This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf repo-rpki.idnic.net/repo/429f8902-1a06-45a8-a998-72e46aaae8fc/0/30E2B4617B8B9CFC4FC57B1C5A4D74FC7E912D45.mft File: 30E2B4617B8B9CFC4FC57B1C5A4D74FC7E912D45.mft (raw, json) Hash identifier: k1o9FjyVSTAXO9XIxl7IK5exxG0Hg3dRzL0AbDg3nL8= Subject key identifier: C5:1D:8E:F3:6F:AA:4C:C0:91:4B:88:8A:F2:8C:79:F8:8A:5A:6A:26 Authority key identifier: 30:E2:B4:61:7B:8B:9C:FC:4F:C5:7B:1C:5A:4D:74:FC:7E:91:2D:45 Certificate issuer: /CN=30E2B4617B8B9CFC4FC57B1C5A4D74FC7E912D45 Certificate serial: 2035879299ED3098A14D4B4ADD982914BFCE291B Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/30E2B4617B8B9CFC4FC57B1C5A4D74FC7E912D45.cer Subject info access: rsync://repo-rpki.idnic.net/repo/429f8902-1a06-45a8-a998-72e46aaae8fc/0/30E2B4617B8B9CFC4FC57B1C5A4D74FC7E912D45.mft Manifest number: 01FF Signing time: Sat 06 Dec 2025 06:01:14 +0000 Manifest this update: Sat 06 Dec 2025 05:56:14 +0000 Manifest next update: Tue 09 Dec 2025 13:05:14 +0000 Files and hashes: 1: 30E2B4617B8B9CFC4FC57B1C5A4D74FC7E912D45.crl (hash: poV5TalA6/Joa23il0d3djjHLYdngbvmaxaAsyZ71zk=) 2: 3130332e3136362e3235342e302f32342d3234203d3e20313431393636.roa (hash: Udg26cCHQ+Qftm36Kch+i7dbSWtv7odm32FXa+73LYY=) 3: 3130332e3136362e3235352e302f32342d3234203d3e20313431393636.roa (hash: xce0AmVhdIuoA0s5G07BTYqxfWM/i2bbCDllzfV1P80=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/429f8902-1a06-45a8-a998-72e46aaae8fc/0/30E2B4617B8B9CFC4FC57B1C5A4D74FC7E912D45.crl rsync://repo-rpki.idnic.net/repo/429f8902-1a06-45a8-a998-72e46aaae8fc/0/30E2B4617B8B9CFC4FC57B1C5A4D74FC7E912D45.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/30E2B4617B8B9CFC4FC57B1C5A4D74FC7E912D45.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 09 Dec 2025 13:05:14 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 20:35:87:92:99:ed:30:98:a1:4d:4b:4a:dd:98:29:14:bf:ce:29:1b Signature Algorithm: sha256WithRSAEncryption Issuer: CN=30E2B4617B8B9CFC4FC57B1C5A4D74FC7E912D45 Validity Not Before: Dec 6 05:56:14 2025 GMT Not After : Dec 9 13:05:14 2025 GMT Subject: CN=C51D8EF36FAA4CC0914B888AF28C79F88A5A6A26 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b5:d2:9f:c2:02:61:e7:7d:cd:a6:14:f1:e9:3d: 1b:0d:5c:5d:dd:ba:f4:48:dc:2c:af:8b:24:49:f5: a8:f1:23:3f:5e:8d:d5:20:4a:e3:aa:27:9e:ff:0f: 12:24:9f:a2:24:4e:98:4f:5f:b3:fa:7e:5a:5e:6e: 7c:a3:4c:ba:b5:64:0b:99:11:f9:e4:56:82:f4:9f: f2:d3:56:8d:5d:d5:c3:44:f5:c4:80:3d:c3:0a:1e: 30:3d:3b:5d:bf:a4:9d:f2:3a:f6:c4:36:d1:8f:c5: 8c:af:42:1f:02:b6:a7:61:84:91:ec:40:53:67:1c: e2:92:b7:4a:84:eb:aa:92:2b:87:4a:59:ed:3a:60: ac:bf:76:4f:96:3a:ac:e4:c2:4d:2e:39:47:2b:f2: 6f:d7:34:a3:77:27:a3:67:90:ec:7f:aa:8f:27:26: d9:0b:ce:c4:01:65:77:14:24:a2:bf:16:70:26:94: fe:ce:03:41:2f:1c:93:31:53:4e:ec:08:2f:6c:56: cc:81:b8:c3:ea:cb:f6:5c:90:29:57:1f:05:7f:b5: ce:98:ff:44:ab:75:8b:8e:ba:38:fc:9f:81:a2:1f: c9:fd:0d:8b:03:79:0a:49:c2:3d:6a:35:e0:e4:a2: 1e:28:20:9c:ea:a1:86:b8:aa:3a:b2:87:ff:92:2c: b1:3f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: C5:1D:8E:F3:6F:AA:4C:C0:91:4B:88:8A:F2:8C:79:F8:8A:5A:6A:26 X509v3 Authority Key Identifier: keyid:30:E2:B4:61:7B:8B:9C:FC:4F:C5:7B:1C:5A:4D:74:FC:7E:91:2D:45 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/429f8902-1a06-45a8-a998-72e46aaae8fc/0/30E2B4617B8B9CFC4FC57B1C5A4D74FC7E912D45.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/30E2B4617B8B9CFC4FC57B1C5A4D74FC7E912D45.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/429f8902-1a06-45a8-a998-72e46aaae8fc/0/30E2B4617B8B9CFC4FC57B1C5A4D74FC7E912D45.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 31:98:02:31:6a:22:a4:68:4e:cd:c6:83:b5:55:12:13:92:09: 40:b6:4e:bd:fb:c8:86:54:cb:17:c8:cc:41:06:1e:f4:10:30: 67:22:96:fb:3a:a6:ba:ee:61:f2:99:e6:27:79:42:ad:2a:70: a4:9b:cb:84:46:66:e2:e4:ba:19:9b:37:3d:21:d7:17:27:ea: 18:4f:65:a0:8d:83:1c:2d:82:5a:56:1d:87:bc:03:4e:92:00: e4:29:4d:a4:fd:e1:e3:7b:67:14:3e:7b:b3:f9:53:45:9e:27: 11:c1:78:33:37:55:2b:70:fb:9a:f9:a9:bd:0e:50:01:2c:ac: 45:77:76:4b:1e:0e:93:37:11:56:01:96:00:cc:df:fe:fb:53: 63:ae:bc:1d:e7:15:96:26:ef:9e:73:0e:dc:d0:f0:c8:e0:85: a4:af:9e:80:e6:05:91:e5:b7:9e:b8:35:ba:46:4c:39:de:ad: 56:99:8c:87:3c:18:c2:e3:7e:39:24:5f:fc:ec:f4:7a:87:9a: 08:52:a3:2d:00:6d:2f:80:6c:c7:81:5e:15:0b:2c:8b:16:2e: d3:f3:50:d1:5e:a1:62:1b:8a:a1:24:60:16:33:70:41:90:ac: c7:11:b3:da:77:3b:27:a4:a2:15:76:83:9e:8f:a8:94:21:76: dd:ee:f3:23 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUIDWHkpntMJihTUtK3ZgpFL/OKRswDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMzBFMkI0NjE3QjhCOUNGQzRGQzU3QjFDNUE0RDc0RkM3 RTkxMkQ0NTAeFw0yNTEyMDYwNTU2MTRaFw0yNTEyMDkxMzA1MTRaMDMxMTAvBgNV BAMTKEM1MUQ4RUYzNkZBQTRDQzA5MTRCODg4QUYyOEM3OUY4OEE1QTZBMjYwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC10p/CAmHnfc2mFPHpPRsNXF3d uvRI3CyviyRJ9ajxIz9ejdUgSuOqJ57/DxIkn6IkTphPX7P6flpebnyjTLq1ZAuZ EfnkVoL0n/LTVo1d1cNE9cSAPcMKHjA9O12/pJ3yOvbENtGPxYyvQh8CtqdhhJHs QFNnHOKSt0qE66qSK4dKWe06YKy/dk+WOqzkwk0uOUcr8m/XNKN3J6NnkOx/qo8n JtkLzsQBZXcUJKK/FnAmlP7OA0EvHJMxU07sCC9sVsyBuMPqy/ZckClXHwV/tc6Y /0SrdYuOujj8n4GiH8n9DYsDeQpJwj1qNeDkoh4oIJzqoYa4qjqyh/+SLLE/AgMB AAGjggI8MIICODAdBgNVHQ4EFgQUxR2O82+qTMCRS4iK8ox5+IpaaiYwHwYDVR0j BBgwFoAUMOK0YXuLnPxPxXscWk10/H6RLUUwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby80 MjlmODkwMi0xYTA2LTQ1YTgtYTk5OC03MmU0NmFhYWU4ZmMvMC8zMEUyQjQ2MTdC OEI5Q0ZDNEZDNTdCMUM1QTRENzRGQzdFOTEyRDQ1LmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvMzBFMkI0NjE3QjhCOUNGQzRGQzU3QjFDNUE0RDc0RkM3RTkx MkQ0NS5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vNDI5Zjg5MDItMWEwNi00NWE4LWE5 OTgtNzJlNDZhYWFlOGZjLzAvMzBFMkI0NjE3QjhCOUNGQzRGQzU3QjFDNUE0RDc0 RkM3RTkxMkQ0NS5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBADGYAjFqIqRoTs3Gg7VVEhOSCUC2Tr37yIZU yxfIzEEGHvQQMGcilvs6prruYfKZ5id5Qq0qcKSby4RGZuLkuhmbNz0h1xcn6hhP ZaCNgxwtglpWHYe8A06SAOQpTaT94eN7ZxQ+e7P5U0WeJxHBeDM3VStw+5r5qb0O UAEsrEV3dkseDpM3EVYBlgDM3/77U2OuvB3nFZYm755zDtzQ8MjghaSvnoDmBZHl t564NbpGTDnerVaZjIc8GMLjfjkkX/zs9HqHmghSoy0AbS+AbMeBXhULLIsWLtPz UNFeoWIbiqEkYBYzcEGQrMcRs9p3OyekohV2g56PqJQhdt3u8yM= -----END CERTIFICATE-----Generated at Sun Dec 7 03:06:17 2025 by rpki-client