This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf repo-rpki.idnic.net/repo/4711c110-7ab1-4a39-b9ca-3a9b0e81bcf5/0/30FC12E903AE0EE87BD1A1E58A062C8026A0CE51.mft
File:                     30FC12E903AE0EE87BD1A1E58A062C8026A0CE51.mft (raw, json)
Hash identifier:          WdbUJYwWpXnmIYfQC/oU2sr4dy6bjVURYzS8zntXN80=
Subject key identifier:   F2:9B:C9:B6:AB:0A:F6:41:DD:09:20:1E:9B:94:23:BB:4F:46:CC:C4
Authority key identifier: 30:FC:12:E9:03:AE:0E:E8:7B:D1:A1:E5:8A:06:2C:80:26:A0:CE:51
Certificate issuer:       /CN=30FC12E903AE0EE87BD1A1E58A062C8026A0CE51
Certificate serial:       667A4B871DE2AFD3E398BB0CF63F99014E304343
Authority info access:    rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/30FC12E903AE0EE87BD1A1E58A062C8026A0CE51.cer
Subject info access:      rsync://repo-rpki.idnic.net/repo/4711c110-7ab1-4a39-b9ca-3a9b0e81bcf5/0/30FC12E903AE0EE87BD1A1E58A062C8026A0CE51.mft
Manifest number:          0405
Signing time:             Sat 06 Dec 2025 08:51:46 +0000
Manifest this update:     Sat 06 Dec 2025 08:46:46 +0000
Manifest next update:     Tue 09 Dec 2025 16:42:46 +0000
Files and hashes:         1: 30FC12E903AE0EE87BD1A1E58A062C8026A0CE51.crl (hash: gVaBckadB4JAqxpWWAVYpHTt6U7IHC1XmrgrL4SPT/M=)
                          2: 3130332e3130372e31382e302f32342d3234203d3e20313337323838.roa (hash: FCHx6FaRMarTOvIyDDJKyaewpvcQNtFaDUPbc3o5Lx0=)
Validation:               OK
Signature path:           rsync://repo-rpki.idnic.net/repo/4711c110-7ab1-4a39-b9ca-3a9b0e81bcf5/0/30FC12E903AE0EE87BD1A1E58A062C8026A0CE51.crl
                          rsync://repo-rpki.idnic.net/repo/4711c110-7ab1-4a39-b9ca-3a9b0e81bcf5/0/30FC12E903AE0EE87BD1A1E58A062C8026A0CE51.mft
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/30FC12E903AE0EE87BD1A1E58A062C8026A0CE51.cer
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Tue 09 Dec 2025 15:57:52 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            66:7a:4b:87:1d:e2:af:d3:e3:98:bb:0c:f6:3f:99:01:4e:30:43:43
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=30FC12E903AE0EE87BD1A1E58A062C8026A0CE51
        Validity
            Not Before: Dec  6 08:46:46 2025 GMT
            Not After : Dec  9 16:42:46 2025 GMT
        Subject: CN=F29BC9B6AB0AF641DD09201E9B9423BB4F46CCC4
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d9:55:be:37:a4:dc:10:a5:c6:82:87:97:52:f9:
                    b7:e7:44:8f:80:cb:97:a3:2d:e7:db:1c:2d:6c:ca:
                    39:ae:8a:83:3d:bd:df:96:61:b0:c3:35:c8:cd:1f:
                    3c:f7:fc:2f:5f:fc:ce:ca:d0:19:6a:2a:de:99:5c:
                    55:4a:c7:cb:d9:0e:a4:1d:cd:71:4a:54:85:8f:d5:
                    90:d5:8e:41:1b:50:27:02:56:f8:b6:ba:a3:fb:9e:
                    40:e5:18:1f:70:e7:33:b6:e3:bc:36:48:8b:61:ec:
                    5e:b6:61:1e:f0:3a:df:ba:e2:a2:2e:88:66:77:1b:
                    e6:1e:d4:e8:f4:11:33:8a:f6:54:8a:78:7b:6d:4a:
                    17:1e:df:68:5f:70:98:d0:00:6b:ec:c9:f8:95:df:
                    42:21:8d:5b:84:ff:bf:50:88:5d:fe:70:b7:55:20:
                    91:b3:be:42:ee:c3:ce:f1:d4:c0:ee:8a:b2:57:d0:
                    af:c9:6a:0d:a1:28:0d:33:81:34:14:8b:80:3f:fd:
                    34:28:32:a1:d8:9c:a3:ad:40:32:1a:2f:81:22:94:
                    b3:06:eb:35:39:22:26:1c:76:11:ac:d3:49:2c:b4:
                    59:06:19:e2:9e:c9:d2:a9:bb:89:c3:5f:a5:0f:fd:
                    72:8e:81:59:be:a4:8a:4d:77:6a:63:be:a0:76:52:
                    0d:3f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F2:9B:C9:B6:AB:0A:F6:41:DD:09:20:1E:9B:94:23:BB:4F:46:CC:C4
            X509v3 Authority Key Identifier:
                keyid:30:FC:12:E9:03:AE:0E:E8:7B:D1:A1:E5:8A:06:2C:80:26:A0:CE:51

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repo-rpki.idnic.net/repo/4711c110-7ab1-4a39-b9ca-3a9b0e81bcf5/0/30FC12E903AE0EE87BD1A1E58A062C8026A0CE51.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/30FC12E903AE0EE87BD1A1E58A062C8026A0CE51.cer

            Subject Information Access:
                Signed Object - URI:rsync://repo-rpki.idnic.net/repo/4711c110-7ab1-4a39-b9ca-3a9b0e81bcf5/0/30FC12E903AE0EE87BD1A1E58A062C8026A0CE51.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         6a:74:09:69:e9:59:5c:1e:a3:5c:91:e6:8b:53:1b:bb:47:00:
         68:b0:6e:94:42:1a:7a:c4:45:1a:d3:2d:b2:78:d9:f7:29:67:
         c9:df:0c:37:e1:73:c9:5f:e7:36:31:ff:28:f0:fe:1c:71:84:
         11:93:d9:55:f9:59:84:b7:d6:f3:c5:37:1b:29:7c:4f:39:a7:
         0f:ce:e2:4e:05:82:ad:dc:3b:da:15:ab:f2:bc:8a:4d:f4:4a:
         8e:bc:41:a2:68:e4:fe:21:82:ea:4f:ff:0f:d6:1d:97:3a:02:
         6e:62:0c:38:fa:90:19:d6:0a:03:db:10:59:a5:1b:cf:b7:a4:
         9b:f3:c6:81:bf:6e:cb:06:a9:b7:eb:a1:af:c4:12:d7:83:05:
         20:81:e1:70:99:05:fe:fd:38:c6:09:91:58:6a:f7:a9:0f:67:
         53:d3:cf:31:ee:2f:c6:c2:22:47:8f:f0:a5:25:1b:fe:5c:70:
         7d:36:8b:b6:76:37:bb:a2:c7:7e:62:3a:1c:26:21:82:a4:e0:
         0b:9f:59:21:af:8f:8c:45:1c:08:4d:3e:45:11:55:65:d9:ac:
         f8:11:47:e0:08:5a:df:3f:ef:17:e2:26:a7:98:de:05:bd:da:
         f3:6b:35:ae:f6:ba:e2:54:a2:06:e4:a3:79:fa:11:b5:52:b1:
         28:09:ea:2b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Dec 7 08:10:17 2025 by rpki-client