This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf repo-rpki.idnic.net/repo/7b7ef515-8564-41e8-9d20-2d33d45ccbd6/0/0433DC81885AA9736198E4B13311013B6539B05D.mft File: 0433DC81885AA9736198E4B13311013B6539B05D.mft (raw, json) Hash identifier: kaAsn8KG1ERzYKTOnbha1npbPQFE3oYI4MujGkBK6W8= Subject key identifier: E7:E9:F9:AB:B0:A4:87:4D:BF:CE:9E:33:0D:A0:DB:ED:76:78:00:18 Authority key identifier: 04:33:DC:81:88:5A:A9:73:61:98:E4:B1:33:11:01:3B:65:39:B0:5D Certificate issuer: /CN=0433DC81885AA9736198E4B13311013B6539B05D Certificate serial: 5DF95AC03BFD3D59049578A274163409F74322F9 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/0433DC81885AA9736198E4B13311013B6539B05D.cer Subject info access: rsync://repo-rpki.idnic.net/repo/7b7ef515-8564-41e8-9d20-2d33d45ccbd6/0/0433DC81885AA9736198E4B13311013B6539B05D.mft Manifest number: 01B3 Signing time: Tue 16 Dec 2025 20:41:40 +0000 Manifest this update: Tue 16 Dec 2025 20:36:40 +0000 Manifest next update: Sat 20 Dec 2025 08:36:40 +0000 Files and hashes: 1: 3130332e3138372e38372e302f32342d3234203d3e20313439373138.roa (hash: JVhrzlpOZdWSbSjvZPb3ZH9GyBIo1oeTGaYsJmG4pDs=) 2: 0433DC81885AA9736198E4B13311013B6539B05D.crl (hash: b7PYfi1bJ7t2Zho4dnf9NJQFyROguRzeDM4qZ5DOaxc=) 3: 3130332e3138372e38362e302f32332d3234203d3e20313439373138.roa (hash: k6AuCQ8Lc9J6Ja31B30aJRSZbO/KYjuOQsr2CPNaQ/Q=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/7b7ef515-8564-41e8-9d20-2d33d45ccbd6/0/0433DC81885AA9736198E4B13311013B6539B05D.crl rsync://repo-rpki.idnic.net/repo/7b7ef515-8564-41e8-9d20-2d33d45ccbd6/0/0433DC81885AA9736198E4B13311013B6539B05D.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/0433DC81885AA9736198E4B13311013B6539B05D.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 20 Dec 2025 08:36:40 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 5d:f9:5a:c0:3b:fd:3d:59:04:95:78:a2:74:16:34:09:f7:43:22:f9 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=0433DC81885AA9736198E4B13311013B6539B05D Validity Not Before: Dec 16 20:36:40 2025 GMT Not After : Dec 20 08:36:40 2025 GMT Subject: CN=E7E9F9ABB0A4874DBFCE9E330DA0DBED76780018 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e3:56:9d:f1:00:37:63:8f:c7:e3:50:dc:fc:5b: d7:9c:90:3e:80:d2:12:ce:ae:a4:90:b4:f4:d6:83: 54:e2:93:4d:b3:70:2c:c5:15:02:c3:92:34:5c:c9: f7:60:b1:da:3b:3b:c6:fa:4c:e8:cf:ef:ad:a0:b7: 09:f0:db:d4:e9:b8:a8:43:e2:b0:68:6d:6d:60:19: 8c:6a:1e:bd:e1:a9:4b:2b:ba:cf:fb:14:24:70:b0: 31:26:f9:ed:8e:84:32:65:4c:7f:ad:6a:ea:69:9d: 88:f2:fc:20:2a:78:6c:16:df:a9:a4:92:22:8c:7b: f5:51:d5:47:97:10:a4:2f:6d:20:b5:d4:f7:ef:8a: 78:a1:86:2e:8f:59:17:90:b0:ea:ff:e9:d4:da:ea: 53:2c:98:c7:36:eb:75:ad:e5:52:99:af:bc:e1:b0: 46:43:79:31:bf:8a:91:8f:76:85:6f:0d:e2:e9:ad: 83:02:eb:04:ee:ea:52:e7:61:74:cf:95:ec:4b:ef: 26:20:14:54:83:92:62:e0:8a:14:cb:41:43:cf:39: 62:a4:6a:9b:7a:de:05:be:93:5b:41:84:b0:76:a3: 6f:9b:7b:48:c4:43:77:21:d8:e7:95:1f:b4:f8:15: aa:98:f7:15:7f:5e:57:e5:35:ec:33:23:cc:85:59: e3:a9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: E7:E9:F9:AB:B0:A4:87:4D:BF:CE:9E:33:0D:A0:DB:ED:76:78:00:18 X509v3 Authority Key Identifier: keyid:04:33:DC:81:88:5A:A9:73:61:98:E4:B1:33:11:01:3B:65:39:B0:5D X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/7b7ef515-8564-41e8-9d20-2d33d45ccbd6/0/0433DC81885AA9736198E4B13311013B6539B05D.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/0433DC81885AA9736198E4B13311013B6539B05D.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/7b7ef515-8564-41e8-9d20-2d33d45ccbd6/0/0433DC81885AA9736198E4B13311013B6539B05D.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 8d:25:39:15:50:d3:69:f6:79:9f:81:a6:ca:3c:0e:0c:26:74: 98:44:c8:8b:af:20:f0:63:b9:af:3b:0d:a1:4b:d7:34:c6:d3: bd:8f:12:f9:6d:74:3a:13:9f:46:b5:80:46:16:fe:cf:4b:3a: 5c:5b:ac:52:bf:85:05:d1:0e:ab:cb:14:08:43:58:3e:de:ba: fb:db:89:c7:33:d8:70:b9:6d:5b:40:f2:66:52:3c:2b:78:8b: c1:3f:c2:96:66:1f:b7:6c:15:ec:fd:23:f6:77:08:ff:e9:60: 3d:a9:5c:05:08:00:9d:35:3b:2e:cf:6d:4a:2b:31:17:91:45: ad:2f:01:46:0e:8b:80:7c:07:6e:d9:33:ac:03:07:e2:e5:68: 0f:fc:d2:34:bb:b9:b8:fd:67:08:56:63:2e:e1:df:ed:14:ca: e3:5a:27:1c:b5:2f:16:ba:af:39:06:96:16:45:0b:25:ae:cd: eb:42:7c:4a:6b:4a:d5:7b:21:9f:a8:4e:5a:da:e9:6b:18:a1: 78:f1:a3:68:44:7a:e6:78:d0:9c:35:e1:18:b0:78:23:43:d0: 67:4d:d9:c6:bc:2c:c5:f5:f3:0c:e6:96:3d:6e:6a:d2:5d:95: c8:fe:ca:fc:df:68:9a:45:5e:89:be:f0:27:45:3b:dc:c9:fe: 34:91:9d:ae -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUXflawDv9PVkElXiidBY0CfdDIvkwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMDQzM0RDODE4ODVBQTk3MzYxOThFNEIxMzMxMTAxM0I2 NTM5QjA1RDAeFw0yNTEyMTYyMDM2NDBaFw0yNTEyMjAwODM2NDBaMDMxMTAvBgNV BAMTKEU3RTlGOUFCQjBBNDg3NERCRkNFOUUzMzBEQTBEQkVENzY3ODAwMTgwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDjVp3xADdjj8fjUNz8W9eckD6A 0hLOrqSQtPTWg1Tik02zcCzFFQLDkjRcyfdgsdo7O8b6TOjP762gtwnw29TpuKhD 4rBobW1gGYxqHr3hqUsrus/7FCRwsDEm+e2OhDJlTH+tauppnYjy/CAqeGwW36mk kiKMe/VR1UeXEKQvbSC11Pfvinihhi6PWReQsOr/6dTa6lMsmMc263Wt5VKZr7zh sEZDeTG/ipGPdoVvDeLprYMC6wTu6lLnYXTPlexL7yYgFFSDkmLgihTLQUPPOWKk apt63gW+k1tBhLB2o2+be0jEQ3ch2OeVH7T4FaqY9xV/XlflNewzI8yFWeOpAgMB AAGjggI8MIICODAdBgNVHQ4EFgQU5+n5q7Ckh02/zp4zDaDb7XZ4ABgwHwYDVR0j BBgwFoAUBDPcgYhaqXNhmOSxMxEBO2U5sF0wDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby83 YjdlZjUxNS04NTY0LTQxZTgtOWQyMC0yZDMzZDQ1Y2NiZDYvMC8wNDMzREM4MTg4 NUFBOTczNjE5OEU0QjEzMzExMDEzQjY1MzlCMDVELmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvMDQzM0RDODE4ODVBQTk3MzYxOThFNEIxMzMxMTAxM0I2NTM5 QjA1RC5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vN2I3ZWY1MTUtODU2NC00MWU4LTlk MjAtMmQzM2Q0NWNjYmQ2LzAvMDQzM0RDODE4ODVBQTk3MzYxOThFNEIxMzMxMTAx M0I2NTM5QjA1RC5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAI0lORVQ02n2eZ+Bpso8DgwmdJhEyIuvIPBj ua87DaFL1zTG072PEvltdDoTn0a1gEYW/s9LOlxbrFK/hQXRDqvLFAhDWD7euvvb iccz2HC5bVtA8mZSPCt4i8E/wpZmH7dsFez9I/Z3CP/pYD2pXAUIAJ01Oy7PbUor MReRRa0vAUYOi4B8B27ZM6wDB+LlaA/80jS7ubj9ZwhWYy7h3+0UyuNaJxy1Lxa6 rzkGlhZFCyWuzetCfEprStV7IZ+oTlra6WsYoXjxo2hEeuZ40Jw14RiweCND0GdN 2ca8LMX18wzmlj1uatJdlcj+yvzfaJpFXom+8CdFO9zJ/jSRna4= -----END CERTIFICATE-----Generated at Wed Dec 17 06:12:44 2025 by rpki-client