This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf repo-rpki.idnic.net/repo/2490345e-2d57-4349-b78f-c8b18a442445/0/33FD31277D728C6A6715B913D5A4795CA79CAAD9.mft File: 33FD31277D728C6A6715B913D5A4795CA79CAAD9.mft (raw, json) Hash identifier: 9OEW9q+WbKdBKwUxOciebiGDcoLTkNnAjM1iix0+i+o= Subject key identifier: A5:1D:A5:17:B1:02:59:CB:D1:EB:24:0A:8E:A2:39:7E:96:7C:73:86 Authority key identifier: 33:FD:31:27:7D:72:8C:6A:67:15:B9:13:D5:A4:79:5C:A7:9C:AA:D9 Certificate issuer: /CN=33FD31277D728C6A6715B913D5A4795CA79CAAD9 Certificate serial: 4D8BCB95C3D8CF2C1AB70A98CB45D09F5E37C382 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/33FD31277D728C6A6715B913D5A4795CA79CAAD9.cer Subject info access: rsync://repo-rpki.idnic.net/repo/2490345e-2d57-4349-b78f-c8b18a442445/0/33FD31277D728C6A6715B913D5A4795CA79CAAD9.mft Manifest number: 04E4 Signing time: Sat 31 Jan 2026 17:30:43 +0000 Manifest this update: Sat 31 Jan 2026 17:25:43 +0000 Manifest next update: Tue 03 Feb 2026 20:43:43 +0000 Files and hashes: 1: 3130332e3135382e3235332e302f32342d3234203d3e20313431313337.roa (hash: Hp5JXQrEPxCMGP++NvFxm2uvusi9TtoQlGvA7/UOH1I=) 2: 33FD31277D728C6A6715B913D5A4795CA79CAAD9.crl (hash: TSKfzn7mHsTiFXCzC0W412/ogbItRwDGayHnl0QQTE8=) 3: 323430363a633634303a3a2f33322d3332203d3e20313431313337.roa (hash: 5V8TdCs3cgs+nmmoF4z5Y22rIV0qGc1uTgZVGMrslKU=) 4: 323430363a633634303a323a3a2f34382d3438203d3e20313431313337.roa (hash: DTVsh2XoacQGQ0M4VZPcXWe9xYvlSB7Zv3KJ/YTK1Yw=) 5: 3130332e3135382e3235322e302f32342d3234203d3e20313431313337.roa (hash: laLJUGonDC43HjG3ZGNawYIEQ9ln67j38UngxvM2zgQ=) 6: 323430363a633634303a313a3a2f34382d3438203d3e20313431313337.roa (hash: Mt5SrkBl0TnCuOW6KjiUo7KU17URT0CCUG/IFHUWPhI=) 7: 3130332e3135382e3235322e302f32332d3233203d3e20313431313337.roa (hash: MfxGUIrhtjjGajjX90ABbBqTVuaaEFP6XuBr1Yslsx0=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/2490345e-2d57-4349-b78f-c8b18a442445/0/33FD31277D728C6A6715B913D5A4795CA79CAAD9.crl rsync://repo-rpki.idnic.net/repo/2490345e-2d57-4349-b78f-c8b18a442445/0/33FD31277D728C6A6715B913D5A4795CA79CAAD9.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/33FD31277D728C6A6715B913D5A4795CA79CAAD9.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 03 Feb 2026 20:43:43 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 4d:8b:cb:95:c3:d8:cf:2c:1a:b7:0a:98:cb:45:d0:9f:5e:37:c3:82 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=33FD31277D728C6A6715B913D5A4795CA79CAAD9 Validity Not Before: Jan 31 17:25:43 2026 GMT Not After : Feb 3 20:43:43 2026 GMT Subject: CN=A51DA517B10259CBD1EB240A8EA2397E967C7386 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cb:27:51:d6:ce:8f:3b:e4:05:e8:23:b1:e9:b3: 13:a8:4e:3b:ec:41:c8:c3:f8:3b:ca:a0:7c:e2:c6: 97:d6:3e:c2:58:6d:e6:bb:58:f6:ef:67:54:f2:fc: 7b:cd:4f:1c:6f:a7:b6:e2:49:8d:6f:f2:1f:0f:c5: e4:e6:f5:37:13:a5:f0:e4:45:7c:be:34:a0:78:5a: 63:ac:b9:d6:b1:ea:e7:ec:de:3e:56:08:20:95:a6: c7:30:bc:a8:a3:d2:5b:00:ee:a1:77:ee:ff:81:be: 0b:72:70:73:28:74:78:a1:ac:c4:e9:6e:64:6b:6e: 37:2a:e0:78:a9:8b:24:46:a5:75:b8:a5:34:2d:93: f5:73:11:5f:72:a5:70:37:10:51:59:e2:00:8a:1c: 8d:2f:58:3f:22:81:cd:ea:82:50:f9:97:2b:82:67: 37:1a:af:24:a8:6e:1b:88:0f:26:1b:c1:f4:00:c4: c7:de:7c:6a:06:3a:23:4c:db:a9:39:9f:29:aa:7f: 96:69:d2:59:a7:e5:5a:b8:8f:54:9a:e9:61:a4:f1: 9a:dd:b9:fa:16:68:77:57:9f:c7:d5:73:63:41:db: a7:0d:7c:59:d1:21:a8:e6:b8:34:f1:34:6c:17:3f: c5:03:6a:86:1f:4c:29:ef:c3:4c:ae:77:69:2f:22: 78:27 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: A5:1D:A5:17:B1:02:59:CB:D1:EB:24:0A:8E:A2:39:7E:96:7C:73:86 X509v3 Authority Key Identifier: keyid:33:FD:31:27:7D:72:8C:6A:67:15:B9:13:D5:A4:79:5C:A7:9C:AA:D9 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/2490345e-2d57-4349-b78f-c8b18a442445/0/33FD31277D728C6A6715B913D5A4795CA79CAAD9.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/33FD31277D728C6A6715B913D5A4795CA79CAAD9.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/2490345e-2d57-4349-b78f-c8b18a442445/0/33FD31277D728C6A6715B913D5A4795CA79CAAD9.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption aa:d4:0d:2e:a8:30:72:67:50:85:c1:b7:ba:97:a6:09:16:78: b4:68:d8:27:5d:22:18:2f:67:2b:4f:f2:7e:ea:6c:36:83:6a: 3c:e9:8c:ed:80:e8:9e:89:77:7c:7f:b3:9a:fc:c6:c5:a3:24: 1a:21:cd:1b:b0:b6:88:45:1f:a1:12:ab:5c:e0:28:a3:9a:2b: 50:0b:3b:ae:1e:c9:f6:80:c7:0e:35:ed:7d:9f:33:c4:d5:5d: 57:b8:55:0f:36:ed:5e:cd:d6:03:6f:eb:5c:17:6b:e5:14:2c: 86:9e:6e:29:85:34:0c:7e:50:7c:de:cc:d9:9f:aa:04:f4:43: bd:d4:cb:9d:24:f9:3e:8b:5e:09:83:54:09:67:b0:d6:ed:c1: a7:52:c3:f8:3f:7d:95:ed:b8:2e:03:bb:b0:ea:e8:6f:3a:17: 06:85:85:79:22:98:4d:b0:4f:56:72:89:1f:7f:97:58:27:66: af:47:2b:54:ee:ee:c1:58:28:1d:21:06:04:4d:47:cb:c6:ce: d5:b5:c4:88:c3:c6:43:0d:47:7d:01:de:13:3d:cc:b2:d1:d2: dd:22:f5:2f:a9:4e:4a:02:1c:91:2c:a4:9a:eb:3c:da:9d:05: a6:72:a9:09:60:d2:e8:45:b0:0c:1b:ce:a2:50:87:29:21:30: 0d:ae:90:f8 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUTYvLlcPYzywatwqYy0XQn143w4IwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMzNGRDMxMjc3RDcyOEM2QTY3MTVCOTEzRDVBNDc5NUNB NzlDQUFEOTAeFw0yNjAxMzExNzI1NDNaFw0yNjAyMDMyMDQzNDNaMDMxMTAvBgNV BAMTKEE1MURBNTE3QjEwMjU5Q0JEMUVCMjQwQThFQTIzOTdFOTY3QzczODYwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDLJ1HWzo875AXoI7HpsxOoTjvs QcjD+DvKoHzixpfWPsJYbea7WPbvZ1Ty/HvNTxxvp7biSY1v8h8PxeTm9TcTpfDk RXy+NKB4WmOsudax6ufs3j5WCCCVpscwvKij0lsA7qF37v+BvgtycHModHihrMTp bmRrbjcq4HipiyRGpXW4pTQtk/VzEV9ypXA3EFFZ4gCKHI0vWD8igc3qglD5lyuC ZzcarySobhuIDyYbwfQAxMfefGoGOiNM26k5nymqf5Zp0lmn5Vq4j1Sa6WGk8Zrd ufoWaHdXn8fVc2NB26cNfFnRIajmuDTxNGwXP8UDaoYfTCnvw0yud2kvIngnAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUpR2lF7ECWcvR6yQKjqI5fpZ8c4YwHwYDVR0j BBgwFoAUM/0xJ31yjGpnFbkT1aR5XKecqtkwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby8y NDkwMzQ1ZS0yZDU3LTQzNDktYjc4Zi1jOGIxOGE0NDI0NDUvMC8zM0ZEMzEyNzdE NzI4QzZBNjcxNUI5MTNENUE0Nzk1Q0E3OUNBQUQ5LmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvMzNGRDMxMjc3RDcyOEM2QTY3MTVCOTEzRDVBNDc5NUNBNzlD QUFEOS5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vMjQ5MDM0NWUtMmQ1Ny00MzQ5LWI3 OGYtYzhiMThhNDQyNDQ1LzAvMzNGRDMxMjc3RDcyOEM2QTY3MTVCOTEzRDVBNDc5 NUNBNzlDQUFEOS5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAKrUDS6oMHJnUIXBt7qXpgkWeLRo2CddIhgv ZytP8n7qbDaDajzpjO2A6J6Jd3x/s5r8xsWjJBohzRuwtohFH6ESq1zgKKOaK1AL O64eyfaAxw417X2fM8TVXVe4VQ827V7N1gNv61wXa+UULIaebimFNAx+UHzezNmf qgT0Q73Uy50k+T6LXgmDVAlnsNbtwadSw/g/fZXtuC4Du7Dq6G86FwaFhXkimE2w T1ZyiR9/l1gnZq9HK1Tu7sFYKB0hBgRNR8vGztW1xIjDxkMNR30B3hM9zLLR0t0i 9S+pTkoCHJEspJrrPNqdBaZyqQlg0uhFsAwbzqJQhykhMA2ukPg= -----END CERTIFICATE-----Generated at Mon Feb 2 10:05:07 2026 by rpki-client