This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf repo-rpki.idnic.net/repo/3baf365e-05de-4c39-bf96-83e939bed7df/0/33F0041B7CC6D4139AB23B3CD10C56E51233C589.mft File: 33F0041B7CC6D4139AB23B3CD10C56E51233C589.mft (raw, json) Hash identifier: jBk31Yg+KCgWzv7bUND8RnDI+UxA+iQlsOS0IMxmQyk= Subject key identifier: B2:EC:25:75:35:CF:DD:35:DB:8E:CB:74:0F:AD:60:DC:E6:8C:34:45 Authority key identifier: 33:F0:04:1B:7C:C6:D4:13:9A:B2:3B:3C:D1:0C:56:E5:12:33:C5:89 Certificate issuer: /CN=33F0041B7CC6D4139AB23B3CD10C56E51233C589 Certificate serial: 13106A6EBDAF3E60A1678891F64C26024D5169D7 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/33F0041B7CC6D4139AB23B3CD10C56E51233C589.cer Subject info access: rsync://repo-rpki.idnic.net/repo/3baf365e-05de-4c39-bf96-83e939bed7df/0/33F0041B7CC6D4139AB23B3CD10C56E51233C589.mft Manifest number: 0546 Signing time: Mon 02 Feb 2026 08:41:53 +0000 Manifest this update: Mon 02 Feb 2026 08:36:53 +0000 Manifest next update: Thu 05 Feb 2026 11:49:53 +0000 Files and hashes: 1: 3130332e3135322e372e302f32342d3234203d3e20313430343236.roa (hash: SqOaXQt4sheoHjLEWCQY+hr/jk21P7Mbb0/p3ua6+Wo=) 2: 33F0041B7CC6D4139AB23B3CD10C56E51233C589.crl (hash: WNSoStciB+5qQ8xOksGI/PN7Uiiwgl2MxgY2MdLoZ9E=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/3baf365e-05de-4c39-bf96-83e939bed7df/0/33F0041B7CC6D4139AB23B3CD10C56E51233C589.crl rsync://repo-rpki.idnic.net/repo/3baf365e-05de-4c39-bf96-83e939bed7df/0/33F0041B7CC6D4139AB23B3CD10C56E51233C589.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/33F0041B7CC6D4139AB23B3CD10C56E51233C589.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 05 Feb 2026 05:24:03 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 13:10:6a:6e:bd:af:3e:60:a1:67:88:91:f6:4c:26:02:4d:51:69:d7 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=33F0041B7CC6D4139AB23B3CD10C56E51233C589 Validity Not Before: Feb 2 08:36:53 2026 GMT Not After : Feb 5 11:49:53 2026 GMT Subject: CN=B2EC257535CFDD35DB8ECB740FAD60DCE68C3445 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c0:81:85:fd:d7:e3:22:24:6b:3d:a2:3e:97:cb: f8:a1:43:3e:b7:56:a8:37:27:11:72:4b:d0:88:bf: 0e:ef:05:49:ed:9f:ba:21:c9:aa:71:8e:13:f9:b9: b2:78:39:65:a0:53:9a:2d:63:5b:17:e3:34:7f:4f: 96:03:da:51:3f:2b:9f:18:ea:f0:f4:49:2a:ce:b0: b5:de:25:81:97:45:37:c0:14:30:14:d5:51:45:4d: 1c:d3:b8:2d:c7:8f:83:9d:00:95:b9:b2:01:ee:e5: 67:3c:b7:45:ac:a4:d8:0f:07:54:f1:0a:c4:80:e3: 8b:01:98:61:82:b7:a8:94:c8:76:1c:c6:ae:25:44: 10:6f:48:17:84:4f:89:20:5d:38:ef:67:c8:68:f8: 0c:c7:bc:ae:0e:32:9d:b9:4c:72:27:1f:7a:38:08: a1:ae:9e:e5:3e:f3:71:0b:9c:d8:a5:3b:3e:9d:41: b8:e0:d0:66:96:a1:67:31:9d:9d:09:2c:51:72:a8: e3:36:bc:e9:5a:d7:62:9b:14:ce:66:7c:71:17:d3: 13:22:3d:6d:0d:0d:35:35:f0:9f:94:35:05:42:c2: d0:a2:3c:c5:e7:9e:bc:b8:3a:4e:9f:7d:b0:0e:91: 4d:e0:9b:0c:5a:90:c1:bb:db:a9:b9:cb:37:bd:c4: 97:31 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: B2:EC:25:75:35:CF:DD:35:DB:8E:CB:74:0F:AD:60:DC:E6:8C:34:45 X509v3 Authority Key Identifier: keyid:33:F0:04:1B:7C:C6:D4:13:9A:B2:3B:3C:D1:0C:56:E5:12:33:C5:89 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/3baf365e-05de-4c39-bf96-83e939bed7df/0/33F0041B7CC6D4139AB23B3CD10C56E51233C589.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/33F0041B7CC6D4139AB23B3CD10C56E51233C589.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/3baf365e-05de-4c39-bf96-83e939bed7df/0/33F0041B7CC6D4139AB23B3CD10C56E51233C589.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 27:10:10:6a:35:11:20:0b:36:f7:38:51:f9:0c:a5:68:47:15: 78:da:3b:67:15:74:36:39:a1:10:52:2f:d4:40:b9:fe:7d:ef: 85:44:8f:bf:70:9b:cd:07:3a:11:9b:7e:31:1d:51:47:e5:af: 37:2d:b4:3f:04:90:7c:5e:8d:12:5d:bb:9d:7c:7f:d0:30:bc: a7:fd:0a:ce:52:68:ab:16:a8:93:a6:0f:02:42:7f:46:31:3f: 49:50:1b:8d:88:34:bb:79:0f:69:17:ba:b8:15:84:cd:b7:50: 97:db:0c:41:2b:0b:87:3e:58:c6:52:9b:55:ea:c8:e5:39:28: a1:3f:f6:cd:9d:df:d4:14:16:14:d7:ed:42:95:95:d0:ae:bb: 28:41:a0:12:a1:92:e9:e2:26:a6:ff:32:65:bd:8d:c4:3d:67: 8b:2d:6c:4f:2e:d9:37:ea:cd:33:b0:28:51:a5:bb:46:3e:9c: 7b:57:f0:c1:c1:9b:36:ff:88:69:91:57:54:2a:e6:16:d9:af: 84:31:87:48:e6:9e:9d:7c:05:50:52:da:40:47:93:03:af:27: 52:02:b6:87:a9:3b:3f:39:ea:df:fd:d8:e2:49:22:67:88:33: db:40:c5:8b:e3:00:8c:7b:d0:45:d0:9b:8f:36:10:00:fa:24: 32:55:42:33 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUExBqbr2vPmChZ4iR9kwmAk1RadcwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMzNGMDA0MUI3Q0M2RDQxMzlBQjIzQjNDRDEwQzU2RTUx MjMzQzU4OTAeFw0yNjAyMDIwODM2NTNaFw0yNjAyMDUxMTQ5NTNaMDMxMTAvBgNV BAMTKEIyRUMyNTc1MzVDRkREMzVEQjhFQ0I3NDBGQUQ2MERDRTY4QzM0NDUwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDAgYX91+MiJGs9oj6Xy/ihQz63 Vqg3JxFyS9CIvw7vBUntn7ohyapxjhP5ubJ4OWWgU5otY1sX4zR/T5YD2lE/K58Y 6vD0SSrOsLXeJYGXRTfAFDAU1VFFTRzTuC3Hj4OdAJW5sgHu5Wc8t0WspNgPB1Tx CsSA44sBmGGCt6iUyHYcxq4lRBBvSBeET4kgXTjvZ8ho+AzHvK4OMp25THInH3o4 CKGunuU+83ELnNilOz6dQbjg0GaWoWcxnZ0JLFFyqOM2vOla12KbFM5mfHEX0xMi PW0NDTU18J+UNQVCwtCiPMXnnry4Ok6ffbAOkU3gmwxakMG726m5yze9xJcxAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUsuwldTXP3TXbjst0D61g3OaMNEUwHwYDVR0j BBgwFoAUM/AEG3zG1BOasjs80QxW5RIzxYkwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby8z YmFmMzY1ZS0wNWRlLTRjMzktYmY5Ni04M2U5MzliZWQ3ZGYvMC8zM0YwMDQxQjdD QzZENDEzOUFCMjNCM0NEMTBDNTZFNTEyMzNDNTg5LmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvMzNGMDA0MUI3Q0M2RDQxMzlBQjIzQjNDRDEwQzU2RTUxMjMz QzU4OS5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vM2JhZjM2NWUtMDVkZS00YzM5LWJm OTYtODNlOTM5YmVkN2RmLzAvMzNGMDA0MUI3Q0M2RDQxMzlBQjIzQjNDRDEwQzU2 RTUxMjMzQzU4OS5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBACcQEGo1ESALNvc4UfkMpWhHFXjaO2cVdDY5 oRBSL9RAuf5974VEj79wm80HOhGbfjEdUUflrzcttD8EkHxejRJdu518f9AwvKf9 Cs5SaKsWqJOmDwJCf0YxP0lQG42INLt5D2kXurgVhM23UJfbDEErC4c+WMZSm1Xq yOU5KKE/9s2d39QUFhTX7UKVldCuuyhBoBKhkuniJqb/MmW9jcQ9Z4stbE8u2Tfq zTOwKFGlu0Y+nHtX8MHBmzb/iGmRV1Qq5hbZr4Qxh0jmnp18BVBS2kBHkwOvJ1IC toepOz856t/92OJJImeIM9tAxYvjAIx70EXQm482EAD6JDJVQjM= -----END CERTIFICATE-----Generated at Mon Feb 2 12:48:49 2026 by rpki-client