This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf repo-rpki.idnic.net/repo/33dc034f-3823-48af-953d-aaa873b0fb6a/0/8B30167CDA20FE7EDCFC647AC86B14BB27E430C8.mft File: 8B30167CDA20FE7EDCFC647AC86B14BB27E430C8.mft (raw, json) Hash identifier: mAuDxfC4Y53oauA759n/FzqdY/mYTegliJL0wBNgUUo= Subject key identifier: D9:43:5B:C6:95:92:6C:1B:7E:44:9C:AF:3C:5F:60:0F:F0:F4:C7:05 Authority key identifier: 8B:30:16:7C:DA:20:FE:7E:DC:FC:64:7A:C8:6B:14:BB:27:E4:30:C8 Certificate issuer: /CN=8B30167CDA20FE7EDCFC647AC86B14BB27E430C8 Certificate serial: 43B3D2C688B920004E92A39518E547E69B5D6241 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/8B30167CDA20FE7EDCFC647AC86B14BB27E430C8.cer Subject info access: rsync://repo-rpki.idnic.net/repo/33dc034f-3823-48af-953d-aaa873b0fb6a/0/8B30167CDA20FE7EDCFC647AC86B14BB27E430C8.mft Manifest number: AC Signing time: Sun 21 Dec 2025 05:31:10 +0000 Manifest this update: Sun 21 Dec 2025 05:26:10 +0000 Manifest next update: Wed 24 Dec 2025 06:40:10 +0000 Files and hashes: 1: 3136302e3139312e3233352e302f32342d3234203d3e20313533313439.roa (hash: 057q45kqdRxLvAiRPvpE9xTv/5F62FgJizN22DjE3/s=) 2: 8B30167CDA20FE7EDCFC647AC86B14BB27E430C8.crl (hash: Anv1pwRjz8253OjCED2a4BPRRdKLliN0Fa+/wqcG73o=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/33dc034f-3823-48af-953d-aaa873b0fb6a/0/8B30167CDA20FE7EDCFC647AC86B14BB27E430C8.crl rsync://repo-rpki.idnic.net/repo/33dc034f-3823-48af-953d-aaa873b0fb6a/0/8B30167CDA20FE7EDCFC647AC86B14BB27E430C8.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/8B30167CDA20FE7EDCFC647AC86B14BB27E430C8.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/60F8BE9C16625C424B269EE06C64A83BAB8506D4.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/60F8BE9C16625C424B269EE06C64A83BAB8506D4.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/YPi-nBZiXEJLJp7gbGSoO6uFBtQ.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 23 Dec 2025 15:37:53 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 43:b3:d2:c6:88:b9:20:00:4e:92:a3:95:18:e5:47:e6:9b:5d:62:41 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=8B30167CDA20FE7EDCFC647AC86B14BB27E430C8 Validity Not Before: Dec 21 05:26:10 2025 GMT Not After : Dec 24 06:40:10 2025 GMT Subject: CN=D9435BC695926C1B7E449CAF3C5F600FF0F4C705 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b2:3f:6a:61:58:96:78:39:ef:c4:c7:96:f1:ee: ed:35:ba:83:bf:00:d3:57:71:b2:42:7b:56:94:5b: 9a:da:4d:59:05:68:f3:71:9d:7e:c1:4e:ce:32:60: ca:38:9a:87:51:d3:eb:3f:3b:ea:7a:4e:f4:6a:ee: 1a:62:bd:51:bd:0a:a3:a1:2a:80:16:78:f1:f5:f4: 4a:30:99:7e:10:99:5d:8c:08:cc:d7:75:3a:e6:d2: 7e:6b:38:9f:d4:97:82:57:76:4b:d9:1b:fe:51:a5: 11:40:35:5a:95:2c:c0:b1:90:8f:cb:c8:6f:f0:d5: 3c:c2:c1:f3:1f:0e:fb:52:02:b8:0f:d3:d9:44:dd: 0c:71:59:b1:96:13:68:1d:32:3d:59:bc:28:0a:c4: c3:a9:34:26:f1:9c:22:21:dc:1d:e5:6f:aa:d7:0b: 13:e3:bf:81:ee:f7:e5:be:e7:8e:00:d2:5a:4c:53: 5c:17:93:77:b0:a1:af:a2:b0:13:de:38:a2:e1:94: 57:63:e3:99:9d:fb:89:40:c5:78:71:c6:a6:aa:6c: 55:07:7d:da:b3:90:a8:f1:9f:be:e7:08:07:26:f6: 64:f6:a2:ae:e8:c8:8a:e2:24:9f:6e:ea:7e:46:5e: 4f:e7:38:17:54:17:24:34:f3:7e:58:c8:75:18:87: 4d:6b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D9:43:5B:C6:95:92:6C:1B:7E:44:9C:AF:3C:5F:60:0F:F0:F4:C7:05 X509v3 Authority Key Identifier: keyid:8B:30:16:7C:DA:20:FE:7E:DC:FC:64:7A:C8:6B:14:BB:27:E4:30:C8 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/33dc034f-3823-48af-953d-aaa873b0fb6a/0/8B30167CDA20FE7EDCFC647AC86B14BB27E430C8.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/8B30167CDA20FE7EDCFC647AC86B14BB27E430C8.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/33dc034f-3823-48af-953d-aaa873b0fb6a/0/8B30167CDA20FE7EDCFC647AC86B14BB27E430C8.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 99:da:4c:28:08:46:05:86:2e:6e:8d:1f:a8:e8:8d:9d:2e:a2: bb:ec:9f:7a:6c:6d:8e:2a:c1:54:1d:50:0b:8b:53:aa:d9:fd: 96:53:64:a8:2c:60:e5:63:83:b8:74:4e:36:b6:cd:41:86:fd: 00:9b:0b:51:ba:94:b5:ce:8f:fe:b3:7f:6b:45:44:cd:52:64: 5f:39:89:86:f3:14:71:f1:74:ae:3a:12:61:c8:5d:3a:15:5d: e9:97:95:04:21:9f:32:e5:08:04:9b:bb:58:63:44:63:b8:de: d3:7a:d6:a6:23:42:d5:50:2a:03:fc:61:00:ff:a1:63:34:9f: 24:79:17:73:10:a5:9f:25:3f:e9:e3:f5:5d:f1:79:18:e0:9f: 67:e9:6c:71:31:87:13:fa:73:73:8e:ac:eb:a4:a8:ca:d7:ac: e5:75:64:17:13:1d:91:2e:e2:38:88:7a:cc:f2:f7:cd:36:16: 7f:08:d3:1a:a0:b7:e2:ba:78:02:11:88:2d:e0:f4:74:36:a4: 75:8f:85:18:59:93:10:32:9a:dd:4c:ac:52:60:ff:3c:24:c8: bf:14:b8:1a:46:76:2b:17:82:b0:2a:4d:8f:60:10:d2:6f:64: f5:08:08:94:99:c6:9f:37:b2:ec:df:9b:36:3d:03:62:e7:18: d0:bd:f4:0d -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUQ7PSxoi5IABOkqOVGOVH5ptdYkEwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoOEIzMDE2N0NEQTIwRkU3RURDRkM2NDdBQzg2QjE0QkIy N0U0MzBDODAeFw0yNTEyMjEwNTI2MTBaFw0yNTEyMjQwNjQwMTBaMDMxMTAvBgNV BAMTKEQ5NDM1QkM2OTU5MjZDMUI3RTQ0OUNBRjNDNUY2MDBGRjBGNEM3MDUwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCyP2phWJZ4Oe/Ex5bx7u01uoO/ ANNXcbJCe1aUW5raTVkFaPNxnX7BTs4yYMo4modR0+s/O+p6TvRq7hpivVG9CqOh KoAWePH19EowmX4QmV2MCMzXdTrm0n5rOJ/Ul4JXdkvZG/5RpRFANVqVLMCxkI/L yG/w1TzCwfMfDvtSArgP09lE3QxxWbGWE2gdMj1ZvCgKxMOpNCbxnCIh3B3lb6rX CxPjv4Hu9+W+544A0lpMU1wXk3ewoa+isBPeOKLhlFdj45md+4lAxXhxxqaqbFUH fdqzkKjxn77nCAcm9mT2oq7oyIriJJ9u6n5GXk/nOBdUFyQ0835YyHUYh01rAgMB AAGjggI8MIICODAdBgNVHQ4EFgQU2UNbxpWSbBt+RJyvPF9gD/D0xwUwHwYDVR0j BBgwFoAUizAWfNog/n7c/GR6yGsUuyfkMMgwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby8z M2RjMDM0Zi0zODIzLTQ4YWYtOTUzZC1hYWE4NzNiMGZiNmEvMC84QjMwMTY3Q0RB MjBGRTdFRENGQzY0N0FDODZCMTRCQjI3RTQzMEM4LmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzEvOEIzMDE2N0NEQTIwRkU3RURDRkM2NDdBQzg2QjE0QkIyN0U0 MzBDOC5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vMzNkYzAzNGYtMzgyMy00OGFmLTk1 M2QtYWFhODczYjBmYjZhLzAvOEIzMDE2N0NEQTIwRkU3RURDRkM2NDdBQzg2QjE0 QkIyN0U0MzBDOC5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAJnaTCgIRgWGLm6NH6jojZ0uorvsn3psbY4q wVQdUAuLU6rZ/ZZTZKgsYOVjg7h0Tja2zUGG/QCbC1G6lLXOj/6zf2tFRM1SZF85 iYbzFHHxdK46EmHIXToVXemXlQQhnzLlCASbu1hjRGO43tN61qYjQtVQKgP8YQD/ oWM0nyR5F3MQpZ8lP+nj9V3xeRjgn2fpbHExhxP6c3OOrOukqMrXrOV1ZBcTHZEu 4jiIeszy9802Fn8I0xqgt+K6eAIRiC3g9HQ2pHWPhRhZkxAymt1MrFJg/zwkyL8U uBpGdisXgrAqTY9gENJvZPUICJSZxp83suzfmzY9A2LnGNC99A0= -----END CERTIFICATE-----Generated at Tue Dec 23 15:24:13 2025 by rpki-client