This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf repo-rpki.idnic.net/repo/7670ae76-9594-4980-b410-491a6319ff3a/0/30C896473FC5DE403F4651059F6BE1586BFAC473.mft File: 30C896473FC5DE403F4651059F6BE1586BFAC473.mft (raw, json) Hash identifier: cngR6xRijh6mI3xXtWXxhu9pYNcoSz2JuKUsl1onfsA= Subject key identifier: CF:C7:F8:20:17:7F:7D:EF:D1:5F:9E:BF:53:67:53:51:31:C1:97:85 Authority key identifier: 30:C8:96:47:3F:C5:DE:40:3F:46:51:05:9F:6B:E1:58:6B:FA:C4:73 Certificate issuer: /CN=30C896473FC5DE403F4651059F6BE1586BFAC473 Certificate serial: 5A09F586295460A5180840EA624B18E7C8FF68C3 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/30C896473FC5DE403F4651059F6BE1586BFAC473.cer Subject info access: rsync://repo-rpki.idnic.net/repo/7670ae76-9594-4980-b410-491a6319ff3a/0/30C896473FC5DE403F4651059F6BE1586BFAC473.mft Manifest number: D1 Signing time: Fri 05 Dec 2025 04:51:51 +0000 Manifest this update: Fri 05 Dec 2025 04:46:51 +0000 Manifest next update: Mon 08 Dec 2025 16:06:51 +0000 Files and hashes: 1: 3135372e36362e36362e302f32342d3234203d3e20313532373831.roa (hash: x/vtNdgftiP2gNHQRXmqF+bNIt+0K74KbEvvSueFvXY=) 2: 30C896473FC5DE403F4651059F6BE1586BFAC473.crl (hash: Onvv/ADZYo/YUXcKu8D/SOomC/0783t7gR16WD+ag0g=) 3: 3135372e36362e36372e302f32342d3234203d3e20313532373831.roa (hash: jM3o+qLgLitpWG9aIDTu7g7FqrNoiH7dHWh51KuZSvY=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/7670ae76-9594-4980-b410-491a6319ff3a/0/30C896473FC5DE403F4651059F6BE1586BFAC473.crl rsync://repo-rpki.idnic.net/repo/7670ae76-9594-4980-b410-491a6319ff3a/0/30C896473FC5DE403F4651059F6BE1586BFAC473.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/30C896473FC5DE403F4651059F6BE1586BFAC473.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/60F8BE9C16625C424B269EE06C64A83BAB8506D4.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/60F8BE9C16625C424B269EE06C64A83BAB8506D4.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/YPi-nBZiXEJLJp7gbGSoO6uFBtQ.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 08 Dec 2025 16:06:51 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 5a:09:f5:86:29:54:60:a5:18:08:40:ea:62:4b:18:e7:c8:ff:68:c3 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=30C896473FC5DE403F4651059F6BE1586BFAC473 Validity Not Before: Dec 5 04:46:51 2025 GMT Not After : Dec 8 16:06:51 2025 GMT Subject: CN=CFC7F820177F7DEFD15F9EBF5367535131C19785 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ac:ed:19:82:10:c0:d7:7d:38:1f:72:75:21:84: 7b:59:08:e9:37:5f:85:7c:f3:d4:97:3a:52:70:d3: 05:92:fe:4d:82:02:e3:f1:05:9e:12:d2:73:fc:8c: 78:af:cd:20:7e:96:a4:24:7e:f9:de:20:20:d9:a3: 98:b7:cc:93:2c:31:ac:14:d6:fc:bd:da:56:7e:dc: e1:7e:2d:11:0a:ab:af:ce:9f:8d:c1:fd:cc:fd:24: 90:6e:9d:c8:42:16:b8:d9:ed:f1:aa:e9:b4:e3:ad: 67:10:bf:a0:be:c3:67:68:43:23:b1:82:27:b5:13: 00:bc:69:45:11:e7:48:63:96:9b:43:c0:ec:11:f7: 0d:9b:b4:2a:d7:2b:98:9b:27:92:19:fd:8f:ce:c3: 82:20:0b:11:cc:27:ed:34:85:18:2d:c3:1e:d8:c3: 54:b2:f3:fe:79:5e:df:d9:38:38:49:8d:e4:6c:44: 33:2c:35:b4:fe:63:d7:37:ed:fe:f6:dd:11:c0:ee: de:4a:bd:1c:f8:52:d8:54:b5:ae:06:d3:67:1f:fe: f5:a3:f0:40:b9:c0:f7:9f:a6:45:36:53:03:50:b2: 8d:c1:1f:be:c0:f5:ac:f0:4e:95:7d:18:86:8e:7b: 6a:b4:9e:46:bb:0b:c5:b5:33:40:25:d2:03:0b:58: 25:61 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: CF:C7:F8:20:17:7F:7D:EF:D1:5F:9E:BF:53:67:53:51:31:C1:97:85 X509v3 Authority Key Identifier: keyid:30:C8:96:47:3F:C5:DE:40:3F:46:51:05:9F:6B:E1:58:6B:FA:C4:73 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/7670ae76-9594-4980-b410-491a6319ff3a/0/30C896473FC5DE403F4651059F6BE1586BFAC473.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/30C896473FC5DE403F4651059F6BE1586BFAC473.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/7670ae76-9594-4980-b410-491a6319ff3a/0/30C896473FC5DE403F4651059F6BE1586BFAC473.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 8b:20:db:24:ef:ba:75:f0:44:3a:84:15:fa:b9:11:4e:d8:e7: 6a:c5:d4:86:d2:9f:14:c7:99:34:59:1c:92:b9:8f:1b:d4:98: 17:df:44:c9:14:ca:04:1a:a6:b6:61:69:77:2d:b8:8d:a1:c3: d3:10:e0:6c:6c:6c:c0:46:f5:13:a2:aa:77:40:f8:4a:62:13: d3:d7:7a:d4:19:e1:68:65:35:51:e0:cc:2d:2d:45:8e:86:6d: de:1e:5e:f8:38:cd:0e:64:11:3d:28:3f:89:1a:59:08:b0:ba: 27:fe:ba:0c:0f:af:08:96:c2:b4:69:cc:3c:12:98:1b:e8:4f: 51:92:1b:c2:84:48:01:44:25:15:92:74:e4:e9:b0:54:79:bb: 95:8d:eb:0c:fa:e3:2b:69:61:9e:60:c8:73:36:f1:f6:f6:78: 6c:94:e9:10:ab:cd:f3:f9:33:27:51:4b:eb:9b:7e:40:40:91: 37:cc:be:ea:2b:39:87:2a:24:5c:78:2f:8f:06:19:08:4b:48: f4:a2:92:64:2f:17:6a:4d:ae:2c:4a:50:69:13:e8:31:73:89: 10:3f:19:c2:40:17:cc:87:bf:07:b5:9d:a7:38:5c:b9:59:2e: 35:ba:7d:81:c6:f8:f5:e3:7f:19:8d:ac:57:d6:56:55:9f:01: 51:9f:68:26 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUWgn1hilUYKUYCEDqYksY58j/aMMwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMzBDODk2NDczRkM1REU0MDNGNDY1MTA1OUY2QkUxNTg2 QkZBQzQ3MzAeFw0yNTEyMDUwNDQ2NTFaFw0yNTEyMDgxNjA2NTFaMDMxMTAvBgNV BAMTKENGQzdGODIwMTc3RjdERUZEMTVGOUVCRjUzNjc1MzUxMzFDMTk3ODUwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCs7RmCEMDXfTgfcnUhhHtZCOk3 X4V889SXOlJw0wWS/k2CAuPxBZ4S0nP8jHivzSB+lqQkfvneICDZo5i3zJMsMawU 1vy92lZ+3OF+LREKq6/On43B/cz9JJBunchCFrjZ7fGq6bTjrWcQv6C+w2doQyOx gie1EwC8aUUR50hjlptDwOwR9w2btCrXK5ibJ5IZ/Y/Ow4IgCxHMJ+00hRgtwx7Y w1Sy8/55Xt/ZODhJjeRsRDMsNbT+Y9c37f723RHA7t5KvRz4UthUta4G02cf/vWj 8EC5wPefpkU2UwNQso3BH77A9azwTpV9GIaOe2q0nka7C8W1M0Al0gMLWCVhAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUz8f4IBd/fe/RX56/U2dTUTHBl4UwHwYDVR0j BBgwFoAUMMiWRz/F3kA/RlEFn2vhWGv6xHMwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby83 NjcwYWU3Ni05NTk0LTQ5ODAtYjQxMC00OTFhNjMxOWZmM2EvMC8zMEM4OTY0NzNG QzVERTQwM0Y0NjUxMDU5RjZCRTE1ODZCRkFDNDczLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzEvMzBDODk2NDczRkM1REU0MDNGNDY1MTA1OUY2QkUxNTg2QkZB QzQ3My5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vNzY3MGFlNzYtOTU5NC00OTgwLWI0 MTAtNDkxYTYzMTlmZjNhLzAvMzBDODk2NDczRkM1REU0MDNGNDY1MTA1OUY2QkUx NTg2QkZBQzQ3My5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAIsg2yTvunXwRDqEFfq5EU7Y52rF1IbSnxTH mTRZHJK5jxvUmBffRMkUygQaprZhaXctuI2hw9MQ4GxsbMBG9ROiqndA+EpiE9PX etQZ4WhlNVHgzC0tRY6Gbd4eXvg4zQ5kET0oP4kaWQiwuif+ugwPrwiWwrRpzDwS mBvoT1GSG8KESAFEJRWSdOTpsFR5u5WN6wz64ytpYZ5gyHM28fb2eGyU6RCrzfP5 MydRS+ubfkBAkTfMvuorOYcqJFx4L48GGQhLSPSikmQvF2pNrixKUGkT6DFziRA/ GcJAF8yHvwe1nac4XLlZLjW6fYHG+PXjfxmNrFfWVlWfAVGfaCY= -----END CERTIFICATE-----Generated at Sat Dec 6 22:06:22 2025 by rpki-client