This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf repo-rpki.idnic.net/repo/7e9e01ba-59c9-4047-ac0b-e9b2fe65853c/0/430E302040DE11D8C84431B3397113EC969694A0.mft File: 430E302040DE11D8C84431B3397113EC969694A0.mft (raw, json) Hash identifier: NnE5wwUswIHcWzvlmis3NjkU8Qsd1+TLS9To95syBFY= Subject key identifier: CE:5E:35:33:BE:13:69:3C:13:74:59:2B:4A:F1:08:7B:B4:E0:30:C3 Authority key identifier: 43:0E:30:20:40:DE:11:D8:C8:44:31:B3:39:71:13:EC:96:96:94:A0 Certificate issuer: /CN=430E302040DE11D8C84431B3397113EC969694A0 Certificate serial: 08C382A821316625A0E9281178B87EA136E07BF6 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/430E302040DE11D8C84431B3397113EC969694A0.cer Subject info access: rsync://repo-rpki.idnic.net/repo/7e9e01ba-59c9-4047-ac0b-e9b2fe65853c/0/430E302040DE11D8C84431B3397113EC969694A0.mft Manifest number: 04CA Signing time: Sat 06 Dec 2025 04:32:00 +0000 Manifest this update: Sat 06 Dec 2025 04:27:00 +0000 Manifest next update: Tue 09 Dec 2025 05:50:00 +0000 Files and hashes: 1: 430E302040DE11D8C84431B3397113EC969694A0.crl (hash: E5AK244U37Hm+6/yDg+IIr1QGwo3fE7mSwfqXd2MFcU=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/7e9e01ba-59c9-4047-ac0b-e9b2fe65853c/0/430E302040DE11D8C84431B3397113EC969694A0.crl rsync://repo-rpki.idnic.net/repo/7e9e01ba-59c9-4047-ac0b-e9b2fe65853c/0/430E302040DE11D8C84431B3397113EC969694A0.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/430E302040DE11D8C84431B3397113EC969694A0.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 09 Dec 2025 05:50:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 08:c3:82:a8:21:31:66:25:a0:e9:28:11:78:b8:7e:a1:36:e0:7b:f6 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=430E302040DE11D8C84431B3397113EC969694A0 Validity Not Before: Dec 6 04:27:00 2025 GMT Not After : Dec 9 05:50:00 2025 GMT Subject: CN=CE5E3533BE13693C1374592B4AF1087BB4E030C3 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d2:78:65:ef:bc:25:3c:45:d9:e0:7b:a7:58:d1: a0:51:ec:1c:be:89:fb:58:27:0a:56:d6:a7:78:ac: 64:e8:4b:f3:4a:d7:a8:27:74:87:03:00:01:ef:de: 11:d2:36:54:9b:81:bc:e6:9a:68:ec:f1:d2:28:b2: f8:dd:29:c5:aa:01:fb:2e:34:41:ce:12:cb:78:a3: cf:38:23:ca:19:1c:37:de:9a:d0:9a:11:e3:1c:5d: e8:1e:5a:9f:22:ac:63:d9:00:a3:63:69:d9:5e:d5: db:69:fa:92:33:71:1e:f7:4f:fe:88:8f:19:6e:a8: 4f:90:fc:7d:5c:b8:07:e2:20:1e:4d:22:b3:23:88: 9a:61:86:9b:8b:d3:ba:ad:d8:bb:e5:c8:2f:03:23: cb:fb:35:e1:f8:62:2b:d7:61:48:7f:d3:df:d9:4f: d5:f8:c3:da:b9:54:7e:0b:e0:d3:9f:7f:59:f0:c4: ae:d5:b7:85:9a:e2:50:7c:1e:f2:09:0e:b0:ad:31: 4c:52:07:a1:f2:7b:35:ac:67:3b:5a:d2:94:40:a0: 84:f4:d2:db:05:21:0d:6b:40:de:0f:a6:3d:3c:83: 45:53:33:3c:08:dc:00:42:7d:24:9a:ed:61:74:d1: d6:63:de:20:52:eb:8b:fc:77:8a:f2:bf:a9:60:74: f5:cd Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: CE:5E:35:33:BE:13:69:3C:13:74:59:2B:4A:F1:08:7B:B4:E0:30:C3 X509v3 Authority Key Identifier: keyid:43:0E:30:20:40:DE:11:D8:C8:44:31:B3:39:71:13:EC:96:96:94:A0 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/7e9e01ba-59c9-4047-ac0b-e9b2fe65853c/0/430E302040DE11D8C84431B3397113EC969694A0.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/430E302040DE11D8C84431B3397113EC969694A0.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/7e9e01ba-59c9-4047-ac0b-e9b2fe65853c/0/430E302040DE11D8C84431B3397113EC969694A0.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 3c:8e:29:07:01:af:ad:88:dc:98:11:11:42:72:58:2b:50:db: 29:ce:90:44:13:05:39:21:3d:f8:db:fa:cf:64:96:34:8b:49: 48:fe:3e:27:22:04:23:44:31:1e:ff:07:b7:a0:c8:32:de:ff: d3:69:93:44:0e:1c:b9:49:d1:07:4c:6a:9a:34:ea:ae:66:dc: 5f:fd:94:42:5c:a3:c2:9e:d3:2b:ae:33:3b:c5:aa:9c:20:a9: 1c:e6:f6:04:55:f0:0d:34:50:74:1b:ed:a6:a5:d4:03:6e:2f: 04:46:51:45:9e:4f:10:5c:2d:e0:da:e1:68:6f:35:1b:15:7b: 21:39:06:df:a5:24:b7:c2:9d:7b:8a:e7:be:60:41:d9:b3:b0: b7:bb:a2:e8:79:e2:de:97:18:29:34:ed:53:c1:26:68:64:b5: 1c:66:0a:98:e7:19:61:13:23:d5:a1:6a:9b:7e:51:03:d1:78: ff:55:03:25:ff:b2:8d:c7:40:c0:25:5b:d5:1e:18:70:65:cf: 11:3e:cd:bf:d5:75:0a:38:7f:bd:f8:3e:33:43:11:f5:4e:e6: 8c:47:9f:6e:50:de:04:80:e4:6e:01:59:28:04:16:bb:df:dd: 80:ec:4e:7b:61:c9:49:8b:ce:92:4a:9a:19:23:a8:dd:bd:59: 3d:e9:ad:e0 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUCMOCqCExZiWg6SgReLh+oTbge/YwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoNDMwRTMwMjA0MERFMTFEOEM4NDQzMUIzMzk3MTEzRUM5 Njk2OTRBMDAeFw0yNTEyMDYwNDI3MDBaFw0yNTEyMDkwNTUwMDBaMDMxMTAvBgNV BAMTKENFNUUzNTMzQkUxMzY5M0MxMzc0NTkyQjRBRjEwODdCQjRFMDMwQzMwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDSeGXvvCU8Rdnge6dY0aBR7By+ iftYJwpW1qd4rGToS/NK16gndIcDAAHv3hHSNlSbgbzmmmjs8dIosvjdKcWqAfsu NEHOEst4o884I8oZHDfemtCaEeMcXegeWp8irGPZAKNjadle1dtp+pIzcR73T/6I jxluqE+Q/H1cuAfiIB5NIrMjiJphhpuL07qt2LvlyC8DI8v7NeH4YivXYUh/09/Z T9X4w9q5VH4L4NOff1nwxK7Vt4Wa4lB8HvIJDrCtMUxSB6HyezWsZzta0pRAoIT0 0tsFIQ1rQN4Ppj08g0VTMzwI3ABCfSSa7WF00dZj3iBS64v8d4ryv6lgdPXNAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUzl41M74TaTwTdFkrSvEIe7TgMMMwHwYDVR0j BBgwFoAUQw4wIEDeEdjIRDGzOXET7JaWlKAwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby83 ZTllMDFiYS01OWM5LTQwNDctYWMwYi1lOWIyZmU2NTg1M2MvMC80MzBFMzAyMDQw REUxMUQ4Qzg0NDMxQjMzOTcxMTNFQzk2OTY5NEEwLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvNDMwRTMwMjA0MERFMTFEOEM4NDQzMUIzMzk3MTEzRUM5Njk2 OTRBMC5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vN2U5ZTAxYmEtNTljOS00MDQ3LWFj MGItZTliMmZlNjU4NTNjLzAvNDMwRTMwMjA0MERFMTFEOEM4NDQzMUIzMzk3MTEz RUM5Njk2OTRBMC5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBADyOKQcBr62I3JgREUJyWCtQ2ynOkEQTBTkh Pfjb+s9kljSLSUj+PiciBCNEMR7/B7egyDLe/9Npk0QOHLlJ0QdMapo06q5m3F/9 lEJco8Ke0yuuMzvFqpwgqRzm9gRV8A00UHQb7aal1ANuLwRGUUWeTxBcLeDa4Whv NRsVeyE5Bt+lJLfCnXuK575gQdmzsLe7ouh54t6XGCk07VPBJmhktRxmCpjnGWET I9Whapt+UQPReP9VAyX/so3HQMAlW9UeGHBlzxE+zb/VdQo4f734PjNDEfVO5oxH n25Q3gSA5G4BWSgEFrvf3YDsTnthyUmLzpJKmhkjqN29WT3preA= -----END CERTIFICATE-----Generated at Sun Dec 7 01:44:23 2025 by rpki-client