This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf repo-rpki.idnic.net/repo/d4f48a89-90c5-4f5a-8015-36f1196a71c8/0/F30F14F4AEB6630FF4E270B0729358AEBFA97733.mft File: F30F14F4AEB6630FF4E270B0729358AEBFA97733.mft (raw, json) Hash identifier: AIEQUdZVODSBjyrFN94GtD0aTfn+z1Bl1SQ8DZIdwbc= Subject key identifier: 6B:DB:D9:FB:EB:EA:61:23:77:B0:60:62:AB:58:BA:F3:C4:BB:69:FF Authority key identifier: F3:0F:14:F4:AE:B6:63:0F:F4:E2:70:B0:72:93:58:AE:BF:A9:77:33 Certificate issuer: /CN=F30F14F4AEB6630FF4E270B0729358AEBFA97733 Certificate serial: 71FF6BC8783CD269D4D127C6F4324997E2BE3B36 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/F30F14F4AEB6630FF4E270B0729358AEBFA97733.cer Subject info access: rsync://repo-rpki.idnic.net/repo/d4f48a89-90c5-4f5a-8015-36f1196a71c8/0/F30F14F4AEB6630FF4E270B0729358AEBFA97733.mft Manifest number: 052D Signing time: Fri 05 Dec 2025 15:32:07 +0000 Manifest this update: Fri 05 Dec 2025 15:27:07 +0000 Manifest next update: Tue 09 Dec 2025 03:23:07 +0000 Files and hashes: 1: 323430373a343630303a3a2f33322d3438203d3e203435323935.roa (hash: 4LpQRgrp7oBVnTYb85mIa1GKQ4oBc22IhdekLi1TA6c=) 2: F30F14F4AEB6630FF4E270B0729358AEBFA97733.crl (hash: k59Dc4Hc6XkBw7/toS+5+W6dEgTuQXXg7VJJH/0Hda8=) 3: 3131332e3231322e3136302e302f32312d3234203d3e203435323935.roa (hash: ykBCC6a4TUa9u53qD+3M0qE2NkGoJtCXa3OdoYw7FhA=) 4: 3130332e3135312e39322e302f32332d3234203d3e203435323935.roa (hash: WCf4k80HtpWJXreA4Q6XD5iDNEeVQ9AU8BVWi8IEoSM=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/d4f48a89-90c5-4f5a-8015-36f1196a71c8/0/F30F14F4AEB6630FF4E270B0729358AEBFA97733.crl rsync://repo-rpki.idnic.net/repo/d4f48a89-90c5-4f5a-8015-36f1196a71c8/0/F30F14F4AEB6630FF4E270B0729358AEBFA97733.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/F30F14F4AEB6630FF4E270B0729358AEBFA97733.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 09 Dec 2025 03:23:07 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 71:ff:6b:c8:78:3c:d2:69:d4:d1:27:c6:f4:32:49:97:e2:be:3b:36 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=F30F14F4AEB6630FF4E270B0729358AEBFA97733 Validity Not Before: Dec 5 15:27:07 2025 GMT Not After : Dec 9 03:23:07 2025 GMT Subject: CN=6BDBD9FBEBEA612377B06062AB58BAF3C4BB69FF Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d3:e3:50:72:cc:27:4f:a3:2d:4e:60:81:b7:b8: 36:65:d0:5f:59:54:83:7b:df:95:62:ee:d2:49:22: 71:98:f1:5f:71:4b:95:3a:d4:d7:bf:2f:38:c1:fc: 40:84:f4:d6:7c:7e:bb:e2:76:fd:07:71:ea:6b:b2: 32:d6:be:d2:b4:b0:b4:25:ba:b9:d9:96:77:90:08: b1:f1:41:82:aa:07:ba:ee:e1:e6:e3:4b:5e:a3:a7: 85:51:4d:6e:c3:38:d4:7d:41:cd:84:32:08:34:8e: ec:3e:fe:c0:2b:bc:f9:39:99:da:80:fe:c0:26:9e: 54:4c:a3:4b:7a:56:c7:a2:e8:71:71:13:24:eb:6f: 54:39:25:ec:ac:c1:99:76:ad:79:05:1b:2d:17:e6: b1:16:64:85:b5:e5:97:27:5b:43:32:2b:83:d6:95: 4d:9e:24:fd:cc:e1:d2:83:85:fb:10:46:9b:e1:12: 96:cb:90:71:79:f0:f9:23:d7:10:1d:a5:c0:15:9a: 3a:fa:7b:f2:e7:db:ec:0e:d7:06:6b:19:04:91:c2: bc:69:9f:0a:2f:0f:bc:40:cb:e1:0c:25:cf:68:0a: ab:db:bc:81:2d:98:34:6c:a4:f1:09:b1:04:2e:ff: a3:45:a2:df:31:71:8a:77:3e:8d:14:73:4f:d7:06: 41:5b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 6B:DB:D9:FB:EB:EA:61:23:77:B0:60:62:AB:58:BA:F3:C4:BB:69:FF X509v3 Authority Key Identifier: keyid:F3:0F:14:F4:AE:B6:63:0F:F4:E2:70:B0:72:93:58:AE:BF:A9:77:33 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/d4f48a89-90c5-4f5a-8015-36f1196a71c8/0/F30F14F4AEB6630FF4E270B0729358AEBFA97733.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/F30F14F4AEB6630FF4E270B0729358AEBFA97733.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/d4f48a89-90c5-4f5a-8015-36f1196a71c8/0/F30F14F4AEB6630FF4E270B0729358AEBFA97733.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 32:ea:3c:de:9c:47:3c:86:da:2e:78:b4:07:8c:51:37:1f:e2: 14:2b:21:2d:6c:46:f1:0d:28:6b:2b:07:2f:11:c1:25:3c:a2: 03:f6:f6:d2:c2:88:86:c4:7e:80:89:81:b2:88:7b:12:0e:31: 12:6d:32:9b:71:2f:2d:4e:a2:ab:9d:91:0d:c1:41:77:e3:e3: b5:5d:de:61:36:cd:0a:3c:e3:d1:32:fd:2e:df:a8:a9:9c:b4: 20:fd:e7:ba:f7:6d:bd:93:c4:86:3c:6d:ef:13:58:2f:fe:c5: 32:2d:d3:76:51:84:08:27:77:3d:3a:ac:1a:f2:77:5b:98:ab: 00:10:06:7e:a6:7f:a0:52:f9:d7:fa:56:59:4f:10:09:f7:e5: a3:80:6b:39:ab:ef:7e:06:d2:17:48:a8:be:c8:69:a6:a4:7c: 71:83:fd:93:e2:d2:23:d9:b6:40:0f:d2:b6:57:eb:c9:72:56: ea:91:a6:77:02:e4:88:7b:fa:af:22:44:ce:56:63:75:21:01: 15:dc:79:26:b6:ea:a6:74:46:c2:41:f5:62:c4:70:77:25:b2: 3b:4f:95:72:86:b3:85:7d:6e:0c:ed:61:51:94:20:55:8e:7c: 98:89:cb:2a:a7:f9:f9:16:50:ce:44:7d:9a:e5:de:1f:31:28: 38:15:34:1f -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUcf9ryHg80mnU0SfG9DJJl+K+OzYwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoRjMwRjE0RjRBRUI2NjMwRkY0RTI3MEIwNzI5MzU4QUVC RkE5NzczMzAeFw0yNTEyMDUxNTI3MDdaFw0yNTEyMDkwMzIzMDdaMDMxMTAvBgNV BAMTKDZCREJEOUZCRUJFQTYxMjM3N0IwNjA2MkFCNThCQUYzQzRCQjY5RkYwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDT41ByzCdPoy1OYIG3uDZl0F9Z VIN735Vi7tJJInGY8V9xS5U61Ne/LzjB/ECE9NZ8frvidv0HceprsjLWvtK0sLQl urnZlneQCLHxQYKqB7ru4ebjS16jp4VRTW7DONR9Qc2EMgg0juw+/sArvPk5mdqA /sAmnlRMo0t6Vsei6HFxEyTrb1Q5JeyswZl2rXkFGy0X5rEWZIW15ZcnW0MyK4PW lU2eJP3M4dKDhfsQRpvhEpbLkHF58Pkj1xAdpcAVmjr6e/Ln2+wO1wZrGQSRwrxp nwovD7xAy+EMJc9oCqvbvIEtmDRspPEJsQQu/6NFot8xcYp3Po0Uc0/XBkFbAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUa9vZ++vqYSN3sGBiq1i688S7af8wHwYDVR0j BBgwFoAU8w8U9K62Yw/04nCwcpNYrr+pdzMwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby9k NGY0OGE4OS05MGM1LTRmNWEtODAxNS0zNmYxMTk2YTcxYzgvMC9GMzBGMTRGNEFF QjY2MzBGRjRFMjcwQjA3MjkzNThBRUJGQTk3NzMzLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvRjMwRjE0RjRBRUI2NjMwRkY0RTI3MEIwNzI5MzU4QUVCRkE5 NzczMy5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vZDRmNDhhODktOTBjNS00ZjVhLTgw MTUtMzZmMTE5NmE3MWM4LzAvRjMwRjE0RjRBRUI2NjMwRkY0RTI3MEIwNzI5MzU4 QUVCRkE5NzczMy5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBADLqPN6cRzyG2i54tAeMUTcf4hQrIS1sRvEN KGsrBy8RwSU8ogP29tLCiIbEfoCJgbKIexIOMRJtMptxLy1OoqudkQ3BQXfj47Vd 3mE2zQo849Ey/S7fqKmctCD957r3bb2TxIY8be8TWC/+xTIt03ZRhAgndz06rBry d1uYqwAQBn6mf6BS+df6VllPEAn35aOAazmr734G0hdIqL7IaaakfHGD/ZPi0iPZ tkAP0rZX68lyVuqRpncC5Ih7+q8iRM5WY3UhARXceSa26qZ0RsJB9WLEcHclsjtP lXKGs4V9bgztYVGUIFWOfJiJyyqn+fkWUM5EfZrl3h8xKDgVNB8= -----END CERTIFICATE-----Generated at Sat Dec 6 23:16:21 2025 by rpki-client