This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf repo-rpki.idnic.net/repo/33dc034f-3823-48af-953d-aaa873b0fb6a/0/8B30167CDA20FE7EDCFC647AC86B14BB27E430C8.mft File: 8B30167CDA20FE7EDCFC647AC86B14BB27E430C8.mft (raw, json) Hash identifier: VylfLWOboGeggE7Jwz3QrunL82kCHmkdq7BkjEOHmzM= Subject key identifier: D9:14:3B:62:45:18:B5:9A:9D:8B:34:E0:4D:17:D7:FC:4E:CE:25:47 Authority key identifier: 8B:30:16:7C:DA:20:FE:7E:DC:FC:64:7A:C8:6B:14:BB:27:E4:30:C8 Certificate issuer: /CN=8B30167CDA20FE7EDCFC647AC86B14BB27E430C8 Certificate serial: 42DFF709C938173A630C560AEFD3D4379110F309 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/8B30167CDA20FE7EDCFC647AC86B14BB27E430C8.cer Subject info access: rsync://repo-rpki.idnic.net/repo/33dc034f-3823-48af-953d-aaa873b0fb6a/0/8B30167CDA20FE7EDCFC647AC86B14BB27E430C8.mft Manifest number: A5 Signing time: Thu 04 Dec 2025 18:31:03 +0000 Manifest this update: Thu 04 Dec 2025 18:26:03 +0000 Manifest next update: Mon 08 Dec 2025 02:19:03 +0000 Files and hashes: 1: 3136302e3139312e3233352e302f32342d3234203d3e20313533313439.roa (hash: 057q45kqdRxLvAiRPvpE9xTv/5F62FgJizN22DjE3/s=) 2: 8B30167CDA20FE7EDCFC647AC86B14BB27E430C8.crl (hash: qgV1Tg6TUwJuipgmsL2SGo6ApDT4RqbTKLABOJ5uRXw=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/33dc034f-3823-48af-953d-aaa873b0fb6a/0/8B30167CDA20FE7EDCFC647AC86B14BB27E430C8.crl rsync://repo-rpki.idnic.net/repo/33dc034f-3823-48af-953d-aaa873b0fb6a/0/8B30167CDA20FE7EDCFC647AC86B14BB27E430C8.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/8B30167CDA20FE7EDCFC647AC86B14BB27E430C8.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/60F8BE9C16625C424B269EE06C64A83BAB8506D4.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/60F8BE9C16625C424B269EE06C64A83BAB8506D4.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/YPi-nBZiXEJLJp7gbGSoO6uFBtQ.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 08 Dec 2025 02:19:03 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 42:df:f7:09:c9:38:17:3a:63:0c:56:0a:ef:d3:d4:37:91:10:f3:09 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=8B30167CDA20FE7EDCFC647AC86B14BB27E430C8 Validity Not Before: Dec 4 18:26:03 2025 GMT Not After : Dec 8 02:19:03 2025 GMT Subject: CN=D9143B624518B59A9D8B34E04D17D7FC4ECE2547 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bd:57:af:e2:fb:2d:ff:94:a7:dc:de:f5:6e:ad: b9:7a:e3:f7:35:bc:25:9b:0f:b9:c2:ea:53:28:31: b1:46:ce:ff:7f:0d:1d:9e:83:ba:5a:e1:89:09:8f: 2d:87:66:88:f7:3c:ac:be:43:96:85:ff:44:fc:a1: b3:31:4a:d8:67:88:fb:fb:86:5c:b5:14:36:c2:ce: 8e:07:3b:ee:3b:bf:bb:39:d9:9c:dc:43:a1:b0:3b: d1:02:79:b2:66:59:9a:7b:1a:fc:10:64:ca:f2:1a: 22:92:e4:d4:f2:b2:c7:ff:7b:9e:19:ee:6d:8e:89: c8:34:d9:1b:eb:dc:db:18:ed:75:a6:be:31:03:fa: cb:fb:f9:b7:3e:a5:fd:ea:4a:28:55:ee:3b:e3:d5: 1e:ab:e5:6c:b3:df:86:c3:b5:1e:c4:2b:40:d4:8c: be:e0:39:3c:09:11:bf:94:00:a4:78:46:d4:c0:17: f1:3b:ab:ec:ae:76:c3:fe:f4:37:06:94:8d:72:1c: e6:26:07:91:e5:dd:23:a8:12:b9:e2:a8:05:ec:7f: 5c:76:25:b8:ae:74:20:c8:88:38:94:b5:59:90:cf: 7d:4d:44:12:7c:88:a9:bf:dd:db:3a:0a:fe:ec:27: a9:38:c8:b4:32:c8:b9:f9:1a:28:18:3a:c9:de:5b: 5f:d7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D9:14:3B:62:45:18:B5:9A:9D:8B:34:E0:4D:17:D7:FC:4E:CE:25:47 X509v3 Authority Key Identifier: keyid:8B:30:16:7C:DA:20:FE:7E:DC:FC:64:7A:C8:6B:14:BB:27:E4:30:C8 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/33dc034f-3823-48af-953d-aaa873b0fb6a/0/8B30167CDA20FE7EDCFC647AC86B14BB27E430C8.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/8B30167CDA20FE7EDCFC647AC86B14BB27E430C8.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/33dc034f-3823-48af-953d-aaa873b0fb6a/0/8B30167CDA20FE7EDCFC647AC86B14BB27E430C8.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 1b:08:2b:4f:20:cb:28:51:4c:0a:8f:a1:a2:ff:60:c7:c0:42: 6a:c0:6a:c8:e3:82:bd:67:ae:ce:58:21:04:78:59:e0:0c:41: 23:3b:1e:2d:9d:75:b3:5c:cf:2b:84:3e:55:69:d0:90:c8:2d: 79:a7:cd:f4:a8:25:24:9b:e6:ad:b8:f5:ba:f4:a7:5c:1e:06: e9:bb:bb:31:33:86:a7:3a:12:1d:67:26:27:a1:86:6b:5b:01: 32:c9:cb:43:46:e4:c1:b9:0c:c4:6e:9f:3d:90:93:6f:71:40: 13:b3:8e:8e:5f:c9:cf:9e:09:82:6e:0e:4d:8c:60:79:f7:1d: 69:1f:ec:e2:6c:10:b9:e6:fc:df:9b:84:5a:b9:7c:cd:4f:15: 46:3d:60:60:62:7b:0b:97:4b:aa:70:ab:df:a0:17:03:8a:3d: 1f:7e:6a:cd:74:32:1c:ac:78:2a:f0:5f:d2:c1:72:01:be:c9: d1:04:63:82:0e:58:b0:f0:09:c8:74:38:ce:ef:cf:c4:6a:40: ff:95:7b:cb:ae:9c:61:0c:88:61:30:49:94:0b:64:53:28:29: f2:e7:00:c4:5e:dd:1e:5e:4d:13:c7:87:56:db:0e:0c:7f:f7: d3:e9:59:48:a2:07:21:55:31:11:44:79:bc:7c:5e:53:b9:09: 96:3f:c2:d8 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUQt/3Cck4FzpjDFYK79PUN5EQ8wkwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoOEIzMDE2N0NEQTIwRkU3RURDRkM2NDdBQzg2QjE0QkIy N0U0MzBDODAeFw0yNTEyMDQxODI2MDNaFw0yNTEyMDgwMjE5MDNaMDMxMTAvBgNV BAMTKEQ5MTQzQjYyNDUxOEI1OUE5RDhCMzRFMDREMTdEN0ZDNEVDRTI1NDcwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC9V6/i+y3/lKfc3vVurbl64/c1 vCWbD7nC6lMoMbFGzv9/DR2eg7pa4YkJjy2HZoj3PKy+Q5aF/0T8obMxSthniPv7 hly1FDbCzo4HO+47v7s52ZzcQ6GwO9ECebJmWZp7GvwQZMryGiKS5NTyssf/e54Z 7m2Oicg02Rvr3NsY7XWmvjED+sv7+bc+pf3qSihV7jvj1R6r5Wyz34bDtR7EK0DU jL7gOTwJEb+UAKR4RtTAF/E7q+yudsP+9DcGlI1yHOYmB5Hl3SOoErniqAXsf1x2 JbiudCDIiDiUtVmQz31NRBJ8iKm/3ds6Cv7sJ6k4yLQyyLn5GigYOsneW1/XAgMB AAGjggI8MIICODAdBgNVHQ4EFgQU2RQ7YkUYtZqdizTgTRfX/E7OJUcwHwYDVR0j BBgwFoAUizAWfNog/n7c/GR6yGsUuyfkMMgwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby8z M2RjMDM0Zi0zODIzLTQ4YWYtOTUzZC1hYWE4NzNiMGZiNmEvMC84QjMwMTY3Q0RB MjBGRTdFRENGQzY0N0FDODZCMTRCQjI3RTQzMEM4LmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzEvOEIzMDE2N0NEQTIwRkU3RURDRkM2NDdBQzg2QjE0QkIyN0U0 MzBDOC5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vMzNkYzAzNGYtMzgyMy00OGFmLTk1 M2QtYWFhODczYjBmYjZhLzAvOEIzMDE2N0NEQTIwRkU3RURDRkM2NDdBQzg2QjE0 QkIyN0U0MzBDOC5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBABsIK08gyyhRTAqPoaL/YMfAQmrAasjjgr1n rs5YIQR4WeAMQSM7Hi2ddbNczyuEPlVp0JDILXmnzfSoJSSb5q249br0p1weBum7 uzEzhqc6Eh1nJiehhmtbATLJy0NG5MG5DMRunz2Qk29xQBOzjo5fyc+eCYJuDk2M YHn3HWkf7OJsELnm/N+bhFq5fM1PFUY9YGBiewuXS6pwq9+gFwOKPR9+as10Mhys eCrwX9LBcgG+ydEEY4IOWLDwCch0OM7vz8RqQP+Ve8uunGEMiGEwSZQLZFMoKfLn AMRe3R5eTRPHh1bbDgx/99PpWUiiByFVMRFEebx8XlO5CZY/wtg= -----END CERTIFICATE-----Generated at Sun Dec 7 00:51:49 2025 by rpki-client