This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf repo-rpki.idnic.net/repo/429f8902-1a06-45a8-a998-72e46aaae8fc/0/30E2B4617B8B9CFC4FC57B1C5A4D74FC7E912D45.mft File: 30E2B4617B8B9CFC4FC57B1C5A4D74FC7E912D45.mft (raw, json) Hash identifier: 0C4z0k/9T6lEUSYiNmDGkBwPd6zqZ+v6PDJRXXptfWg= Subject key identifier: 70:BF:36:95:3A:FE:F7:F6:BD:66:DA:E0:40:B2:1E:13:46:3F:B2:70 Authority key identifier: 30:E2:B4:61:7B:8B:9C:FC:4F:C5:7B:1C:5A:4D:74:FC:7E:91:2D:45 Certificate issuer: /CN=30E2B4617B8B9CFC4FC57B1C5A4D74FC7E912D45 Certificate serial: 15E1F4A6D60669EF44EED3D75B2DFBBD571A65D9 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/30E2B4617B8B9CFC4FC57B1C5A4D74FC7E912D45.cer Subject info access: rsync://repo-rpki.idnic.net/repo/429f8902-1a06-45a8-a998-72e46aaae8fc/0/30E2B4617B8B9CFC4FC57B1C5A4D74FC7E912D45.mft Manifest number: 0218 Signing time: Sat 31 Jan 2026 09:41:14 +0000 Manifest this update: Sat 31 Jan 2026 09:36:14 +0000 Manifest next update: Tue 03 Feb 2026 13:56:14 +0000 Files and hashes: 1: 3130332e3136362e3235352e302f32342d3234203d3e20313431393636.roa (hash: xce0AmVhdIuoA0s5G07BTYqxfWM/i2bbCDllzfV1P80=) 2: 3130332e3136362e3235342e302f32342d3234203d3e20313431393636.roa (hash: Udg26cCHQ+Qftm36Kch+i7dbSWtv7odm32FXa+73LYY=) 3: 30E2B4617B8B9CFC4FC57B1C5A4D74FC7E912D45.crl (hash: tYQoIjtVy7AoXV5YoFQssqrfI5M4bZoXUCxU957ki4Y=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/429f8902-1a06-45a8-a998-72e46aaae8fc/0/30E2B4617B8B9CFC4FC57B1C5A4D74FC7E912D45.crl rsync://repo-rpki.idnic.net/repo/429f8902-1a06-45a8-a998-72e46aaae8fc/0/30E2B4617B8B9CFC4FC57B1C5A4D74FC7E912D45.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/30E2B4617B8B9CFC4FC57B1C5A4D74FC7E912D45.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 03 Feb 2026 13:56:14 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 15:e1:f4:a6:d6:06:69:ef:44:ee:d3:d7:5b:2d:fb:bd:57:1a:65:d9 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=30E2B4617B8B9CFC4FC57B1C5A4D74FC7E912D45 Validity Not Before: Jan 31 09:36:14 2026 GMT Not After : Feb 3 13:56:14 2026 GMT Subject: CN=70BF36953AFEF7F6BD66DAE040B21E13463FB270 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a6:51:ec:a5:19:cf:f9:94:27:7e:7d:93:fe:cc: c9:9c:ef:0f:be:3a:f9:a7:a7:4e:98:f8:56:17:11: 37:54:22:80:02:cf:8b:51:04:61:60:e6:96:46:f4: 14:41:6a:69:3b:1b:3d:1a:a5:e4:17:56:e3:ec:3b: 47:72:76:b1:20:e4:84:bf:7c:10:09:65:e1:3c:c0: 7a:99:dd:79:ec:4d:73:cd:59:ce:d1:c7:81:0a:f9: 77:a2:c1:b3:be:4c:92:f4:6c:1a:05:ac:88:ab:84: 4f:02:02:7f:a5:c6:65:3d:4b:6f:d0:07:ab:67:11: a8:04:2a:25:ea:8c:e7:91:0a:ac:fa:2f:58:7e:d6: e6:78:e8:89:dc:45:5a:2c:ac:d7:b4:5d:be:12:f5: ba:80:3a:2f:84:86:79:a7:8e:04:8f:c8:08:ac:66: 74:2c:32:4c:fa:f5:b1:50:af:8b:e8:e6:99:b4:32: 00:ae:a8:72:fa:bb:40:7a:2c:9e:1b:e3:90:f7:1f: ed:65:fe:28:26:bc:a5:1a:c1:ee:0c:db:78:53:f7: d6:c8:1d:09:1c:0f:d0:84:3a:5f:4e:8a:37:46:74: aa:43:4f:ca:06:63:d0:e5:62:0b:51:48:a9:fd:77: 04:e7:e8:12:6f:06:3a:43:4b:14:21:9a:66:24:2b: 55:c5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 70:BF:36:95:3A:FE:F7:F6:BD:66:DA:E0:40:B2:1E:13:46:3F:B2:70 X509v3 Authority Key Identifier: keyid:30:E2:B4:61:7B:8B:9C:FC:4F:C5:7B:1C:5A:4D:74:FC:7E:91:2D:45 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/429f8902-1a06-45a8-a998-72e46aaae8fc/0/30E2B4617B8B9CFC4FC57B1C5A4D74FC7E912D45.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/30E2B4617B8B9CFC4FC57B1C5A4D74FC7E912D45.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/429f8902-1a06-45a8-a998-72e46aaae8fc/0/30E2B4617B8B9CFC4FC57B1C5A4D74FC7E912D45.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 94:39:46:68:64:e8:db:51:18:f2:52:bc:88:78:7e:27:12:73: 2d:19:bb:a5:f9:40:b0:aa:5f:e5:3d:b6:bc:79:36:5c:db:e4: a6:61:7b:bc:c8:5b:a0:9e:b2:9c:d4:7f:23:29:ca:c2:67:b7: 00:cc:e6:24:16:9c:cb:09:7a:97:21:7b:da:f2:1a:22:ce:d1: cd:db:ad:47:f4:23:40:96:fe:b9:89:9a:c4:6d:e9:cb:16:b6: c9:a2:57:e0:0b:96:b0:82:82:10:8b:17:72:06:2b:73:e2:4e: 51:cd:f3:45:85:dd:e6:de:0e:fe:b7:5e:41:00:4a:ef:57:2d: 38:fd:c5:c4:3f:49:48:9b:be:07:fa:89:60:22:8a:e1:d4:54: 0b:02:a6:4d:22:30:ad:dd:c3:a0:94:27:f2:5e:71:ed:0f:86: 17:85:bc:ee:67:b1:d0:de:8a:83:d8:d1:d3:42:97:ef:84:0e: 16:e2:ef:6a:98:dc:52:41:93:3c:cd:b8:82:8c:71:31:1f:8c: 9e:3d:11:ae:51:16:cd:7f:79:ac:08:66:db:a2:4b:05:40:b1: 48:0e:6f:dd:83:c2:04:6a:06:db:ab:f6:89:c1:bd:5e:28:c9: f0:5f:92:82:6c:0d:cc:96:27:b8:28:1a:6c:16:94:71:b5:ea: e2:00:8a:4c -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUFeH0ptYGae9E7tPXWy37vVcaZdkwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMzBFMkI0NjE3QjhCOUNGQzRGQzU3QjFDNUE0RDc0RkM3 RTkxMkQ0NTAeFw0yNjAxMzEwOTM2MTRaFw0yNjAyMDMxMzU2MTRaMDMxMTAvBgNV BAMTKDcwQkYzNjk1M0FGRUY3RjZCRDY2REFFMDQwQjIxRTEzNDYzRkIyNzAwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCmUeylGc/5lCd+fZP+zMmc7w++ Ovmnp06Y+FYXETdUIoACz4tRBGFg5pZG9BRBamk7Gz0apeQXVuPsO0dydrEg5IS/ fBAJZeE8wHqZ3XnsTXPNWc7Rx4EK+XeiwbO+TJL0bBoFrIirhE8CAn+lxmU9S2/Q B6tnEagEKiXqjOeRCqz6L1h+1uZ46IncRVosrNe0Xb4S9bqAOi+EhnmnjgSPyAis ZnQsMkz69bFQr4vo5pm0MgCuqHL6u0B6LJ4b45D3H+1l/igmvKUawe4M23hT99bI HQkcD9CEOl9OijdGdKpDT8oGY9DlYgtRSKn9dwTn6BJvBjpDSxQhmmYkK1XFAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUcL82lTr+9/a9ZtrgQLIeE0Y/snAwHwYDVR0j BBgwFoAUMOK0YXuLnPxPxXscWk10/H6RLUUwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby80 MjlmODkwMi0xYTA2LTQ1YTgtYTk5OC03MmU0NmFhYWU4ZmMvMC8zMEUyQjQ2MTdC OEI5Q0ZDNEZDNTdCMUM1QTRENzRGQzdFOTEyRDQ1LmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvMzBFMkI0NjE3QjhCOUNGQzRGQzU3QjFDNUE0RDc0RkM3RTkx MkQ0NS5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vNDI5Zjg5MDItMWEwNi00NWE4LWE5 OTgtNzJlNDZhYWFlOGZjLzAvMzBFMkI0NjE3QjhCOUNGQzRGQzU3QjFDNUE0RDc0 RkM3RTkxMkQ0NS5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAJQ5Rmhk6NtRGPJSvIh4ficScy0Zu6X5QLCq X+U9trx5Nlzb5KZhe7zIW6CespzUfyMpysJntwDM5iQWnMsJepche9ryGiLO0c3b rUf0I0CW/rmJmsRt6csWtsmiV+ALlrCCghCLF3IGK3PiTlHN80WF3ebeDv63XkEA Su9XLTj9xcQ/SUibvgf6iWAiiuHUVAsCpk0iMK3dw6CUJ/Jece0PhheFvO5nsdDe ioPY0dNCl++EDhbi72qY3FJBkzzNuIKMcTEfjJ49Ea5RFs1/eawIZtuiSwVAsUgO b92DwgRqBtur9onBvV4oyfBfkoJsDcyWJ7goGmwWlHG16uIAikw= -----END CERTIFICATE-----Generated at Mon Feb 2 10:05:15 2026 by rpki-client