This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf repo-rpki.idnic.net/repo/993e3d26-4aaf-4e96-ad49-5273f0a4e6ed/0/A33FF74965A9608D9E5C3C2E3EF802EA1E5CD794.mft File: A33FF74965A9608D9E5C3C2E3EF802EA1E5CD794.mft (raw, json) Hash identifier: iqj0CPbf6AvJ6YLDqM6B/aXJ5GSoclPnWygtENF7jTk= Subject key identifier: 90:70:15:F8:68:85:23:09:86:90:D8:5F:3B:AE:48:AF:CF:93:FC:CB Authority key identifier: A3:3F:F7:49:65:A9:60:8D:9E:5C:3C:2E:3E:F8:02:EA:1E:5C:D7:94 Certificate issuer: /CN=A33FF74965A9608D9E5C3C2E3EF802EA1E5CD794 Certificate serial: 649A65888481C530EEC2790676FF81FD2F22C4F8 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/A33FF74965A9608D9E5C3C2E3EF802EA1E5CD794.cer Subject info access: rsync://repo-rpki.idnic.net/repo/993e3d26-4aaf-4e96-ad49-5273f0a4e6ed/0/A33FF74965A9608D9E5C3C2E3EF802EA1E5CD794.mft Manifest number: 0270 Signing time: Sat 31 Jan 2026 18:11:21 +0000 Manifest this update: Sat 31 Jan 2026 18:06:21 +0000 Manifest next update: Tue 03 Feb 2026 23:42:21 +0000 Files and hashes: 1: A33FF74965A9608D9E5C3C2E3EF802EA1E5CD794.crl (hash: C/C+Ih8EYwChDQutZsXZBb9tqEeZXxUTYWC94RHwLJ0=) 2: 3130332e3138342e3132382e302f32342d3234203d3e20313439363830.roa (hash: qAILqHxIh//KPfkbqwXoLWKwUymM3YkGbuohytyxcQQ=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/993e3d26-4aaf-4e96-ad49-5273f0a4e6ed/0/A33FF74965A9608D9E5C3C2E3EF802EA1E5CD794.crl rsync://repo-rpki.idnic.net/repo/993e3d26-4aaf-4e96-ad49-5273f0a4e6ed/0/A33FF74965A9608D9E5C3C2E3EF802EA1E5CD794.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/A33FF74965A9608D9E5C3C2E3EF802EA1E5CD794.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 03 Feb 2026 23:42:21 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 64:9a:65:88:84:81:c5:30:ee:c2:79:06:76:ff:81:fd:2f:22:c4:f8 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A33FF74965A9608D9E5C3C2E3EF802EA1E5CD794 Validity Not Before: Jan 31 18:06:21 2026 GMT Not After : Feb 3 23:42:21 2026 GMT Subject: CN=907015F8688523098690D85F3BAE48AFCF93FCCB Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a2:a0:5e:ee:60:cd:4e:99:ff:5f:25:ec:2b:5a: 00:30:42:10:f2:dc:cc:82:91:2f:b5:8f:8c:b8:2f: 15:ff:dd:8e:47:64:0f:45:65:d9:38:f6:cb:c1:76: 6f:5e:65:2e:13:11:da:00:c1:de:a6:f0:83:3c:18: b8:e6:91:d3:52:97:31:bd:5c:fa:79:66:f3:be:18: 91:b0:ef:2e:6f:f1:3b:6a:f7:b0:f1:8b:cd:34:a9: d4:23:4c:03:4b:fc:70:2e:47:50:dd:b7:13:72:04: f0:f9:df:ec:fb:13:66:0a:90:d9:dc:04:20:aa:a8: 9e:c6:fe:2f:77:b3:ba:c5:96:ad:f0:46:db:39:4c: b7:99:4b:fb:2b:02:33:f9:51:af:a8:b4:e8:5d:1e: 85:bc:44:59:90:b4:41:f3:00:e4:15:28:cd:d7:58: 29:ce:28:85:5f:20:87:08:6f:34:23:b0:0a:bb:fb: 6e:ae:a4:b0:5f:42:1b:10:37:bd:14:69:fd:87:93: 2b:a9:8a:bd:61:50:da:1c:2e:a8:a6:76:d0:1d:22: 68:cd:25:65:de:39:76:3c:f4:44:fd:d1:43:48:b2: 7b:85:cc:a6:1a:9d:95:41:80:61:c0:f7:4c:b2:61: f5:e4:54:0a:af:f4:ed:3f:10:c6:a8:1d:86:da:bd: 31:db Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 90:70:15:F8:68:85:23:09:86:90:D8:5F:3B:AE:48:AF:CF:93:FC:CB X509v3 Authority Key Identifier: keyid:A3:3F:F7:49:65:A9:60:8D:9E:5C:3C:2E:3E:F8:02:EA:1E:5C:D7:94 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/993e3d26-4aaf-4e96-ad49-5273f0a4e6ed/0/A33FF74965A9608D9E5C3C2E3EF802EA1E5CD794.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/A33FF74965A9608D9E5C3C2E3EF802EA1E5CD794.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/993e3d26-4aaf-4e96-ad49-5273f0a4e6ed/0/A33FF74965A9608D9E5C3C2E3EF802EA1E5CD794.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption aa:00:fd:e6:cc:33:fc:4d:d0:43:2f:1d:d6:ec:9b:5b:bd:d8: 69:fc:01:c0:98:5e:01:82:a7:90:61:60:54:41:cd:c3:b0:1f: e9:74:1d:3f:5b:b8:70:8e:b2:89:8e:27:4f:f8:66:c9:b3:bc: c3:b4:54:52:c0:d4:a1:1d:0e:2a:a7:36:64:77:6c:ac:fb:38: 74:d4:8b:3c:10:f5:4f:65:ac:e1:ae:e9:e8:97:01:44:61:0d: bd:2a:60:4f:66:ec:1a:39:bd:e6:91:1a:e3:64:20:d5:f4:54: e2:f6:05:b2:09:2c:fe:22:0a:69:9f:7f:d0:68:67:64:0d:fc: 71:98:62:81:29:93:12:07:12:42:ab:e0:49:c4:87:be:1f:9e: bc:0c:b7:38:9c:57:5b:a9:07:e3:3a:ba:82:8a:c8:03:ad:da: aa:d9:ef:50:a1:c2:dd:27:48:89:cc:27:c9:69:80:c1:fb:81: 71:68:e5:18:9b:15:9d:86:25:d7:41:57:2c:e1:2e:af:9a:ce: 27:04:e8:b3:89:85:93:71:90:9a:db:23:72:b7:d7:4e:88:80: d2:0a:5f:bc:9f:e2:86:39:82:6a:ed:ec:9d:ae:b2:39:8d:bc: 08:cb:55:01:d9:21:35:7d:17:75:f8:3c:77:4e:75:ce:88:d7: 34:47:2a:a4 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUZJpliISBxTDuwnkGdv+B/S8ixPgwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoQTMzRkY3NDk2NUE5NjA4RDlFNUMzQzJFM0VGODAyRUEx RTVDRDc5NDAeFw0yNjAxMzExODA2MjFaFw0yNjAyMDMyMzQyMjFaMDMxMTAvBgNV BAMTKDkwNzAxNUY4Njg4NTIzMDk4NjkwRDg1RjNCQUU0OEFGQ0Y5M0ZDQ0IwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCioF7uYM1Omf9fJewrWgAwQhDy 3MyCkS+1j4y4LxX/3Y5HZA9FZdk49svBdm9eZS4TEdoAwd6m8IM8GLjmkdNSlzG9 XPp5ZvO+GJGw7y5v8Ttq97Dxi800qdQjTANL/HAuR1DdtxNyBPD53+z7E2YKkNnc BCCqqJ7G/i93s7rFlq3wRts5TLeZS/srAjP5Ua+otOhdHoW8RFmQtEHzAOQVKM3X WCnOKIVfIIcIbzQjsAq7+26upLBfQhsQN70Uaf2Hkyupir1hUNocLqimdtAdImjN JWXeOXY89ET90UNIsnuFzKYanZVBgGHA90yyYfXkVAqv9O0/EMaoHYbavTHbAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUkHAV+GiFIwmGkNhfO65Ir8+T/MswHwYDVR0j BBgwFoAUoz/3SWWpYI2eXDwuPvgC6h5c15QwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby85 OTNlM2QyNi00YWFmLTRlOTYtYWQ0OS01MjczZjBhNGU2ZWQvMC9BMzNGRjc0OTY1 QTk2MDhEOUU1QzNDMkUzRUY4MDJFQTFFNUNENzk0LmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvQTMzRkY3NDk2NUE5NjA4RDlFNUMzQzJFM0VGODAyRUExRTVD RDc5NC5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vOTkzZTNkMjYtNGFhZi00ZTk2LWFk NDktNTI3M2YwYTRlNmVkLzAvQTMzRkY3NDk2NUE5NjA4RDlFNUMzQzJFM0VGODAy RUExRTVDRDc5NC5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAKoA/ebMM/xN0EMvHdbsm1u92Gn8AcCYXgGC p5BhYFRBzcOwH+l0HT9buHCOsomOJ0/4ZsmzvMO0VFLA1KEdDiqnNmR3bKz7OHTU izwQ9U9lrOGu6eiXAURhDb0qYE9m7Bo5veaRGuNkINX0VOL2BbIJLP4iCmmff9Bo Z2QN/HGYYoEpkxIHEkKr4EnEh74fnrwMtzicV1upB+M6uoKKyAOt2qrZ71Chwt0n SInMJ8lpgMH7gXFo5RibFZ2GJddBVyzhLq+azicE6LOJhZNxkJrbI3K3106IgNIK X7yf4oY5gmrt7J2usjmNvAjLVQHZITV9F3X4PHdOdc6I1zRHKqQ= -----END CERTIFICATE-----Generated at Mon Feb 2 09:42:09 2026 by rpki-client