This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf repo-rpki.idnic.net/repo/8d703b80-2e78-4d11-ab74-08017e422d6e/0/C33BE6D76C1444B4695CC56D706802967A2A404E.mft File: C33BE6D76C1444B4695CC56D706802967A2A404E.mft (raw, json) Hash identifier: EccAGgaATDNSREJIvTrFLY3GL/pJs7uxSZR5ouwdDUo= Subject key identifier: AE:1D:CC:C7:98:B5:56:FF:2B:DD:A1:E1:A9:8C:D6:67:CA:8D:65:E1 Authority key identifier: C3:3B:E6:D7:6C:14:44:B4:69:5C:C5:6D:70:68:02:96:7A:2A:40:4E Certificate issuer: /CN=C33BE6D76C1444B4695CC56D706802967A2A404E Certificate serial: 7CEDF6DDEC8A00C11C216DDFF2DD342C50F1F99E Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/C33BE6D76C1444B4695CC56D706802967A2A404E.cer Subject info access: rsync://repo-rpki.idnic.net/repo/8d703b80-2e78-4d11-ab74-08017e422d6e/0/C33BE6D76C1444B4695CC56D706802967A2A404E.mft Manifest number: 0161 Signing time: Tue 02 Dec 2025 10:01:45 +0000 Manifest this update: Tue 02 Dec 2025 09:56:45 +0000 Manifest next update: Fri 05 Dec 2025 19:36:45 +0000 Files and hashes: 1: 3130332e35352e33312e302f32342d3234203d3e20313530343834.roa (hash: tAaom1u9dzc8ncYAUwE5XCycjaJDPimabJR/V9nJlmE=) 2: 3130332e35352e33302e302f32332d3233203d3e20313530343834.roa (hash: ZuMnDiHxEL/U8SL8BhAZDvs5aB1dq2I0QG/IhKrpVW8=) 3: 3130332e35352e33302e302f32342d3234203d3e20313530343834.roa (hash: aZfOFjCWcMoRejMmCl7p7stqIRB0AZ4Tzh7bIJ8bPos=) 4: C33BE6D76C1444B4695CC56D706802967A2A404E.crl (hash: HxLIQfDgY0tYbQr+SqlaTnOsf8dU+tmEb304L37hQm4=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/8d703b80-2e78-4d11-ab74-08017e422d6e/0/C33BE6D76C1444B4695CC56D706802967A2A404E.crl rsync://repo-rpki.idnic.net/repo/8d703b80-2e78-4d11-ab74-08017e422d6e/0/C33BE6D76C1444B4695CC56D706802967A2A404E.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/C33BE6D76C1444B4695CC56D706802967A2A404E.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 05 Dec 2025 19:36:45 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 7c:ed:f6:dd:ec:8a:00:c1:1c:21:6d:df:f2:dd:34:2c:50:f1:f9:9e Signature Algorithm: sha256WithRSAEncryption Issuer: CN=C33BE6D76C1444B4695CC56D706802967A2A404E Validity Not Before: Dec 2 09:56:45 2025 GMT Not After : Dec 5 19:36:45 2025 GMT Subject: CN=AE1DCCC798B556FF2BDDA1E1A98CD667CA8D65E1 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c9:30:ce:de:2a:a7:54:11:0f:65:26:f5:85:da: b6:ec:77:93:33:5a:2f:5d:91:b4:dd:19:36:12:85: d0:b5:0a:79:e9:96:53:ba:2a:35:cb:2d:8d:81:0b: 5f:a9:d9:a9:b4:a2:52:ae:5c:03:36:ef:85:14:91: a0:26:87:58:6f:81:47:2c:c9:a3:fa:b0:98:b8:f9: a3:11:9f:3d:ae:60:d5:5d:52:0e:08:fe:3b:42:12: 72:11:f0:1e:51:13:0b:f3:4e:b7:d1:c0:5d:5d:38: 7c:be:e5:1f:59:8c:da:71:a5:c4:bd:c6:6f:2c:57: 6b:55:50:58:18:4e:e0:2f:ec:ba:69:f6:71:d3:55: 20:2d:df:d3:ff:60:33:38:41:b0:f2:19:d3:f7:2b: 79:b7:ca:2d:87:8b:29:66:35:e4:8c:25:1d:ba:7d: de:b1:f9:70:3c:4d:0e:eb:ca:99:3c:30:7b:66:d9: 25:d1:1f:a7:21:b0:cc:4c:d8:b3:9b:2b:47:dc:1d: 6f:bd:20:35:b7:1d:b3:08:bb:67:d5:6d:32:0c:fb: be:06:88:eb:c1:c5:06:df:0d:7f:0f:30:62:bd:4c: ef:f9:55:8a:ef:4b:df:21:38:64:9a:fa:bf:2f:8b: 87:90:33:50:8c:a2:d3:8d:52:2a:67:40:22:c9:20: ec:41 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: AE:1D:CC:C7:98:B5:56:FF:2B:DD:A1:E1:A9:8C:D6:67:CA:8D:65:E1 X509v3 Authority Key Identifier: keyid:C3:3B:E6:D7:6C:14:44:B4:69:5C:C5:6D:70:68:02:96:7A:2A:40:4E X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/8d703b80-2e78-4d11-ab74-08017e422d6e/0/C33BE6D76C1444B4695CC56D706802967A2A404E.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/C33BE6D76C1444B4695CC56D706802967A2A404E.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/8d703b80-2e78-4d11-ab74-08017e422d6e/0/C33BE6D76C1444B4695CC56D706802967A2A404E.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 60:09:bc:46:13:58:70:8f:33:ad:a7:13:56:c4:fa:dc:b3:8f: 38:9b:2f:4d:23:3b:5e:3b:41:45:5b:bb:d3:30:0f:ff:e5:3d: 19:88:f2:1f:55:8d:af:e9:63:23:65:63:18:0c:5c:be:d8:dc: 5d:79:cf:6c:1b:be:37:a3:95:00:f9:f9:c6:7a:c7:e2:72:c8: eb:b2:ae:26:33:db:1a:7a:36:e2:6b:5e:fb:7b:e2:b6:ed:33: e8:f4:1e:0a:48:94:bf:4d:76:2f:28:14:c5:d8:21:a4:0a:05: 32:ed:e7:36:bb:88:83:96:90:8c:ca:07:ea:32:47:eb:10:3e: 73:be:99:b3:3f:99:21:7c:1b:69:2d:97:2c:f0:47:11:4b:01: ce:98:49:61:fb:bc:62:a4:31:b4:e6:ee:7b:c2:0b:44:47:87: 11:ee:b9:62:bb:af:e7:7d:d9:82:47:34:21:e0:e9:7c:35:e7: ff:12:de:5a:dd:db:f0:c7:80:ee:c8:3d:d4:e0:33:78:d5:d1: f8:22:66:76:57:4e:d9:8e:9f:02:c6:47:24:ac:53:ce:f9:fd: ac:d9:23:52:49:91:2c:a0:d4:76:a9:f2:f5:72:bb:ab:cd:f3: 1d:4c:d1:bd:1d:59:28:b1:08:43:18:8a:2c:7e:22:72:8e:3e: 63:6f:1b:76 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUfO323eyKAMEcIW3f8t00LFDx+Z4wDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoQzMzQkU2RDc2QzE0NDRCNDY5NUNDNTZENzA2ODAyOTY3 QTJBNDA0RTAeFw0yNTEyMDIwOTU2NDVaFw0yNTEyMDUxOTM2NDVaMDMxMTAvBgNV BAMTKEFFMURDQ0M3OThCNTU2RkYyQkREQTFFMUE5OENENjY3Q0E4RDY1RTEwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDJMM7eKqdUEQ9lJvWF2rbsd5Mz Wi9dkbTdGTYShdC1CnnpllO6KjXLLY2BC1+p2am0olKuXAM274UUkaAmh1hvgUcs yaP6sJi4+aMRnz2uYNVdUg4I/jtCEnIR8B5REwvzTrfRwF1dOHy+5R9ZjNpxpcS9 xm8sV2tVUFgYTuAv7Lpp9nHTVSAt39P/YDM4QbDyGdP3K3m3yi2HiylmNeSMJR26 fd6x+XA8TQ7rypk8MHtm2SXRH6chsMxM2LObK0fcHW+9IDW3HbMIu2fVbTIM+74G iOvBxQbfDX8PMGK9TO/5VYrvS98hOGSa+r8vi4eQM1CMotONUipnQCLJIOxBAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUrh3Mx5i1Vv8r3aHhqYzWZ8qNZeEwHwYDVR0j BBgwFoAUwzvm12wURLRpXMVtcGgClnoqQE4wDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby84 ZDcwM2I4MC0yZTc4LTRkMTEtYWI3NC0wODAxN2U0MjJkNmUvMC9DMzNCRTZENzZD MTQ0NEI0Njk1Q0M1NkQ3MDY4MDI5NjdBMkE0MDRFLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvQzMzQkU2RDc2QzE0NDRCNDY5NUNDNTZENzA2ODAyOTY3QTJB NDA0RS5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vOGQ3MDNiODAtMmU3OC00ZDExLWFi NzQtMDgwMTdlNDIyZDZlLzAvQzMzQkU2RDc2QzE0NDRCNDY5NUNDNTZENzA2ODAy OTY3QTJBNDA0RS5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAGAJvEYTWHCPM62nE1bE+tyzjzibL00jO147 QUVbu9MwD//lPRmI8h9Vja/pYyNlYxgMXL7Y3F15z2wbvjejlQD5+cZ6x+JyyOuy riYz2xp6NuJrXvt74rbtM+j0HgpIlL9Ndi8oFMXYIaQKBTLt5za7iIOWkIzKB+oy R+sQPnO+mbM/mSF8G2ktlyzwRxFLAc6YSWH7vGKkMbTm7nvCC0RHhxHuuWK7r+d9 2YJHNCHg6Xw15/8S3lrd2/DHgO7IPdTgM3jV0fgiZnZXTtmOnwLGRySsU875/azZ I1JJkSyg1Hap8vVyu6vN8x1M0b0dWSixCEMYiix+InKOPmNvG3Y= -----END CERTIFICATE-----Generated at Wed Dec 3 14:13:32 2025 by rpki-client