This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf repo-rpki.idnic.net/repo/6d75088e-49af-472b-9b62-81e73daaf1d6/0/B30FDBDE70FBE70CC44F3C710B467069B1194DD8.mft File: B30FDBDE70FBE70CC44F3C710B467069B1194DD8.mft (raw, json) Hash identifier: wvTBPPc1UDRzjYnagWKB0d1vKopQZR6pQCjf25YSX9Q= Subject key identifier: AF:63:BC:39:93:DD:48:E3:0F:36:A5:F2:6A:BB:2C:F4:CC:BA:7E:86 Authority key identifier: B3:0F:DB:DE:70:FB:E7:0C:C4:4F:3C:71:0B:46:70:69:B1:19:4D:D8 Certificate issuer: /CN=B30FDBDE70FBE70CC44F3C710B467069B1194DD8 Certificate serial: 3FE4F0F86B90A8A1070569474D7B103DC5F1180C Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/B30FDBDE70FBE70CC44F3C710B467069B1194DD8.cer Subject info access: rsync://repo-rpki.idnic.net/repo/6d75088e-49af-472b-9b62-81e73daaf1d6/0/B30FDBDE70FBE70CC44F3C710B467069B1194DD8.mft Manifest number: 01A6 Signing time: Fri 23 Jan 2026 13:31:10 +0000 Manifest this update: Fri 23 Jan 2026 13:26:10 +0000 Manifest next update: Mon 26 Jan 2026 22:15:10 +0000 Files and hashes: 1: B30FDBDE70FBE70CC44F3C710B467069B1194DD8.crl (hash: S13zaajECThyHX5nB5ps05asDvTaqtrfSDS335r4Hjw=) 2: 3130332e3232372e3138342e302f32342d3234203d3e20313531303132.roa (hash: HxY+qbSnnto1Z4HzXSATggf6s2/jsThuJ9IKEWbevzQ=) 3: 3130332e3232372e3138352e302f32342d3234203d3e20313531303132.roa (hash: 5p8DeVWE4ixdVzTUD+2z3ALmeQQXrFM+ymQAz8yvg9Q=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/6d75088e-49af-472b-9b62-81e73daaf1d6/0/B30FDBDE70FBE70CC44F3C710B467069B1194DD8.crl rsync://repo-rpki.idnic.net/repo/6d75088e-49af-472b-9b62-81e73daaf1d6/0/B30FDBDE70FBE70CC44F3C710B467069B1194DD8.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/B30FDBDE70FBE70CC44F3C710B467069B1194DD8.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 26 Jan 2026 22:15:10 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 3f:e4:f0:f8:6b:90:a8:a1:07:05:69:47:4d:7b:10:3d:c5:f1:18:0c Signature Algorithm: sha256WithRSAEncryption Issuer: CN=B30FDBDE70FBE70CC44F3C710B467069B1194DD8 Validity Not Before: Jan 23 13:26:10 2026 GMT Not After : Jan 26 22:15:10 2026 GMT Subject: CN=AF63BC3993DD48E30F36A5F26ABB2CF4CCBA7E86 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a7:18:50:90:d2:10:81:0a:43:23:90:c4:c2:a2: 45:74:b1:2f:db:55:d4:0c:69:2e:3d:ed:e5:58:43: 7d:22:f5:5c:f2:13:66:78:4c:8d:b9:23:df:54:71: b2:57:34:14:07:75:64:79:4c:66:53:7c:29:fa:02: 41:a0:ce:55:c4:dc:56:87:a6:f9:84:0d:c0:eb:ec: 20:a5:25:f9:8c:04:e3:36:94:d7:f0:f1:2b:86:2d: db:59:f4:e3:91:92:2f:46:2b:f7:49:0b:39:9c:9f: c2:95:49:97:86:5d:53:ff:71:e3:80:68:92:fd:79: 9c:c3:f7:7e:df:19:25:f1:cd:de:b5:5a:15:20:dc: 57:82:41:cd:30:20:9e:e0:1d:f3:0c:59:76:ea:ec: 36:37:7e:57:d9:9f:e2:31:5c:5c:f4:61:e5:39:a2: 13:c1:7c:36:8a:56:ff:fe:f6:18:7d:61:56:a9:a3: a8:13:f7:91:0d:0a:1c:88:5f:8e:95:14:c4:4c:37: f5:bc:30:0c:7e:a3:bd:b0:58:35:15:03:d6:7d:5f: 79:06:7f:68:1d:34:c6:0d:6b:5c:89:4a:f7:c9:cc: fb:53:d8:47:75:39:21:c3:19:2b:95:a2:06:d8:5f: 7d:40:33:82:2f:f7:16:77:66:1b:6f:0a:6f:d4:15: 2a:2b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: AF:63:BC:39:93:DD:48:E3:0F:36:A5:F2:6A:BB:2C:F4:CC:BA:7E:86 X509v3 Authority Key Identifier: keyid:B3:0F:DB:DE:70:FB:E7:0C:C4:4F:3C:71:0B:46:70:69:B1:19:4D:D8 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/6d75088e-49af-472b-9b62-81e73daaf1d6/0/B30FDBDE70FBE70CC44F3C710B467069B1194DD8.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/B30FDBDE70FBE70CC44F3C710B467069B1194DD8.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/6d75088e-49af-472b-9b62-81e73daaf1d6/0/B30FDBDE70FBE70CC44F3C710B467069B1194DD8.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 92:03:7f:d7:1a:0b:e3:7e:a0:55:49:9a:60:87:d4:16:1f:26: 43:f4:7e:ec:30:d4:61:fe:a0:05:a8:a0:59:64:93:6b:b4:2f: 0e:2c:5e:e5:13:aa:06:4e:52:ec:39:93:5a:aa:d4:52:b9:a9: 75:a6:e3:8b:04:3c:31:24:37:7a:f4:40:47:6c:96:bd:f6:f7: 98:30:fc:84:38:3e:55:24:4e:4e:ba:11:0b:13:9e:0c:34:f3: ca:76:3a:7d:ef:e3:52:77:8a:b9:6e:ae:68:e5:b1:ad:19:3e: be:33:98:44:e7:4c:15:dc:9d:b9:46:01:8b:10:ba:04:10:66: 97:5b:dc:a5:56:f8:52:89:b6:41:b2:5b:1c:a4:f3:54:9e:20: 55:e9:e1:9c:37:2a:d5:43:c3:18:86:03:23:6b:ab:c9:a8:62: 29:10:8f:39:74:1a:40:28:a7:14:95:3c:b2:e3:c2:2d:15:89: c1:24:5f:5a:e0:fe:a4:bb:0c:60:d2:e3:46:89:75:34:3f:42: 27:49:7d:4d:21:fe:89:af:68:a0:61:b5:3d:72:6f:5a:82:af: dc:d9:7e:6d:df:84:10:3a:fc:91:5f:ea:7c:17:8a:0c:bf:2c: 53:fd:99:41:39:56:da:d9:1c:c8:ef:d9:3d:2a:64:f0:2a:cb: b3:c4:bf:14 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUP+Tw+GuQqKEHBWlHTXsQPcXxGAwwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoQjMwRkRCREU3MEZCRTcwQ0M0NEYzQzcxMEI0NjcwNjlC MTE5NEREODAeFw0yNjAxMjMxMzI2MTBaFw0yNjAxMjYyMjE1MTBaMDMxMTAvBgNV BAMTKEFGNjNCQzM5OTNERDQ4RTMwRjM2QTVGMjZBQkIyQ0Y0Q0NCQTdFODYwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCnGFCQ0hCBCkMjkMTCokV0sS/b VdQMaS497eVYQ30i9VzyE2Z4TI25I99UcbJXNBQHdWR5TGZTfCn6AkGgzlXE3FaH pvmEDcDr7CClJfmMBOM2lNfw8SuGLdtZ9OORki9GK/dJCzmcn8KVSZeGXVP/ceOA aJL9eZzD937fGSXxzd61WhUg3FeCQc0wIJ7gHfMMWXbq7DY3flfZn+IxXFz0YeU5 ohPBfDaKVv/+9hh9YVapo6gT95ENChyIX46VFMRMN/W8MAx+o72wWDUVA9Z9X3kG f2gdNMYNa1yJSvfJzPtT2Ed1OSHDGSuVogbYX31AM4Iv9xZ3ZhtvCm/UFSorAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUr2O8OZPdSOMPNqXyarss9My6foYwHwYDVR0j BBgwFoAUsw/b3nD75wzETzxxC0ZwabEZTdgwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby82 ZDc1MDg4ZS00OWFmLTQ3MmItOWI2Mi04MWU3M2RhYWYxZDYvMC9CMzBGREJERTcw RkJFNzBDQzQ0RjNDNzEwQjQ2NzA2OUIxMTk0REQ4LmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvQjMwRkRCREU3MEZCRTcwQ0M0NEYzQzcxMEI0NjcwNjlCMTE5 NEREOC5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vNmQ3NTA4OGUtNDlhZi00NzJiLTli NjItODFlNzNkYWFmMWQ2LzAvQjMwRkRCREU3MEZCRTcwQ0M0NEYzQzcxMEI0Njcw NjlCMTE5NEREOC5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAJIDf9caC+N+oFVJmmCH1BYfJkP0fuww1GH+ oAWooFlkk2u0Lw4sXuUTqgZOUuw5k1qq1FK5qXWm44sEPDEkN3r0QEdslr3295gw /IQ4PlUkTk66EQsTngw088p2On3v41J3irlurmjlsa0ZPr4zmETnTBXcnblGAYsQ ugQQZpdb3KVW+FKJtkGyWxyk81SeIFXp4Zw3KtVDwxiGAyNrq8moYikQjzl0GkAo pxSVPLLjwi0VicEkX1rg/qS7DGDS40aJdTQ/QidJfU0h/omvaKBhtT1yb1qCr9zZ fm3fhBA6/JFf6nwXigy/LFP9mUE5VtrZHMjv2T0qZPAqy7PEvxQ= -----END CERTIFICATE-----Generated at Sun Jan 25 20:36:45 2026 by rpki-client