This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf repo-rpki.idnic.net/repo/429f8902-1a06-45a8-a998-72e46aaae8fc/0/30E2B4617B8B9CFC4FC57B1C5A4D74FC7E912D45.mft File: 30E2B4617B8B9CFC4FC57B1C5A4D74FC7E912D45.mft (raw, json) Hash identifier: lC8X+TcXU/uCQ7bVEq9Qkoek3Og0y6gqrFmA91XQSH0= Subject key identifier: 50:2F:E9:06:97:44:1A:FC:B3:4D:9F:E1:EA:CB:C3:95:21:1E:78:E2 Authority key identifier: 30:E2:B4:61:7B:8B:9C:FC:4F:C5:7B:1C:5A:4D:74:FC:7E:91:2D:45 Certificate issuer: /CN=30E2B4617B8B9CFC4FC57B1C5A4D74FC7E912D45 Certificate serial: 378A24D3124E6959430A521B1C32E6638B002F76 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/30E2B4617B8B9CFC4FC57B1C5A4D74FC7E912D45.cer Subject info access: rsync://repo-rpki.idnic.net/repo/429f8902-1a06-45a8-a998-72e46aaae8fc/0/30E2B4617B8B9CFC4FC57B1C5A4D74FC7E912D45.mft Manifest number: 0215 Signing time: Sat 24 Jan 2026 17:41:14 +0000 Manifest this update: Sat 24 Jan 2026 17:36:14 +0000 Manifest next update: Tue 27 Jan 2026 23:30:14 +0000 Files and hashes: 1: 3130332e3136362e3235352e302f32342d3234203d3e20313431393636.roa (hash: xce0AmVhdIuoA0s5G07BTYqxfWM/i2bbCDllzfV1P80=) 2: 3130332e3136362e3235342e302f32342d3234203d3e20313431393636.roa (hash: Udg26cCHQ+Qftm36Kch+i7dbSWtv7odm32FXa+73LYY=) 3: 30E2B4617B8B9CFC4FC57B1C5A4D74FC7E912D45.crl (hash: tiOjY4mFASz8nxSAVJmg7rOWd8fPu4Ret50mBGZY4pA=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/429f8902-1a06-45a8-a998-72e46aaae8fc/0/30E2B4617B8B9CFC4FC57B1C5A4D74FC7E912D45.crl rsync://repo-rpki.idnic.net/repo/429f8902-1a06-45a8-a998-72e46aaae8fc/0/30E2B4617B8B9CFC4FC57B1C5A4D74FC7E912D45.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/30E2B4617B8B9CFC4FC57B1C5A4D74FC7E912D45.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 27 Jan 2026 23:30:14 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 37:8a:24:d3:12:4e:69:59:43:0a:52:1b:1c:32:e6:63:8b:00:2f:76 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=30E2B4617B8B9CFC4FC57B1C5A4D74FC7E912D45 Validity Not Before: Jan 24 17:36:14 2026 GMT Not After : Jan 27 23:30:14 2026 GMT Subject: CN=502FE90697441AFCB34D9FE1EACBC395211E78E2 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d9:20:a6:fe:c1:fb:3e:af:d3:ba:bf:5e:a1:89: 74:ce:8b:73:f6:e5:40:f8:23:14:b6:f9:54:cc:eb: 92:e0:58:ad:08:25:a1:f2:06:21:ae:5c:b9:4b:61: 9d:84:85:e4:d0:8d:b7:94:39:40:bb:ba:50:bf:e1: ba:14:cd:b2:df:68:0c:72:02:a6:11:b6:04:6e:af: 1b:b8:f0:c9:7e:e7:94:e6:d2:22:13:a1:71:7c:cf: 4a:53:1f:db:ce:e2:3c:4c:66:1d:db:13:73:41:9e: 11:ac:d5:e5:0f:6d:59:ca:ec:86:10:df:86:db:86: 4b:04:f9:de:de:fe:78:3b:1a:96:c3:56:4e:54:1b: 98:e4:cf:0b:58:73:59:a5:9a:4e:e7:74:ff:80:a5: b9:b7:af:c2:1c:9c:cd:f8:f8:85:91:18:17:f1:a1: 7e:29:29:9a:ed:55:d8:07:8c:4f:1e:fa:4a:50:11: a5:a1:10:89:85:42:32:2a:70:5e:d5:39:77:94:37: 0f:ab:e5:f9:4f:ba:0c:54:07:1a:f4:96:67:a9:02: 38:e4:c5:bc:3b:40:43:70:11:b6:67:b6:f0:60:2a: 67:c4:7f:65:48:4f:74:81:21:c1:f9:ce:3e:72:b0: 93:8a:55:82:4a:df:72:e0:f2:7d:f1:2b:f7:48:75: 7d:b9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 50:2F:E9:06:97:44:1A:FC:B3:4D:9F:E1:EA:CB:C3:95:21:1E:78:E2 X509v3 Authority Key Identifier: keyid:30:E2:B4:61:7B:8B:9C:FC:4F:C5:7B:1C:5A:4D:74:FC:7E:91:2D:45 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/429f8902-1a06-45a8-a998-72e46aaae8fc/0/30E2B4617B8B9CFC4FC57B1C5A4D74FC7E912D45.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/30E2B4617B8B9CFC4FC57B1C5A4D74FC7E912D45.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/429f8902-1a06-45a8-a998-72e46aaae8fc/0/30E2B4617B8B9CFC4FC57B1C5A4D74FC7E912D45.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 60:7f:3f:17:2a:ce:ce:43:ba:ea:b6:6e:5e:fb:4f:a3:df:04: 51:8f:d8:30:a3:29:39:d5:a1:d1:66:81:ec:d2:ad:42:b8:91: 7f:d1:13:96:a5:42:70:fb:49:81:3b:79:bc:34:db:21:dc:a5: 33:06:fa:ee:1d:75:95:1f:77:08:a0:a4:3a:67:19:e1:bd:66: 82:f9:c2:75:f1:8a:81:9e:78:fa:dd:7e:b3:07:cd:36:7f:86: 11:f6:f7:ab:f3:26:8e:b1:2e:a1:5c:cb:35:3f:60:ca:a7:80: 38:e8:70:b0:55:95:ee:3e:0c:1e:f7:78:38:af:25:0d:ed:fb: de:e7:bc:24:d8:e8:07:ca:64:a5:2a:7f:5c:84:ca:97:d4:a9: b9:fc:76:ff:ac:d7:f6:a9:4e:05:e9:32:d6:17:de:68:49:b8: 64:a8:46:54:84:ea:4e:ac:c4:9d:72:c8:65:4b:fc:02:c0:eb: d0:3a:ea:a3:0c:cc:80:6e:5e:fa:3b:57:ad:2b:40:5a:9c:88: 2d:37:1b:1e:b6:8d:0d:61:b7:8f:f7:b3:89:47:cf:f6:ba:96: 71:26:90:c2:cb:eb:1c:70:20:53:47:ad:ff:13:48:4d:9d:7b: 49:75:90:e2:bc:4d:78:e4:c3:2b:3b:f6:0d:87:e5:d3:a4:2d: 8c:40:2d:85 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUN4ok0xJOaVlDClIbHDLmY4sAL3YwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMzBFMkI0NjE3QjhCOUNGQzRGQzU3QjFDNUE0RDc0RkM3 RTkxMkQ0NTAeFw0yNjAxMjQxNzM2MTRaFw0yNjAxMjcyMzMwMTRaMDMxMTAvBgNV BAMTKDUwMkZFOTA2OTc0NDFBRkNCMzREOUZFMUVBQ0JDMzk1MjExRTc4RTIwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDZIKb+wfs+r9O6v16hiXTOi3P2 5UD4IxS2+VTM65LgWK0IJaHyBiGuXLlLYZ2EheTQjbeUOUC7ulC/4boUzbLfaAxy AqYRtgRurxu48Ml+55Tm0iIToXF8z0pTH9vO4jxMZh3bE3NBnhGs1eUPbVnK7IYQ 34bbhksE+d7e/ng7GpbDVk5UG5jkzwtYc1mlmk7ndP+Apbm3r8IcnM34+IWRGBfx oX4pKZrtVdgHjE8e+kpQEaWhEImFQjIqcF7VOXeUNw+r5flPugxUBxr0lmepAjjk xbw7QENwEbZntvBgKmfEf2VIT3SBIcH5zj5ysJOKVYJK33Lg8n3xK/dIdX25AgMB AAGjggI8MIICODAdBgNVHQ4EFgQUUC/pBpdEGvyzTZ/h6svDlSEeeOIwHwYDVR0j BBgwFoAUMOK0YXuLnPxPxXscWk10/H6RLUUwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby80 MjlmODkwMi0xYTA2LTQ1YTgtYTk5OC03MmU0NmFhYWU4ZmMvMC8zMEUyQjQ2MTdC OEI5Q0ZDNEZDNTdCMUM1QTRENzRGQzdFOTEyRDQ1LmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvMzBFMkI0NjE3QjhCOUNGQzRGQzU3QjFDNUE0RDc0RkM3RTkx MkQ0NS5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vNDI5Zjg5MDItMWEwNi00NWE4LWE5 OTgtNzJlNDZhYWFlOGZjLzAvMzBFMkI0NjE3QjhCOUNGQzRGQzU3QjFDNUE0RDc0 RkM3RTkxMkQ0NS5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAGB/Pxcqzs5Duuq2bl77T6PfBFGP2DCjKTnV odFmgezSrUK4kX/RE5alQnD7SYE7ebw02yHcpTMG+u4ddZUfdwigpDpnGeG9ZoL5 wnXxioGeePrdfrMHzTZ/hhH296vzJo6xLqFcyzU/YMqngDjocLBVle4+DB73eDiv JQ3t+97nvCTY6AfKZKUqf1yEypfUqbn8dv+s1/apTgXpMtYX3mhJuGSoRlSE6k6s xJ1yyGVL/ALA69A66qMMzIBuXvo7V60rQFqciC03Gx62jQ1ht4/3s4lHz/a6lnEm kMLL6xxwIFNHrf8TSE2de0l1kOK8TXjkwys79g2H5dOkLYxALYU= -----END CERTIFICATE-----Generated at Sun Jan 25 18:36:44 2026 by rpki-client