This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf repo-rpki.idnic.net/repo/03b59ce4-66a2-4f4d-b3d6-9299484ba56b/0/C30DE71F7CAE16CA2D8DAB6D01CA43D72FB4FE6E.mft File: C30DE71F7CAE16CA2D8DAB6D01CA43D72FB4FE6E.mft (raw, json) Hash identifier: 3IyDlDp8LsQ5kCiozJ5TWnBjHTdJzghaDMhp5fkkvW8= Subject key identifier: 45:89:B1:3E:AE:01:74:B8:56:67:0A:8C:AF:2E:65:E5:2C:B4:1B:C3 Authority key identifier: C3:0D:E7:1F:7C:AE:16:CA:2D:8D:AB:6D:01:CA:43:D7:2F:B4:FE:6E Certificate issuer: /CN=C30DE71F7CAE16CA2D8DAB6D01CA43D72FB4FE6E Certificate serial: 28AD1F3F0444FBA55885E6651EB138DB1B6CA74A Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/C30DE71F7CAE16CA2D8DAB6D01CA43D72FB4FE6E.cer Subject info access: rsync://repo-rpki.idnic.net/repo/03b59ce4-66a2-4f4d-b3d6-9299484ba56b/0/C30DE71F7CAE16CA2D8DAB6D01CA43D72FB4FE6E.mft Manifest number: 041A Signing time: Fri 05 Dec 2025 11:20:58 +0000 Manifest this update: Fri 05 Dec 2025 11:15:58 +0000 Manifest next update: Mon 08 Dec 2025 21:20:58 +0000 Files and hashes: 1: C30DE71F7CAE16CA2D8DAB6D01CA43D72FB4FE6E.crl (hash: dgVdMUm84sHvFUBMcun/Xk3oIPhV2/GVwfhWu2LFf34=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/03b59ce4-66a2-4f4d-b3d6-9299484ba56b/0/C30DE71F7CAE16CA2D8DAB6D01CA43D72FB4FE6E.crl rsync://repo-rpki.idnic.net/repo/03b59ce4-66a2-4f4d-b3d6-9299484ba56b/0/C30DE71F7CAE16CA2D8DAB6D01CA43D72FB4FE6E.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/C30DE71F7CAE16CA2D8DAB6D01CA43D72FB4FE6E.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 08 Dec 2025 21:20:58 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 28:ad:1f:3f:04:44:fb:a5:58:85:e6:65:1e:b1:38:db:1b:6c:a7:4a Signature Algorithm: sha256WithRSAEncryption Issuer: CN=C30DE71F7CAE16CA2D8DAB6D01CA43D72FB4FE6E Validity Not Before: Dec 5 11:15:58 2025 GMT Not After : Dec 8 21:20:58 2025 GMT Subject: CN=4589B13EAE0174B856670A8CAF2E65E52CB41BC3 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c4:22:e1:2c:7d:04:1b:b2:5b:10:08:42:7a:fc: 81:6f:c3:d8:74:bf:2d:f6:ef:ce:8f:93:4f:7c:d7: 20:70:f6:4f:8f:4f:f2:d4:3d:dc:89:93:ec:2e:0e: 48:ab:7a:b2:62:7a:94:09:82:3e:a0:bd:f8:25:49: 70:96:26:52:06:34:e6:31:12:50:de:61:67:df:ed: 0b:9f:33:74:84:89:95:27:b4:40:58:70:c2:b9:ea: ca:3d:51:9b:d3:b6:2c:06:0b:f5:22:db:8d:a3:83: 82:d2:24:a3:e0:c7:a6:40:ff:8e:ec:97:98:ce:12: d2:4b:e5:2f:44:d1:87:65:87:d0:ea:db:ba:04:66: d5:03:73:5f:b4:39:bd:1a:57:cc:25:11:25:40:d2: 1b:80:15:a4:4b:9a:94:6e:02:af:2b:ea:59:4f:fe: da:1f:2c:28:ab:ec:2e:83:5b:3a:f3:5b:19:93:d5: fb:6d:96:a3:b8:a1:5d:d3:f5:18:68:2d:7b:a0:f6: 71:57:c0:6c:7b:4b:29:14:79:d3:b1:06:19:32:46: 77:f8:a7:57:78:c8:d4:1d:05:68:10:7c:3c:9c:ad: 4c:e0:e6:61:f6:52:ec:23:68:31:21:7b:d3:fd:31: 99:19:28:6c:43:23:12:19:9b:97:2d:aa:85:e5:93: 3d:c9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 45:89:B1:3E:AE:01:74:B8:56:67:0A:8C:AF:2E:65:E5:2C:B4:1B:C3 X509v3 Authority Key Identifier: keyid:C3:0D:E7:1F:7C:AE:16:CA:2D:8D:AB:6D:01:CA:43:D7:2F:B4:FE:6E X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/03b59ce4-66a2-4f4d-b3d6-9299484ba56b/0/C30DE71F7CAE16CA2D8DAB6D01CA43D72FB4FE6E.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/C30DE71F7CAE16CA2D8DAB6D01CA43D72FB4FE6E.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/03b59ce4-66a2-4f4d-b3d6-9299484ba56b/0/C30DE71F7CAE16CA2D8DAB6D01CA43D72FB4FE6E.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 64:e3:98:68:ba:ac:ca:5b:ea:41:61:19:e9:d0:f6:ed:02:8b: 0c:6b:6d:cb:b4:a0:38:be:2f:77:46:c1:00:12:8c:6e:a1:14: 3a:62:65:82:c2:e1:45:41:fe:cc:75:0c:3f:7c:27:0f:f8:c0: 8e:27:c1:0f:b8:33:98:e8:db:a3:28:f9:33:ef:ea:31:5d:33: be:fe:56:90:65:49:0c:bb:f4:7d:9f:fd:6b:c7:9c:e1:51:f6: db:d8:1d:de:2b:6a:bb:b2:a5:2a:6e:e6:29:ad:6d:43:04:ca: b1:bf:46:70:47:f4:ad:59:71:9d:4f:af:14:ee:f1:f9:ac:12: 08:ed:49:1b:8d:cb:5a:8f:81:07:79:53:37:fa:31:69:63:bf: ff:ac:cc:a5:91:5b:bf:9d:72:b7:e1:9f:a5:43:a7:c1:f2:b9: a7:a9:b7:f1:5a:b5:db:93:6d:5a:50:81:d1:e1:cc:74:e3:55: 15:9b:74:86:6f:3a:eb:70:3b:b3:e2:f1:f6:20:b4:a1:9c:30: d8:28:99:ad:57:c8:67:2c:11:bf:a3:d1:01:6d:70:4b:ee:da: a1:74:49:32:a6:08:51:22:c5:ec:5a:46:58:e1:93:12:cf:c5: 1e:35:86:0f:e7:da:e5:d6:81:8e:1a:d0:f1:9f:8f:c1:4a:42: 48:fd:e8:1c -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUKK0fPwRE+6VYheZlHrE42xtsp0owDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoQzMwREU3MUY3Q0FFMTZDQTJEOERBQjZEMDFDQTQzRDcy RkI0RkU2RTAeFw0yNTEyMDUxMTE1NThaFw0yNTEyMDgyMTIwNThaMDMxMTAvBgNV BAMTKDQ1ODlCMTNFQUUwMTc0Qjg1NjY3MEE4Q0FGMkU2NUU1MkNCNDFCQzMwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDEIuEsfQQbslsQCEJ6/IFvw9h0 vy32786Pk0981yBw9k+PT/LUPdyJk+wuDkirerJiepQJgj6gvfglSXCWJlIGNOYx ElDeYWff7QufM3SEiZUntEBYcMK56so9UZvTtiwGC/Ui242jg4LSJKPgx6ZA/47s l5jOEtJL5S9E0Ydlh9Dq27oEZtUDc1+0Ob0aV8wlESVA0huAFaRLmpRuAq8r6llP /tofLCir7C6DWzrzWxmT1fttlqO4oV3T9RhoLXug9nFXwGx7SykUedOxBhkyRnf4 p1d4yNQdBWgQfDycrUzg5mH2UuwjaDEhe9P9MZkZKGxDIxIZm5ctqoXlkz3JAgMB AAGjggI8MIICODAdBgNVHQ4EFgQURYmxPq4BdLhWZwqMry5l5Sy0G8MwHwYDVR0j BBgwFoAUww3nH3yuFsotjattAcpD1y+0/m4wDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby8w M2I1OWNlNC02NmEyLTRmNGQtYjNkNi05Mjk5NDg0YmE1NmIvMC9DMzBERTcxRjdD QUUxNkNBMkQ4REFCNkQwMUNBNDNENzJGQjRGRTZFLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvQzMwREU3MUY3Q0FFMTZDQTJEOERBQjZEMDFDQTQzRDcyRkI0 RkU2RS5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vMDNiNTljZTQtNjZhMi00ZjRkLWIz ZDYtOTI5OTQ4NGJhNTZiLzAvQzMwREU3MUY3Q0FFMTZDQTJEOERBQjZEMDFDQTQz RDcyRkI0RkU2RS5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAGTjmGi6rMpb6kFhGenQ9u0Ciwxrbcu0oDi+ L3dGwQASjG6hFDpiZYLC4UVB/sx1DD98Jw/4wI4nwQ+4M5jo26Mo+TPv6jFdM77+ VpBlSQy79H2f/WvHnOFR9tvYHd4raruypSpu5imtbUMEyrG/RnBH9K1ZcZ1PrxTu 8fmsEgjtSRuNy1qPgQd5Uzf6MWljv/+szKWRW7+dcrfhn6VDp8Hyuaept/FatduT bVpQgdHhzHTjVRWbdIZvOutwO7Pi8fYgtKGcMNgoma1XyGcsEb+j0QFtcEvu2qF0 STKmCFEixexaRljhkxLPxR41hg/n2uXWgY4a0PGfj8FKQkj96Bw= -----END CERTIFICATE-----Generated at Sun Dec 7 01:02:48 2025 by rpki-client