This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf repo-rpki.idnic.net/repo/d9b899ac-4870-4e28-8e4e-2c23752a4a60/0/30D21A97E1EED902F151C3022374D979F0A4A7EF.mft File: 30D21A97E1EED902F151C3022374D979F0A4A7EF.mft (raw, json) Hash identifier: 79AochRM2vzpO19JZ5iWbFK8wZXel84u80Qx1Y0PjhY= Subject key identifier: E3:3F:64:0F:03:27:7C:EA:7D:3A:2D:5E:CC:F3:7E:05:6D:80:E4:2F Authority key identifier: 30:D2:1A:97:E1:EE:D9:02:F1:51:C3:02:23:74:D9:79:F0:A4:A7:EF Certificate issuer: /CN=30D21A97E1EED902F151C3022374D979F0A4A7EF Certificate serial: 2F4C57B5C52BF91070644A5710927384118680AD Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/30D21A97E1EED902F151C3022374D979F0A4A7EF.cer Subject info access: rsync://repo-rpki.idnic.net/repo/d9b899ac-4870-4e28-8e4e-2c23752a4a60/0/30D21A97E1EED902F151C3022374D979F0A4A7EF.mft Manifest number: 0147 Signing time: Sat 06 Dec 2025 12:31:48 +0000 Manifest this update: Sat 06 Dec 2025 12:26:48 +0000 Manifest next update: Tue 09 Dec 2025 16:10:48 +0000 Files and hashes: 1: 34352e3234392e3232352e302f32342d3234203d3e20313532303237.roa (hash: C52489RC5C7/6xA/AFGhqaTac2q7UpLljZUsc+WdOYU=) 2: 30D21A97E1EED902F151C3022374D979F0A4A7EF.crl (hash: Af/Hv6KSmKyaYEHALJo8Gr/X6wvFbxQvxcEDQ94PT0M=) 3: 34352e3234392e3232342e302f32342d3234203d3e20313532303237.roa (hash: Lbof0Eu5fIUUt+ZOnyAgcQnzposa001pRsoMaWB/hPw=) 4: 34352e3234392e3232342e302f32332d3233203d3e20313532303237.roa (hash: dHytxOoYwuE6ev+ouL2C7HNOfk2qBxU0rZwmruiXqlc=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/d9b899ac-4870-4e28-8e4e-2c23752a4a60/0/30D21A97E1EED902F151C3022374D979F0A4A7EF.crl rsync://repo-rpki.idnic.net/repo/d9b899ac-4870-4e28-8e4e-2c23752a4a60/0/30D21A97E1EED902F151C3022374D979F0A4A7EF.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/30D21A97E1EED902F151C3022374D979F0A4A7EF.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 09 Dec 2025 15:57:52 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2f:4c:57:b5:c5:2b:f9:10:70:64:4a:57:10:92:73:84:11:86:80:ad Signature Algorithm: sha256WithRSAEncryption Issuer: CN=30D21A97E1EED902F151C3022374D979F0A4A7EF Validity Not Before: Dec 6 12:26:48 2025 GMT Not After : Dec 9 16:10:48 2025 GMT Subject: CN=E33F640F03277CEA7D3A2D5ECCF37E056D80E42F Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c8:fe:0f:d8:72:eb:ac:d4:5d:a1:39:ef:77:4f: a9:5e:5b:0e:32:2f:5b:e9:ec:58:4b:cc:d2:3e:53: 4b:36:20:43:16:38:07:4f:7a:5f:4d:c9:03:a1:5b: d5:22:54:25:cf:47:9b:7e:0c:3c:04:28:92:2c:45: 5c:a1:b3:8b:76:58:3f:b6:b4:52:31:2c:2e:3b:1f: 90:1a:ec:ab:3d:5c:1f:67:93:a4:ad:3e:31:5a:0e: bd:d8:e8:53:bd:77:f1:12:e4:8b:2b:f3:aa:56:33: 6c:11:52:85:23:5a:35:27:1c:f3:80:29:ff:41:4b: fb:9e:d5:ca:3c:9a:cd:41:c6:70:ef:ed:3b:b6:6b: b1:d8:e6:9c:d1:e6:11:91:0f:9d:35:f1:4b:c0:c5: b6:d4:42:92:a2:67:39:f9:74:89:e8:18:04:2c:51: af:0a:29:02:bc:64:6a:62:6a:5a:c0:ba:83:97:63: 4d:92:37:9a:a5:63:95:89:47:d8:f7:f9:c6:9b:ff: 41:8b:64:49:1b:bb:8e:52:83:65:55:d4:38:1c:87: f7:bd:73:57:74:e9:37:f3:da:a3:91:25:38:3b:73: 0d:55:49:17:8a:9a:af:44:c7:5e:8a:e9:16:cb:c3: a8:e5:c6:07:84:59:1a:41:42:fc:4c:cd:29:60:b0: c5:19 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: E3:3F:64:0F:03:27:7C:EA:7D:3A:2D:5E:CC:F3:7E:05:6D:80:E4:2F X509v3 Authority Key Identifier: keyid:30:D2:1A:97:E1:EE:D9:02:F1:51:C3:02:23:74:D9:79:F0:A4:A7:EF X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/d9b899ac-4870-4e28-8e4e-2c23752a4a60/0/30D21A97E1EED902F151C3022374D979F0A4A7EF.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/30D21A97E1EED902F151C3022374D979F0A4A7EF.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/d9b899ac-4870-4e28-8e4e-2c23752a4a60/0/30D21A97E1EED902F151C3022374D979F0A4A7EF.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption c4:a9:6a:00:1f:70:0d:22:e0:e7:fb:14:88:58:b5:92:5e:64: 4a:5c:31:d1:64:f4:8e:29:ce:3c:e2:df:f5:be:ef:4e:94:36: 09:4b:15:a3:00:ec:85:9b:94:92:05:0b:e2:d3:11:33:14:96: 20:20:2d:ac:1e:9f:51:63:6b:98:87:d1:15:38:cd:18:eb:38: bb:01:85:d6:e1:16:ae:ab:b0:e8:74:12:2d:ea:67:05:e0:d1: 6f:78:5c:a9:ae:53:6d:55:4a:4d:14:35:eb:1d:e9:ea:1a:56: 12:72:5a:82:bb:ec:04:84:94:a4:18:bf:51:fa:ca:ee:03:41: 84:38:ec:d7:d7:3a:1c:5f:b4:ff:69:60:70:ee:fc:92:55:24: b1:ce:a9:3e:5c:9c:46:e7:d2:87:09:51:c6:0a:16:0e:e6:2a: 1a:8c:3e:84:57:ca:12:86:d6:6f:4a:ff:21:ac:b4:6d:63:15: 57:d6:1f:8d:b8:2a:6b:d9:29:dc:13:2e:0a:f4:07:ac:a9:ba: 16:e5:b6:51:da:3c:08:24:c2:7a:d6:f1:a3:2d:aa:2f:c8:bb: cb:4f:e1:52:95:66:1c:60:af:00:a3:93:6c:72:6e:48:5f:cb: b8:78:76:db:89:7b:2f:f9:59:02:fc:e3:7b:3f:b2:32:53:e1: e3:c2:84:e9 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUL0xXtcUr+RBwZEpXEJJzhBGGgK0wDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMzBEMjFBOTdFMUVFRDkwMkYxNTFDMzAyMjM3NEQ5NzlG MEE0QTdFRjAeFw0yNTEyMDYxMjI2NDhaFw0yNTEyMDkxNjEwNDhaMDMxMTAvBgNV BAMTKEUzM0Y2NDBGMDMyNzdDRUE3RDNBMkQ1RUNDRjM3RTA1NkQ4MEU0MkYwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDI/g/Ycuus1F2hOe93T6leWw4y L1vp7FhLzNI+U0s2IEMWOAdPel9NyQOhW9UiVCXPR5t+DDwEKJIsRVyhs4t2WD+2 tFIxLC47H5Aa7Ks9XB9nk6StPjFaDr3Y6FO9d/ES5Isr86pWM2wRUoUjWjUnHPOA Kf9BS/ue1co8ms1BxnDv7Tu2a7HY5pzR5hGRD5018UvAxbbUQpKiZzn5dInoGAQs Ua8KKQK8ZGpialrAuoOXY02SN5qlY5WJR9j3+cab/0GLZEkbu45Sg2VV1Dgch/e9 c1d06Tfz2qORJTg7cw1VSReKmq9Ex16K6RbLw6jlxgeEWRpBQvxMzSlgsMUZAgMB AAGjggI8MIICODAdBgNVHQ4EFgQU4z9kDwMnfOp9Oi1ezPN+BW2A5C8wHwYDVR0j BBgwFoAUMNIal+Hu2QLxUcMCI3TZefCkp+8wDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby9k OWI4OTlhYy00ODcwLTRlMjgtOGU0ZS0yYzIzNzUyYTRhNjAvMC8zMEQyMUE5N0Ux RUVEOTAyRjE1MUMzMDIyMzc0RDk3OUYwQTRBN0VGLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvMzBEMjFBOTdFMUVFRDkwMkYxNTFDMzAyMjM3NEQ5NzlGMEE0 QTdFRi5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vZDliODk5YWMtNDg3MC00ZTI4LThl NGUtMmMyMzc1MmE0YTYwLzAvMzBEMjFBOTdFMUVFRDkwMkYxNTFDMzAyMjM3NEQ5 NzlGMEE0QTdFRi5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAMSpagAfcA0i4Of7FIhYtZJeZEpcMdFk9I4p zjzi3/W+706UNglLFaMA7IWblJIFC+LTETMUliAgLawen1Fja5iH0RU4zRjrOLsB hdbhFq6rsOh0Ei3qZwXg0W94XKmuU21VSk0UNesd6eoaVhJyWoK77ASElKQYv1H6 yu4DQYQ47NfXOhxftP9pYHDu/JJVJLHOqT5cnEbn0ocJUcYKFg7mKhqMPoRXyhKG 1m9K/yGstG1jFVfWH424KmvZKdwTLgr0B6ypuhbltlHaPAgkwnrW8aMtqi/Iu8tP 4VKVZhxgrwCjk2xybkhfy7h4dtuJey/5WQL843s/sjJT4ePChOk= -----END CERTIFICATE-----Generated at Sun Dec 7 04:57:42 2025 by rpki-client