This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf repo-rpki.idnic.net/repo/03ade9c0-cde1-47f0-9cd2-4a57bdde14e8/0/33EF8ED81E12A39E325D47325D8FDA76CC497040.mft File: 33EF8ED81E12A39E325D47325D8FDA76CC497040.mft (raw, json) Hash identifier: b2746tTEltTBK8Ot3y7qp/EB/uaAhSeHRKvE3OypPdU= Subject key identifier: EE:8E:E7:BA:35:7E:D0:55:22:4F:6B:B7:56:6F:96:46:C7:7B:88:3B Authority key identifier: 33:EF:8E:D8:1E:12:A3:9E:32:5D:47:32:5D:8F:DA:76:CC:49:70:40 Certificate issuer: /CN=33EF8ED81E12A39E325D47325D8FDA76CC497040 Certificate serial: 702917AB30F532E3E2CCE7A0AE856172680287A5 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/33EF8ED81E12A39E325D47325D8FDA76CC497040.cer Subject info access: rsync://repo-rpki.idnic.net/repo/03ade9c0-cde1-47f0-9cd2-4a57bdde14e8/0/33EF8ED81E12A39E325D47325D8FDA76CC497040.mft Manifest number: 0229 Signing time: Sat 20 Dec 2025 06:01:56 +0000 Manifest this update: Sat 20 Dec 2025 05:56:56 +0000 Manifest next update: Tue 23 Dec 2025 16:46:56 +0000 Files and hashes: 1: 33EF8ED81E12A39E325D47325D8FDA76CC497040.crl (hash: i9WBAPLBE5cZIgiriI/bf8f9RlOWyx0QRFHMYGpYRfA=) 2: 3130332e3138382e3136392e302f32342d3234203d3e203538383231.roa (hash: vv/vovF/hb4Z1SuWQuWHcDR4S/nQChh3Okt6YN7Aqwg=) 3: 3130332e3138382e3136382e302f32342d3234203d3e20313439373235.roa (hash: 2Vcw1BQIrq+euE8oM1Q4TIy+/+OqP6RefIW+9ae0TaY=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/03ade9c0-cde1-47f0-9cd2-4a57bdde14e8/0/33EF8ED81E12A39E325D47325D8FDA76CC497040.crl rsync://repo-rpki.idnic.net/repo/03ade9c0-cde1-47f0-9cd2-4a57bdde14e8/0/33EF8ED81E12A39E325D47325D8FDA76CC497040.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/33EF8ED81E12A39E325D47325D8FDA76CC497040.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 23 Dec 2025 16:46:56 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 70:29:17:ab:30:f5:32:e3:e2:cc:e7:a0:ae:85:61:72:68:02:87:a5 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=33EF8ED81E12A39E325D47325D8FDA76CC497040 Validity Not Before: Dec 20 05:56:56 2025 GMT Not After : Dec 23 16:46:56 2025 GMT Subject: CN=EE8EE7BA357ED055224F6BB7566F9646C77B883B Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:dc:50:61:4c:07:b1:21:e1:d3:34:5d:8a:2f:07: a9:4e:b9:a2:e4:84:e1:60:0e:9c:21:61:e1:b9:ce: 50:59:f9:2b:1e:9e:04:98:a4:02:e3:c0:d4:24:fb: f4:20:70:c2:25:da:08:ff:87:4f:0c:81:87:97:b0: df:b1:82:4c:4f:a0:e3:69:ba:ad:91:52:3b:03:8d: f9:bf:f1:9a:a7:c8:4e:e5:cd:17:53:28:41:70:12: ec:59:35:50:9f:2b:53:eb:94:fe:74:1c:85:d4:32: 6f:b2:3e:0a:0c:d1:d3:7a:8d:33:00:ba:53:76:3c: c9:ed:a3:ba:d5:41:a8:52:e8:6b:ab:90:eb:d3:fb: eb:13:64:b6:b9:3b:6e:82:fc:9d:fb:7c:e3:d5:cd: 7b:d4:3e:16:00:5b:c3:2d:f0:a7:4f:f2:4a:7c:80: f4:fd:0c:67:22:80:25:99:43:73:1d:8d:98:c2:32: 32:69:5c:eb:b1:f1:17:13:9e:22:28:03:b5:f4:85: 85:b5:b0:11:20:e7:4d:7f:f9:0e:e7:a3:f7:0e:f2: f6:1c:5f:90:cf:1e:e0:ba:9f:6a:8c:2b:ed:94:6a: 7a:67:48:0e:b9:e8:0a:e4:27:7d:1d:3c:cc:5d:b9: 1c:7b:d0:44:13:04:1b:f1:4d:72:91:eb:51:ca:8a: af:57 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: EE:8E:E7:BA:35:7E:D0:55:22:4F:6B:B7:56:6F:96:46:C7:7B:88:3B X509v3 Authority Key Identifier: keyid:33:EF:8E:D8:1E:12:A3:9E:32:5D:47:32:5D:8F:DA:76:CC:49:70:40 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/03ade9c0-cde1-47f0-9cd2-4a57bdde14e8/0/33EF8ED81E12A39E325D47325D8FDA76CC497040.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/33EF8ED81E12A39E325D47325D8FDA76CC497040.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/03ade9c0-cde1-47f0-9cd2-4a57bdde14e8/0/33EF8ED81E12A39E325D47325D8FDA76CC497040.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 16:60:10:d7:8f:19:5d:4e:02:53:02:88:54:da:ec:f1:0b:09: 1d:96:99:28:05:e3:79:84:57:c1:88:19:8f:2b:24:2a:e0:44: bb:a3:8d:49:a3:4a:15:29:96:69:3f:8a:04:6c:73:18:c3:ef: 29:25:60:42:a8:24:c0:c3:35:a7:ec:00:75:62:b0:c7:20:d6: 8d:19:ec:b4:61:a6:4d:ce:78:35:43:b9:63:22:2b:16:9b:b7: 96:62:ab:4f:b4:a0:83:e7:81:22:c3:b3:bb:75:82:ef:af:d8: d5:0a:54:28:d7:42:56:69:bd:40:61:e6:25:8a:f9:19:77:91: 71:3b:47:8b:69:be:0a:cb:17:43:d5:43:66:40:3b:de:f0:60: ef:8e:87:95:8b:be:19:81:d9:32:00:44:ad:38:1c:2b:36:ef: 4e:6f:d2:26:c8:ad:ef:b9:ec:02:4c:ee:9c:04:76:5a:85:42: ed:26:e1:3b:39:69:eb:54:9a:5f:06:79:bd:b9:bf:90:26:79: f1:f0:d4:8a:3c:d7:5d:44:1e:07:4e:9c:0d:c3:0f:a2:df:bb: 4d:b2:23:7c:7c:f2:4a:f5:c4:18:9e:c5:16:b8:81:a3:f2:5e: 4e:25:dc:b0:c6:1a:37:85:61:3b:44:f8:b2:c2:60:2e:74:92: d8:55:33:7b -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUcCkXqzD1MuPizOegroVhcmgCh6UwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMzNFRjhFRDgxRTEyQTM5RTMyNUQ0NzMyNUQ4RkRBNzZD QzQ5NzA0MDAeFw0yNTEyMjAwNTU2NTZaFw0yNTEyMjMxNjQ2NTZaMDMxMTAvBgNV BAMTKEVFOEVFN0JBMzU3RUQwNTUyMjRGNkJCNzU2NkY5NjQ2Qzc3Qjg4M0IwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDcUGFMB7Eh4dM0XYovB6lOuaLk hOFgDpwhYeG5zlBZ+SsengSYpALjwNQk+/QgcMIl2gj/h08MgYeXsN+xgkxPoONp uq2RUjsDjfm/8ZqnyE7lzRdTKEFwEuxZNVCfK1PrlP50HIXUMm+yPgoM0dN6jTMA ulN2PMnto7rVQahS6GurkOvT++sTZLa5O26C/J37fOPVzXvUPhYAW8Mt8KdP8kp8 gPT9DGcigCWZQ3MdjZjCMjJpXOux8RcTniIoA7X0hYW1sBEg501/+Q7no/cO8vYc X5DPHuC6n2qMK+2UanpnSA656ArkJ30dPMxduRx70EQTBBvxTXKR61HKiq9XAgMB AAGjggI8MIICODAdBgNVHQ4EFgQU7o7nujV+0FUiT2u3Vm+WRsd7iDswHwYDVR0j BBgwFoAUM++O2B4So54yXUcyXY/adsxJcEAwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby8w M2FkZTljMC1jZGUxLTQ3ZjAtOWNkMi00YTU3YmRkZTE0ZTgvMC8zM0VGOEVEODFF MTJBMzlFMzI1RDQ3MzI1RDhGREE3NkNDNDk3MDQwLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvMzNFRjhFRDgxRTEyQTM5RTMyNUQ0NzMyNUQ4RkRBNzZDQzQ5 NzA0MC5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vMDNhZGU5YzAtY2RlMS00N2YwLTlj ZDItNGE1N2JkZGUxNGU4LzAvMzNFRjhFRDgxRTEyQTM5RTMyNUQ0NzMyNUQ4RkRB NzZDQzQ5NzA0MC5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBABZgENePGV1OAlMCiFTa7PELCR2WmSgF43mE V8GIGY8rJCrgRLujjUmjShUplmk/igRscxjD7yklYEKoJMDDNafsAHVisMcg1o0Z 7LRhpk3OeDVDuWMiKxabt5Ziq0+0oIPngSLDs7t1gu+v2NUKVCjXQlZpvUBh5iWK +Rl3kXE7R4tpvgrLF0PVQ2ZAO97wYO+Oh5WLvhmB2TIARK04HCs2705v0ibIre+5 7AJM7pwEdlqFQu0m4Ts5aetUml8Geb25v5AmefHw1Io8111EHgdOnA3DD6Lfu02y I3x88kr1xBiexRa4gaPyXk4l3LDGGjeFYTtE+LLCYC50kthVM3s= -----END CERTIFICATE-----Generated at Sun Dec 21 09:12:00 2025 by rpki-client