This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf repo-rpki.idnic.net/repo/7b7ef515-8564-41e8-9d20-2d33d45ccbd6/0/0433DC81885AA9736198E4B13311013B6539B05D.mft File: 0433DC81885AA9736198E4B13311013B6539B05D.mft (raw, json) Hash identifier: CrxIYdI9a1bcCX6CE5hmJ4auuLKae57Ch8k8b4JgJpY= Subject key identifier: 86:6C:DC:81:D5:E0:CA:48:AC:FB:35:FB:28:FA:4C:4B:16:42:EC:FC Authority key identifier: 04:33:DC:81:88:5A:A9:73:61:98:E4:B1:33:11:01:3B:65:39:B0:5D Certificate issuer: /CN=0433DC81885AA9736198E4B13311013B6539B05D Certificate serial: 2BAFE4075B199F101018CEB9E976A720CE82F205 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/0433DC81885AA9736198E4B13311013B6539B05D.cer Subject info access: rsync://repo-rpki.idnic.net/repo/7b7ef515-8564-41e8-9d20-2d33d45ccbd6/0/0433DC81885AA9736198E4B13311013B6539B05D.mft Manifest number: 01C8 Signing time: Sat 31 Jan 2026 16:51:38 +0000 Manifest this update: Sat 31 Jan 2026 16:46:38 +0000 Manifest next update: Tue 03 Feb 2026 22:10:38 +0000 Files and hashes: 1: 3130332e3138372e38362e302f32332d3234203d3e20313439373138.roa (hash: S+hQR8ube7o6csT9Rv22n/U07yHPrGgGLfGsncAQhYA=) 2: 3130332e3138372e38372e302f32342d3234203d3e20313439373138.roa (hash: JVhrzlpOZdWSbSjvZPb3ZH9GyBIo1oeTGaYsJmG4pDs=) 3: 0433DC81885AA9736198E4B13311013B6539B05D.crl (hash: KBT17hO4fjKYUEOmw8NdbjbXJHOmE17zVR1VeSP/JWo=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/7b7ef515-8564-41e8-9d20-2d33d45ccbd6/0/0433DC81885AA9736198E4B13311013B6539B05D.crl rsync://repo-rpki.idnic.net/repo/7b7ef515-8564-41e8-9d20-2d33d45ccbd6/0/0433DC81885AA9736198E4B13311013B6539B05D.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/0433DC81885AA9736198E4B13311013B6539B05D.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 03 Feb 2026 22:10:38 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2b:af:e4:07:5b:19:9f:10:10:18:ce:b9:e9:76:a7:20:ce:82:f2:05 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=0433DC81885AA9736198E4B13311013B6539B05D Validity Not Before: Jan 31 16:46:38 2026 GMT Not After : Feb 3 22:10:38 2026 GMT Subject: CN=866CDC81D5E0CA48ACFB35FB28FA4C4B1642ECFC Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a3:db:2c:21:f8:52:97:7b:22:9e:98:6a:46:c2: 45:65:5b:14:e1:92:47:16:cd:67:6c:41:9f:76:43: 25:d7:c9:ca:53:14:dd:56:b2:00:40:6f:ce:2f:0c: b6:da:1c:47:97:3c:41:f7:aa:1a:fe:17:d0:db:8b: 6a:5e:ef:40:92:c7:76:f0:f3:29:7b:67:0d:da:c1: 09:5d:46:e1:bb:ee:f5:34:8c:2f:37:ca:04:9b:2d: 89:da:24:25:83:df:b2:3d:fe:1d:26:0c:1c:ba:c9: 78:c6:32:ae:f9:2c:a0:ae:55:a0:76:37:60:b6:4b: 58:89:02:68:42:f3:63:42:1b:67:ca:0c:c5:2e:20: c7:90:13:b9:09:4a:46:72:07:02:da:c3:7b:04:fc: 42:f3:6c:aa:c9:20:b7:8a:13:d0:60:21:b9:45:a7: 5e:c5:d6:12:2c:86:bb:b5:d3:24:49:c0:22:1e:4e: 4b:42:3a:d7:87:e8:ea:82:44:0d:30:24:92:ec:fd: 69:72:c8:b5:dc:6a:e2:5e:75:92:aa:ba:06:46:17: a6:a8:2d:2f:98:9f:3f:33:42:84:b6:f0:34:c7:47: 96:d8:b0:96:7e:34:3e:22:3a:ff:57:5a:0e:a2:49: ed:88:e8:52:07:45:27:f5:a2:0d:ed:2d:98:2a:1f: 4d:1f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 86:6C:DC:81:D5:E0:CA:48:AC:FB:35:FB:28:FA:4C:4B:16:42:EC:FC X509v3 Authority Key Identifier: keyid:04:33:DC:81:88:5A:A9:73:61:98:E4:B1:33:11:01:3B:65:39:B0:5D X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/7b7ef515-8564-41e8-9d20-2d33d45ccbd6/0/0433DC81885AA9736198E4B13311013B6539B05D.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/0433DC81885AA9736198E4B13311013B6539B05D.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/7b7ef515-8564-41e8-9d20-2d33d45ccbd6/0/0433DC81885AA9736198E4B13311013B6539B05D.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 48:e7:16:ed:d2:10:56:e6:15:fb:8d:8b:0a:a0:49:aa:e9:33: 7b:c5:5a:d5:23:47:4e:9d:e5:45:68:b9:fc:86:9e:d8:74:08: fd:3a:8a:e4:f9:5e:21:e6:fa:0c:05:7f:14:49:7e:4b:46:89: 52:b2:2e:c6:08:75:f8:21:73:17:17:05:8e:b5:cf:98:c5:eb: 74:e5:06:7c:7f:08:3f:01:26:6a:c8:72:b9:0b:8d:af:f0:c1: 72:33:db:2f:27:b6:b1:bd:4e:fd:ee:0d:cb:81:c9:f8:5c:ac: b0:bf:4f:f9:93:7d:82:3c:78:60:66:ac:b7:63:8d:76:0f:e5: 53:65:b6:fa:8b:90:e7:ac:3f:df:61:4f:48:0a:94:8a:97:83: 4a:d3:77:48:20:f4:d9:2f:b4:50:b2:9e:72:29:94:71:89:1d: 75:62:4d:e0:c2:5d:53:e0:92:12:6d:23:70:fd:e9:17:ee:1c: c4:55:12:66:7a:89:10:14:7a:2e:9b:68:a0:bf:c9:a0:f3:29: 19:e0:ce:a0:7a:f7:f0:5f:13:a1:e8:d4:2c:f2:8b:63:6e:e7: 6a:bd:93:00:b2:99:60:95:b2:93:8b:9f:3f:e1:b0:cf:1b:08: ba:df:fe:21:89:77:91:55:9c:a3:7e:63:ad:64:2a:67:85:74: 40:24:7a:9f -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUK6/kB1sZnxAQGM656XanIM6C8gUwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMDQzM0RDODE4ODVBQTk3MzYxOThFNEIxMzMxMTAxM0I2 NTM5QjA1RDAeFw0yNjAxMzExNjQ2MzhaFw0yNjAyMDMyMjEwMzhaMDMxMTAvBgNV BAMTKDg2NkNEQzgxRDVFMENBNDhBQ0ZCMzVGQjI4RkE0QzRCMTY0MkVDRkMwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCj2ywh+FKXeyKemGpGwkVlWxTh kkcWzWdsQZ92QyXXycpTFN1WsgBAb84vDLbaHEeXPEH3qhr+F9Dbi2pe70CSx3bw 8yl7Zw3awQldRuG77vU0jC83ygSbLYnaJCWD37I9/h0mDBy6yXjGMq75LKCuVaB2 N2C2S1iJAmhC82NCG2fKDMUuIMeQE7kJSkZyBwLaw3sE/ELzbKrJILeKE9BgIblF p17F1hIshru10yRJwCIeTktCOteH6OqCRA0wJJLs/WlyyLXcauJedZKqugZGF6ao LS+Ynz8zQoS28DTHR5bYsJZ+ND4iOv9XWg6iSe2I6FIHRSf1og3tLZgqH00fAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUhmzcgdXgykis+zX7KPpMSxZC7PwwHwYDVR0j BBgwFoAUBDPcgYhaqXNhmOSxMxEBO2U5sF0wDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby83 YjdlZjUxNS04NTY0LTQxZTgtOWQyMC0yZDMzZDQ1Y2NiZDYvMC8wNDMzREM4MTg4 NUFBOTczNjE5OEU0QjEzMzExMDEzQjY1MzlCMDVELmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvMDQzM0RDODE4ODVBQTk3MzYxOThFNEIxMzMxMTAxM0I2NTM5 QjA1RC5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vN2I3ZWY1MTUtODU2NC00MWU4LTlk MjAtMmQzM2Q0NWNjYmQ2LzAvMDQzM0RDODE4ODVBQTk3MzYxOThFNEIxMzMxMTAx M0I2NTM5QjA1RC5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAEjnFu3SEFbmFfuNiwqgSarpM3vFWtUjR06d 5UVoufyGnth0CP06iuT5XiHm+gwFfxRJfktGiVKyLsYIdfghcxcXBY61z5jF63Tl Bnx/CD8BJmrIcrkLja/wwXIz2y8ntrG9Tv3uDcuByfhcrLC/T/mTfYI8eGBmrLdj jXYP5VNltvqLkOesP99hT0gKlIqXg0rTd0gg9NkvtFCynnIplHGJHXViTeDCXVPg khJtI3D96RfuHMRVEmZ6iRAUei6baKC/yaDzKRngzqB69/BfE6Ho1Czyi2Nu52q9 kwCymWCVspOLnz/hsM8bCLrf/iGJd5FVnKN+Y61kKmeFdEAkep8= -----END CERTIFICATE-----Generated at Mon Feb 2 10:02:19 2026 by rpki-client