This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf repo-rpki.idnic.net/repo/429f8902-1a06-45a8-a998-72e46aaae8fc/0/30E2B4617B8B9CFC4FC57B1C5A4D74FC7E912D45.mft File: 30E2B4617B8B9CFC4FC57B1C5A4D74FC7E912D45.mft (raw, json) Hash identifier: izCkkWh3u4MJ7xEq2JxJTsdqP7Te9IoMoHonbtOi6c4= Subject key identifier: A3:9E:2C:0B:DB:C7:73:88:97:8D:CF:EB:93:F9:8A:21:34:EC:CC:F4 Authority key identifier: 30:E2:B4:61:7B:8B:9C:FC:4F:C5:7B:1C:5A:4D:74:FC:7E:91:2D:45 Certificate issuer: /CN=30E2B4617B8B9CFC4FC57B1C5A4D74FC7E912D45 Certificate serial: 446BC76F2E89B237B0B3EDAF5983E2655B6A2433 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/30E2B4617B8B9CFC4FC57B1C5A4D74FC7E912D45.cer Subject info access: rsync://repo-rpki.idnic.net/repo/429f8902-1a06-45a8-a998-72e46aaae8fc/0/30E2B4617B8B9CFC4FC57B1C5A4D74FC7E912D45.mft Manifest number: 01FD Signing time: Mon 01 Dec 2025 17:01:16 +0000 Manifest this update: Mon 01 Dec 2025 16:56:16 +0000 Manifest next update: Thu 04 Dec 2025 22:28:16 +0000 Files and hashes: 1: 3130332e3136362e3235342e302f32342d3234203d3e20313431393636.roa (hash: Udg26cCHQ+Qftm36Kch+i7dbSWtv7odm32FXa+73LYY=) 2: 30E2B4617B8B9CFC4FC57B1C5A4D74FC7E912D45.crl (hash: z33aiUojbDY5fMseBX1aMz4E9fKqpbQI6ngMrV+5UKo=) 3: 3130332e3136362e3235352e302f32342d3234203d3e20313431393636.roa (hash: xce0AmVhdIuoA0s5G07BTYqxfWM/i2bbCDllzfV1P80=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/429f8902-1a06-45a8-a998-72e46aaae8fc/0/30E2B4617B8B9CFC4FC57B1C5A4D74FC7E912D45.crl rsync://repo-rpki.idnic.net/repo/429f8902-1a06-45a8-a998-72e46aaae8fc/0/30E2B4617B8B9CFC4FC57B1C5A4D74FC7E912D45.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/30E2B4617B8B9CFC4FC57B1C5A4D74FC7E912D45.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 04 Dec 2025 22:28:16 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 44:6b:c7:6f:2e:89:b2:37:b0:b3:ed:af:59:83:e2:65:5b:6a:24:33 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=30E2B4617B8B9CFC4FC57B1C5A4D74FC7E912D45 Validity Not Before: Dec 1 16:56:16 2025 GMT Not After : Dec 4 22:28:16 2025 GMT Subject: CN=A39E2C0BDBC77388978DCFEB93F98A2134ECCCF4 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ae:eb:e7:6a:48:87:e7:22:38:13:9f:e1:8f:8f: 32:3c:fc:30:7e:1a:ee:5d:f4:85:0a:1d:58:bf:11: 97:47:e7:fe:e2:fb:94:a3:a7:e5:1b:44:b2:d7:0e: 2d:5c:5b:79:ae:1c:26:27:a8:0f:c8:c7:e9:c2:50: f0:a3:0b:bf:44:64:8a:da:5e:a2:95:42:96:a3:11: 70:ed:7a:33:f7:a7:0d:4d:13:dd:a7:56:5a:b8:89: b0:e0:c8:0f:eb:cb:97:90:c2:8d:40:af:4b:14:07: 9a:56:99:f4:b1:6a:e5:41:06:ab:79:3c:2e:3d:b3: eb:f9:0c:9e:70:ea:4f:d9:c6:9e:0b:25:f2:5c:79: d1:a7:13:54:91:f1:6e:db:dc:ea:c9:d4:b6:64:93: ad:74:f2:b9:e3:82:d4:4b:96:91:e1:8d:99:46:74: 04:0a:7a:49:78:b0:e8:b5:ec:99:d3:14:83:6b:7d: c3:c3:ba:ef:3f:74:f3:55:7d:6c:0c:c2:88:cb:88: 65:da:c9:da:9d:35:50:6c:78:1f:ff:20:de:6f:42: 90:a8:49:a0:e0:ee:14:fc:6e:68:54:48:b6:1c:77: 4c:69:bf:0d:7a:b1:46:86:56:8e:5a:41:e5:da:49: aa:7d:58:49:e7:eb:59:c5:ee:26:3e:bd:f1:3a:11: 84:5f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: A3:9E:2C:0B:DB:C7:73:88:97:8D:CF:EB:93:F9:8A:21:34:EC:CC:F4 X509v3 Authority Key Identifier: keyid:30:E2:B4:61:7B:8B:9C:FC:4F:C5:7B:1C:5A:4D:74:FC:7E:91:2D:45 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/429f8902-1a06-45a8-a998-72e46aaae8fc/0/30E2B4617B8B9CFC4FC57B1C5A4D74FC7E912D45.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/30E2B4617B8B9CFC4FC57B1C5A4D74FC7E912D45.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/429f8902-1a06-45a8-a998-72e46aaae8fc/0/30E2B4617B8B9CFC4FC57B1C5A4D74FC7E912D45.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption c7:7b:b4:cf:dc:3e:3a:b8:93:ea:c9:61:2b:75:c8:57:45:55: 37:41:44:19:71:15:4b:6c:3a:3a:9d:bf:ef:ba:03:6e:53:ec: 50:79:d2:86:3c:3f:87:96:ba:ad:d6:cd:cc:df:d3:65:f2:f6: a2:c3:4d:91:8a:40:a7:f0:45:f8:f2:ec:05:6d:77:14:a7:31: 14:87:a2:4d:e5:ac:01:4e:ad:72:74:b2:5e:32:05:ab:1f:51: a1:25:eb:18:45:1f:03:12:6f:9f:41:83:88:b6:23:f2:bc:ab: dc:5c:35:c5:2f:a1:29:41:eb:89:5c:e9:3f:9e:50:90:cd:0a: 67:dc:2c:1e:0f:50:90:d2:7e:f6:57:5d:c4:84:46:5b:7f:c7: e9:7a:d9:03:fc:44:25:ac:8b:33:9e:19:76:95:79:8a:c6:ff: 62:54:17:ab:8e:b8:86:fc:fe:b0:e6:78:a9:05:d2:ce:ed:e4: 93:f9:ef:29:af:aa:c6:88:8e:ee:2c:5a:4f:22:66:d7:8f:8e: 72:92:ed:59:8a:09:d1:10:38:d1:5f:fa:a8:2a:03:8a:58:21: d6:a5:da:cb:98:9d:88:87:45:a1:99:e4:68:d3:fd:7a:d2:3e: 82:f8:3d:b1:a0:c6:c3:e6:e1:30:45:f9:17:e3:31:13:26:e1: aa:c6:90:5d -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIURGvHby6Jsjews+2vWYPiZVtqJDMwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMzBFMkI0NjE3QjhCOUNGQzRGQzU3QjFDNUE0RDc0RkM3 RTkxMkQ0NTAeFw0yNTEyMDExNjU2MTZaFw0yNTEyMDQyMjI4MTZaMDMxMTAvBgNV BAMTKEEzOUUyQzBCREJDNzczODg5NzhEQ0ZFQjkzRjk4QTIxMzRFQ0NDRjQwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCu6+dqSIfnIjgTn+GPjzI8/DB+ Gu5d9IUKHVi/EZdH5/7i+5Sjp+UbRLLXDi1cW3muHCYnqA/Ix+nCUPCjC79EZIra XqKVQpajEXDtejP3pw1NE92nVlq4ibDgyA/ry5eQwo1Ar0sUB5pWmfSxauVBBqt5 PC49s+v5DJ5w6k/Zxp4LJfJcedGnE1SR8W7b3OrJ1LZkk6108rnjgtRLlpHhjZlG dAQKekl4sOi17JnTFINrfcPDuu8/dPNVfWwMwojLiGXaydqdNVBseB//IN5vQpCo SaDg7hT8bmhUSLYcd0xpvw16sUaGVo5aQeXaSap9WEnn61nF7iY+vfE6EYRfAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUo54sC9vHc4iXjc/rk/mKITTszPQwHwYDVR0j BBgwFoAUMOK0YXuLnPxPxXscWk10/H6RLUUwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby80 MjlmODkwMi0xYTA2LTQ1YTgtYTk5OC03MmU0NmFhYWU4ZmMvMC8zMEUyQjQ2MTdC OEI5Q0ZDNEZDNTdCMUM1QTRENzRGQzdFOTEyRDQ1LmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvMzBFMkI0NjE3QjhCOUNGQzRGQzU3QjFDNUE0RDc0RkM3RTkx MkQ0NS5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vNDI5Zjg5MDItMWEwNi00NWE4LWE5 OTgtNzJlNDZhYWFlOGZjLzAvMzBFMkI0NjE3QjhCOUNGQzRGQzU3QjFDNUE0RDc0 RkM3RTkxMkQ0NS5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAMd7tM/cPjq4k+rJYSt1yFdFVTdBRBlxFUts Ojqdv++6A25T7FB50oY8P4eWuq3Wzczf02Xy9qLDTZGKQKfwRfjy7AVtdxSnMRSH ok3lrAFOrXJ0sl4yBasfUaEl6xhFHwMSb59Bg4i2I/K8q9xcNcUvoSlB64lc6T+e UJDNCmfcLB4PUJDSfvZXXcSERlt/x+l62QP8RCWsizOeGXaVeYrG/2JUF6uOuIb8 /rDmeKkF0s7t5JP57ymvqsaIju4sWk8iZtePjnKS7VmKCdEQONFf+qgqA4pYIdal 2suYnYiHRaGZ5GjT/XrSPoL4PbGgxsPm4TBF+RfjMRMm4arGkF0= -----END CERTIFICATE-----Generated at Wed Dec 3 16:37:19 2025 by rpki-client