This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf repo-rpki.idnic.net/repo/a062111d-0a13-4407-af33-34c22a9d7aec/0/7033B8C0DC6A80E5CC4686B93BA393AFCE571B42.mft File: 7033B8C0DC6A80E5CC4686B93BA393AFCE571B42.mft (raw, json) Hash identifier: NueeuhgdKbRhtauRoL3R2bFEYDqVgMwQRTPqu1dwdGE= Subject key identifier: 8B:5F:F3:A2:72:7D:CE:57:D0:06:C1:EF:FA:FC:25:C2:6D:88:32:60 Authority key identifier: 70:33:B8:C0:DC:6A:80:E5:CC:46:86:B9:3B:A3:93:AF:CE:57:1B:42 Certificate issuer: /CN=7033B8C0DC6A80E5CC4686B93BA393AFCE571B42 Certificate serial: 7026B6BBB7FAD667121F475668A622F227D0B71A Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/7033B8C0DC6A80E5CC4686B93BA393AFCE571B42.cer Subject info access: rsync://repo-rpki.idnic.net/repo/a062111d-0a13-4407-af33-34c22a9d7aec/0/7033B8C0DC6A80E5CC4686B93BA393AFCE571B42.mft Manifest number: 70 Signing time: Mon 01 Dec 2025 16:01:33 +0000 Manifest this update: Mon 01 Dec 2025 15:56:33 +0000 Manifest next update: Fri 05 Dec 2025 00:52:33 +0000 Files and hashes: 1: 7033B8C0DC6A80E5CC4686B93BA393AFCE571B42.crl (hash: /fDJjiBQeWIkXcShw2x20mIukfKZQYRGGuk1FoENG1s=) 2: 3130332e31372e37362e302f32332d3233203d3e20313331373831.roa (hash: D+JQCz3+j+wwVLgvW5xdKrECzq+QJKVH4ZaDUGKOTUY=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/a062111d-0a13-4407-af33-34c22a9d7aec/0/7033B8C0DC6A80E5CC4686B93BA393AFCE571B42.crl rsync://repo-rpki.idnic.net/repo/a062111d-0a13-4407-af33-34c22a9d7aec/0/7033B8C0DC6A80E5CC4686B93BA393AFCE571B42.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/7033B8C0DC6A80E5CC4686B93BA393AFCE571B42.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 05 Dec 2025 00:52:33 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 70:26:b6:bb:b7:fa:d6:67:12:1f:47:56:68:a6:22:f2:27:d0:b7:1a Signature Algorithm: sha256WithRSAEncryption Issuer: CN=7033B8C0DC6A80E5CC4686B93BA393AFCE571B42 Validity Not Before: Dec 1 15:56:33 2025 GMT Not After : Dec 5 00:52:33 2025 GMT Subject: CN=8B5FF3A2727DCE57D006C1EFFAFC25C26D883260 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bf:7c:76:2f:28:75:18:04:0d:86:03:95:0a:8d: 07:66:3e:da:bd:13:c8:43:23:cf:8b:45:97:8a:0a: f2:9b:b3:ef:be:c8:b1:75:53:c7:0d:46:29:98:13: 51:e7:a1:08:cf:1e:29:3d:ad:28:e0:56:21:25:4f: 76:c0:f3:18:c3:82:e9:07:ed:3a:ee:2a:e0:44:10: 7f:c9:d3:78:16:35:7c:e3:1b:60:55:01:f0:34:e7: f4:af:d3:6a:b2:de:b3:51:30:61:19:32:1a:86:ee: 31:91:eb:1a:f7:78:6f:53:3d:50:fd:64:08:d5:d6: e0:3b:c1:83:d7:ce:17:5f:d1:72:fe:ef:28:e0:2f: ad:ba:34:45:27:47:21:ac:e8:bb:5b:46:ef:04:a9: 6d:29:39:9e:ef:8f:82:06:76:9e:45:0d:68:8a:ec: c4:42:f1:54:cc:83:98:2b:af:df:85:de:d5:58:31: 21:27:b1:a5:c8:54:a1:ed:6d:fb:8c:09:19:e4:fd: 11:c1:44:4f:f6:0f:8a:2a:c1:97:e4:97:dc:5c:46: ec:b4:f9:e5:15:de:d5:d3:fc:a2:a9:e1:b3:1f:45: f7:58:6d:e1:2c:e7:76:5b:39:0e:f2:03:35:63:c5: cc:63:c9:60:cd:74:5d:5c:4d:ad:06:10:3d:54:11: 46:9b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 8B:5F:F3:A2:72:7D:CE:57:D0:06:C1:EF:FA:FC:25:C2:6D:88:32:60 X509v3 Authority Key Identifier: keyid:70:33:B8:C0:DC:6A:80:E5:CC:46:86:B9:3B:A3:93:AF:CE:57:1B:42 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/a062111d-0a13-4407-af33-34c22a9d7aec/0/7033B8C0DC6A80E5CC4686B93BA393AFCE571B42.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/7033B8C0DC6A80E5CC4686B93BA393AFCE571B42.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/a062111d-0a13-4407-af33-34c22a9d7aec/0/7033B8C0DC6A80E5CC4686B93BA393AFCE571B42.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 85:a9:18:a3:ab:c7:3f:62:54:0e:10:57:08:67:36:0a:80:e6: f1:0a:40:c9:48:04:a9:2d:74:da:f5:39:2b:fe:fc:93:b2:ac: 37:82:4e:bf:4f:a4:25:29:fe:f5:41:4d:f5:c4:08:35:02:0e: 5a:8e:67:3a:0a:cc:fa:ac:49:5f:28:e7:fa:82:0f:d8:58:af: 5e:b1:86:eb:47:1d:4c:c3:25:ec:bd:ac:73:08:bb:d7:a9:49: 8b:5e:e6:2d:c5:a0:9b:ca:b4:d2:24:b3:8a:98:7e:81:57:fa: dd:f9:14:a9:a0:ac:1a:ca:04:e6:c3:cc:56:ef:79:c4:59:52: d9:69:b4:a4:f5:8b:a5:52:9f:4a:b4:1c:83:77:97:79:77:cf: 5a:3e:1a:3c:bf:fa:5b:52:ee:71:cb:20:6f:90:be:b3:1c:42: 3f:d4:38:4f:8f:79:81:bd:d9:ff:17:f9:68:ca:5f:aa:cf:38: a8:19:28:eb:31:e6:48:0f:34:de:1f:2f:b5:1c:a6:ae:dd:14: 24:b1:87:13:66:92:fc:dd:e6:45:48:e3:d5:0e:5b:e5:e7:c3: de:d5:2f:22:dd:73:21:3e:ba:96:ac:03:63:ca:65:5d:6f:d3: e4:dc:cd:31:1c:4a:33:9a:11:c9:11:a3:0c:9d:48:86:82:5c: 45:c7:58:73 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUcCa2u7f61mcSH0dWaKYi8ifQtxowDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoNzAzM0I4QzBEQzZBODBFNUNDNDY4NkI5M0JBMzkzQUZD RTU3MUI0MjAeFw0yNTEyMDExNTU2MzNaFw0yNTEyMDUwMDUyMzNaMDMxMTAvBgNV BAMTKDhCNUZGM0EyNzI3RENFNTdEMDA2QzFFRkZBRkMyNUMyNkQ4ODMyNjAwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC/fHYvKHUYBA2GA5UKjQdmPtq9 E8hDI8+LRZeKCvKbs+++yLF1U8cNRimYE1HnoQjPHik9rSjgViElT3bA8xjDgukH 7TruKuBEEH/J03gWNXzjG2BVAfA05/Sv02qy3rNRMGEZMhqG7jGR6xr3eG9TPVD9 ZAjV1uA7wYPXzhdf0XL+7yjgL626NEUnRyGs6LtbRu8EqW0pOZ7vj4IGdp5FDWiK 7MRC8VTMg5grr9+F3tVYMSEnsaXIVKHtbfuMCRnk/RHBRE/2D4oqwZfkl9xcRuy0 +eUV3tXT/KKp4bMfRfdYbeEs53ZbOQ7yAzVjxcxjyWDNdF1cTa0GED1UEUabAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUi1/zonJ9zlfQBsHv+vwlwm2IMmAwHwYDVR0j BBgwFoAUcDO4wNxqgOXMRoa5O6OTr85XG0IwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby9h MDYyMTExZC0wYTEzLTQ0MDctYWYzMy0zNGMyMmE5ZDdhZWMvMC83MDMzQjhDMERD NkE4MEU1Q0M0Njg2QjkzQkEzOTNBRkNFNTcxQjQyLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvNzAzM0I4QzBEQzZBODBFNUNDNDY4NkI5M0JBMzkzQUZDRTU3 MUI0Mi5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vYTA2MjExMWQtMGExMy00NDA3LWFm MzMtMzRjMjJhOWQ3YWVjLzAvNzAzM0I4QzBEQzZBODBFNUNDNDY4NkI5M0JBMzkz QUZDRTU3MUI0Mi5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAIWpGKOrxz9iVA4QVwhnNgqA5vEKQMlIBKkt dNr1OSv+/JOyrDeCTr9PpCUp/vVBTfXECDUCDlqOZzoKzPqsSV8o5/qCD9hYr16x hutHHUzDJey9rHMIu9epSYte5i3FoJvKtNIks4qYfoFX+t35FKmgrBrKBObDzFbv ecRZUtlptKT1i6VSn0q0HIN3l3l3z1o+Gjy/+ltS7nHLIG+QvrMcQj/UOE+PeYG9 2f8X+WjKX6rPOKgZKOsx5kgPNN4fL7Ucpq7dFCSxhxNmkvzd5kVI49UOW+Xnw97V LyLdcyE+upasA2PKZV1v0+TczTEcSjOaEckRowydSIaCXEXHWHM= -----END CERTIFICATE-----Generated at Wed Dec 3 14:44:24 2025 by rpki-client