This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf repo-rpki.idnic.net/repo/33dc034f-3823-48af-953d-aaa873b0fb6a/0/8B30167CDA20FE7EDCFC647AC86B14BB27E430C8.mft File: 8B30167CDA20FE7EDCFC647AC86B14BB27E430C8.mft (raw, json) Hash identifier: SSWAIhfwbiufyA3aHAIjIAjHYLZvEFWtP7WQimDFqOU= Subject key identifier: D4:0F:7A:78:94:C6:5B:82:79:8C:5B:EE:FF:9D:D4:5D:27:D5:F7:7A Authority key identifier: 8B:30:16:7C:DA:20:FE:7E:DC:FC:64:7A:C8:6B:14:BB:27:E4:30:C8 Certificate issuer: /CN=8B30167CDA20FE7EDCFC647AC86B14BB27E430C8 Certificate serial: 595716D129B503688A8C8E1AC2D0ED3C76DEC923 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/8B30167CDA20FE7EDCFC647AC86B14BB27E430C8.cer Subject info access: rsync://repo-rpki.idnic.net/repo/33dc034f-3823-48af-953d-aaa873b0fb6a/0/8B30167CDA20FE7EDCFC647AC86B14BB27E430C8.mft Manifest number: BC Signing time: Sun 25 Jan 2026 21:01:04 +0000 Manifest this update: Sun 25 Jan 2026 20:56:04 +0000 Manifest next update: Wed 28 Jan 2026 23:02:04 +0000 Files and hashes: 1: 3136302e3139312e3233352e302f32342d3234203d3e20313533313439.roa (hash: 057q45kqdRxLvAiRPvpE9xTv/5F62FgJizN22DjE3/s=) 2: 8B30167CDA20FE7EDCFC647AC86B14BB27E430C8.crl (hash: A/AbECmMIX3SmKCxlZz45UHojjcgM0/A2IV+s2anY9g=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/33dc034f-3823-48af-953d-aaa873b0fb6a/0/8B30167CDA20FE7EDCFC647AC86B14BB27E430C8.crl rsync://repo-rpki.idnic.net/repo/33dc034f-3823-48af-953d-aaa873b0fb6a/0/8B30167CDA20FE7EDCFC647AC86B14BB27E430C8.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/8B30167CDA20FE7EDCFC647AC86B14BB27E430C8.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/60F8BE9C16625C424B269EE06C64A83BAB8506D4.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/60F8BE9C16625C424B269EE06C64A83BAB8506D4.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/YPi-nBZiXEJLJp7gbGSoO6uFBtQ.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 28 Jan 2026 23:02:04 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 59:57:16:d1:29:b5:03:68:8a:8c:8e:1a:c2:d0:ed:3c:76:de:c9:23 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=8B30167CDA20FE7EDCFC647AC86B14BB27E430C8 Validity Not Before: Jan 25 20:56:04 2026 GMT Not After : Jan 28 23:02:04 2026 GMT Subject: CN=D40F7A7894C65B82798C5BEEFF9DD45D27D5F77A Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a2:66:d6:3e:7f:79:d1:f0:6f:f5:81:c8:01:fa: 74:65:0e:f6:09:39:22:87:88:bd:ad:f6:71:db:10: 6f:f6:54:50:e5:03:8a:ad:8d:9a:f4:db:14:fd:0a: 80:2d:65:6c:67:95:f7:54:22:fd:55:e7:38:60:ec: f5:09:29:47:55:de:6a:ca:b3:7f:de:0e:2f:9a:72: c9:14:b9:33:1f:c6:eb:26:02:a7:f1:83:d6:92:eb: a8:28:f0:97:0b:3a:eb:ff:bb:e4:03:0c:31:81:a7: c4:c8:a4:80:6a:43:fc:bb:35:ba:2a:10:e3:f5:1f: 91:00:a3:dc:44:12:31:79:13:f6:3c:b3:e8:1b:8d: 66:2f:b1:1e:2f:b2:6f:bf:40:f1:8e:dd:bb:aa:52: 6f:81:2c:fe:a2:a2:77:37:69:ee:94:12:a2:1f:a5: 2c:fa:6e:1f:ff:41:44:4c:0b:38:47:a8:e8:6f:1d: f6:fb:5f:fd:6d:fa:03:da:a1:9c:85:1c:46:16:34: 54:d1:a5:36:96:ce:87:0e:5f:47:07:e9:c1:1c:fb: 08:35:0c:2d:95:64:16:40:33:07:0a:d0:9b:37:a9: 9f:a3:9b:e6:03:db:2e:2f:de:dd:e8:d2:1e:70:c7: c7:dd:c9:da:18:a2:b7:ae:cd:1e:87:f8:5d:e2:bf: ba:19 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D4:0F:7A:78:94:C6:5B:82:79:8C:5B:EE:FF:9D:D4:5D:27:D5:F7:7A X509v3 Authority Key Identifier: keyid:8B:30:16:7C:DA:20:FE:7E:DC:FC:64:7A:C8:6B:14:BB:27:E4:30:C8 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/33dc034f-3823-48af-953d-aaa873b0fb6a/0/8B30167CDA20FE7EDCFC647AC86B14BB27E430C8.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/8B30167CDA20FE7EDCFC647AC86B14BB27E430C8.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/33dc034f-3823-48af-953d-aaa873b0fb6a/0/8B30167CDA20FE7EDCFC647AC86B14BB27E430C8.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 8d:61:e2:b1:5f:66:a8:32:3a:6b:bc:86:ef:8d:c6:51:f5:02: 33:94:cc:65:35:35:99:eb:c9:1c:9c:d7:d8:3e:49:6a:c2:11: 77:75:2f:97:26:94:f8:4d:f5:91:98:c1:55:e2:9d:bd:b6:fe: 8d:09:fb:12:97:6b:ac:18:51:2c:2a:1f:ea:43:3c:40:df:98: 97:15:bc:0d:80:b7:85:7b:ba:85:0b:90:3f:16:a2:81:a7:63: 83:89:7e:7a:a9:52:fd:9e:b7:11:40:7e:77:74:10:99:8f:46: e4:b8:21:5c:84:b7:88:3e:e6:16:7b:b7:e4:1f:24:48:dd:67: a7:e5:1f:d0:12:bd:4d:2d:e1:00:16:1e:2d:78:88:bb:98:39: 15:26:9a:e1:6c:85:28:eb:95:0c:68:23:3c:79:c5:6b:2c:22: 4b:54:10:3e:bb:48:95:f3:c2:a7:b7:76:8d:c4:5c:06:d4:a4: 0c:a0:2d:32:23:ce:60:ce:c4:9c:6b:1d:98:32:e2:76:a3:c8: b2:1c:2a:5a:0e:7e:e7:9f:49:47:f2:87:c4:1a:17:dc:c6:bb: 98:90:92:d6:66:23:54:87:ba:0d:2c:5b:43:1e:53:36:48:e3: 13:d5:53:13:ac:a8:f1:b4:b4:7d:9f:a6:1b:d5:0b:7a:60:b4: a4:0f:53:0b -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUWVcW0Sm1A2iKjI4awtDtPHbeySMwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoOEIzMDE2N0NEQTIwRkU3RURDRkM2NDdBQzg2QjE0QkIy N0U0MzBDODAeFw0yNjAxMjUyMDU2MDRaFw0yNjAxMjgyMzAyMDRaMDMxMTAvBgNV BAMTKEQ0MEY3QTc4OTRDNjVCODI3OThDNUJFRUZGOURENDVEMjdENUY3N0EwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCiZtY+f3nR8G/1gcgB+nRlDvYJ OSKHiL2t9nHbEG/2VFDlA4qtjZr02xT9CoAtZWxnlfdUIv1V5zhg7PUJKUdV3mrK s3/eDi+acskUuTMfxusmAqfxg9aS66go8JcLOuv/u+QDDDGBp8TIpIBqQ/y7Nboq EOP1H5EAo9xEEjF5E/Y8s+gbjWYvsR4vsm+/QPGO3buqUm+BLP6ionc3ae6UEqIf pSz6bh//QURMCzhHqOhvHfb7X/1t+gPaoZyFHEYWNFTRpTaWzocOX0cH6cEc+wg1 DC2VZBZAMwcK0Js3qZ+jm+YD2y4v3t3o0h5wx8fdydoYoreuzR6H+F3iv7oZAgMB AAGjggI8MIICODAdBgNVHQ4EFgQU1A96eJTGW4J5jFvu/53UXSfV93owHwYDVR0j BBgwFoAUizAWfNog/n7c/GR6yGsUuyfkMMgwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby8z M2RjMDM0Zi0zODIzLTQ4YWYtOTUzZC1hYWE4NzNiMGZiNmEvMC84QjMwMTY3Q0RB MjBGRTdFRENGQzY0N0FDODZCMTRCQjI3RTQzMEM4LmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzEvOEIzMDE2N0NEQTIwRkU3RURDRkM2NDdBQzg2QjE0QkIyN0U0 MzBDOC5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vMzNkYzAzNGYtMzgyMy00OGFmLTk1 M2QtYWFhODczYjBmYjZhLzAvOEIzMDE2N0NEQTIwRkU3RURDRkM2NDdBQzg2QjE0 QkIyN0U0MzBDOC5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAI1h4rFfZqgyOmu8hu+NxlH1AjOUzGU1NZnr yRyc19g+SWrCEXd1L5cmlPhN9ZGYwVXinb22/o0J+xKXa6wYUSwqH+pDPEDfmJcV vA2At4V7uoULkD8WooGnY4OJfnqpUv2etxFAfnd0EJmPRuS4IVyEt4g+5hZ7t+Qf JEjdZ6flH9ASvU0t4QAWHi14iLuYORUmmuFshSjrlQxoIzx5xWssIktUED67SJXz wqe3do3EXAbUpAygLTIjzmDOxJxrHZgy4najyLIcKloOfuefSUfyh8QaF9zGu5iQ ktZmI1SHug0sW0MeUzZI4xPVUxOsqPG0tH2fphvVC3pgtKQPUws= -----END CERTIFICATE-----Generated at Mon Jan 26 08:42:40 2026 by rpki-client