This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

$ rpki-client -vvf repo-rpki.idnic.net/repo/a062111d-0a13-4407-af33-34c22a9d7aec/0/7033B8C0DC6A80E5CC4686B93BA393AFCE571B42.mft
File: 7033B8C0DC6A80E5CC4686B93BA393AFCE571B42.mft (raw, json)
Hash identifier: JdpUEjbKgeFBUtfimkIpTYQ3CiUiURkFRWA2Dl0WtYM=
Subject key identifier: 44:72:E1:4F:F3:70:13:9E:55:70:2F:CF:AE:1D:81:8E:BB:60:83:3B
Authority key identifier: 70:33:B8:C0:DC:6A:80:E5:CC:46:86:B9:3B:A3:93:AF:CE:57:1B:42
Certificate issuer: /CN=7033B8C0DC6A80E5CC4686B93BA393AFCE571B42
Certificate serial: 7F939FCCF67A6B02A8E7ACA92591AE2174F21394
Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/7033B8C0DC6A80E5CC4686B93BA393AFCE571B42.cer
Subject info access: rsync://repo-rpki.idnic.net/repo/a062111d-0a13-4407-af33-34c22a9d7aec/0/7033B8C0DC6A80E5CC4686B93BA393AFCE571B42.mft
Manifest number: 8B
Signing time: Sat 31 Jan 2026 19:31:32 +0000
Manifest this update: Sat 31 Jan 2026 19:26:32 +0000
Manifest next update: Wed 04 Feb 2026 01:42:32 +0000
Files and hashes: 1: 7033B8C0DC6A80E5CC4686B93BA393AFCE571B42.crl (hash: dKUtDoPF5bqwZi5IokmE9EGF8L1MZAeCCZUi3qkSGfs=)
2: 3130332e31372e37362e302f32332d3233203d3e20313331373831.roa (hash: D+JQCz3+j+wwVLgvW5xdKrECzq+QJKVH4ZaDUGKOTUY=)
Validation: OK
Signature path: rsync://repo-rpki.idnic.net/repo/a062111d-0a13-4407-af33-34c22a9d7aec/0/7033B8C0DC6A80E5CC4686B93BA393AFCE571B42.crl
rsync://repo-rpki.idnic.net/repo/a062111d-0a13-4407-af33-34c22a9d7aec/0/7033B8C0DC6A80E5CC4686B93BA393AFCE571B42.mft
rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/7033B8C0DC6A80E5CC4686B93BA393AFCE571B42.cer
rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl
rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Wed 04 Feb 2026 01:42:32 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
7f:93:9f:cc:f6:7a:6b:02:a8:e7:ac:a9:25:91:ae:21:74:f2:13:94
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7033B8C0DC6A80E5CC4686B93BA393AFCE571B42
Validity
Not Before: Jan 31 19:26:32 2026 GMT
Not After : Feb 4 01:42:32 2026 GMT
Subject: CN=4472E14FF370139E55702FCFAE1D818EBB60833B
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d6:d6:fe:0b:b5:d3:f1:ae:bc:a0:9f:47:d1:33:
38:87:a7:72:8a:a8:31:6e:f2:f6:ee:ca:11:74:a4:
06:aa:73:3b:d4:58:e4:e0:18:62:0c:5a:40:fd:03:
8c:53:2a:26:e6:c1:21:ea:c8:67:af:3a:2f:8b:06:
79:6a:40:56:f2:e5:66:6e:df:40:9e:21:20:34:e0:
9e:e5:1d:42:34:3d:e2:83:05:03:aa:ce:1f:b6:fb:
a9:14:df:4f:d8:b7:0a:1a:2d:3c:c8:21:01:86:5c:
2f:52:c6:7d:ec:d5:4e:66:5d:7e:89:5b:e8:dd:0c:
6e:8d:31:12:cf:57:6d:43:d8:e5:85:8d:de:96:85:
49:02:46:16:99:0d:90:b8:ac:f3:5e:f7:61:0e:8a:
12:dc:9d:04:35:d2:ee:e6:3e:63:17:07:67:22:ca:
28:c4:65:f0:e3:61:a3:e5:3d:09:07:f6:62:99:2d:
14:55:4b:4d:7b:46:ff:90:04:62:ce:3e:12:57:ed:
5a:25:ba:b9:4b:7d:94:42:94:45:63:73:fd:b0:c7:
ae:f5:e3:49:cd:6e:ed:98:48:54:81:26:05:0f:96:
50:10:f8:87:48:10:26:47:ec:21:5f:5b:73:ae:84:
3a:c7:3e:71:01:56:12:b2:f9:c0:03:c2:30:ed:6e:
1d:93
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
44:72:E1:4F:F3:70:13:9E:55:70:2F:CF:AE:1D:81:8E:BB:60:83:3B
X509v3 Authority Key Identifier:
keyid:70:33:B8:C0:DC:6A:80:E5:CC:46:86:B9:3B:A3:93:AF:CE:57:1B:42
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://repo-rpki.idnic.net/repo/a062111d-0a13-4407-af33-34c22a9d7aec/0/7033B8C0DC6A80E5CC4686B93BA393AFCE571B42.crl
Authority Information Access:
CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/7033B8C0DC6A80E5CC4686B93BA393AFCE571B42.cer
Subject Information Access:
Signed Object - URI:rsync://repo-rpki.idnic.net/repo/a062111d-0a13-4407-af33-34c22a9d7aec/0/7033B8C0DC6A80E5CC4686B93BA393AFCE571B42.mft
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
49:36:b2:3c:5e:89:c5:4c:f4:fb:1e:4f:53:e9:18:43:4e:e8:
c2:34:a0:42:d1:87:8e:7f:25:08:6c:e5:95:bb:af:f6:4a:10:
43:c1:88:1d:32:49:17:85:8b:89:91:ae:28:c2:48:19:e6:f6:
9a:8e:8c:a1:66:cb:47:4f:d3:f3:8c:66:c1:c2:81:a1:61:a6:
75:91:8a:ae:a4:85:d1:68:3d:7c:e5:8c:18:58:24:90:f3:db:
db:f0:3d:a2:81:b1:f6:7c:b4:f4:be:2a:83:73:ce:6a:e6:f7:
e8:cc:00:4d:67:62:9b:5a:d3:45:53:f9:65:9b:ce:eb:20:f4:
fa:4e:59:44:0e:9e:04:1d:49:f2:17:63:25:01:ad:f2:a2:bf:
f6:52:ad:15:0e:7d:c6:d3:9b:ed:00:35:fa:e0:a6:f7:fc:37:
ea:89:8a:a3:8e:0b:88:3c:ad:e6:20:cd:79:fb:e7:53:5d:2d:
5f:08:a8:85:71:ed:8c:69:59:9a:1f:ca:ed:33:b6:5e:ad:ae:
c9:52:12:3c:48:95:10:7c:1e:db:04:69:e3:d9:8b:48:cd:68:
f0:14:90:2e:25:7d:5f:cb:74:94:50:6c:0f:43:d9:a7:47:5c:
1f:43:19:42:1f:9c:25:c7:2a:9c:46:8f:e7:6d:ce:53:64:65:
e5:91:e7:dc
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Feb 2 12:50:41 2026 by rpki-client