This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf repo-rpki.idnic.net/repo/03b59ce4-66a2-4f4d-b3d6-9299484ba56b/0/C30DE71F7CAE16CA2D8DAB6D01CA43D72FB4FE6E.mft File: C30DE71F7CAE16CA2D8DAB6D01CA43D72FB4FE6E.mft (raw, json) Hash identifier: tD0U6dCm0Dbv7Aw5IogosPWJb++uLITrf/EUP7iJ0Qc= Subject key identifier: 8F:AD:4C:AA:30:4E:93:63:72:9C:D0:D8:BA:5B:7A:EC:24:F0:DD:81 Authority key identifier: C3:0D:E7:1F:7C:AE:16:CA:2D:8D:AB:6D:01:CA:43:D7:2F:B4:FE:6E Certificate issuer: /CN=C30DE71F7CAE16CA2D8DAB6D01CA43D72FB4FE6E Certificate serial: 08223829242E9726C97F2A1F7258B4FD474830E3 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/C30DE71F7CAE16CA2D8DAB6D01CA43D72FB4FE6E.cer Subject info access: rsync://repo-rpki.idnic.net/repo/03b59ce4-66a2-4f4d-b3d6-9299484ba56b/0/C30DE71F7CAE16CA2D8DAB6D01CA43D72FB4FE6E.mft Manifest number: 0419 Signing time: Wed 03 Dec 2025 07:00:57 +0000 Manifest this update: Wed 03 Dec 2025 06:55:57 +0000 Manifest next update: Sat 06 Dec 2025 11:18:57 +0000 Files and hashes: 1: C30DE71F7CAE16CA2D8DAB6D01CA43D72FB4FE6E.crl (hash: 21nHtFJIH94QTwkDaf4j8e8JdXsCiFF3aDW98N7vugo=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/03b59ce4-66a2-4f4d-b3d6-9299484ba56b/0/C30DE71F7CAE16CA2D8DAB6D01CA43D72FB4FE6E.crl rsync://repo-rpki.idnic.net/repo/03b59ce4-66a2-4f4d-b3d6-9299484ba56b/0/C30DE71F7CAE16CA2D8DAB6D01CA43D72FB4FE6E.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/C30DE71F7CAE16CA2D8DAB6D01CA43D72FB4FE6E.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 06 Dec 2025 11:18:57 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 08:22:38:29:24:2e:97:26:c9:7f:2a:1f:72:58:b4:fd:47:48:30:e3 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=C30DE71F7CAE16CA2D8DAB6D01CA43D72FB4FE6E Validity Not Before: Dec 3 06:55:57 2025 GMT Not After : Dec 6 11:18:57 2025 GMT Subject: CN=8FAD4CAA304E9363729CD0D8BA5B7AEC24F0DD81 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d2:0d:f3:03:4e:2f:c1:02:b0:4e:fd:a8:85:58: 14:59:fa:79:47:07:67:3f:82:27:21:95:ed:7f:af: 98:ba:76:bb:26:53:b6:65:0b:16:f1:8f:d2:7c:1b: 66:63:a2:f3:4f:50:e5:47:19:a3:10:1c:a4:77:e5: 90:b4:4c:a1:24:62:8a:7f:1c:b0:74:01:68:3e:b5: fd:31:91:af:7c:43:6e:af:e1:fd:9e:b2:c8:45:7a: 94:ab:6a:e5:2d:b3:db:de:3c:e9:ea:b7:56:c2:2d: bd:7c:7e:54:91:c7:26:47:59:32:9b:60:4a:85:46: ee:46:f3:ff:b1:b6:00:04:64:cd:78:48:8f:64:22: 50:ef:6e:ec:b9:99:45:6f:dc:64:32:5c:9f:2a:f5: f7:03:16:3b:6d:41:4a:6c:27:b8:cb:74:38:ae:7b: 7e:06:b2:8c:1a:37:8b:4f:40:e9:8a:73:b0:8a:e9: ae:b8:6f:fc:c0:46:54:c4:5b:f2:18:b1:8d:7a:98: 60:c1:7b:77:03:ad:60:15:d9:06:69:99:df:1c:54: 92:39:2f:4f:12:f6:d3:10:34:a7:46:63:1c:7b:93: 52:34:64:7a:e3:b3:23:52:0a:2a:ac:53:30:ca:42: 6b:13:a5:d9:c5:29:fa:28:5e:96:e5:5d:8b:5b:8d: 4e:03 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 8F:AD:4C:AA:30:4E:93:63:72:9C:D0:D8:BA:5B:7A:EC:24:F0:DD:81 X509v3 Authority Key Identifier: keyid:C3:0D:E7:1F:7C:AE:16:CA:2D:8D:AB:6D:01:CA:43:D7:2F:B4:FE:6E X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/03b59ce4-66a2-4f4d-b3d6-9299484ba56b/0/C30DE71F7CAE16CA2D8DAB6D01CA43D72FB4FE6E.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/C30DE71F7CAE16CA2D8DAB6D01CA43D72FB4FE6E.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/03b59ce4-66a2-4f4d-b3d6-9299484ba56b/0/C30DE71F7CAE16CA2D8DAB6D01CA43D72FB4FE6E.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 36:6f:e9:bd:9f:95:bf:e1:51:c3:34:57:ff:b9:11:9c:1c:30: 9e:8e:8a:d8:01:10:dc:4d:0d:4b:f8:29:b8:83:62:80:78:31: bb:4e:2d:d3:46:d9:ed:7b:9f:74:43:cd:44:2f:41:7b:36:6c: 6f:ad:c6:a1:fb:9a:59:6c:fb:c1:7c:03:ab:ac:99:1f:43:ea: cd:f0:5f:d4:bb:4a:90:59:12:f8:93:1a:96:54:2e:07:50:db: 9d:46:98:bc:06:0b:88:71:49:9c:de:50:00:25:a9:44:a4:c7: 9d:7f:5b:b4:2a:d4:89:20:4e:65:fa:06:fb:60:96:e4:0c:05: df:a2:23:62:a9:11:79:11:ab:94:76:08:df:39:81:e3:18:dc: 0e:9d:a0:67:38:47:c7:c6:d5:5d:68:9f:a9:50:73:97:92:46: 09:f8:76:6e:8d:64:f2:f3:89:3d:f1:59:d9:e6:91:3c:42:e7: 54:42:d8:b3:79:48:0c:8d:b6:4d:19:30:bc:b8:c7:c8:8d:b6: a7:ce:e7:46:f7:cc:d9:00:15:65:7e:d3:0e:1b:93:27:86:d7: 42:e2:e6:2b:8f:ec:25:ee:07:74:20:43:74:05:1b:7c:72:d5: 4f:aa:67:2c:3a:70:96:47:52:4c:1b:4a:07:81:2f:13:e2:16: 57:09:43:11 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUCCI4KSQulybJfyofcli0/UdIMOMwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoQzMwREU3MUY3Q0FFMTZDQTJEOERBQjZEMDFDQTQzRDcy RkI0RkU2RTAeFw0yNTEyMDMwNjU1NTdaFw0yNTEyMDYxMTE4NTdaMDMxMTAvBgNV BAMTKDhGQUQ0Q0FBMzA0RTkzNjM3MjlDRDBEOEJBNUI3QUVDMjRGMEREODEwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDSDfMDTi/BArBO/aiFWBRZ+nlH B2c/gichle1/r5i6drsmU7ZlCxbxj9J8G2ZjovNPUOVHGaMQHKR35ZC0TKEkYop/ HLB0AWg+tf0xka98Q26v4f2esshFepSrauUts9vePOnqt1bCLb18flSRxyZHWTKb YEqFRu5G8/+xtgAEZM14SI9kIlDvbuy5mUVv3GQyXJ8q9fcDFjttQUpsJ7jLdDiu e34GsowaN4tPQOmKc7CK6a64b/zARlTEW/IYsY16mGDBe3cDrWAV2QZpmd8cVJI5 L08S9tMQNKdGYxx7k1I0ZHrjsyNSCiqsUzDKQmsTpdnFKfooXpblXYtbjU4DAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUj61MqjBOk2NynNDYult67CTw3YEwHwYDVR0j BBgwFoAUww3nH3yuFsotjattAcpD1y+0/m4wDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby8w M2I1OWNlNC02NmEyLTRmNGQtYjNkNi05Mjk5NDg0YmE1NmIvMC9DMzBERTcxRjdD QUUxNkNBMkQ4REFCNkQwMUNBNDNENzJGQjRGRTZFLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvQzMwREU3MUY3Q0FFMTZDQTJEOERBQjZEMDFDQTQzRDcyRkI0 RkU2RS5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vMDNiNTljZTQtNjZhMi00ZjRkLWIz ZDYtOTI5OTQ4NGJhNTZiLzAvQzMwREU3MUY3Q0FFMTZDQTJEOERBQjZEMDFDQTQz RDcyRkI0RkU2RS5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBADZv6b2flb/hUcM0V/+5EZwcMJ6OitgBENxN DUv4KbiDYoB4MbtOLdNG2e17n3RDzUQvQXs2bG+txqH7mlls+8F8A6usmR9D6s3w X9S7SpBZEviTGpZULgdQ251GmLwGC4hxSZzeUAAlqUSkx51/W7Qq1IkgTmX6Bvtg luQMBd+iI2KpEXkRq5R2CN85geMY3A6doGc4R8fG1V1on6lQc5eSRgn4dm6NZPLz iT3xWdnmkTxC51RC2LN5SAyNtk0ZMLy4x8iNtqfO50b3zNkAFWV+0w4bkyeG10Li 5iuP7CXuB3QgQ3QFG3xy1U+qZyw6cJZHUkwbSgeBLxPiFlcJQxE= -----END CERTIFICATE-----Generated at Wed Dec 3 16:39:42 2025 by rpki-client