4:3e:83:0e:70:5b:2f:e5: 9c:26:63:bf:49:97:2f:cd:bc:66:e2:da:c7:a7:ca:a0:2a:2a: a3:83:ca:2f:8b:ff:e6:92:b3:2f:64:da:c3:eb:8a:ae:92:5a: dd:9c:bd:f9:44:bb:62:39:c5:c5:b0:f5:3c:7e:13:12:b7:8a: f1:95:10:c5:7e:93:2c:ce:ca:68:6c:28:36:36:88:30:28:2d: 19:c3:2e:17:75:73:07:d1:b2:e6:02:ff:3a:a5:c4:6f:5f:64: 90:9b:d0:a9:57:90:c9:e4:30:5f:5b:77:0a:ad:60:6e:57:26: 73:ee:0c:f6:cb:0c:52:26:a5:fc:68:ca:aa:c8:2a:1c:65:5f: 81:f7:a7:fe:5f:7d:a0:93:95:79:eb:cd:c6:0f:bf:0b:e1:92: f1:d0:80:54:ba:cb:29:9a:93:20:f1:1d:f5:2b:94:ed:0b:cc: 5e:f2:43:81:e2:58:04:ab:68:87:f8:d5:14:3e:da:c8:c1:55: 76:8e:83:97:cd:d8:77:09:80:c7:7a:6e:5a:c7:2c:88:1a:53: 0f:f2:e5:ff -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUDxpBHk3surtX0wjxJTBFxJn/TpUwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoNzAzM0I4QzBEQzZBODBFNUNDNDY4NkI5M0JBMzkzQUZD RTU3MUI0MjAeFw0yNjAxMjUwNTE2MzRaFw0yNjAxMjgxMDI4MzRaMDMxMTAvBgNV BAMTKDk4OERBOTcyQTlDRDIwNjlBODkyQzlDNDY2NTc4MjE5MEZEMEZEMjMwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDmWsx3KGU5uvDh0+a2Wuh7+GSO vLaRX59CCSYPA6FGc1T8HpG5e18baJicN4dHPcxXTgaoLXVeyx/pteL1/+Qt9WiF 9ZvmuDN5iMXxrB0u1qPIvZbvyd6FYHRyNboGeuX8Z03J9uySQWH5zCY98GqiUOcx Mi081MHY4QBdmd99sNSsleNrzzo3yrZOMF+YT+KCHxqu1DDcYCsV28mpIpvp007G AmnpQ7Xod2kfblK1F+cMFa7+gzpyLQQ7Pi+duGoQjCOw5xXd2UY+ZKdzcixnNkz+ Gh/wj6754WbKhiNV17S9EHlMB9EFkJQ/9OZwiE/UWFZxpAeYmWrRzQF4vCdrAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUmI2pcqnNIGmoksnEZleCGQ/Q/SMwHwYDVR0j BBgwFoAUcDO4wNxqgOXMRoa5O6OTr85XG0IwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby9h MDYyMTExZC0wYTEzLTQ0MDctYWYzMy0zNGMyMmE5ZDdhZWMvMC83MDMzQjhDMERD NkE4MEU1Q0M0Njg2QjkzQkEzOTNBRkNFNTcxQjQyLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvNzAzM0I4QzBEQzZBODBFNUNDNDY4NkI5M0JBMzkzQUZDRTU3 MUI0Mi5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vYTA2MjExMWQtMGExMy00NDA3LWFm MzMtMzRjMjJhOWQ3YWVjLzAvNzAzM0I4QzBEQzZBODBFNUNDNDY4NkI5M0JBMzkz QUZDRTU3MUI0Mi5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAAXusMiy4BkLjiPejWW7pzYu5sUzEv/WCkHu n2BfN+KzYfSCLG2R5N8IXZDh7IzEPoMOcFsv5ZwmY79Jly/NvGbi2senyqAqKqOD yi+L/+aSsy9k2sPriq6SWt2cvflEu2I5xcWw9Tx+ExK3ivGVEMV+kyzOymhsKDY2 iDAoLRnDLhd1cwfRsuYC/zqlxG9fZJCb0KlXkMnkMF9bdwqtYG5XJnPuDPbLDFIm pfxoyqrIKhxlX4H3p/5ffaCTlXnrzcYPvwvhkvHQgFS6yymakyDxHfUrlO0LzF7y Q4HiWASraIf41RQ+2sjBVXaOg5fN2HcJgMd6blrHLIgaUw/y5f8= -----END CERTIFICATE-----Generated at Sun Jan 25 20:37:12 2026 by rpki-client