This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf repo-rpki.idnic.net/repo/03ade9c0-cde1-47f0-9cd2-4a57bdde14e8/0/33EF8ED81E12A39E325D47325D8FDA76CC497040.mft File: 33EF8ED81E12A39E325D47325D8FDA76CC497040.mft (raw, json) Hash identifier: zJhl38Fc/ZmWVW+ynkK6tasp/x6G26SQh+jM4VZG0gA= Subject key identifier: CB:81:6F:9B:FC:31:A8:6B:8C:88:76:D1:04:88:60:BA:57:5B:5E:2D Authority key identifier: 33:EF:8E:D8:1E:12:A3:9E:32:5D:47:32:5D:8F:DA:76:CC:49:70:40 Certificate issuer: /CN=33EF8ED81E12A39E325D47325D8FDA76CC497040 Certificate serial: 7BCEBCF83D944FEC982394E766FB133AC528B86B Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/33EF8ED81E12A39E325D47325D8FDA76CC497040.cer Subject info access: rsync://repo-rpki.idnic.net/repo/03ade9c0-cde1-47f0-9cd2-4a57bdde14e8/0/33EF8ED81E12A39E325D47325D8FDA76CC497040.mft Manifest number: 023C Signing time: Sat 31 Jan 2026 16:01:59 +0000 Manifest this update: Sat 31 Jan 2026 15:56:59 +0000 Manifest next update: Wed 04 Feb 2026 01:05:59 +0000 Files and hashes: 1: 33EF8ED81E12A39E325D47325D8FDA76CC497040.crl (hash: 2E5Acwh1lgRGXr2VvfVBueSiuV1K5RIHTUQ892WOxRU=) 2: 3130332e3138382e3136382e302f32342d3234203d3e20313439373235.roa (hash: 2Vcw1BQIrq+euE8oM1Q4TIy+/+OqP6RefIW+9ae0TaY=) 3: 3130332e3138382e3136392e302f32342d3234203d3e203538383231.roa (hash: vv/vovF/hb4Z1SuWQuWHcDR4S/nQChh3Okt6YN7Aqwg=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/03ade9c0-cde1-47f0-9cd2-4a57bdde14e8/0/33EF8ED81E12A39E325D47325D8FDA76CC497040.crl rsync://repo-rpki.idnic.net/repo/03ade9c0-cde1-47f0-9cd2-4a57bdde14e8/0/33EF8ED81E12A39E325D47325D8FDA76CC497040.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/33EF8ED81E12A39E325D47325D8FDA76CC497040.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 04 Feb 2026 01:05:59 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 7b:ce:bc:f8:3d:94:4f:ec:98:23:94:e7:66:fb:13:3a:c5:28:b8:6b Signature Algorithm: sha256WithRSAEncryption Issuer: CN=33EF8ED81E12A39E325D47325D8FDA76CC497040 Validity Not Before: Jan 31 15:56:59 2026 GMT Not After : Feb 4 01:05:59 2026 GMT Subject: CN=CB816F9BFC31A86B8C8876D1048860BA575B5E2D Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b4:f3:1a:9d:2d:9a:1c:0c:f5:9e:29:5c:9e:9b: 9e:8a:8d:47:08:02:c3:32:e9:67:13:5f:cb:81:35: 47:4b:94:57:f5:72:95:f1:98:d3:a5:89:f5:e5:f7: 3d:95:5e:4f:5d:62:1c:fb:4e:23:d9:70:54:de:98: 7e:6f:16:96:35:36:39:fb:bb:c8:a9:bc:22:d4:26: 25:6f:f4:6f:3e:42:96:ac:15:4f:1c:16:25:0c:3c: 27:87:5e:d9:08:7e:1b:9c:12:88:a2:88:27:dd:97: 13:35:47:78:fd:bb:0a:db:14:61:76:19:e7:cb:3e: a9:38:2f:5e:5e:0b:4d:18:10:16:65:bb:e4:ff:47: c4:f7:b7:b2:8b:c0:e9:5a:eb:45:99:65:45:1f:36: 4c:eb:4f:26:7e:06:1d:64:6f:95:bd:42:0e:b7:07: 3f:f2:d1:2d:9c:23:67:b6:d2:59:c1:b1:9b:48:11: 9f:f5:2e:ec:cf:e9:ff:c9:f8:26:7c:2d:c6:11:42: 62:b7:69:2f:8f:7e:d9:0f:cd:b4:55:3f:24:5b:19: f2:4f:70:6b:14:95:91:1d:76:81:96:05:e2:a9:ae: 10:de:f3:e2:b6:7a:0c:a8:37:56:18:b0:a0:35:a1: 45:55:64:21:b7:41:d0:7d:3c:8c:35:f7:4c:56:61: 5d:e7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: CB:81:6F:9B:FC:31:A8:6B:8C:88:76:D1:04:88:60:BA:57:5B:5E:2D X509v3 Authority Key Identifier: keyid:33:EF:8E:D8:1E:12:A3:9E:32:5D:47:32:5D:8F:DA:76:CC:49:70:40 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/03ade9c0-cde1-47f0-9cd2-4a57bdde14e8/0/33EF8ED81E12A39E325D47325D8FDA76CC497040.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/33EF8ED81E12A39E325D47325D8FDA76CC497040.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/03ade9c0-cde1-47f0-9cd2-4a57bdde14e8/0/33EF8ED81E12A39E325D47325D8FDA76CC497040.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 7c:3a:77:b7:29:e8:a5:5f:87:ea:36:e0:ec:e3:67:f4:7f:08: a8:87:55:a4:5e:d6:dc:a4:ad:89:7f:08:20:63:74:9f:fc:51: 71:3f:08:6b:fa:ae:08:79:6e:3a:df:fc:5d:89:63:25:4e:16: 15:b0:35:18:91:88:f6:85:80:7a:95:ee:41:d1:12:70:56:4d: ba:17:ff:76:4e:b8:a9:5d:e5:1f:35:44:4b:c9:c8:5a:89:54: 02:90:f3:c8:09:5c:d7:66:c2:cd:a5:b9:48:fd:59:5f:05:2c: a7:f8:35:18:44:c3:23:55:06:d7:62:5f:64:f4:2c:5e:e9:eb: 11:6f:19:78:62:24:ad:db:ba:ad:d4:f9:4d:9e:95:5a:cb:7e: 0d:4c:96:59:79:7f:7d:7d:86:db:2b:a5:ea:7f:dd:cd:6c:ec: 5d:f1:90:b5:d9:f3:b2:c6:2e:c8:20:50:6f:6a:8b:03:07:e9: 4a:1e:88:ed:c1:bf:b4:3e:12:21:2a:fe:45:a7:7d:a1:b8:e8: 61:0f:86:c0:3f:28:f5:94:98:b9:53:a6:7d:b0:44:30:3a:85: f1:ef:aa:ac:3c:df:4f:27:88:91:64:1a:29:1d:81:c5:c8:29: 10:2a:d7:91:01:55:b5:89:c6:f8:09:3e:78:50:3f:60:ea:d5: 24:b7:d3:90 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUe868+D2UT+yYI5TnZvsTOsUouGswDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMzNFRjhFRDgxRTEyQTM5RTMyNUQ0NzMyNUQ4RkRBNzZD QzQ5NzA0MDAeFw0yNjAxMzExNTU2NTlaFw0yNjAyMDQwMTA1NTlaMDMxMTAvBgNV BAMTKENCODE2RjlCRkMzMUE4NkI4Qzg4NzZEMTA0ODg2MEJBNTc1QjVFMkQwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC08xqdLZocDPWeKVyem56KjUcI AsMy6WcTX8uBNUdLlFf1cpXxmNOlifXl9z2VXk9dYhz7TiPZcFTemH5vFpY1Njn7 u8ipvCLUJiVv9G8+QpasFU8cFiUMPCeHXtkIfhucEoiiiCfdlxM1R3j9uwrbFGF2 GefLPqk4L15eC00YEBZlu+T/R8T3t7KLwOla60WZZUUfNkzrTyZ+Bh1kb5W9Qg63 Bz/y0S2cI2e20lnBsZtIEZ/1LuzP6f/J+CZ8LcYRQmK3aS+PftkPzbRVPyRbGfJP cGsUlZEddoGWBeKprhDe8+K2egyoN1YYsKA1oUVVZCG3QdB9PIw190xWYV3nAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUy4Fvm/wxqGuMiHbRBIhguldbXi0wHwYDVR0j BBgwFoAUM++O2B4So54yXUcyXY/adsxJcEAwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby8w M2FkZTljMC1jZGUxLTQ3ZjAtOWNkMi00YTU3YmRkZTE0ZTgvMC8zM0VGOEVEODFF MTJBMzlFMzI1RDQ3MzI1RDhGREE3NkNDNDk3MDQwLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvMzNFRjhFRDgxRTEyQTM5RTMyNUQ0NzMyNUQ4RkRBNzZDQzQ5 NzA0MC5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vMDNhZGU5YzAtY2RlMS00N2YwLTlj ZDItNGE1N2JkZGUxNGU4LzAvMzNFRjhFRDgxRTEyQTM5RTMyNUQ0NzMyNUQ4RkRB NzZDQzQ5NzA0MC5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAHw6d7cp6KVfh+o24OzjZ/R/CKiHVaRe1tyk rYl/CCBjdJ/8UXE/CGv6rgh5bjrf/F2JYyVOFhWwNRiRiPaFgHqV7kHREnBWTboX /3ZOuKld5R81REvJyFqJVAKQ88gJXNdmws2luUj9WV8FLKf4NRhEwyNVBtdiX2T0 LF7p6xFvGXhiJK3buq3U+U2elVrLfg1Mlll5f319htsrpep/3c1s7F3xkLXZ87LG LsggUG9qiwMH6UoeiO3Bv7Q+EiEq/kWnfaG46GEPhsA/KPWUmLlTpn2wRDA6hfHv qqw8308niJFkGikdgcXIKRAq15EBVbWJxvgJPnhQP2Dq1SS305A= -----END CERTIFICATE-----Generated at Mon Feb 2 09:43:31 2026 by rpki-client