This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf repo-rpki.idnic.net/repo/358c8f9f-4213-4a2a-85c3-b24b0d0b5107/0/030BE557286D3A4FE6E9AA70636EC79D178ACE1F.mft File: 030BE557286D3A4FE6E9AA70636EC79D178ACE1F.mft (raw, json) Hash identifier: gbBMfTXw2dtDN9b6Lkr/fkUOsNc8nBW9STNG73uEI9s= Subject key identifier: 18:8C:7A:51:A7:B7:71:EC:3E:FF:9B:B2:D3:51:A7:57:40:44:BA:EB Authority key identifier: 03:0B:E5:57:28:6D:3A:4F:E6:E9:AA:70:63:6E:C7:9D:17:8A:CE:1F Certificate issuer: /CN=030BE557286D3A4FE6E9AA70636EC79D178ACE1F Certificate serial: C2BAFFAEF40E98C482B1AE075485C47EFE3D2D Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/030BE557286D3A4FE6E9AA70636EC79D178ACE1F.cer Subject info access: rsync://repo-rpki.idnic.net/repo/358c8f9f-4213-4a2a-85c3-b24b0d0b5107/0/030BE557286D3A4FE6E9AA70636EC79D178ACE1F.mft Manifest number: 0268 Signing time: Mon 19 Jan 2026 10:10:58 +0000 Manifest this update: Mon 19 Jan 2026 10:05:58 +0000 Manifest next update: Thu 22 Jan 2026 19:18:58 +0000 Files and hashes: 1: 3130332e3136322e3232312e302f32342d3234203d3e20313339393532.roa (hash: JP4Zum4iV9kK+sjwkFZOVqNzSo/R4flchawr+ijKpxA=) 2: 3130332e3136322e3232302e302f32342d3234203d3e20313339393532.roa (hash: iSdhQ66zYnSDoW2oYiFhzo66rGvZpv/6O91EPJd3VUo=) 3: 030BE557286D3A4FE6E9AA70636EC79D178ACE1F.crl (hash: 7oE57/6+/rG2Pv2Hr4LA+tWxCkiyExvAlza6Cb8udK0=) 4: 3130332e3136322e3232302e302f32332d3233203d3e20313339393532.roa (hash: UmBaN4f8daXm7YcJHiYwqui5FgHxOYUATLUGSQyoA5A=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/358c8f9f-4213-4a2a-85c3-b24b0d0b5107/0/030BE557286D3A4FE6E9AA70636EC79D178ACE1F.crl rsync://repo-rpki.idnic.net/repo/358c8f9f-4213-4a2a-85c3-b24b0d0b5107/0/030BE557286D3A4FE6E9AA70636EC79D178ACE1F.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/030BE557286D3A4FE6E9AA70636EC79D178ACE1F.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 22 Jan 2026 19:18:58 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: c2:ba:ff:ae:f4:0e:98:c4:82:b1:ae:07:54:85:c4:7e:fe:3d:2d Signature Algorithm: sha256WithRSAEncryption Issuer: CN=030BE557286D3A4FE6E9AA70636EC79D178ACE1F Validity Not Before: Jan 19 10:05:58 2026 GMT Not After : Jan 22 19:18:58 2026 GMT Subject: CN=188C7A51A7B771EC3EFF9BB2D351A7574044BAEB Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c5:5a:53:e9:80:b3:60:e4:f3:d9:76:3d:4e:7d: 0e:de:f4:2c:83:a6:39:47:96:fe:11:61:16:ab:5e: 31:63:b5:c4:01:0c:2f:d7:8f:7b:9b:b4:a1:aa:0b: 2b:e6:2c:f1:90:6a:6b:17:c6:98:a7:26:40:3a:97: 76:02:af:29:1e:05:97:ff:0a:f2:cd:9b:81:2c:98: 8c:dc:ce:9a:0c:e2:22:94:88:62:70:27:f4:20:37: 93:65:f1:bd:03:f2:f5:13:c8:91:da:d3:e3:ce:e1: 7b:0a:49:36:1a:e2:a4:ed:a5:c7:03:67:33:3c:eb: ce:c5:03:39:f5:6b:9e:84:1e:55:be:27:5e:41:0d: a7:03:76:b0:b4:dc:51:0b:e5:2d:82:cf:7e:5e:0f: 10:cf:8b:50:3c:bf:dd:a7:e1:94:1c:b7:dc:a7:be: 31:ef:12:89:d0:5d:b5:28:35:39:92:74:5a:34:96: 27:cb:48:7c:e6:36:de:77:2a:a3:49:30:dc:f4:84: 3b:98:9c:ee:74:6b:7a:ac:63:29:0b:78:a9:15:84: 47:da:78:79:e2:aa:e0:ab:e6:bd:b5:98:ec:0a:26: 92:0b:a3:2d:f1:3d:3b:c4:28:08:ba:e9:12:00:cb: 63:1d:11:17:61:a7:2c:3b:bd:84:69:19:d0:a8:01: 13:7b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 18:8C:7A:51:A7:B7:71:EC:3E:FF:9B:B2:D3:51:A7:57:40:44:BA:EB X509v3 Authority Key Identifier: keyid:03:0B:E5:57:28:6D:3A:4F:E6:E9:AA:70:63:6E:C7:9D:17:8A:CE:1F X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/358c8f9f-4213-4a2a-85c3-b24b0d0b5107/0/030BE557286D3A4FE6E9AA70636EC79D178ACE1F.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/030BE557286D3A4FE6E9AA70636EC79D178ACE1F.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/358c8f9f-4213-4a2a-85c3-b24b0d0b5107/0/030BE557286D3A4FE6E9AA70636EC79D178ACE1F.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 4c:9b:76:37:3b:ec:52:b7:2d:7f:20:a8:e4:60:61:71:b8:da: 6e:a0:04:65:cc:54:40:c7:39:51:de:6a:b6:36:c5:83:7b:b1: 21:5a:ea:73:6b:70:ee:e9:e8:1a:15:22:bd:30:2c:91:fd:4a: bb:bf:b2:14:fd:b1:da:f1:04:01:96:b2:f6:55:f4:db:68:44: 77:26:1b:77:c3:7a:04:d9:87:92:22:c8:39:08:75:82:df:93: aa:9a:1c:2f:2b:e5:c0:62:48:d0:8b:b8:8c:bb:37:0f:0d:03: f3:99:fc:e3:ac:55:4f:f4:29:b2:0a:a5:2e:17:35:e3:7c:1e: eb:c5:7d:05:79:d3:4d:46:bb:29:26:d4:79:fd:8d:3c:43:87: 64:74:8d:09:a2:b1:6e:00:b7:5c:fc:85:ca:53:00:45:2a:e8: 5b:6f:1e:3f:b9:1c:58:e9:0b:c4:3f:ab:8d:c1:14:cf:b0:5e: a4:5d:e3:9c:6e:17:6f:58:5d:45:fd:5c:58:30:a1:1d:71:2c: 26:74:be:0e:19:ab:3e:50:06:b4:50:ba:91:88:07:de:04:f2: fb:aa:b8:76:8e:ec:2a:21:20:a9:49:14:a5:db:5a:ab:f1:04: 3c:d1:99:c5:58:ce:67:86:37:52:0b:00:f5:0c:22:91:5a:4b: ef:a7:b8:c0 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUAMK6/670DpjEgrGuB1SFxH7+PS0wDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMDMwQkU1NTcyODZEM0E0RkU2RTlBQTcwNjM2RUM3OUQx NzhBQ0UxRjAeFw0yNjAxMTkxMDA1NThaFw0yNjAxMjIxOTE4NThaMDMxMTAvBgNV BAMTKDE4OEM3QTUxQTdCNzcxRUMzRUZGOUJCMkQzNTFBNzU3NDA0NEJBRUIwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDFWlPpgLNg5PPZdj1OfQ7e9CyD pjlHlv4RYRarXjFjtcQBDC/Xj3ubtKGqCyvmLPGQamsXxpinJkA6l3YCrykeBZf/ CvLNm4EsmIzczpoM4iKUiGJwJ/QgN5Nl8b0D8vUTyJHa0+PO4XsKSTYa4qTtpccD ZzM8687FAzn1a56EHlW+J15BDacDdrC03FEL5S2Cz35eDxDPi1A8v92n4ZQct9yn vjHvEonQXbUoNTmSdFo0lifLSHzmNt53KqNJMNz0hDuYnO50a3qsYykLeKkVhEfa eHniquCr5r21mOwKJpILoy3xPTvEKAi66RIAy2MdERdhpyw7vYRpGdCoARN7AgMB AAGjggI8MIICODAdBgNVHQ4EFgQUGIx6Uae3cew+/5uy01GnV0BEuuswHwYDVR0j BBgwFoAUAwvlVyhtOk/m6apwY27HnReKzh8wDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby8z NThjOGY5Zi00MjEzLTRhMmEtODVjMy1iMjRiMGQwYjUxMDcvMC8wMzBCRTU1NzI4 NkQzQTRGRTZFOUFBNzA2MzZFQzc5RDE3OEFDRTFGLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvMDMwQkU1NTcyODZEM0E0RkU2RTlBQTcwNjM2RUM3OUQxNzhB Q0UxRi5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vMzU4YzhmOWYtNDIxMy00YTJhLTg1 YzMtYjI0YjBkMGI1MTA3LzAvMDMwQkU1NTcyODZEM0E0RkU2RTlBQTcwNjM2RUM3 OUQxNzhBQ0UxRi5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAEybdjc77FK3LX8gqORgYXG42m6gBGXMVEDH OVHearY2xYN7sSFa6nNrcO7p6BoVIr0wLJH9Sru/shT9sdrxBAGWsvZV9NtoRHcm G3fDegTZh5IiyDkIdYLfk6qaHC8r5cBiSNCLuIy7Nw8NA/OZ/OOsVU/0KbIKpS4X NeN8HuvFfQV5001Guykm1Hn9jTxDh2R0jQmisW4At1z8hcpTAEUq6FtvHj+5HFjp C8Q/q43BFM+wXqRd45xuF29YXUX9XFgwoR1xLCZ0vg4Zqz5QBrRQupGIB94E8vuq uHaO7CohIKlJFKXbWqvxBDzRmcVYzmeGN1ILAPUMIpFaS++nuMA= -----END CERTIFICATE-----Generated at Wed Jan 21 14:44:21 2026 by rpki-client