This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf repo-rpki.idnic.net/repo/8d703b80-2e78-4d11-ab74-08017e422d6e/0/C33BE6D76C1444B4695CC56D706802967A2A404E.mft File: C33BE6D76C1444B4695CC56D706802967A2A404E.mft (raw, json) Hash identifier: VrGAmAEPYPSY5zFpYVuWLdIv6KFhR8gi5rhPDsPkgQI= Subject key identifier: 6D:2F:1E:35:08:8E:23:6A:7B:D6:2B:E0:2F:A7:60:FC:2D:60:C2:73 Authority key identifier: C3:3B:E6:D7:6C:14:44:B4:69:5C:C5:6D:70:68:02:96:7A:2A:40:4E Certificate issuer: /CN=C33BE6D76C1444B4695CC56D706802967A2A404E Certificate serial: 5FE726BE616FE9DAB5E5985D91E18EFE4D484601 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/C33BE6D76C1444B4695CC56D706802967A2A404E.cer Subject info access: rsync://repo-rpki.idnic.net/repo/8d703b80-2e78-4d11-ab74-08017e422d6e/0/C33BE6D76C1444B4695CC56D706802967A2A404E.mft Manifest number: 016A Signing time: Tue 23 Dec 2025 02:02:18 +0000 Manifest this update: Tue 23 Dec 2025 01:57:18 +0000 Manifest next update: Fri 26 Dec 2025 10:37:18 +0000 Files and hashes: 1: 3130332e35352e33302e302f32332d3233203d3e20313530343834.roa (hash: ZuMnDiHxEL/U8SL8BhAZDvs5aB1dq2I0QG/IhKrpVW8=) 2: C33BE6D76C1444B4695CC56D706802967A2A404E.crl (hash: 3sV/epZnfJKibEZctnDcZADW+F540sO//2nMPt75o6k=) 3: 3130332e35352e33302e302f32342d3234203d3e20313530343834.roa (hash: aZfOFjCWcMoRejMmCl7p7stqIRB0AZ4Tzh7bIJ8bPos=) 4: 3130332e35352e33312e302f32342d3234203d3e20313530343834.roa (hash: tAaom1u9dzc8ncYAUwE5XCycjaJDPimabJR/V9nJlmE=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/8d703b80-2e78-4d11-ab74-08017e422d6e/0/C33BE6D76C1444B4695CC56D706802967A2A404E.crl rsync://repo-rpki.idnic.net/repo/8d703b80-2e78-4d11-ab74-08017e422d6e/0/C33BE6D76C1444B4695CC56D706802967A2A404E.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/C33BE6D76C1444B4695CC56D706802967A2A404E.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 26 Dec 2025 10:37:18 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 5f:e7:26:be:61:6f:e9:da:b5:e5:98:5d:91:e1:8e:fe:4d:48:46:01 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=C33BE6D76C1444B4695CC56D706802967A2A404E Validity Not Before: Dec 23 01:57:18 2025 GMT Not After : Dec 26 10:37:18 2025 GMT Subject: CN=6D2F1E35088E236A7BD62BE02FA760FC2D60C273 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a8:82:fc:69:e5:e5:a0:ed:97:7d:ee:7e:55:6c: fc:29:8f:94:fb:9c:30:5d:47:2d:4b:9d:66:78:d0: e4:f3:ba:a7:a6:71:cb:47:1b:91:e9:21:7b:cc:84: e5:eb:63:c2:f7:f8:bb:d6:f3:cd:d1:8d:d1:00:de: 88:32:95:9c:cb:0a:61:a5:ad:5f:ee:48:0a:6e:52: fd:a6:d4:c6:01:aa:00:8b:9e:a4:59:64:a8:81:6a: 0f:ca:dc:b3:11:17:bf:fb:51:66:17:78:e5:27:a3: a4:95:2a:c1:b1:bd:8b:70:7a:93:88:3a:15:f5:f6: 9d:4d:34:74:05:b9:79:5e:3d:2f:79:1d:0d:84:41: 6f:3f:fe:cd:b4:38:fc:66:47:ac:78:d2:6a:3b:99: d1:0e:5f:ce:ec:38:ec:a5:ff:ec:8b:f5:8f:3a:a3: e4:53:5d:5b:e9:ce:14:5b:d2:63:05:86:dc:cb:20: 1f:14:11:5f:96:86:29:dc:37:5d:f5:58:8d:1a:10: 7e:f5:62:a7:99:86:c4:aa:7d:3e:54:c3:e3:34:f9: ba:dc:1e:34:43:81:9d:a3:3c:bd:fd:53:3a:80:ca: f7:13:cc:1f:67:7b:1d:94:98:80:5f:5f:97:77:38: 52:20:66:25:92:95:94:2c:d5:c4:af:52:d8:f6:54: 86:99 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 6D:2F:1E:35:08:8E:23:6A:7B:D6:2B:E0:2F:A7:60:FC:2D:60:C2:73 X509v3 Authority Key Identifier: keyid:C3:3B:E6:D7:6C:14:44:B4:69:5C:C5:6D:70:68:02:96:7A:2A:40:4E X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/8d703b80-2e78-4d11-ab74-08017e422d6e/0/C33BE6D76C1444B4695CC56D706802967A2A404E.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/C33BE6D76C1444B4695CC56D706802967A2A404E.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/8d703b80-2e78-4d11-ab74-08017e422d6e/0/C33BE6D76C1444B4695CC56D706802967A2A404E.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption d0:20:85:37:51:53:de:c6:b8:a8:b9:e7:57:34:bd:e2:3e:78: 82:1c:07:c2:d6:8f:78:f5:49:13:83:b8:30:9f:1a:b9:dc:11: ea:e7:45:a4:51:08:b6:05:58:80:69:73:dc:1f:04:c8:9b:8a: 20:d0:75:56:09:72:83:1e:60:d2:7b:b6:70:4f:d2:4c:ff:58: d3:ee:0c:ba:96:7e:1e:25:94:17:4f:5b:79:36:7a:73:ae:d3: 5a:8e:4a:f8:73:68:70:9b:41:9b:04:4a:6b:bc:07:12:63:9d: 61:c6:e3:1a:39:3d:27:ca:c0:62:cf:ad:0d:aa:aa:82:e4:97: 37:2a:22:0e:8b:68:85:e6:51:fa:69:e5:97:ba:cf:07:46:fb: 7e:d1:03:af:ef:fc:eb:a2:62:14:d8:80:31:51:86:70:35:06: 2d:62:7c:3e:45:1a:99:23:c9:d6:c9:7a:98:3f:bc:c5:ce:fb: 63:94:69:c2:b1:34:3b:99:44:c4:5e:00:52:f0:4e:39:59:7a: 97:49:76:22:09:09:dc:51:3e:b1:33:10:5a:ef:d4:ae:9e:4d: 67:96:97:29:bc:09:b9:1a:2b:a5:d6:19:74:3b:f7:a1:f0:dd: 6c:c5:be:01:27:42:b4:8e:63:7f:d4:a4:d8:a9:67:83:4e:45: f4:cf:5a:18 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUX+cmvmFv6dq15ZhdkeGO/k1IRgEwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoQzMzQkU2RDc2QzE0NDRCNDY5NUNDNTZENzA2ODAyOTY3 QTJBNDA0RTAeFw0yNTEyMjMwMTU3MThaFw0yNTEyMjYxMDM3MThaMDMxMTAvBgNV BAMTKDZEMkYxRTM1MDg4RTIzNkE3QkQ2MkJFMDJGQTc2MEZDMkQ2MEMyNzMwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCogvxp5eWg7Zd97n5VbPwpj5T7 nDBdRy1LnWZ40OTzuqemcctHG5HpIXvMhOXrY8L3+LvW883RjdEA3ogylZzLCmGl rV/uSApuUv2m1MYBqgCLnqRZZKiBag/K3LMRF7/7UWYXeOUno6SVKsGxvYtwepOI OhX19p1NNHQFuXlePS95HQ2EQW8//s20OPxmR6x40mo7mdEOX87sOOyl/+yL9Y86 o+RTXVvpzhRb0mMFhtzLIB8UEV+WhincN131WI0aEH71YqeZhsSqfT5Uw+M0+brc HjRDgZ2jPL39UzqAyvcTzB9nex2UmIBfX5d3OFIgZiWSlZQs1cSvUtj2VIaZAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUbS8eNQiOI2p71ivgL6dg/C1gwnMwHwYDVR0j BBgwFoAUwzvm12wURLRpXMVtcGgClnoqQE4wDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby84 ZDcwM2I4MC0yZTc4LTRkMTEtYWI3NC0wODAxN2U0MjJkNmUvMC9DMzNCRTZENzZD MTQ0NEI0Njk1Q0M1NkQ3MDY4MDI5NjdBMkE0MDRFLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvQzMzQkU2RDc2QzE0NDRCNDY5NUNDNTZENzA2ODAyOTY3QTJB NDA0RS5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vOGQ3MDNiODAtMmU3OC00ZDExLWFi NzQtMDgwMTdlNDIyZDZlLzAvQzMzQkU2RDc2QzE0NDRCNDY5NUNDNTZENzA2ODAy OTY3QTJBNDA0RS5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBANAghTdRU97GuKi551c0veI+eIIcB8LWj3j1 SRODuDCfGrncEernRaRRCLYFWIBpc9wfBMibiiDQdVYJcoMeYNJ7tnBP0kz/WNPu DLqWfh4llBdPW3k2enOu01qOSvhzaHCbQZsESmu8BxJjnWHG4xo5PSfKwGLPrQ2q qoLklzcqIg6LaIXmUfpp5Ze6zwdG+37RA6/v/OuiYhTYgDFRhnA1Bi1ifD5FGpkj ydbJepg/vMXO+2OUacKxNDuZRMReAFLwTjlZepdJdiIJCdxRPrEzEFrv1K6eTWeW lym8CbkaK6XWGXQ796Hw3WzFvgEnQrSOY3/UpNipZ4NORfTPWhg= -----END CERTIFICATE-----Generated at Wed Dec 24 20:23:38 2025 by rpki-client