This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf repo-rpki.idnic.net/repo/a062111d-0a13-4407-af33-34c22a9d7aec/0/7033B8C0DC6A80E5CC4686B93BA393AFCE571B42.mft File: 7033B8C0DC6A80E5CC4686B93BA393AFCE571B42.mft (raw, json) Hash identifier: HoFuSYOYXUgWJudk2Je8P1ev3zq4N8YlGVSJv4oZCow= Subject key identifier: 41:60:09:C3:96:48:1A:BC:AC:C6:75:58:BA:FB:C0:BD:10:17:BA:79 Authority key identifier: 70:33:B8:C0:DC:6A:80:E5:CC:46:86:B9:3B:A3:93:AF:CE:57:1B:42 Certificate issuer: /CN=7033B8C0DC6A80E5CC4686B93BA393AFCE571B42 Certificate serial: 7CA6E7340E32734586691C01E39947726B51547D Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/7033B8C0DC6A80E5CC4686B93BA393AFCE571B42.cer Subject info access: rsync://repo-rpki.idnic.net/repo/a062111d-0a13-4407-af33-34c22a9d7aec/0/7033B8C0DC6A80E5CC4686B93BA393AFCE571B42.mft Manifest number: 72 Signing time: Sat 06 Dec 2025 04:11:32 +0000 Manifest this update: Sat 06 Dec 2025 04:06:32 +0000 Manifest next update: Tue 09 Dec 2025 14:29:32 +0000 Files and hashes: 1: 3130332e31372e37362e302f32332d3233203d3e20313331373831.roa (hash: D+JQCz3+j+wwVLgvW5xdKrECzq+QJKVH4ZaDUGKOTUY=) 2: 7033B8C0DC6A80E5CC4686B93BA393AFCE571B42.crl (hash: mHlRglhFOtijwco+ArJm8PYVkPiJC9/lZ4rZVYdI0Yg=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/a062111d-0a13-4407-af33-34c22a9d7aec/0/7033B8C0DC6A80E5CC4686B93BA393AFCE571B42.crl rsync://repo-rpki.idnic.net/repo/a062111d-0a13-4407-af33-34c22a9d7aec/0/7033B8C0DC6A80E5CC4686B93BA393AFCE571B42.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/7033B8C0DC6A80E5CC4686B93BA393AFCE571B42.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 09 Dec 2025 14:29:32 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 7c:a6:e7:34:0e:32:73:45:86:69:1c:01:e3:99:47:72:6b:51:54:7d Signature Algorithm: sha256WithRSAEncryption Issuer: CN=7033B8C0DC6A80E5CC4686B93BA393AFCE571B42 Validity Not Before: Dec 6 04:06:32 2025 GMT Not After : Dec 9 14:29:32 2025 GMT Subject: CN=416009C396481ABCACC67558BAFBC0BD1017BA79 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:de:8b:d6:39:c0:2d:9f:a7:6f:25:01:e3:b3:b4: 47:48:33:05:9f:19:3e:1b:51:62:c0:7b:0a:91:b0: a7:84:74:e4:67:84:49:0a:63:1d:ae:26:f2:cf:8b: d7:75:46:e0:50:aa:1d:6d:f5:31:9b:60:62:ed:01: 14:83:e5:9b:2d:b5:af:48:a5:fe:07:d7:e3:8b:84: 32:3d:ba:c2:7f:d3:e3:b4:9f:f4:87:7c:04:23:34: c6:4e:e3:2b:43:c2:9f:f3:c2:08:ed:03:37:07:3e: 16:57:d6:49:9f:26:36:d0:a8:10:7d:3d:b4:b0:c7: 67:65:17:db:2a:ec:91:fa:7a:55:fe:70:93:aa:5e: 84:d8:89:74:60:05:3e:3e:ab:0d:8a:2d:82:21:e8: 4e:fe:84:2e:63:b7:e6:d2:ab:52:5e:ab:f3:3a:4d: 8a:4b:bf:9a:3a:f2:49:1e:da:21:61:30:ed:13:22: eb:67:ba:cc:8c:d9:2b:bd:0d:50:07:ae:5f:57:0a: 87:6c:fe:a4:78:08:d9:bd:27:33:bb:f4:32:29:98: 6b:d5:10:b8:9e:a6:01:7c:4b:c2:e2:f4:d8:13:64: 04:fa:4d:b0:67:13:ca:a2:62:95:b6:5f:05:ef:70: 6d:ce:0d:bd:3e:59:44:e1:17:37:0a:d2:df:fa:b4: 97:11 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 41:60:09:C3:96:48:1A:BC:AC:C6:75:58:BA:FB:C0:BD:10:17:BA:79 X509v3 Authority Key Identifier: keyid:70:33:B8:C0:DC:6A:80:E5:CC:46:86:B9:3B:A3:93:AF:CE:57:1B:42 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/a062111d-0a13-4407-af33-34c22a9d7aec/0/7033B8C0DC6A80E5CC4686B93BA393AFCE571B42.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/7033B8C0DC6A80E5CC4686B93BA393AFCE571B42.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/a062111d-0a13-4407-af33-34c22a9d7aec/0/7033B8C0DC6A80E5CC4686B93BA393AFCE571B42.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 63:64:39:a4:95:c5:bb:c4:b5:3b:b8:74:ed:1e:2b:9e:c5:52: 84:59:c8:14:4b:12:e1:05:3a:7e:72:0e:6d:df:19:5e:9e:34: 4c:5d:72:0a:48:94:97:dd:1b:f6:70:79:a0:ea:9a:7d:bf:b6: 59:a3:76:73:5a:2f:5c:b6:fd:f1:b1:c2:d1:4a:53:e4:de:52: 85:48:0e:d9:59:8d:0e:52:1d:b6:2e:1d:07:73:32:84:77:69: 3c:b6:89:9f:03:32:9c:d9:c1:82:e4:03:22:29:2d:da:aa:98: 66:94:1e:b0:c6:47:3a:c8:60:af:3b:b0:00:bd:54:ea:0c:b4: 09:ee:34:64:53:2a:e6:20:37:18:1d:dc:a2:15:f0:7e:c4:0f: 25:6c:e7:eb:ec:e9:b2:85:94:60:ee:87:90:a8:da:8f:e8:3d: d9:29:bb:4c:10:ed:eb:53:32:32:d5:9f:55:62:76:bb:a6:95: c2:94:b1:5b:1a:b3:42:a2:aa:2e:0e:d5:f3:da:d9:a6:35:d3: df:2c:f3:3b:ff:2a:22:9c:3d:37:95:35:72:56:2b:f3:82:b8: 6a:f3:a4:2d:8f:f1:43:2d:e8:5b:ba:7b:c8:61:59:4e:59:38: 50:2d:8a:30:cf:e9:f7:03:bc:86:22:df:f5:64:ea:93:13:9a: 4a:0f:96:74 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUfKbnNA4yc0WGaRwB45lHcmtRVH0wDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoNzAzM0I4QzBEQzZBODBFNUNDNDY4NkI5M0JBMzkzQUZD RTU3MUI0MjAeFw0yNTEyMDYwNDA2MzJaFw0yNTEyMDkxNDI5MzJaMDMxMTAvBgNV BAMTKDQxNjAwOUMzOTY0ODFBQkNBQ0M2NzU1OEJBRkJDMEJEMTAxN0JBNzkwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDei9Y5wC2fp28lAeOztEdIMwWf GT4bUWLAewqRsKeEdORnhEkKYx2uJvLPi9d1RuBQqh1t9TGbYGLtARSD5Zstta9I pf4H1+OLhDI9usJ/0+O0n/SHfAQjNMZO4ytDwp/zwgjtAzcHPhZX1kmfJjbQqBB9 PbSwx2dlF9sq7JH6elX+cJOqXoTYiXRgBT4+qw2KLYIh6E7+hC5jt+bSq1Jeq/M6 TYpLv5o68kke2iFhMO0TIutnusyM2Su9DVAHrl9XCods/qR4CNm9JzO79DIpmGvV ELiepgF8S8Li9NgTZAT6TbBnE8qiYpW2XwXvcG3ODb0+WUThFzcK0t/6tJcRAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUQWAJw5ZIGrysxnVYuvvAvRAXunkwHwYDVR0j BBgwFoAUcDO4wNxqgOXMRoa5O6OTr85XG0IwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby9h MDYyMTExZC0wYTEzLTQ0MDctYWYzMy0zNGMyMmE5ZDdhZWMvMC83MDMzQjhDMERD NkE4MEU1Q0M0Njg2QjkzQkEzOTNBRkNFNTcxQjQyLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvNzAzM0I4QzBEQzZBODBFNUNDNDY4NkI5M0JBMzkzQUZDRTU3 MUI0Mi5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vYTA2MjExMWQtMGExMy00NDA3LWFm MzMtMzRjMjJhOWQ3YWVjLzAvNzAzM0I4QzBEQzZBODBFNUNDNDY4NkI5M0JBMzkz QUZDRTU3MUI0Mi5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAGNkOaSVxbvEtTu4dO0eK57FUoRZyBRLEuEF On5yDm3fGV6eNExdcgpIlJfdG/ZweaDqmn2/tlmjdnNaL1y2/fGxwtFKU+TeUoVI DtlZjQ5SHbYuHQdzMoR3aTy2iZ8DMpzZwYLkAyIpLdqqmGaUHrDGRzrIYK87sAC9 VOoMtAnuNGRTKuYgNxgd3KIV8H7EDyVs5+vs6bKFlGDuh5Co2o/oPdkpu0wQ7etT MjLVn1VidrumlcKUsVsas0Kiqi4O1fPa2aY1098s8zv/KiKcPTeVNXJWK/OCuGrz pC2P8UMt6Fu6e8hhWU5ZOFAtijDP6fcDvIYi3/Vk6pMTmkoPlnQ= -----END CERTIFICATE-----Generated at Sat Dec 6 23:51:30 2025 by rpki-client