This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

$ rpki-client -vvf repo-rpki.idnic.net/repo/4711c110-7ab1-4a39-b9ca-3a9b0e81bcf5/0/30FC12E903AE0EE87BD1A1E58A062C8026A0CE51.mft
File: 30FC12E903AE0EE87BD1A1E58A062C8026A0CE51.mft (raw, json)
Hash identifier: NkU0cL8Lt6Z7nFoUxbHs2OkhwmUffEIC7czsLcQk4zY=
Subject key identifier: 90:88:2F:C9:18:61:DA:04:33:D6:6D:1C:B7:B3:13:3C:20:B5:60:48
Authority key identifier: 30:FC:12:E9:03:AE:0E:E8:7B:D1:A1:E5:8A:06:2C:80:26:A0:CE:51
Certificate issuer: /CN=30FC12E903AE0EE87BD1A1E58A062C8026A0CE51
Certificate serial: 35CB3C058B9B112C28781EBD192F12BC56545285
Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/30FC12E903AE0EE87BD1A1E58A062C8026A0CE51.cer
Subject info access: rsync://repo-rpki.idnic.net/repo/4711c110-7ab1-4a39-b9ca-3a9b0e81bcf5/0/30FC12E903AE0EE87BD1A1E58A062C8026A0CE51.mft
Manifest number: 041B
Signing time: Sat 24 Jan 2026 00:01:48 +0000
Manifest this update: Fri 23 Jan 2026 23:56:48 +0000
Manifest next update: Tue 27 Jan 2026 09:25:48 +0000
Files and hashes: 1: 30FC12E903AE0EE87BD1A1E58A062C8026A0CE51.crl (hash: AhM4p8Of/0LaF1wmAkwcZNKbtCFIPaySIzc5HJhCSK0=)
2: 3130332e3130372e31382e302f32342d3234203d3e20313337323838.roa (hash: Bi9nY1p0p/LL12T0+GcY0uwFY1cTRYvh/8l06MWKr+o=)
Validation: OK
Signature path: rsync://repo-rpki.idnic.net/repo/4711c110-7ab1-4a39-b9ca-3a9b0e81bcf5/0/30FC12E903AE0EE87BD1A1E58A062C8026A0CE51.crl
rsync://repo-rpki.idnic.net/repo/4711c110-7ab1-4a39-b9ca-3a9b0e81bcf5/0/30FC12E903AE0EE87BD1A1E58A062C8026A0CE51.mft
rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/30FC12E903AE0EE87BD1A1E58A062C8026A0CE51.cer
rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl
rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Tue 27 Jan 2026 09:25:48 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
35:cb:3c:05:8b:9b:11:2c:28:78:1e:bd:19:2f:12:bc:56:54:52:85
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=30FC12E903AE0EE87BD1A1E58A062C8026A0CE51
Validity
Not Before: Jan 23 23:56:48 2026 GMT
Not After : Jan 27 09:25:48 2026 GMT
Subject: CN=90882FC91861DA0433D66D1CB7B3133C20B56048
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ad:43:62:2c:88:1d:40:2c:f4:a2:3a:02:a3:0d:
89:ed:13:fc:1a:73:a2:0d:50:7c:8d:b0:5d:23:b8:
eb:95:3f:7b:52:b2:47:eb:63:c0:e6:f4:37:92:61:
48:73:a3:bd:7e:7d:3f:ad:e4:74:55:bc:ca:01:7c:
9e:07:d5:fa:b3:f6:03:99:c7:50:71:b8:51:1d:a4:
e9:4f:bd:08:d2:fa:0a:91:cc:d4:98:44:3a:84:31:
24:bb:8e:12:8c:0c:4d:44:d7:b7:d6:fb:28:91:f1:
82:6b:40:59:01:8c:a2:85:bc:79:4c:1d:a2:cb:12:
4e:fe:2a:ff:b3:91:0f:51:fb:82:95:f7:73:be:37:
cb:c7:ab:87:3b:f2:2f:f0:df:11:45:ed:ec:12:84:
de:5d:73:02:ad:1b:68:c5:9d:89:91:7a:83:d7:1e:
91:42:12:fa:8e:ec:7c:15:ea:83:b1:3c:03:6a:e6:
38:29:b0:80:db:1c:29:52:98:22:99:de:e0:db:4d:
8c:8a:67:cb:8e:e4:12:50:3d:bc:0c:53:09:1b:52:
5b:e0:22:b8:fa:32:15:11:08:e2:90:1d:9c:f8:84:
0a:6d:9d:39:aa:25:f4:61:4a:7e:2f:45:f6:32:9b:
94:bf:80:3a:cf:d5:3d:3c:6e:81:f9:b7:83:78:ff:
e8:81
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
90:88:2F:C9:18:61:DA:04:33:D6:6D:1C:B7:B3:13:3C:20:B5:60:48
X509v3 Authority Key Identifier:
keyid:30:FC:12:E9:03:AE:0E:E8:7B:D1:A1:E5:8A:06:2C:80:26:A0:CE:51
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://repo-rpki.idnic.net/repo/4711c110-7ab1-4a39-b9ca-3a9b0e81bcf5/0/30FC12E903AE0EE87BD1A1E58A062C8026A0CE51.crl
Authority Information Access:
CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/30FC12E903AE0EE87BD1A1E58A062C8026A0CE51.cer
Subject Information Access:
Signed Object - URI:rsync://repo-rpki.idnic.net/repo/4711c110-7ab1-4a39-b9ca-3a9b0e81bcf5/0/30FC12E903AE0EE87BD1A1E58A062C8026A0CE51.mft
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
cc:c8:58:b2:97:10:fd:79:e6:4b:65:5f:1c:1c:e7:13:8b:9e:
e6:74:ad:85:22:e7:10:5b:fd:9f:e0:6d:48:6f:65:02:84:54:
29:68:90:de:f4:b2:46:d8:4b:22:dc:d4:c6:84:d8:3b:7f:ce:
63:64:04:d0:db:58:b1:78:49:56:98:05:5c:d7:49:13:d0:ff:
5f:93:64:10:45:e9:ad:4c:46:96:9a:38:5a:ec:0c:68:3b:eb:
9a:04:2e:0f:71:11:a4:f0:36:78:4b:37:65:7a:4c:c5:ef:2e:
f1:d0:e0:c9:7e:e1:df:79:59:12:54:90:bc:b9:f0:75:18:e2:
56:e5:11:3f:54:1e:2d:32:ee:5b:12:0c:2d:53:cb:cd:d6:03:
c1:77:58:33:e5:0b:26:7c:c8:5f:ed:05:8c:a5:08:79:4f:de:
ff:ee:b2:88:15:f4:b2:a8:61:73:2b:e6:6a:ee:e9:37:3e:19:
98:ff:ca:56:e3:cc:96:91:52:2c:9e:9c:59:5a:9a:b3:1f:1f:
08:45:57:c8:82:22:55:44:6a:96:8a:c0:8b:06:57:dc:48:12:
89:35:ac:18:90:6a:dc:81:a0:93:d5:a9:60:12:af:83:26:5b:
72:9d:2e:16:2e:c2:76:a3:71:26:3b:c7:f2:93:29:06:cf:56:
b7:0f:df:ff
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jan 25 22:22:03 2026 by rpki-client