This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf repo-rpki.idnic.net/repo/9b733dcf-9f5e-4775-9ce7-9dd525b44b86/1/33D2F1EAE44634CCF2B028FDCA2A11513D83B42D.mft File: 33D2F1EAE44634CCF2B028FDCA2A11513D83B42D.mft (raw, json) Hash identifier: 5D3JeaOMggtXZqm+CGiZOhau1gf1vmei8PzkTGoGnAM= Subject key identifier: 5D:CC:E3:A1:33:CD:78:61:02:CE:79:43:FC:C3:E4:28:45:EB:3D:C9 Authority key identifier: 33:D2:F1:EA:E4:46:34:CC:F2:B0:28:FD:CA:2A:11:51:3D:83:B4:2D Certificate issuer: /CN=33D2F1EAE44634CCF2B028FDCA2A11513D83B42D Certificate serial: 42ED0E9787B33B10EF376990966BA5DF1F000986 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/33D2F1EAE44634CCF2B028FDCA2A11513D83B42D.cer Subject info access: rsync://repo-rpki.idnic.net/repo/9b733dcf-9f5e-4775-9ce7-9dd525b44b86/1/33D2F1EAE44634CCF2B028FDCA2A11513D83B42D.mft Manifest number: DD Signing time: Tue 02 Dec 2025 07:52:26 +0000 Manifest this update: Tue 02 Dec 2025 07:47:26 +0000 Manifest next update: Fri 05 Dec 2025 17:06:26 +0000 Files and hashes: 1: 33D2F1EAE44634CCF2B028FDCA2A11513D83B42D.crl (hash: C9pyMQwbRz8i0v5/ezdxTXd08yxCMtjkYL0sA1IrrDM=) 2: 323030313a6466333a643334303a3a2f34382d3438203d3e20313532373439.roa (hash: Y6M3Rf10ondFVRavAz+BHrKvcEeqI6mWIsztyFy7iY4=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/9b733dcf-9f5e-4775-9ce7-9dd525b44b86/1/33D2F1EAE44634CCF2B028FDCA2A11513D83B42D.crl rsync://repo-rpki.idnic.net/repo/9b733dcf-9f5e-4775-9ce7-9dd525b44b86/1/33D2F1EAE44634CCF2B028FDCA2A11513D83B42D.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/33D2F1EAE44634CCF2B028FDCA2A11513D83B42D.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 05 Dec 2025 17:06:26 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 42:ed:0e:97:87:b3:3b:10:ef:37:69:90:96:6b:a5:df:1f:00:09:86 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=33D2F1EAE44634CCF2B028FDCA2A11513D83B42D Validity Not Before: Dec 2 07:47:26 2025 GMT Not After : Dec 5 17:06:26 2025 GMT Subject: CN=5DCCE3A133CD786102CE7943FCC3E42845EB3DC9 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c4:b8:9c:a9:42:06:a4:52:48:f5:a3:66:2d:2f: 57:1d:65:f8:d0:c2:66:f8:04:44:06:f5:d7:2f:80: 82:92:66:9b:89:58:d0:c4:ba:16:25:9d:bf:17:63: 92:b6:b6:4d:ea:36:d0:30:fe:d9:2f:2c:8f:14:b0: f7:8e:18:1b:f1:a1:68:6f:e6:c0:bb:6c:79:02:41: b8:0e:c5:ba:82:75:98:fb:46:7e:7b:7b:0f:5e:dc: 5d:76:26:2f:ba:97:dc:99:0d:f5:52:70:04:db:c9: e9:6c:72:47:dc:f8:f0:0c:b2:45:6f:a2:7a:af:61: 01:93:ca:61:cf:5a:73:cb:9e:cb:6f:1e:bc:95:a6: 35:06:0d:6d:fd:1c:cd:bc:ac:d3:55:46:3c:bf:2f: a4:0d:70:90:33:2f:7b:1e:79:f0:9f:8e:b8:44:a0: 21:85:87:ed:de:9d:03:f8:62:20:fb:42:39:c8:f7: b9:c8:e7:18:ca:58:7e:7c:48:ed:86:49:62:84:7c: 69:22:37:74:5c:fb:06:b3:a0:21:87:bc:14:dd:86: d5:ba:11:fd:a8:5b:6f:bf:c2:6f:46:0b:fd:72:47: 99:e5:b9:d7:ee:8f:d0:51:ce:b5:bd:6d:aa:2b:df: d7:79:44:53:49:7a:bf:44:29:06:24:b1:96:3d:8e: c4:31 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 5D:CC:E3:A1:33:CD:78:61:02:CE:79:43:FC:C3:E4:28:45:EB:3D:C9 X509v3 Authority Key Identifier: keyid:33:D2:F1:EA:E4:46:34:CC:F2:B0:28:FD:CA:2A:11:51:3D:83:B4:2D X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/9b733dcf-9f5e-4775-9ce7-9dd525b44b86/1/33D2F1EAE44634CCF2B028FDCA2A11513D83B42D.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/33D2F1EAE44634CCF2B028FDCA2A11513D83B42D.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/9b733dcf-9f5e-4775-9ce7-9dd525b44b86/1/33D2F1EAE44634CCF2B028FDCA2A11513D83B42D.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 65:ed:fc:59:22:2e:2d:05:31:c7:5c:68:05:7d:f0:22:f5:76: 14:c2:6a:29:13:ff:8c:3b:d8:cb:4f:4f:bd:4c:b5:32:02:33: d6:99:1a:c9:77:c4:e1:3b:ac:82:c8:2e:39:7f:e5:83:5e:c8: 44:aa:a0:00:7c:fc:9d:44:08:7f:7e:a3:38:b1:19:6a:41:ff: 1f:2f:fe:9a:6c:12:95:c1:d0:ec:77:81:2b:db:9e:67:c9:29: 0d:64:1e:a7:ce:86:c5:5c:eb:2c:4c:8a:3c:2f:16:e8:dd:9a: f1:fb:77:69:b2:40:fe:04:21:4c:66:86:11:6a:3e:33:3c:8a: 75:e5:c8:4a:39:bb:56:31:1f:f5:51:e4:15:56:68:9d:e6:16: a5:5d:00:9b:d6:bc:b7:37:67:60:3c:1e:19:f4:e3:ca:64:98: 38:0a:3e:a0:db:2c:4f:24:6d:c1:5e:6d:f2:33:6d:ab:6d:92: 68:4e:94:31:6a:a2:ec:4f:a5:9b:19:51:4c:10:33:56:c1:0e: 06:76:2d:a6:ae:94:30:c7:64:eb:1f:cc:68:00:7a:9a:b7:7a: 39:f7:a8:40:65:cd:32:d3:f7:85:f0:27:5a:c4:d0:ad:e9:8d: bc:c1:f1:ae:1f:29:29:7c:fb:73:95:dc:80:69:c7:57:2a:c2: 14:da:88:6b -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUQu0Ol4ezOxDvN2mQlmul3x8ACYYwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMzNEMkYxRUFFNDQ2MzRDQ0YyQjAyOEZEQ0EyQTExNTEz RDgzQjQyRDAeFw0yNTEyMDIwNzQ3MjZaFw0yNTEyMDUxNzA2MjZaMDMxMTAvBgNV BAMTKDVEQ0NFM0ExMzNDRDc4NjEwMkNFNzk0M0ZDQzNFNDI4NDVFQjNEQzkwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDEuJypQgakUkj1o2YtL1cdZfjQ wmb4BEQG9dcvgIKSZpuJWNDEuhYlnb8XY5K2tk3qNtAw/tkvLI8UsPeOGBvxoWhv 5sC7bHkCQbgOxbqCdZj7Rn57ew9e3F12Ji+6l9yZDfVScATbyelsckfc+PAMskVv onqvYQGTymHPWnPLnstvHryVpjUGDW39HM28rNNVRjy/L6QNcJAzL3seefCfjrhE oCGFh+3enQP4YiD7QjnI97nI5xjKWH58SO2GSWKEfGkiN3Rc+wazoCGHvBTdhtW6 Ef2oW2+/wm9GC/1yR5nludfuj9BRzrW9baor39d5RFNJer9EKQYksZY9jsQxAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUXczjoTPNeGECznlD/MPkKEXrPckwHwYDVR0j BBgwFoAUM9Lx6uRGNMzysCj9yioRUT2DtC0wDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby85 YjczM2RjZi05ZjVlLTQ3NzUtOWNlNy05ZGQ1MjViNDRiODYvMS8zM0QyRjFFQUU0 NDYzNENDRjJCMDI4RkRDQTJBMTE1MTNEODNCNDJELmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvMzNEMkYxRUFFNDQ2MzRDQ0YyQjAyOEZEQ0EyQTExNTEzRDgz QjQyRC5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vOWI3MzNkY2YtOWY1ZS00Nzc1LTlj ZTctOWRkNTI1YjQ0Yjg2LzEvMzNEMkYxRUFFNDQ2MzRDQ0YyQjAyOEZEQ0EyQTEx NTEzRDgzQjQyRC5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAGXt/FkiLi0FMcdcaAV98CL1dhTCaikT/4w7 2MtPT71MtTICM9aZGsl3xOE7rILILjl/5YNeyESqoAB8/J1ECH9+ozixGWpB/x8v /ppsEpXB0Ox3gSvbnmfJKQ1kHqfOhsVc6yxMijwvFujdmvH7d2myQP4EIUxmhhFq PjM8inXlyEo5u1YxH/VR5BVWaJ3mFqVdAJvWvLc3Z2A8Hhn048pkmDgKPqDbLE8k bcFebfIzbattkmhOlDFqouxPpZsZUUwQM1bBDgZ2LaaulDDHZOsfzGgAepq3ejn3 qEBlzTLT94XwJ1rE0K3pjbzB8a4fKSl8+3OV3IBpx1cqwhTaiGs= -----END CERTIFICATE-----Generated at Wed Dec 3 14:13:35 2025 by rpki-client