This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf repo-rpki.idnic.net/repo/8d703b80-2e78-4d11-ab74-08017e422d6e/0/C33BE6D76C1444B4695CC56D706802967A2A404E.mft File: C33BE6D76C1444B4695CC56D706802967A2A404E.mft (raw, json) Hash identifier: kNfZhFsz4Kr+jirdD8QI1Kdnxh0UtZVDutKLYkhp77Q= Subject key identifier: 74:80:5D:7F:83:57:D8:09:85:CE:4F:99:9D:7C:3B:3E:31:56:6B:6F Authority key identifier: C3:3B:E6:D7:6C:14:44:B4:69:5C:C5:6D:70:68:02:96:7A:2A:40:4E Certificate issuer: /CN=C33BE6D76C1444B4695CC56D706802967A2A404E Certificate serial: 1EF4DB11B8436F9EA674401504E4085B7B13576A Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/C33BE6D76C1444B4695CC56D706802967A2A404E.cer Subject info access: rsync://repo-rpki.idnic.net/repo/8d703b80-2e78-4d11-ab74-08017e422d6e/0/C33BE6D76C1444B4695CC56D706802967A2A404E.mft Manifest number: 017C Signing time: Sun 01 Feb 2026 06:01:45 +0000 Manifest this update: Sun 01 Feb 2026 05:56:45 +0000 Manifest next update: Wed 04 Feb 2026 15:28:45 +0000 Files and hashes: 1: 3130332e35352e33302e302f32332d3233203d3e20313530343834.roa (hash: ZuMnDiHxEL/U8SL8BhAZDvs5aB1dq2I0QG/IhKrpVW8=) 2: C33BE6D76C1444B4695CC56D706802967A2A404E.crl (hash: 4HvIy/KVSKiBrw88r4o8+yYynHpSeZEzmrOxRvtrNIU=) 3: 3130332e35352e33312e302f32342d3234203d3e20313530343834.roa (hash: tAaom1u9dzc8ncYAUwE5XCycjaJDPimabJR/V9nJlmE=) 4: 3130332e35352e33302e302f32342d3234203d3e20313530343834.roa (hash: aZfOFjCWcMoRejMmCl7p7stqIRB0AZ4Tzh7bIJ8bPos=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/8d703b80-2e78-4d11-ab74-08017e422d6e/0/C33BE6D76C1444B4695CC56D706802967A2A404E.crl rsync://repo-rpki.idnic.net/repo/8d703b80-2e78-4d11-ab74-08017e422d6e/0/C33BE6D76C1444B4695CC56D706802967A2A404E.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/C33BE6D76C1444B4695CC56D706802967A2A404E.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 04 Feb 2026 15:28:45 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1e:f4:db:11:b8:43:6f:9e:a6:74:40:15:04:e4:08:5b:7b:13:57:6a Signature Algorithm: sha256WithRSAEncryption Issuer: CN=C33BE6D76C1444B4695CC56D706802967A2A404E Validity Not Before: Feb 1 05:56:45 2026 GMT Not After : Feb 4 15:28:45 2026 GMT Subject: CN=74805D7F8357D80985CE4F999D7C3B3E31566B6F Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:dd:91:45:8e:d2:c6:af:c6:c8:d9:91:a3:b3:e2: f2:c4:36:3b:d9:c8:b7:67:e6:07:f7:d4:31:9c:ed: 65:72:b3:a3:da:57:e4:34:7b:1d:cd:f9:44:0d:f6: e3:18:6a:09:16:27:0a:a3:22:83:17:35:a6:c2:12: 7f:24:3c:4c:2b:6a:33:a8:cf:91:2d:e8:27:13:3f: bd:ce:81:2c:33:15:68:1a:cd:2d:7a:7b:0b:c6:c7: f8:03:c9:ee:e6:c6:79:dd:fb:45:3a:8b:d4:3b:10: 0e:fc:de:56:69:2d:0e:07:31:83:4f:a1:33:e3:3a: 46:a5:55:27:76:66:79:99:6e:41:3a:68:44:25:8d: 34:ba:14:bf:c9:e7:cb:3d:b4:b4:70:f4:d7:6a:7c: cb:6f:7c:b6:88:92:23:15:36:b0:64:8f:ac:9c:cd: 5d:c3:5a:56:f9:89:3a:64:f4:05:fe:ec:77:2d:0f: 5b:1d:cf:81:a9:14:24:90:db:19:88:c1:36:51:ee: 9d:27:c2:97:29:93:d4:14:bf:5a:40:99:14:d2:de: d8:a0:29:cb:bb:d4:c9:4e:33:0e:8c:6f:66:1a:1e: b7:22:61:f5:c0:80:da:99:cb:f3:24:74:9b:80:3a: af:bf:19:74:34:c2:2b:7a:e4:82:2e:8a:71:0a:d4: 19:37 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 74:80:5D:7F:83:57:D8:09:85:CE:4F:99:9D:7C:3B:3E:31:56:6B:6F X509v3 Authority Key Identifier: keyid:C3:3B:E6:D7:6C:14:44:B4:69:5C:C5:6D:70:68:02:96:7A:2A:40:4E X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/8d703b80-2e78-4d11-ab74-08017e422d6e/0/C33BE6D76C1444B4695CC56D706802967A2A404E.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/C33BE6D76C1444B4695CC56D706802967A2A404E.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/8d703b80-2e78-4d11-ab74-08017e422d6e/0/C33BE6D76C1444B4695CC56D706802967A2A404E.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 80:9b:c3:9d:32:0b:03:7b:60:a0:1e:34:62:69:9d:87:b4:3e: b2:e1:48:2b:a4:e9:4b:3d:39:e8:c6:d0:b6:d8:63:af:94:dd: 42:f9:a4:f3:df:cc:68:13:c9:92:78:f6:8f:59:a3:4a:61:32: cd:df:3b:8c:68:60:4f:ff:8d:f0:ab:06:a6:bb:2e:49:d2:2a: 47:75:9d:50:84:c8:40:55:b9:41:40:c5:35:60:b7:8b:7f:bc: 3a:8b:62:07:3f:9a:3c:10:1d:8e:25:05:c6:fe:53:3a:e5:8c: 6a:b7:de:b7:70:bd:64:0f:37:4f:51:31:88:f1:90:59:55:9b: db:bc:46:a0:2c:6a:b7:38:bd:88:40:99:d7:9b:c7:12:e2:eb: 41:3d:c2:68:ad:39:c2:c3:a9:0e:74:c1:4c:b1:05:70:25:a2: ab:ac:ba:bc:b5:c2:e7:3e:91:24:ca:08:c9:c6:cd:e3:e9:23: 1b:91:5e:f0:f7:03:5d:83:a5:6b:c3:d7:bd:37:ef:51:49:7f: c9:d1:75:44:0d:1f:d9:fd:b2:b3:7f:1d:30:34:89:ef:36:06: 77:50:a4:bd:5a:2d:56:96:13:66:5f:9f:db:4c:4e:c6:ef:b3: d3:25:da:91:1b:28:4b:13:d3:b6:84:89:5d:db:65:67:b7:04: b8:96:7c:56 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUHvTbEbhDb56mdEAVBOQIW3sTV2owDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoQzMzQkU2RDc2QzE0NDRCNDY5NUNDNTZENzA2ODAyOTY3 QTJBNDA0RTAeFw0yNjAyMDEwNTU2NDVaFw0yNjAyMDQxNTI4NDVaMDMxMTAvBgNV BAMTKDc0ODA1RDdGODM1N0Q4MDk4NUNFNEY5OTlEN0MzQjNFMzE1NjZCNkYwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDdkUWO0savxsjZkaOz4vLENjvZ yLdn5gf31DGc7WVys6PaV+Q0ex3N+UQN9uMYagkWJwqjIoMXNabCEn8kPEwrajOo z5Et6CcTP73OgSwzFWgazS16ewvGx/gDye7mxnnd+0U6i9Q7EA783lZpLQ4HMYNP oTPjOkalVSd2ZnmZbkE6aEQljTS6FL/J58s9tLRw9NdqfMtvfLaIkiMVNrBkj6yc zV3DWlb5iTpk9AX+7HctD1sdz4GpFCSQ2xmIwTZR7p0nwpcpk9QUv1pAmRTS3tig Kcu71MlOMw6Mb2YaHrciYfXAgNqZy/MkdJuAOq+/GXQ0wit65IIuinEK1Bk3AgMB AAGjggI8MIICODAdBgNVHQ4EFgQUdIBdf4NX2AmFzk+ZnXw7PjFWa28wHwYDVR0j BBgwFoAUwzvm12wURLRpXMVtcGgClnoqQE4wDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby84 ZDcwM2I4MC0yZTc4LTRkMTEtYWI3NC0wODAxN2U0MjJkNmUvMC9DMzNCRTZENzZD MTQ0NEI0Njk1Q0M1NkQ3MDY4MDI5NjdBMkE0MDRFLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvQzMzQkU2RDc2QzE0NDRCNDY5NUNDNTZENzA2ODAyOTY3QTJB NDA0RS5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vOGQ3MDNiODAtMmU3OC00ZDExLWFi NzQtMDgwMTdlNDIyZDZlLzAvQzMzQkU2RDc2QzE0NDRCNDY5NUNDNTZENzA2ODAy OTY3QTJBNDA0RS5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAICbw50yCwN7YKAeNGJpnYe0PrLhSCuk6Us9 OejG0LbYY6+U3UL5pPPfzGgTyZJ49o9Zo0phMs3fO4xoYE//jfCrBqa7LknSKkd1 nVCEyEBVuUFAxTVgt4t/vDqLYgc/mjwQHY4lBcb+UzrljGq33rdwvWQPN09RMYjx kFlVm9u8RqAsarc4vYhAmdebxxLi60E9wmitOcLDqQ50wUyxBXAloqusury1wuc+ kSTKCMnGzePpIxuRXvD3A12DpWvD170371FJf8nRdUQNH9n9srN/HTA0ie82BndQ pL1aLVaWE2Zfn9tMTsbvs9Ml2pEbKEsT07aEiV3bZWe3BLiWfFY= -----END CERTIFICATE-----Generated at Mon Feb 2 10:05:05 2026 by rpki-client