This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf repo-rpki.idnic.net/repo/358c8f9f-4213-4a2a-85c3-b24b0d0b5107/0/030BE557286D3A4FE6E9AA70636EC79D178ACE1F.mft File: 030BE557286D3A4FE6E9AA70636EC79D178ACE1F.mft (raw, json) Hash identifier: JDROY1LafDofWZ/1mcJ5DIUOhE9G4DXZnsoEKk+tS/g= Subject key identifier: 02:75:C6:0D:F5:8C:4F:E7:C2:23:10:2E:DE:FB:F1:1D:A4:1E:C6:3A Authority key identifier: 03:0B:E5:57:28:6D:3A:4F:E6:E9:AA:70:63:6E:C7:9D:17:8A:CE:1F Certificate issuer: /CN=030BE557286D3A4FE6E9AA70636EC79D178ACE1F Certificate serial: 37133B4FF2ED3AB1BCECEEEBCD39E194B007095F Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/030BE557286D3A4FE6E9AA70636EC79D178ACE1F.cer Subject info access: rsync://repo-rpki.idnic.net/repo/358c8f9f-4213-4a2a-85c3-b24b0d0b5107/0/030BE557286D3A4FE6E9AA70636EC79D178ACE1F.mft Manifest number: 0252 Signing time: Fri 05 Dec 2025 11:20:58 +0000 Manifest this update: Fri 05 Dec 2025 11:15:58 +0000 Manifest next update: Mon 08 Dec 2025 13:41:58 +0000 Files and hashes: 1: 030BE557286D3A4FE6E9AA70636EC79D178ACE1F.crl (hash: 78Qk3Rng2FN4leZj+L//HSaUXUqkAbkQWjaxjzj4J+M=) 2: 3130332e3136322e3232312e302f32342d3234203d3e20313339393532.roa (hash: VRZHFUOGnmJp2lMdZGt7kB8GjqU3aUc9sCQrVZdvzM8=) 3: 3130332e3136322e3232302e302f32332d3233203d3e20313339393532.roa (hash: UmBaN4f8daXm7YcJHiYwqui5FgHxOYUATLUGSQyoA5A=) 4: 3130332e3136322e3232302e302f32342d3234203d3e20313339393532.roa (hash: vtfkthTc4w7PTqVhacRm/ULh3HaRPjLVVlG+25ZUsBM=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/358c8f9f-4213-4a2a-85c3-b24b0d0b5107/0/030BE557286D3A4FE6E9AA70636EC79D178ACE1F.crl rsync://repo-rpki.idnic.net/repo/358c8f9f-4213-4a2a-85c3-b24b0d0b5107/0/030BE557286D3A4FE6E9AA70636EC79D178ACE1F.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/030BE557286D3A4FE6E9AA70636EC79D178ACE1F.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 08 Dec 2025 13:41:58 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 37:13:3b:4f:f2:ed:3a:b1:bc:ec:ee:eb:cd:39:e1:94:b0:07:09:5f Signature Algorithm: sha256WithRSAEncryption Issuer: CN=030BE557286D3A4FE6E9AA70636EC79D178ACE1F Validity Not Before: Dec 5 11:15:58 2025 GMT Not After : Dec 8 13:41:58 2025 GMT Subject: CN=0275C60DF58C4FE7C223102EDEFBF11DA41EC63A Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cf:19:96:8d:f4:49:0f:c5:21:fe:67:07:92:25: ce:de:cc:75:7c:38:14:ab:0b:7a:f1:e7:cd:c6:df: 52:32:c1:28:ae:a7:ba:7c:20:98:b9:85:43:03:00: ba:19:03:ae:cc:b0:43:35:b5:11:cd:ed:63:0c:04: 15:ab:e3:13:57:78:02:bf:7a:58:c2:2d:7f:db:2f: e0:67:07:25:a1:8b:e1:ee:08:bc:57:fd:05:60:67: 32:cd:d8:51:36:95:08:23:2e:a3:c1:e3:1d:3e:79: 30:71:c4:48:93:04:85:da:72:45:21:29:6c:87:6d: 60:a0:26:98:60:68:f5:70:de:d7:89:b9:f5:82:3f: 3e:be:62:27:8f:14:88:0c:53:94:68:32:de:10:b1: e8:f8:f9:91:57:60:0d:d7:cf:d9:89:a6:a0:dd:f3: 3a:da:ae:b3:4e:8d:f2:8a:6f:20:8e:91:21:85:42: 97:2c:86:86:c5:84:0e:24:23:26:f9:23:3f:00:d7: ed:b6:c4:14:61:83:87:cf:58:04:c2:23:9a:66:5e: 85:25:54:0c:4e:63:88:66:c7:61:2a:ae:07:c5:f6: 01:b6:82:e8:60:03:4e:0b:3d:9e:3f:07:2f:56:a7: 0b:d0:e3:8a:46:6d:75:19:51:05:16:7b:bd:0f:46: aa:89 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 02:75:C6:0D:F5:8C:4F:E7:C2:23:10:2E:DE:FB:F1:1D:A4:1E:C6:3A X509v3 Authority Key Identifier: keyid:03:0B:E5:57:28:6D:3A:4F:E6:E9:AA:70:63:6E:C7:9D:17:8A:CE:1F X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/358c8f9f-4213-4a2a-85c3-b24b0d0b5107/0/030BE557286D3A4FE6E9AA70636EC79D178ACE1F.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/030BE557286D3A4FE6E9AA70636EC79D178ACE1F.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/358c8f9f-4213-4a2a-85c3-b24b0d0b5107/0/030BE557286D3A4FE6E9AA70636EC79D178ACE1F.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 2b:aa:9f:75:8e:95:2c:6a:d9:e1:4c:c4:2b:01:49:e9:8f:80: 9d:bf:b3:86:fa:57:b3:d9:02:1a:a8:10:c4:fd:43:0d:80:7e: 2e:d0:7c:48:09:80:64:0c:ab:2f:fa:dd:18:0a:d6:0f:65:bc: bc:dc:a0:2d:7f:50:86:a5:10:90:06:8d:40:51:98:d3:71:ec: e4:3b:45:15:99:cd:61:c9:07:ba:10:08:a5:1d:31:d0:b6:e0: 0e:2d:ba:df:76:2c:95:3d:0a:91:54:f5:26:58:d5:df:88:8c: 40:de:49:82:f6:79:90:73:c5:86:8f:19:2c:fc:8d:dd:5e:96: 09:50:cd:75:a5:69:74:a8:77:a6:d0:ea:84:96:9b:ea:88:ad: 10:3e:74:d3:c7:c1:1d:90:7c:aa:6a:26:76:73:12:cd:e2:7e: ea:20:48:a4:3b:fa:c4:0f:26:0a:2e:ae:72:36:66:ce:4b:7f: 10:6d:a3:7a:42:9c:dc:b3:f5:b0:07:8a:7e:c5:bc:7e:83:7e: d4:89:db:b0:b8:8b:33:71:09:ba:2c:75:68:86:95:8e:92:a4: 08:cd:23:ff:fd:0b:33:cc:e9:23:ab:f4:43:e0:d5:a9:14:77: af:cb:27:a8:a9:97:3f:b8:a3:ea:11:17:7c:03:c7:cd:11:2e: a1:cc:e7:9f -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUNxM7T/LtOrG87O7rzTnhlLAHCV8wDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMDMwQkU1NTcyODZEM0E0RkU2RTlBQTcwNjM2RUM3OUQx NzhBQ0UxRjAeFw0yNTEyMDUxMTE1NThaFw0yNTEyMDgxMzQxNThaMDMxMTAvBgNV BAMTKDAyNzVDNjBERjU4QzRGRTdDMjIzMTAyRURFRkJGMTFEQTQxRUM2M0EwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDPGZaN9EkPxSH+ZweSJc7ezHV8 OBSrC3rx583G31IywSiup7p8IJi5hUMDALoZA67MsEM1tRHN7WMMBBWr4xNXeAK/ eljCLX/bL+BnByWhi+HuCLxX/QVgZzLN2FE2lQgjLqPB4x0+eTBxxEiTBIXackUh KWyHbWCgJphgaPVw3teJufWCPz6+YiePFIgMU5RoMt4Qsej4+ZFXYA3Xz9mJpqDd 8zrarrNOjfKKbyCOkSGFQpcshobFhA4kIyb5Iz8A1+22xBRhg4fPWATCI5pmXoUl VAxOY4hmx2EqrgfF9gG2guhgA04LPZ4/By9WpwvQ44pGbXUZUQUWe70PRqqJAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUAnXGDfWMT+fCIxAu3vvxHaQexjowHwYDVR0j BBgwFoAUAwvlVyhtOk/m6apwY27HnReKzh8wDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby8z NThjOGY5Zi00MjEzLTRhMmEtODVjMy1iMjRiMGQwYjUxMDcvMC8wMzBCRTU1NzI4 NkQzQTRGRTZFOUFBNzA2MzZFQzc5RDE3OEFDRTFGLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvMDMwQkU1NTcyODZEM0E0RkU2RTlBQTcwNjM2RUM3OUQxNzhB Q0UxRi5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vMzU4YzhmOWYtNDIxMy00YTJhLTg1 YzMtYjI0YjBkMGI1MTA3LzAvMDMwQkU1NTcyODZEM0E0RkU2RTlBQTcwNjM2RUM3 OUQxNzhBQ0UxRi5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBACuqn3WOlSxq2eFMxCsBSemPgJ2/s4b6V7PZ AhqoEMT9Qw2Afi7QfEgJgGQMqy/63RgK1g9lvLzcoC1/UIalEJAGjUBRmNNx7OQ7 RRWZzWHJB7oQCKUdMdC24A4tut92LJU9CpFU9SZY1d+IjEDeSYL2eZBzxYaPGSz8 jd1elglQzXWlaXSod6bQ6oSWm+qIrRA+dNPHwR2QfKpqJnZzEs3ifuogSKQ7+sQP JgournI2Zs5LfxBto3pCnNyz9bAHin7FvH6DftSJ27C4izNxCbosdWiGlY6SpAjN I//9CzPM6SOr9EPg1akUd6/LJ6iplz+4o+oRF3wDx80RLqHM558= -----END CERTIFICATE-----Generated at Sat Dec 6 20:52:53 2025 by rpki-client