This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf repo-rpki.idnic.net/repo/07c8a0c3-37f5-4667-a430-6fa111d343aa/0/7433AB64571BE1827F0BC97ED291976B6E3429FA.mft File: 7433AB64571BE1827F0BC97ED291976B6E3429FA.mft (raw, json) Hash identifier: qym8e2poVHXYotm0B0zwrypZJ+pJ+rUPYCOuztntsgk= Subject key identifier: CF:35:38:85:5A:1D:F0:02:34:4E:78:B9:9E:2D:CD:59:24:28:34:9A Authority key identifier: 74:33:AB:64:57:1B:E1:82:7F:0B:C9:7E:D2:91:97:6B:6E:34:29:FA Certificate issuer: /CN=7433AB64571BE1827F0BC97ED291976B6E3429FA Certificate serial: 5D88B534DCE93D73DC5DB0DAF6D460E0028F1373 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/7433AB64571BE1827F0BC97ED291976B6E3429FA.cer Subject info access: rsync://repo-rpki.idnic.net/repo/07c8a0c3-37f5-4667-a430-6fa111d343aa/0/7433AB64571BE1827F0BC97ED291976B6E3429FA.mft Manifest number: 01E2 Signing time: Sat 31 Jan 2026 14:42:25 +0000 Manifest this update: Sat 31 Jan 2026 14:37:25 +0000 Manifest next update: Tue 03 Feb 2026 16:22:25 +0000 Files and hashes: 1: 3130332e37352e36322e302f32342d3234203d3e20313530353339.roa (hash: U3QvM9qWK+TJhBGDojanDKA8oPNCYIB5ZhNuA/z08gw=) 2: 3130332e37352e36322e302f32332d3234203d3e20313530353339.roa (hash: 96CJnoxRV4HGvhsn3PFsL8qIqJQvuSs5NCO8lzcHZm0=) 3: 3130332e37352e36332e302f32342d3234203d3e20313530353339.roa (hash: OMSstG+v7qZjFWCJ4NvuRl4cKaVI80js4sry1SoLSN0=) 4: 7433AB64571BE1827F0BC97ED291976B6E3429FA.crl (hash: lMI2mpvVUx+MNgX1ZHHzwd6MEgDSDDnHav7wS3Kj/ow=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/07c8a0c3-37f5-4667-a430-6fa111d343aa/0/7433AB64571BE1827F0BC97ED291976B6E3429FA.crl rsync://repo-rpki.idnic.net/repo/07c8a0c3-37f5-4667-a430-6fa111d343aa/0/7433AB64571BE1827F0BC97ED291976B6E3429FA.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/7433AB64571BE1827F0BC97ED291976B6E3429FA.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 03 Feb 2026 16:22:25 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 5d:88:b5:34:dc:e9:3d:73:dc:5d:b0:da:f6:d4:60:e0:02:8f:13:73 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=7433AB64571BE1827F0BC97ED291976B6E3429FA Validity Not Before: Jan 31 14:37:25 2026 GMT Not After : Feb 3 16:22:25 2026 GMT Subject: CN=CF3538855A1DF002344E78B99E2DCD592428349A Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b4:8f:f3:d7:b0:15:f4:ae:84:cc:c7:84:18:aa: 37:bf:ce:72:f2:65:3c:6d:23:ee:fe:e5:00:16:ea: 5a:1c:26:8f:6e:8d:6e:75:f9:77:18:bd:9a:47:a6: b9:f7:f4:5e:83:d1:b1:0c:bf:ce:78:a4:13:cc:d1: 81:5a:bb:0a:4a:36:dc:7c:f5:b1:69:21:c3:bf:5a: 27:f8:a1:da:18:d2:b8:1a:9b:ce:7e:a0:66:9b:a0: ff:b1:39:8d:10:a5:9d:df:1d:41:be:99:88:23:a7: 68:54:1b:9a:71:4e:e4:f1:f3:a3:e7:a9:b2:af:c4: 80:5c:83:36:84:f0:99:bd:dc:cc:35:3b:41:25:e7: bf:96:36:27:cc:10:8d:c8:ce:6d:fe:50:3c:f6:d7: 54:64:85:21:13:88:6a:9c:25:27:c6:8b:11:22:47: 09:85:20:0b:3b:46:57:13:4e:19:5b:7c:2c:73:01: 21:ed:68:b1:a8:cb:53:04:91:5a:f6:62:64:05:9a: 36:2b:ad:6d:71:b9:0e:8f:0f:67:82:57:e0:5f:f4: ba:07:22:c7:22:16:4e:8c:87:3a:a8:22:eb:8e:41: 7b:74:25:06:e6:9f:87:4c:47:3d:2d:e1:66:a6:72: 06:44:35:d1:22:13:3f:86:97:e8:5e:77:99:ec:fd: 5f:fd Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: CF:35:38:85:5A:1D:F0:02:34:4E:78:B9:9E:2D:CD:59:24:28:34:9A X509v3 Authority Key Identifier: keyid:74:33:AB:64:57:1B:E1:82:7F:0B:C9:7E:D2:91:97:6B:6E:34:29:FA X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/07c8a0c3-37f5-4667-a430-6fa111d343aa/0/7433AB64571BE1827F0BC97ED291976B6E3429FA.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/7433AB64571BE1827F0BC97ED291976B6E3429FA.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/07c8a0c3-37f5-4667-a430-6fa111d343aa/0/7433AB64571BE1827F0BC97ED291976B6E3429FA.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 2b:f6:e8:52:f9:d8:d0:9a:33:cb:78:66:03:31:8d:ed:9f:24: 28:3e:6e:5e:b6:b6:91:e9:d3:72:0c:2e:b1:14:15:6d:37:f3: 82:25:d7:6c:33:17:d5:a8:f0:fc:3f:3d:07:33:49:92:34:83: d2:ba:cd:a8:91:3d:b8:bb:e1:22:ee:8b:a3:3e:22:55:d1:94: 3e:2e:00:9c:1b:ee:a5:45:d5:58:bd:94:08:19:b7:c1:2b:7e: 06:91:57:9b:da:61:35:ec:6f:10:35:57:10:cc:60:5b:d0:a5: 67:08:79:ad:bd:f3:29:9f:8a:21:0b:18:8d:09:b5:fa:47:87: 06:4b:0c:55:a5:bf:66:e8:bc:93:ce:b6:32:a1:b3:4b:1b:66: c6:80:c9:c2:4c:5a:1c:87:d2:02:1b:1c:76:bb:85:12:0a:c5: 98:f6:92:f1:7b:bb:4c:52:10:1e:12:77:63:60:d2:6c:58:49: ae:ab:67:1c:18:db:60:80:e6:9a:bd:0b:9e:ca:6e:d0:dc:61: e6:53:0a:bd:ae:c1:21:16:aa:17:ef:63:15:f2:ed:c9:1a:37: 95:b6:8c:5a:b6:e9:9e:ea:d2:17:7f:fd:a4:65:82:6f:7f:dd: 3f:d9:b4:cf:d2:89:12:ee:6b:19:ee:7f:e8:bb:0b:bd:44:99: ee:8f:df:6d -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUXYi1NNzpPXPcXbDa9tRg4AKPE3MwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoNzQzM0FCNjQ1NzFCRTE4MjdGMEJDOTdFRDI5MTk3NkI2 RTM0MjlGQTAeFw0yNjAxMzExNDM3MjVaFw0yNjAyMDMxNjIyMjVaMDMxMTAvBgNV BAMTKENGMzUzODg1NUExREYwMDIzNDRFNzhCOTlFMkRDRDU5MjQyODM0OUEwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC0j/PXsBX0roTMx4QYqje/znLy ZTxtI+7+5QAW6locJo9ujW51+XcYvZpHprn39F6D0bEMv854pBPM0YFauwpKNtx8 9bFpIcO/Wif4odoY0rgam85+oGaboP+xOY0QpZ3fHUG+mYgjp2hUG5pxTuTx86Pn qbKvxIBcgzaE8Jm93Mw1O0El57+WNifMEI3Izm3+UDz211RkhSETiGqcJSfGixEi RwmFIAs7RlcTThlbfCxzASHtaLGoy1MEkVr2YmQFmjYrrW1xuQ6PD2eCV+Bf9LoH IsciFk6MhzqoIuuOQXt0JQbmn4dMRz0t4WamcgZENdEiEz+Gl+hed5ns/V/9AgMB AAGjggI8MIICODAdBgNVHQ4EFgQUzzU4hVod8AI0Tni5ni3NWSQoNJowHwYDVR0j BBgwFoAUdDOrZFcb4YJ/C8l+0pGXa240KfowDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby8w N2M4YTBjMy0zN2Y1LTQ2NjctYTQzMC02ZmExMTFkMzQzYWEvMC83NDMzQUI2NDU3 MUJFMTgyN0YwQkM5N0VEMjkxOTc2QjZFMzQyOUZBLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvNzQzM0FCNjQ1NzFCRTE4MjdGMEJDOTdFRDI5MTk3NkI2RTM0 MjlGQS5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vMDdjOGEwYzMtMzdmNS00NjY3LWE0 MzAtNmZhMTExZDM0M2FhLzAvNzQzM0FCNjQ1NzFCRTE4MjdGMEJDOTdFRDI5MTk3 NkI2RTM0MjlGQS5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBACv26FL52NCaM8t4ZgMxje2fJCg+bl62tpHp 03IMLrEUFW0384Il12wzF9Wo8Pw/PQczSZI0g9K6zaiRPbi74SLui6M+IlXRlD4u AJwb7qVF1Vi9lAgZt8ErfgaRV5vaYTXsbxA1VxDMYFvQpWcIea298ymfiiELGI0J tfpHhwZLDFWlv2bovJPOtjKhs0sbZsaAycJMWhyH0gIbHHa7hRIKxZj2kvF7u0xS EB4Sd2Ng0mxYSa6rZxwY22CA5pq9C57KbtDcYeZTCr2uwSEWqhfvYxXy7ckaN5W2 jFq26Z7q0hd//aRlgm9/3T/ZtM/SiRLuaxnuf+i7C71Eme6P320= -----END CERTIFICATE-----Generated at Mon Feb 2 10:03:40 2026 by rpki-client