This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf repo-rpki.idnic.net/repo/2c0056b4-f027-44fa-974d-4a1ed191ae56/0/8030ED8A48ED985A5DD88E9BC1C0D015F436FFDF.mft File: 8030ED8A48ED985A5DD88E9BC1C0D015F436FFDF.mft (raw, json) Hash identifier: VW9BVe+pThBdsGH8OsvpOEhJwA4t+YGW8UvUle34YFM= Subject key identifier: BA:24:D8:6F:92:96:47:9C:69:9E:40:93:B1:FC:E3:98:6E:EB:34:38 Authority key identifier: 80:30:ED:8A:48:ED:98:5A:5D:D8:8E:9B:C1:C0:D0:15:F4:36:FF:DF Certificate issuer: /CN=8030ED8A48ED985A5DD88E9BC1C0D015F436FFDF Certificate serial: 737F9147C4B30E5513781D29C31E69397040318C Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/8030ED8A48ED985A5DD88E9BC1C0D015F436FFDF.cer Subject info access: rsync://repo-rpki.idnic.net/repo/2c0056b4-f027-44fa-974d-4a1ed191ae56/0/8030ED8A48ED985A5DD88E9BC1C0D015F436FFDF.mft Manifest number: 0215 Signing time: Fri 05 Dec 2025 05:11:53 +0000 Manifest this update: Fri 05 Dec 2025 05:06:53 +0000 Manifest next update: Mon 08 Dec 2025 14:22:53 +0000 Files and hashes: 1: 3130332e3138392e3235342e302f32342d3234203d3e20313439393135.roa (hash: Fo/wu0BFSpF55NefZU/m5we3g29g18juirYZ6ANAiIw=) 2: 8030ED8A48ED985A5DD88E9BC1C0D015F436FFDF.crl (hash: ZVkMFt1a75o3RY7I9O/WmBUEweG1XseyQFCHsLYUcxw=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/2c0056b4-f027-44fa-974d-4a1ed191ae56/0/8030ED8A48ED985A5DD88E9BC1C0D015F436FFDF.crl rsync://repo-rpki.idnic.net/repo/2c0056b4-f027-44fa-974d-4a1ed191ae56/0/8030ED8A48ED985A5DD88E9BC1C0D015F436FFDF.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/8030ED8A48ED985A5DD88E9BC1C0D015F436FFDF.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 08 Dec 2025 14:22:53 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 73:7f:91:47:c4:b3:0e:55:13:78:1d:29:c3:1e:69:39:70:40:31:8c Signature Algorithm: sha256WithRSAEncryption Issuer: CN=8030ED8A48ED985A5DD88E9BC1C0D015F436FFDF Validity Not Before: Dec 5 05:06:53 2025 GMT Not After : Dec 8 14:22:53 2025 GMT Subject: CN=BA24D86F9296479C699E4093B1FCE3986EEB3438 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a6:0f:79:35:3b:ed:53:74:e9:ff:72:6a:52:ea: 72:73:68:0c:e0:9f:4f:5a:54:dd:05:98:e2:a9:f3: 96:60:76:18:2b:da:f7:f7:f8:ce:5a:53:04:81:a4: 76:32:17:89:3a:dc:fe:64:b2:e9:61:b8:6a:2d:3c: 8d:84:42:14:e1:bc:4e:b1:d5:64:04:e8:a3:74:3d: b4:96:13:f4:30:07:f0:7f:f7:4d:0e:6f:37:02:04: 5c:91:1e:04:d1:09:3f:69:df:93:ac:fd:f7:29:c4: 03:ab:94:1a:9d:2b:16:c0:21:7a:61:a8:55:99:72: e2:f0:83:3a:ca:96:30:ef:7c:a0:38:37:c1:a3:58: a1:b3:74:2d:6f:9e:d6:df:4d:3f:51:c9:35:07:3d: 76:56:5d:e2:0c:51:be:3b:38:7a:20:db:66:96:00: 5f:10:35:fd:63:dc:24:ae:92:93:62:bd:29:7a:5d: a0:80:8e:dd:c2:64:ed:f3:df:21:a5:19:33:a1:ed: 47:d3:ce:8f:40:fe:fd:04:16:be:e2:06:53:5a:88: 7d:82:77:08:45:1b:54:ae:e9:30:1a:db:87:2e:f6: 27:f0:cb:18:88:85:77:96:a5:0e:39:5c:48:42:65: f3:33:96:d1:b0:5c:55:87:42:d6:e8:80:21:9c:18: 3b:3f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: BA:24:D8:6F:92:96:47:9C:69:9E:40:93:B1:FC:E3:98:6E:EB:34:38 X509v3 Authority Key Identifier: keyid:80:30:ED:8A:48:ED:98:5A:5D:D8:8E:9B:C1:C0:D0:15:F4:36:FF:DF X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/2c0056b4-f027-44fa-974d-4a1ed191ae56/0/8030ED8A48ED985A5DD88E9BC1C0D015F436FFDF.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/8030ED8A48ED985A5DD88E9BC1C0D015F436FFDF.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/2c0056b4-f027-44fa-974d-4a1ed191ae56/0/8030ED8A48ED985A5DD88E9BC1C0D015F436FFDF.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 9c:d1:db:c4:bf:ea:20:55:5d:0f:11:8f:59:b1:9f:d8:70:a9: 11:b1:1e:2c:8d:43:84:d7:6b:f1:ef:32:81:05:70:b3:39:d2: 68:48:ca:25:de:9b:f3:d4:00:29:a4:a6:e0:4f:a3:9d:25:44: e6:47:9a:68:f1:32:55:fe:fb:82:bb:c3:33:c4:a6:7e:6e:0a: f9:c1:7c:8b:db:06:f7:d0:a6:23:fc:43:3a:34:00:d1:36:40: e8:74:7c:b3:86:f6:58:75:c5:40:e0:65:59:24:61:e1:f0:21: 09:b9:10:55:d8:41:44:c3:e7:41:cb:ca:b8:2f:d6:84:b2:44: aa:b6:07:b3:9f:64:12:15:4d:ed:d7:2f:be:14:12:de:2a:dc: 60:f3:11:d1:47:f1:97:f7:11:73:15:eb:eb:27:51:81:12:64: 5c:9f:39:4a:38:e2:7e:52:24:9d:08:da:ac:20:c5:aa:c4:ef: f1:a8:5e:23:ba:1e:bb:72:45:22:75:f4:c1:10:11:ff:ac:b2: 92:5f:02:7b:46:81:b1:af:a9:55:03:51:58:5f:ca:69:04:20: 67:b2:f9:18:4a:dd:9b:36:e7:d5:42:15:1e:0a:e1:87:d0:f8: 1d:92:68:88:a4:d5:12:12:26:d2:5f:b8:85:12:07:1b:94:48: f7:f7:a2:e5 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUc3+RR8SzDlUTeB0pwx5pOXBAMYwwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoODAzMEVEOEE0OEVEOTg1QTVERDg4RTlCQzFDMEQwMTVG NDM2RkZERjAeFw0yNTEyMDUwNTA2NTNaFw0yNTEyMDgxNDIyNTNaMDMxMTAvBgNV BAMTKEJBMjREODZGOTI5NjQ3OUM2OTlFNDA5M0IxRkNFMzk4NkVFQjM0MzgwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCmD3k1O+1TdOn/cmpS6nJzaAzg n09aVN0FmOKp85Zgdhgr2vf3+M5aUwSBpHYyF4k63P5ksulhuGotPI2EQhThvE6x 1WQE6KN0PbSWE/QwB/B/900ObzcCBFyRHgTRCT9p35Os/fcpxAOrlBqdKxbAIXph qFWZcuLwgzrKljDvfKA4N8GjWKGzdC1vntbfTT9RyTUHPXZWXeIMUb47OHog22aW AF8QNf1j3CSukpNivSl6XaCAjt3CZO3z3yGlGTOh7UfTzo9A/v0EFr7iBlNaiH2C dwhFG1Su6TAa24cu9ifwyxiIhXeWpQ45XEhCZfMzltGwXFWHQtbogCGcGDs/AgMB AAGjggI8MIICODAdBgNVHQ4EFgQUuiTYb5KWR5xpnkCTsfzjmG7rNDgwHwYDVR0j BBgwFoAUgDDtikjtmFpd2I6bwcDQFfQ2/98wDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby8y YzAwNTZiNC1mMDI3LTQ0ZmEtOTc0ZC00YTFlZDE5MWFlNTYvMC84MDMwRUQ4QTQ4 RUQ5ODVBNUREODhFOUJDMUMwRDAxNUY0MzZGRkRGLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvODAzMEVEOEE0OEVEOTg1QTVERDg4RTlCQzFDMEQwMTVGNDM2 RkZERi5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vMmMwMDU2YjQtZjAyNy00NGZhLTk3 NGQtNGExZWQxOTFhZTU2LzAvODAzMEVEOEE0OEVEOTg1QTVERDg4RTlCQzFDMEQw MTVGNDM2RkZERi5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAJzR28S/6iBVXQ8Rj1mxn9hwqRGxHiyNQ4TX a/HvMoEFcLM50mhIyiXem/PUACmkpuBPo50lROZHmmjxMlX++4K7wzPEpn5uCvnB fIvbBvfQpiP8Qzo0ANE2QOh0fLOG9lh1xUDgZVkkYeHwIQm5EFXYQUTD50HLyrgv 1oSyRKq2B7OfZBIVTe3XL74UEt4q3GDzEdFH8Zf3EXMV6+snUYESZFyfOUo44n5S JJ0I2qwgxarE7/GoXiO6HrtyRSJ19MEQEf+sspJfAntGgbGvqVUDUVhfymkEIGey +RhK3Zs259VCFR4K4YfQ+B2SaIik1RISJtJfuIUSBxuUSPf3ouU= -----END CERTIFICATE-----Generated at Sun Dec 7 01:49:49 2025 by rpki-client