This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf repo-rpki.idnic.net/repo/4c58fb7c-67b8-4bce-96d9-be912e3f73dd/1/33D26363FA5B5B53C17981915CBADB375AE27253.mft File: 33D26363FA5B5B53C17981915CBADB375AE27253.mft (raw, json) Hash identifier: rSadgkXqOumPP4wajinIz7nIcWiArPqxNVI/3w9a0PY= Subject key identifier: 96:A8:63:3C:84:99:E1:7E:CE:84:2D:12:ED:48:75:3E:36:C4:69:F8 Authority key identifier: 33:D2:63:63:FA:5B:5B:53:C1:79:81:91:5C:BA:DB:37:5A:E2:72:53 Certificate issuer: /CN=33D26363FA5B5B53C17981915CBADB375AE27253 Certificate serial: 0370BE39D63665AF88F40B3C9FA986F2D0F77643 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/33D26363FA5B5B53C17981915CBADB375AE27253.cer Subject info access: rsync://repo-rpki.idnic.net/repo/4c58fb7c-67b8-4bce-96d9-be912e3f73dd/1/33D26363FA5B5B53C17981915CBADB375AE27253.mft Manifest number: A8 Signing time: Wed 17 Dec 2025 17:31:28 +0000 Manifest this update: Wed 17 Dec 2025 17:26:28 +0000 Manifest next update: Sat 20 Dec 2025 18:57:28 +0000 Files and hashes: 1: 33D26363FA5B5B53C17981915CBADB375AE27253.crl (hash: LBcTdXuAM4vzL3uELSkqDy+w/mOSUsk3aILIW4e9MX0=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/4c58fb7c-67b8-4bce-96d9-be912e3f73dd/1/33D26363FA5B5B53C17981915CBADB375AE27253.crl rsync://repo-rpki.idnic.net/repo/4c58fb7c-67b8-4bce-96d9-be912e3f73dd/1/33D26363FA5B5B53C17981915CBADB375AE27253.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/33D26363FA5B5B53C17981915CBADB375AE27253.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 20 Dec 2025 18:57:28 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 03:70:be:39:d6:36:65:af:88:f4:0b:3c:9f:a9:86:f2:d0:f7:76:43 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=33D26363FA5B5B53C17981915CBADB375AE27253 Validity Not Before: Dec 17 17:26:28 2025 GMT Not After : Dec 20 18:57:28 2025 GMT Subject: CN=96A8633C8499E17ECE842D12ED48753E36C469F8 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d3:15:e6:e5:ef:03:08:a3:9b:e3:bc:55:08:dc: 84:b3:42:36:e8:6f:ae:4c:87:60:86:15:08:54:4a: 73:91:3f:79:4e:55:83:04:19:67:18:2f:a9:71:50: 61:47:07:44:4c:99:48:bc:09:f1:ed:0c:42:54:55: 5d:64:16:c0:2b:ec:ef:ca:b2:e6:42:0d:12:21:04: e5:7d:cd:c6:ef:11:da:6c:f6:7f:36:18:e9:28:43: 22:8b:5a:89:ec:e2:a5:4f:be:e9:5f:64:11:8e:b2: 47:f0:fe:8d:35:dd:d0:0a:57:a2:8c:77:92:94:c2: 8d:5a:a1:34:d6:37:9f:20:fe:d2:30:04:e2:14:65: ef:fb:a7:2e:e3:55:de:62:c9:36:af:15:a3:61:5c: bc:d8:6b:15:c6:5f:c0:5e:22:57:01:fb:fc:54:55: 72:09:b7:a1:7c:61:90:1d:c6:2a:1f:d2:33:cc:28: fd:39:39:62:92:bf:de:41:b5:bd:65:36:84:15:94: 7d:7a:cc:37:26:47:02:1e:20:25:43:e5:de:7f:03: d7:b1:a8:30:5f:6d:ff:88:39:63:16:96:9c:ac:c5: 25:df:2f:e2:ab:74:2a:75:24:09:3f:28:59:bb:d8: ed:5e:6b:33:97:b5:d6:df:e2:7e:8b:88:35:f6:c7: 98:6b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 96:A8:63:3C:84:99:E1:7E:CE:84:2D:12:ED:48:75:3E:36:C4:69:F8 X509v3 Authority Key Identifier: keyid:33:D2:63:63:FA:5B:5B:53:C1:79:81:91:5C:BA:DB:37:5A:E2:72:53 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/4c58fb7c-67b8-4bce-96d9-be912e3f73dd/1/33D26363FA5B5B53C17981915CBADB375AE27253.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/33D26363FA5B5B53C17981915CBADB375AE27253.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/4c58fb7c-67b8-4bce-96d9-be912e3f73dd/1/33D26363FA5B5B53C17981915CBADB375AE27253.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 53:e5:a1:b2:e7:e7:87:2a:26:26:db:15:5c:e7:fd:c1:b8:eb: 44:0f:63:f6:47:9f:da:73:f3:a9:9d:49:9a:b9:5c:95:b5:8f: d8:40:02:ef:48:16:aa:ab:1d:42:42:b2:4b:be:58:aa:ab:cc: 43:da:98:82:06:59:c1:b0:ee:33:9d:c5:9c:8e:fd:96:3e:b4: da:a4:fd:9f:3f:55:06:2e:46:87:73:80:56:d6:c1:07:40:1b: 2f:60:0c:03:5a:83:be:84:6a:2f:aa:57:3b:4b:41:2f:e6:b6: e2:d9:70:4f:27:32:e4:aa:35:30:64:09:04:ad:47:d7:fc:7a: 98:ee:8d:d4:24:98:ae:94:e5:3c:a3:da:d7:9e:17:88:4f:d2: 2c:2d:bd:f4:f8:3d:85:c9:53:a1:56:6f:0f:9b:bc:0f:ec:43: 75:cd:3b:9d:12:c7:b8:28:b7:aa:02:bb:f6:7d:c1:d5:36:d0: f6:ea:34:83:88:67:3c:4c:b5:d4:a6:fd:0c:a2:14:ce:a9:e2: e3:32:e1:37:7f:be:a4:9c:26:fe:d6:d2:04:20:32:03:44:f6: 02:7f:9c:49:1f:29:50:13:99:de:ae:63:a2:c3:56:fe:03:42: f5:47:b9:a8:ce:27:91:37:1d:9f:9d:e2:fb:4c:42:4f:d2:c9: e4:18:67:d4 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUA3C+OdY2Za+I9As8n6mG8tD3dkMwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMzNEMjYzNjNGQTVCNUI1M0MxNzk4MTkxNUNCQURCMzc1 QUUyNzI1MzAeFw0yNTEyMTcxNzI2MjhaFw0yNTEyMjAxODU3MjhaMDMxMTAvBgNV BAMTKDk2QTg2MzNDODQ5OUUxN0VDRTg0MkQxMkVENDg3NTNFMzZDNDY5RjgwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDTFebl7wMIo5vjvFUI3ISzQjbo b65Mh2CGFQhUSnORP3lOVYMEGWcYL6lxUGFHB0RMmUi8CfHtDEJUVV1kFsAr7O/K suZCDRIhBOV9zcbvEdps9n82GOkoQyKLWons4qVPvulfZBGOskfw/o013dAKV6KM d5KUwo1aoTTWN58g/tIwBOIUZe/7py7jVd5iyTavFaNhXLzYaxXGX8BeIlcB+/xU VXIJt6F8YZAdxiof0jPMKP05OWKSv95Btb1lNoQVlH16zDcmRwIeICVD5d5/A9ex qDBfbf+IOWMWlpysxSXfL+KrdCp1JAk/KFm72O1eazOXtdbf4n6LiDX2x5hrAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUlqhjPISZ4X7OhC0S7Uh1PjbEafgwHwYDVR0j BBgwFoAUM9JjY/pbW1PBeYGRXLrbN1riclMwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby80 YzU4ZmI3Yy02N2I4LTRiY2UtOTZkOS1iZTkxMmUzZjczZGQvMS8zM0QyNjM2M0ZB NUI1QjUzQzE3OTgxOTE1Q0JBREIzNzVBRTI3MjUzLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvMzNEMjYzNjNGQTVCNUI1M0MxNzk4MTkxNUNCQURCMzc1QUUy NzI1My5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vNGM1OGZiN2MtNjdiOC00YmNlLTk2 ZDktYmU5MTJlM2Y3M2RkLzEvMzNEMjYzNjNGQTVCNUI1M0MxNzk4MTkxNUNCQURC Mzc1QUUyNzI1My5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAFPlobLn54cqJibbFVzn/cG460QPY/ZHn9pz 86mdSZq5XJW1j9hAAu9IFqqrHUJCsku+WKqrzEPamIIGWcGw7jOdxZyO/ZY+tNqk /Z8/VQYuRodzgFbWwQdAGy9gDANag76Eai+qVztLQS/mtuLZcE8nMuSqNTBkCQSt R9f8epjujdQkmK6U5Tyj2teeF4hP0iwtvfT4PYXJU6FWbw+bvA/sQ3XNO50Sx7go t6oCu/Z9wdU20PbqNIOIZzxMtdSm/QyiFM6p4uMy4Td/vqScJv7W0gQgMgNE9gJ/ nEkfKVATmd6uY6LDVv4DQvVHuajOJ5E3HZ+d4vtMQk/SyeQYZ9Q= -----END CERTIFICATE-----Generated at Fri Dec 19 11:16:53 2025 by rpki-client