This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf repo-rpki.idnic.net/repo/33dc034f-3823-48af-953d-aaa873b0fb6a/0/8B30167CDA20FE7EDCFC647AC86B14BB27E430C8.mft File: 8B30167CDA20FE7EDCFC647AC86B14BB27E430C8.mft (raw, json) Hash identifier: Q07Uh5fZr+EQ99c/7X4tc3Ul5dOaoTpABV51RXPciNQ= Subject key identifier: 4C:E0:8F:1D:73:9A:E4:B8:57:11:A2:AA:36:24:CA:0A:03:2C:16:CC Authority key identifier: 8B:30:16:7C:DA:20:FE:7E:DC:FC:64:7A:C8:6B:14:BB:27:E4:30:C8 Certificate issuer: /CN=8B30167CDA20FE7EDCFC647AC86B14BB27E430C8 Certificate serial: 25B35354D1B8EBFF53E7D0E59BBAF26159F4C324 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/8B30167CDA20FE7EDCFC647AC86B14BB27E430C8.cer Subject info access: rsync://repo-rpki.idnic.net/repo/33dc034f-3823-48af-953d-aaa873b0fb6a/0/8B30167CDA20FE7EDCFC647AC86B14BB27E430C8.mft Manifest number: A4 Signing time: Tue 02 Dec 2025 10:11:05 +0000 Manifest this update: Tue 02 Dec 2025 10:06:05 +0000 Manifest next update: Fri 05 Dec 2025 18:27:05 +0000 Files and hashes: 1: 3136302e3139312e3233352e302f32342d3234203d3e20313533313439.roa (hash: 057q45kqdRxLvAiRPvpE9xTv/5F62FgJizN22DjE3/s=) 2: 8B30167CDA20FE7EDCFC647AC86B14BB27E430C8.crl (hash: I67rtKWgqboI71hU58y3wepCa+4N6J4CxLnTsEJ1VfQ=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/33dc034f-3823-48af-953d-aaa873b0fb6a/0/8B30167CDA20FE7EDCFC647AC86B14BB27E430C8.crl rsync://repo-rpki.idnic.net/repo/33dc034f-3823-48af-953d-aaa873b0fb6a/0/8B30167CDA20FE7EDCFC647AC86B14BB27E430C8.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/8B30167CDA20FE7EDCFC647AC86B14BB27E430C8.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/60F8BE9C16625C424B269EE06C64A83BAB8506D4.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/60F8BE9C16625C424B269EE06C64A83BAB8506D4.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/YPi-nBZiXEJLJp7gbGSoO6uFBtQ.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 05 Dec 2025 18:27:05 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 25:b3:53:54:d1:b8:eb:ff:53:e7:d0:e5:9b:ba:f2:61:59:f4:c3:24 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=8B30167CDA20FE7EDCFC647AC86B14BB27E430C8 Validity Not Before: Dec 2 10:06:05 2025 GMT Not After : Dec 5 18:27:05 2025 GMT Subject: CN=4CE08F1D739AE4B85711A2AA3624CA0A032C16CC Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c5:d5:71:da:1e:eb:d5:ed:a2:46:94:7a:56:ac: 0a:23:04:32:70:0f:dd:49:bd:32:be:cd:b1:d9:a9: 35:68:ea:ae:ab:6a:80:93:96:46:2c:6d:1e:33:3d: 5a:ca:62:95:9f:7f:a4:72:13:be:fd:aa:45:d8:d6: f6:06:aa:cd:13:af:b4:1f:a3:90:ed:1c:29:1d:c3: ca:8c:ff:ab:33:3a:32:3b:a1:4e:ad:fd:b0:9c:1d: 4c:2c:52:a8:de:23:1f:87:31:9c:67:ff:b0:45:57: 57:95:6a:48:fd:b1:84:9d:0a:21:10:de:0f:11:19: 26:90:96:1f:67:55:c8:7e:f4:f5:f3:4f:7a:b6:0c: 89:1c:af:21:4c:22:b4:9a:97:29:8a:f8:90:ff:6d: ee:ae:f3:ad:81:40:ef:8a:f8:a4:e1:21:5b:07:1b: 07:c0:36:25:f0:2d:bf:81:e4:94:72:f3:87:d1:df: 30:79:8e:6b:b7:cd:6a:dc:d2:7a:c5:54:cf:bb:c8: 3b:3c:c3:1a:b2:fa:81:52:57:bd:c9:bc:2e:d3:fb: 69:73:28:93:f6:f2:bd:aa:ad:a9:27:bf:3c:91:8d: 5c:9f:9b:1d:86:3f:64:0a:bc:c9:43:b8:ad:83:1b: 68:73:13:f4:57:8c:0f:3d:63:20:78:4a:a7:39:a3: 85:47 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 4C:E0:8F:1D:73:9A:E4:B8:57:11:A2:AA:36:24:CA:0A:03:2C:16:CC X509v3 Authority Key Identifier: keyid:8B:30:16:7C:DA:20:FE:7E:DC:FC:64:7A:C8:6B:14:BB:27:E4:30:C8 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/33dc034f-3823-48af-953d-aaa873b0fb6a/0/8B30167CDA20FE7EDCFC647AC86B14BB27E430C8.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/8B30167CDA20FE7EDCFC647AC86B14BB27E430C8.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/33dc034f-3823-48af-953d-aaa873b0fb6a/0/8B30167CDA20FE7EDCFC647AC86B14BB27E430C8.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption a9:10:5c:b5:77:e7:80:54:94:93:ac:e2:1f:54:69:98:8a:c5: 24:e5:69:a6:3f:49:7a:b9:1c:c0:12:c5:aa:5d:ea:af:f5:6e: 84:ec:cd:c9:b7:ac:c4:3b:c5:f5:e0:16:a9:ba:db:d0:05:c6: b1:74:1a:67:a6:65:df:c2:47:0d:b0:64:ad:ee:63:05:8b:d2: 80:7d:69:9e:4e:72:e6:3b:da:92:4d:3b:83:7b:8c:bc:e4:6d: 0a:cb:93:ac:f8:81:d1:0b:91:71:69:2a:91:a9:88:7a:5b:14: 9b:48:46:b7:13:37:4e:75:14:ac:9a:69:00:bd:55:5e:bb:ec: ef:b7:c1:59:f8:9c:4c:7c:f2:48:86:cc:49:90:7b:7a:8a:f2: a7:36:70:15:de:1d:39:dc:6e:f0:2a:86:c9:40:70:66:a0:d7: ab:a0:0d:04:49:5c:48:9c:a8:6e:98:4c:65:8f:49:24:21:a3: dc:7f:23:d1:d1:b7:14:e2:b2:e2:95:c4:3f:e0:fe:28:56:0a: 0d:9e:b8:eb:cc:d4:0e:41:fb:5c:55:ba:b8:80:ad:15:85:87: 22:7c:d4:df:a6:82:64:46:fe:d5:94:2c:3c:be:7f:0f:78:35: b3:c7:33:36:35:42:cf:e8:b2:4c:b6:69:f7:49:69:1c:c6:95: a0:9b:92:27 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUJbNTVNG46/9T59Dlm7ryYVn0wyQwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoOEIzMDE2N0NEQTIwRkU3RURDRkM2NDdBQzg2QjE0QkIy N0U0MzBDODAeFw0yNTEyMDIxMDA2MDVaFw0yNTEyMDUxODI3MDVaMDMxMTAvBgNV BAMTKDRDRTA4RjFENzM5QUU0Qjg1NzExQTJBQTM2MjRDQTBBMDMyQzE2Q0MwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDF1XHaHuvV7aJGlHpWrAojBDJw D91JvTK+zbHZqTVo6q6raoCTlkYsbR4zPVrKYpWff6RyE779qkXY1vYGqs0Tr7Qf o5DtHCkdw8qM/6szOjI7oU6t/bCcHUwsUqjeIx+HMZxn/7BFV1eVakj9sYSdCiEQ 3g8RGSaQlh9nVch+9PXzT3q2DIkcryFMIrSalymK+JD/be6u862BQO+K+KThIVsH GwfANiXwLb+B5JRy84fR3zB5jmu3zWrc0nrFVM+7yDs8wxqy+oFSV73JvC7T+2lz KJP28r2qraknvzyRjVyfmx2GP2QKvMlDuK2DG2hzE/RXjA89YyB4Sqc5o4VHAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUTOCPHXOa5LhXEaKqNiTKCgMsFswwHwYDVR0j BBgwFoAUizAWfNog/n7c/GR6yGsUuyfkMMgwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby8z M2RjMDM0Zi0zODIzLTQ4YWYtOTUzZC1hYWE4NzNiMGZiNmEvMC84QjMwMTY3Q0RB MjBGRTdFRENGQzY0N0FDODZCMTRCQjI3RTQzMEM4LmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzEvOEIzMDE2N0NEQTIwRkU3RURDRkM2NDdBQzg2QjE0QkIyN0U0 MzBDOC5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vMzNkYzAzNGYtMzgyMy00OGFmLTk1 M2QtYWFhODczYjBmYjZhLzAvOEIzMDE2N0NEQTIwRkU3RURDRkM2NDdBQzg2QjE0 QkIyN0U0MzBDOC5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAKkQXLV354BUlJOs4h9UaZiKxSTlaaY/SXq5 HMASxapd6q/1boTszcm3rMQ7xfXgFqm629AFxrF0GmemZd/CRw2wZK3uYwWL0oB9 aZ5OcuY72pJNO4N7jLzkbQrLk6z4gdELkXFpKpGpiHpbFJtIRrcTN051FKyaaQC9 VV677O+3wVn4nEx88kiGzEmQe3qK8qc2cBXeHTncbvAqhslAcGag16ugDQRJXEic qG6YTGWPSSQho9x/I9HRtxTisuKVxD/g/ihWCg2euOvM1A5B+1xVuriArRWFhyJ8 1N+mgmRG/tWULDy+fw94NbPHMzY1Qs/osky2afdJaRzGlaCbkic= -----END CERTIFICATE-----Generated at Wed Dec 3 16:09:15 2025 by rpki-client