This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf repo-rpki.idnic.net/repo/9b733dcf-9f5e-4775-9ce7-9dd525b44b86/1/33D2F1EAE44634CCF2B028FDCA2A11513D83B42D.mft File: 33D2F1EAE44634CCF2B028FDCA2A11513D83B42D.mft (raw, json) Hash identifier: UhaJ0WmDQIHR+36LeGixzuyy8IK+HLTcj1ks85jmS88= Subject key identifier: 2B:D6:2E:7B:C7:35:AB:A2:DA:56:D5:19:E4:DE:49:83:33:25:EC:D1 Authority key identifier: 33:D2:F1:EA:E4:46:34:CC:F2:B0:28:FD:CA:2A:11:51:3D:83:B4:2D Certificate issuer: /CN=33D2F1EAE44634CCF2B028FDCA2A11513D83B42D Certificate serial: 15F7E6C933A9A85D3AAA1C455F61F0A109BFC48D Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/33D2F1EAE44634CCF2B028FDCA2A11513D83B42D.cer Subject info access: rsync://repo-rpki.idnic.net/repo/9b733dcf-9f5e-4775-9ce7-9dd525b44b86/1/33D2F1EAE44634CCF2B028FDCA2A11513D83B42D.mft Manifest number: E6 Signing time: Tue 23 Dec 2025 16:33:37 +0000 Manifest this update: Tue 23 Dec 2025 16:28:37 +0000 Manifest next update: Fri 26 Dec 2025 19:25:37 +0000 Files and hashes: 1: 33D2F1EAE44634CCF2B028FDCA2A11513D83B42D.crl (hash: 7fXsJb1K1KlIqS7veAul/ThFucbnWO7WVePYCl0SVUk=) 2: 323030313a6466333a643334303a3a2f34382d3438203d3e20313532373439.roa (hash: Y6M3Rf10ondFVRavAz+BHrKvcEeqI6mWIsztyFy7iY4=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/9b733dcf-9f5e-4775-9ce7-9dd525b44b86/1/33D2F1EAE44634CCF2B028FDCA2A11513D83B42D.crl rsync://repo-rpki.idnic.net/repo/9b733dcf-9f5e-4775-9ce7-9dd525b44b86/1/33D2F1EAE44634CCF2B028FDCA2A11513D83B42D.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/33D2F1EAE44634CCF2B028FDCA2A11513D83B42D.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 26 Dec 2025 19:25:37 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 15:f7:e6:c9:33:a9:a8:5d:3a:aa:1c:45:5f:61:f0:a1:09:bf:c4:8d Signature Algorithm: sha256WithRSAEncryption Issuer: CN=33D2F1EAE44634CCF2B028FDCA2A11513D83B42D Validity Not Before: Dec 23 16:28:37 2025 GMT Not After : Dec 26 19:25:37 2025 GMT Subject: CN=2BD62E7BC735ABA2DA56D519E4DE49833325ECD1 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bf:04:7d:05:b5:79:82:70:f0:af:f1:ca:5e:ea: 6d:a0:00:c6:5f:2d:42:3e:5f:f0:b0:b9:94:8f:c5: de:fe:ce:9a:84:c9:75:ff:71:2e:f1:e1:a6:01:06: 18:f9:99:2c:a8:1b:6d:d7:55:f1:02:4a:84:d3:38: 14:90:2c:5c:4d:54:a5:a4:38:a5:6d:5b:69:b6:51: 28:d4:53:07:e1:ba:96:f8:3c:83:bb:10:6b:a9:f3: c2:85:c1:aa:b3:62:f9:35:d1:e1:63:26:b2:3a:97: a4:c5:19:b5:28:82:4a:f6:30:44:e8:45:c2:e4:80: 01:22:5e:f8:5b:b0:24:9f:d3:9b:1b:29:6f:df:2c: 62:cc:70:a6:11:d0:be:81:69:ef:72:9d:d6:ed:b5: 73:af:ec:12:fc:52:48:fd:1f:05:33:dc:54:b0:87: 09:2b:21:33:68:67:44:fb:ef:aa:3b:ea:3e:25:77: 45:0c:02:b3:25:4d:39:38:79:18:4d:51:50:a7:13: 33:b9:bf:ac:91:67:96:99:08:45:7b:00:37:a1:21: b6:6b:b1:40:8f:61:02:36:79:aa:e3:3f:e1:9f:0f: a3:42:a8:13:bb:38:91:36:ed:4e:b0:59:ab:11:d1: be:0e:51:44:3e:73:8a:b3:83:73:16:ad:75:9c:fc: cf:43 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 2B:D6:2E:7B:C7:35:AB:A2:DA:56:D5:19:E4:DE:49:83:33:25:EC:D1 X509v3 Authority Key Identifier: keyid:33:D2:F1:EA:E4:46:34:CC:F2:B0:28:FD:CA:2A:11:51:3D:83:B4:2D X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/9b733dcf-9f5e-4775-9ce7-9dd525b44b86/1/33D2F1EAE44634CCF2B028FDCA2A11513D83B42D.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/33D2F1EAE44634CCF2B028FDCA2A11513D83B42D.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/9b733dcf-9f5e-4775-9ce7-9dd525b44b86/1/33D2F1EAE44634CCF2B028FDCA2A11513D83B42D.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 65:6c:9a:2b:a0:10:ea:79:a6:4b:62:d6:a6:d9:e4:4a:ab:8c: 7f:15:88:33:c0:69:81:27:d9:30:96:e8:e5:61:65:b1:4b:2a: b7:da:fd:34:b1:2d:90:c5:f1:e0:54:40:21:8e:9c:75:62:10: 96:42:9e:e1:43:1b:2b:1d:c4:51:da:41:36:f5:08:9d:3f:48: 4c:55:2b:38:9f:12:1b:71:a7:2f:f8:49:04:dd:2b:27:cd:06: b4:f1:6a:74:64:ba:75:10:48:c7:d1:b0:28:df:d5:2d:b1:80: d0:04:9e:e4:60:f6:05:a1:3d:a8:54:54:d3:df:04:0a:82:63: 05:93:00:6d:1e:82:f7:1e:8a:c0:63:c4:d7:3e:5f:78:38:b8: f4:83:0d:3e:2e:b6:bc:6e:f9:bb:c9:57:0f:5e:3a:02:72:cd: 9f:f1:ee:3f:c5:3e:d0:2a:b8:59:f7:3e:df:53:7d:d1:18:b2: bf:56:12:00:db:68:6c:8a:2b:03:f2:27:7b:17:26:4a:90:b7: 3a:f7:1b:a5:9a:bc:b5:3c:c8:9a:96:1a:86:e7:19:bc:11:ff: c4:cf:65:76:7b:db:c1:ff:5e:de:3d:26:51:90:eb:43:dd:c5: 31:44:a2:66:0a:a0:02:7b:26:95:1b:86:2f:63:be:bd:1b:38: 5d:93:94:34 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUFffmyTOpqF06qhxFX2HwoQm/xI0wDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMzNEMkYxRUFFNDQ2MzRDQ0YyQjAyOEZEQ0EyQTExNTEz RDgzQjQyRDAeFw0yNTEyMjMxNjI4MzdaFw0yNTEyMjYxOTI1MzdaMDMxMTAvBgNV BAMTKDJCRDYyRTdCQzczNUFCQTJEQTU2RDUxOUU0REU0OTgzMzMyNUVDRDEwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC/BH0FtXmCcPCv8cpe6m2gAMZf LUI+X/CwuZSPxd7+zpqEyXX/cS7x4aYBBhj5mSyoG23XVfECSoTTOBSQLFxNVKWk OKVtW2m2USjUUwfhupb4PIO7EGup88KFwaqzYvk10eFjJrI6l6TFGbUogkr2METo RcLkgAEiXvhbsCSf05sbKW/fLGLMcKYR0L6Bae9yndbttXOv7BL8Ukj9HwUz3FSw hwkrITNoZ0T776o76j4ld0UMArMlTTk4eRhNUVCnEzO5v6yRZ5aZCEV7ADehIbZr sUCPYQI2earjP+GfD6NCqBO7OJE27U6wWasR0b4OUUQ+c4qzg3MWrXWc/M9DAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUK9Yue8c1q6LaVtUZ5N5JgzMl7NEwHwYDVR0j BBgwFoAUM9Lx6uRGNMzysCj9yioRUT2DtC0wDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby85 YjczM2RjZi05ZjVlLTQ3NzUtOWNlNy05ZGQ1MjViNDRiODYvMS8zM0QyRjFFQUU0 NDYzNENDRjJCMDI4RkRDQTJBMTE1MTNEODNCNDJELmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvMzNEMkYxRUFFNDQ2MzRDQ0YyQjAyOEZEQ0EyQTExNTEzRDgz QjQyRC5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vOWI3MzNkY2YtOWY1ZS00Nzc1LTlj ZTctOWRkNTI1YjQ0Yjg2LzEvMzNEMkYxRUFFNDQ2MzRDQ0YyQjAyOEZEQ0EyQTEx NTEzRDgzQjQyRC5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAGVsmiugEOp5pkti1qbZ5EqrjH8ViDPAaYEn 2TCW6OVhZbFLKrfa/TSxLZDF8eBUQCGOnHViEJZCnuFDGysdxFHaQTb1CJ0/SExV KzifEhtxpy/4SQTdKyfNBrTxanRkunUQSMfRsCjf1S2xgNAEnuRg9gWhPahUVNPf BAqCYwWTAG0egvceisBjxNc+X3g4uPSDDT4utrxu+bvJVw9eOgJyzZ/x7j/FPtAq uFn3Pt9TfdEYsr9WEgDbaGyKKwPyJ3sXJkqQtzr3G6WavLU8yJqWGobnGbwR/8TP ZXZ728H/Xt49JlGQ60PdxTFEomYKoAJ7JpUbhi9jvr0bOF2TlDQ= -----END CERTIFICATE-----Generated at Wed Dec 24 22:10:54 2025 by rpki-client