This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf repo-rpki.idnic.net/repo/8d5bbd81-0332-4202-9c92-eb1746a8cd9d/0/8B0DC79B66A96FA7FA3180C20B06A5C43C9CFEA1.mft File: 8B0DC79B66A96FA7FA3180C20B06A5C43C9CFEA1.mft (raw, json) Hash identifier: rPa2e0ms5au9MC+/AnKvqRY1QuBzCGHrLlOKsz+n6VQ= Subject key identifier: 23:1C:C4:FB:33:FE:08:2B:1B:14:B6:B8:0B:CC:E4:F5:A0:88:D0:85 Authority key identifier: 8B:0D:C7:9B:66:A9:6F:A7:FA:31:80:C2:0B:06:A5:C4:3C:9C:FE:A1 Certificate issuer: /CN=8B0DC79B66A96FA7FA3180C20B06A5C43C9CFEA1 Certificate serial: 70B66B9E58CB1FDB4275B8D87EDECCB736DDD29F Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/8B0DC79B66A96FA7FA3180C20B06A5C43C9CFEA1.cer Subject info access: rsync://repo-rpki.idnic.net/repo/8d5bbd81-0332-4202-9c92-eb1746a8cd9d/0/8B0DC79B66A96FA7FA3180C20B06A5C43C9CFEA1.mft Manifest number: 033F Signing time: Tue 16 Dec 2025 16:42:25 +0000 Manifest this update: Tue 16 Dec 2025 16:37:25 +0000 Manifest next update: Sat 20 Dec 2025 03:14:25 +0000 Files and hashes: 1: 8B0DC79B66A96FA7FA3180C20B06A5C43C9CFEA1.crl (hash: U/fD8NxW+QxAJ5Tj2kXl85E8j0LBkktUTlHNcaHpGsE=) 2: 3130332e3131382e332e302f32342d3234203d3e20313337333732.roa (hash: CnYInR0edgXU+mYMJQGAiAKWjbNlk8PVPSzC/8WPG5g=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/8d5bbd81-0332-4202-9c92-eb1746a8cd9d/0/8B0DC79B66A96FA7FA3180C20B06A5C43C9CFEA1.crl rsync://repo-rpki.idnic.net/repo/8d5bbd81-0332-4202-9c92-eb1746a8cd9d/0/8B0DC79B66A96FA7FA3180C20B06A5C43C9CFEA1.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/8B0DC79B66A96FA7FA3180C20B06A5C43C9CFEA1.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 20 Dec 2025 03:14:25 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 70:b6:6b:9e:58:cb:1f:db:42:75:b8:d8:7e:de:cc:b7:36:dd:d2:9f Signature Algorithm: sha256WithRSAEncryption Issuer: CN=8B0DC79B66A96FA7FA3180C20B06A5C43C9CFEA1 Validity Not Before: Dec 16 16:37:25 2025 GMT Not After : Dec 20 03:14:25 2025 GMT Subject: CN=231CC4FB33FE082B1B14B6B80BCCE4F5A088D085 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cb:4e:22:16:ba:43:aa:83:3f:28:7f:d4:07:48: ba:06:a6:5f:5b:91:e6:1d:b0:ce:62:49:7e:99:37: 1a:16:b8:4d:a6:3b:76:b9:e1:d1:07:c7:86:44:3c: ce:b2:21:87:99:1a:3c:02:15:bf:02:2f:a5:86:58: e7:5e:ea:ed:6d:e0:57:91:19:20:46:93:76:d7:98: 3f:1e:5f:91:fc:b6:57:8e:2b:5a:40:22:8d:4c:92: 34:00:19:af:8f:cf:0a:29:50:bc:38:6e:f0:e7:c3: 8d:30:96:4a:de:8b:29:6c:f3:14:b3:c7:de:7e:5d: d0:0f:e3:63:32:27:48:f5:dc:77:90:00:be:64:bc: 9f:7a:36:c4:d5:2d:c2:58:2e:ca:ff:d7:b6:ea:0b: a3:4b:10:0b:4b:35:d6:4d:34:3d:ba:0f:86:b2:df: be:da:7d:4e:3c:83:66:13:37:0d:32:8c:b9:f5:0e: ff:06:e7:a8:62:04:0c:45:fa:f4:fc:e0:0e:bb:8b: 2f:9a:40:cb:28:3e:f9:80:43:28:04:52:7b:26:04: ac:6b:02:11:5e:96:6a:3d:85:cf:32:b4:f5:cb:06: 26:3d:be:b4:39:f7:71:e0:b3:21:78:51:e5:d8:5e: cf:7f:d0:7a:00:b6:b1:1c:0b:7d:e2:b1:af:d8:93: cd:af Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 23:1C:C4:FB:33:FE:08:2B:1B:14:B6:B8:0B:CC:E4:F5:A0:88:D0:85 X509v3 Authority Key Identifier: keyid:8B:0D:C7:9B:66:A9:6F:A7:FA:31:80:C2:0B:06:A5:C4:3C:9C:FE:A1 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/8d5bbd81-0332-4202-9c92-eb1746a8cd9d/0/8B0DC79B66A96FA7FA3180C20B06A5C43C9CFEA1.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/8B0DC79B66A96FA7FA3180C20B06A5C43C9CFEA1.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/8d5bbd81-0332-4202-9c92-eb1746a8cd9d/0/8B0DC79B66A96FA7FA3180C20B06A5C43C9CFEA1.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 85:3b:80:00:28:06:ee:24:65:34:8b:1a:e3:f6:e2:90:09:51: 37:7c:41:28:8f:cd:28:23:d8:f9:79:0c:c8:cb:32:28:2d:37: f0:85:87:6f:a8:09:2b:1c:8d:e0:69:67:ce:d2:8d:a6:17:e4: 19:37:33:20:b1:87:ff:87:df:4f:d7:b8:42:44:dc:3e:43:c6: 5f:e9:8a:70:a5:b8:93:8f:68:4f:13:24:cc:08:98:8d:9a:c7: e4:e1:c3:74:fb:db:97:9a:df:6c:72:21:b5:98:62:90:d4:cf: f6:25:3d:ec:02:17:88:51:6a:bf:1d:4f:be:fc:2a:9e:7b:d7: 09:57:8e:6c:09:11:6f:00:0b:a5:4e:79:6d:9e:40:c2:a4:86: ec:a2:3e:45:45:2d:d1:f6:3f:95:e3:d0:69:b9:58:50:ce:53: 2d:25:0e:2c:f7:54:e3:f8:42:a2:77:85:2e:6e:d1:15:cf:b4: 7d:89:23:84:9a:64:8e:75:0d:e2:fa:d0:2d:f5:34:6c:13:8e: e3:3a:8b:5f:8b:b0:60:5e:e7:b1:36:0b:ac:04:aa:39:cd:65: bd:ce:6c:47:b0:65:74:d7:0d:cf:00:0a:ec:7b:56:2c:1d:e1: 23:ff:8a:e9:d8:e7:75:6a:35:9f:a1:df:02:f1:82:f1:f4:e2: 5b:f7:0f:ff -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUcLZrnljLH9tCdbjYft7Mtzbd0p8wDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoOEIwREM3OUI2NkE5NkZBN0ZBMzE4MEMyMEIwNkE1QzQz QzlDRkVBMTAeFw0yNTEyMTYxNjM3MjVaFw0yNTEyMjAwMzE0MjVaMDMxMTAvBgNV BAMTKDIzMUNDNEZCMzNGRTA4MkIxQjE0QjZCODBCQ0NFNEY1QTA4OEQwODUwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDLTiIWukOqgz8of9QHSLoGpl9b keYdsM5iSX6ZNxoWuE2mO3a54dEHx4ZEPM6yIYeZGjwCFb8CL6WGWOde6u1t4FeR GSBGk3bXmD8eX5H8tleOK1pAIo1MkjQAGa+PzwopULw4bvDnw40wlkreiyls8xSz x95+XdAP42MyJ0j13HeQAL5kvJ96NsTVLcJYLsr/17bqC6NLEAtLNdZNND26D4ay 377afU48g2YTNw0yjLn1Dv8G56hiBAxF+vT84A67iy+aQMsoPvmAQygEUnsmBKxr AhFelmo9hc8ytPXLBiY9vrQ593HgsyF4UeXYXs9/0HoAtrEcC33isa/Yk82vAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUIxzE+zP+CCsbFLa4C8zk9aCI0IUwHwYDVR0j BBgwFoAUiw3Hm2apb6f6MYDCCwalxDyc/qEwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby84 ZDViYmQ4MS0wMzMyLTQyMDItOWM5Mi1lYjE3NDZhOGNkOWQvMC84QjBEQzc5QjY2 QTk2RkE3RkEzMTgwQzIwQjA2QTVDNDNDOUNGRUExLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvOEIwREM3OUI2NkE5NkZBN0ZBMzE4MEMyMEIwNkE1QzQzQzlD RkVBMS5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vOGQ1YmJkODEtMDMzMi00MjAyLTlj OTItZWIxNzQ2YThjZDlkLzAvOEIwREM3OUI2NkE5NkZBN0ZBMzE4MEMyMEIwNkE1 QzQzQzlDRkVBMS5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAIU7gAAoBu4kZTSLGuP24pAJUTd8QSiPzSgj 2Pl5DMjLMigtN/CFh2+oCSscjeBpZ87SjaYX5Bk3MyCxh/+H30/XuEJE3D5Dxl/p inCluJOPaE8TJMwImI2ax+Thw3T725ea32xyIbWYYpDUz/YlPewCF4hRar8dT778 Kp571wlXjmwJEW8AC6VOeW2eQMKkhuyiPkVFLdH2P5Xj0Gm5WFDOUy0lDiz3VOP4 QqJ3hS5u0RXPtH2JI4SaZI51DeL60C31NGwTjuM6i1+LsGBe57E2C6wEqjnNZb3O bEewZXTXDc8ACux7Viwd4SP/iunY53VqNZ+h3wLxgvH04lv3D/8= -----END CERTIFICATE-----Generated at Fri Dec 19 11:19:51 2025 by rpki-client