This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf repo-rpki.idnic.net/repo/3baf365e-05de-4c39-bf96-83e939bed7df/0/33F0041B7CC6D4139AB23B3CD10C56E51233C589.mft File: 33F0041B7CC6D4139AB23B3CD10C56E51233C589.mft (raw, json) Hash identifier: I5sh5mte9K8PrDq2GpfHN306vvaEkQqsbPL1wiPX/CY= Subject key identifier: B5:41:B6:2C:4F:36:38:57:8B:C1:C4:EF:39:99:62:E8:9E:84:18:B2 Authority key identifier: 33:F0:04:1B:7C:C6:D4:13:9A:B2:3B:3C:D1:0C:56:E5:12:33:C5:89 Certificate issuer: /CN=33F0041B7CC6D4139AB23B3CD10C56E51233C589 Certificate serial: 05F8924DCEE022D51B9B2B97A33F2E8FE5273267 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/33F0041B7CC6D4139AB23B3CD10C56E51233C589.cer Subject info access: rsync://repo-rpki.idnic.net/repo/3baf365e-05de-4c39-bf96-83e939bed7df/0/33F0041B7CC6D4139AB23B3CD10C56E51233C589.mft Manifest number: 0531 Signing time: Wed 17 Dec 2025 06:01:51 +0000 Manifest this update: Wed 17 Dec 2025 05:56:51 +0000 Manifest next update: Sat 20 Dec 2025 13:48:51 +0000 Files and hashes: 1: 3130332e3135322e372e302f32342d3234203d3e20313430343236.roa (hash: SqOaXQt4sheoHjLEWCQY+hr/jk21P7Mbb0/p3ua6+Wo=) 2: 33F0041B7CC6D4139AB23B3CD10C56E51233C589.crl (hash: ohLY0hWSUv5yrA342Jf5NbjbSUl+xjUhwXQ2JSKZQ9M=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/3baf365e-05de-4c39-bf96-83e939bed7df/0/33F0041B7CC6D4139AB23B3CD10C56E51233C589.crl rsync://repo-rpki.idnic.net/repo/3baf365e-05de-4c39-bf96-83e939bed7df/0/33F0041B7CC6D4139AB23B3CD10C56E51233C589.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/33F0041B7CC6D4139AB23B3CD10C56E51233C589.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 20 Dec 2025 13:48:51 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 05:f8:92:4d:ce:e0:22:d5:1b:9b:2b:97:a3:3f:2e:8f:e5:27:32:67 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=33F0041B7CC6D4139AB23B3CD10C56E51233C589 Validity Not Before: Dec 17 05:56:51 2025 GMT Not After : Dec 20 13:48:51 2025 GMT Subject: CN=B541B62C4F3638578BC1C4EF399962E89E8418B2 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b6:18:cf:75:2c:2c:f3:42:f5:4e:c5:8e:bd:21: b8:5c:3f:8d:dc:63:7f:c1:bf:2e:cf:ba:f9:da:b4: 5a:7f:c0:32:7e:ff:c9:c5:2d:b1:d5:cc:6c:2e:9e: 30:7a:c7:54:46:0c:3d:ab:e5:10:36:c2:0a:18:27: 2c:82:96:ed:93:62:e2:bb:2c:f8:09:01:26:61:44: d8:4a:54:d0:73:d7:af:96:e9:8a:e1:e5:09:bc:95: 85:06:80:8d:be:2b:8a:16:f7:2e:06:dc:48:9a:8b: 21:6a:67:91:68:24:89:0d:1e:7e:d8:b3:2c:15:60: 50:7c:fa:12:3d:2f:b4:c4:31:e8:12:42:95:6d:c0: 38:aa:20:b2:e5:f8:84:80:be:19:e1:a0:b6:2c:8e: 21:9d:88:66:d3:9d:d4:99:f5:90:40:6b:1a:9a:66: e4:38:1c:d1:76:59:c0:c7:7f:b9:ad:d3:9f:89:66: 3e:94:b4:85:2f:c0:35:f9:45:d9:49:7b:51:88:60: 7e:e7:2c:7b:67:d9:18:42:5a:fa:34:99:e0:20:e2: c8:53:10:cc:a3:73:f1:69:11:e1:7c:5f:aa:17:ec: 3f:eb:c1:b5:50:14:ea:c7:c4:8b:f6:28:fc:67:74: 69:39:90:fb:7c:a0:2a:20:0c:d1:c9:9a:a6:bc:fa: c1:3b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: B5:41:B6:2C:4F:36:38:57:8B:C1:C4:EF:39:99:62:E8:9E:84:18:B2 X509v3 Authority Key Identifier: keyid:33:F0:04:1B:7C:C6:D4:13:9A:B2:3B:3C:D1:0C:56:E5:12:33:C5:89 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/3baf365e-05de-4c39-bf96-83e939bed7df/0/33F0041B7CC6D4139AB23B3CD10C56E51233C589.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/33F0041B7CC6D4139AB23B3CD10C56E51233C589.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/3baf365e-05de-4c39-bf96-83e939bed7df/0/33F0041B7CC6D4139AB23B3CD10C56E51233C589.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 73:2f:17:98:4c:1c:c2:23:35:57:7c:ed:b5:53:15:09:63:5d: 28:bc:cd:f0:e5:5d:20:f7:e0:f0:34:08:99:5f:5b:6c:c7:ab: 31:84:56:27:10:3d:68:1e:af:fe:67:1e:05:54:79:5b:c0:8d: 3f:b6:d7:42:13:ab:4a:06:ec:dd:3d:6a:2d:90:14:5b:f1:34: 97:1b:70:ba:8f:38:1b:0b:8a:b2:c0:2f:95:7c:0d:c9:70:84: b2:31:ad:b9:31:d0:82:fb:d8:bf:7a:6b:6d:bf:db:7b:ff:e7: 63:33:f7:33:6e:9d:ad:94:f8:30:86:f5:47:8b:0f:4a:3e:86: 9c:81:25:3f:d0:f0:bf:cf:12:33:44:80:13:ee:f1:51:4b:9d: 8a:aa:cd:5d:5c:cb:ea:01:7e:aa:a5:84:72:07:73:7d:66:96: 5c:06:ca:b9:60:84:d0:ff:7c:29:cc:88:30:27:ce:17:e0:1c: 72:1a:5a:e7:2f:1e:70:4e:c9:93:ee:66:9b:3a:5b:5b:a6:48: 89:6b:59:39:94:4a:b6:a6:77:99:39:69:68:de:1c:61:27:04: ae:48:f3:a5:e9:ca:f3:08:51:95:1c:06:d5:f8:be:d1:7e:1e: 14:58:52:dd:39:b0:2a:7c:e7:37:60:0b:48:37:a2:3b:3e:29: ff:47:3f:97 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUBfiSTc7gItUbmyuXoz8uj+UnMmcwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMzNGMDA0MUI3Q0M2RDQxMzlBQjIzQjNDRDEwQzU2RTUx MjMzQzU4OTAeFw0yNTEyMTcwNTU2NTFaFw0yNTEyMjAxMzQ4NTFaMDMxMTAvBgNV BAMTKEI1NDFCNjJDNEYzNjM4NTc4QkMxQzRFRjM5OTk2MkU4OUU4NDE4QjIwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC2GM91LCzzQvVOxY69IbhcP43c Y3/Bvy7PuvnatFp/wDJ+/8nFLbHVzGwunjB6x1RGDD2r5RA2wgoYJyyClu2TYuK7 LPgJASZhRNhKVNBz16+W6Yrh5Qm8lYUGgI2+K4oW9y4G3EiaiyFqZ5FoJIkNHn7Y sywVYFB8+hI9L7TEMegSQpVtwDiqILLl+ISAvhnhoLYsjiGdiGbTndSZ9ZBAaxqa ZuQ4HNF2WcDHf7mt05+JZj6UtIUvwDX5RdlJe1GIYH7nLHtn2RhCWvo0meAg4shT EMyjc/FpEeF8X6oX7D/rwbVQFOrHxIv2KPxndGk5kPt8oCogDNHJmqa8+sE7AgMB AAGjggI8MIICODAdBgNVHQ4EFgQUtUG2LE82OFeLwcTvOZli6J6EGLIwHwYDVR0j BBgwFoAUM/AEG3zG1BOasjs80QxW5RIzxYkwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby8z YmFmMzY1ZS0wNWRlLTRjMzktYmY5Ni04M2U5MzliZWQ3ZGYvMC8zM0YwMDQxQjdD QzZENDEzOUFCMjNCM0NEMTBDNTZFNTEyMzNDNTg5LmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvMzNGMDA0MUI3Q0M2RDQxMzlBQjIzQjNDRDEwQzU2RTUxMjMz QzU4OS5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vM2JhZjM2NWUtMDVkZS00YzM5LWJm OTYtODNlOTM5YmVkN2RmLzAvMzNGMDA0MUI3Q0M2RDQxMzlBQjIzQjNDRDEwQzU2 RTUxMjMzQzU4OS5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAHMvF5hMHMIjNVd87bVTFQljXSi8zfDlXSD3 4PA0CJlfW2zHqzGEVicQPWger/5nHgVUeVvAjT+210ITq0oG7N09ai2QFFvxNJcb cLqPOBsLirLAL5V8DclwhLIxrbkx0IL72L96a22/23v/52Mz9zNuna2U+DCG9UeL D0o+hpyBJT/Q8L/PEjNEgBPu8VFLnYqqzV1cy+oBfqqlhHIHc31mllwGyrlghND/ fCnMiDAnzhfgHHIaWucvHnBOyZPuZps6W1umSIlrWTmUSramd5k5aWjeHGEnBK5I 86XpyvMIUZUcBtX4vtF+HhRYUt05sCp85zdgC0g3ojs+Kf9HP5c= -----END CERTIFICATE-----Generated at Fri Dec 19 11:35:15 2025 by rpki-client