This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf repo-rpki.idnic.net/repo/4711c110-7ab1-4a39-b9ca-3a9b0e81bcf5/0/30FC12E903AE0EE87BD1A1E58A062C8026A0CE51.mft File: 30FC12E903AE0EE87BD1A1E58A062C8026A0CE51.mft (raw, json) Hash identifier: FZp53vF/Q2296Au1hOY2x5ZqMc0oy3q867nyMehc5S8= Subject key identifier: 31:1B:28:96:18:53:18:B9:31:B6:A3:95:75:1D:D0:B4:7D:CC:C1:C5 Authority key identifier: 30:FC:12:E9:03:AE:0E:E8:7B:D1:A1:E5:8A:06:2C:80:26:A0:CE:51 Certificate issuer: /CN=30FC12E903AE0EE87BD1A1E58A062C8026A0CE51 Certificate serial: 4D5BD098ECDBCE75A9D56FDA94360355D8E5726D Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/30FC12E903AE0EE87BD1A1E58A062C8026A0CE51.cer Subject info access: rsync://repo-rpki.idnic.net/repo/4711c110-7ab1-4a39-b9ca-3a9b0e81bcf5/0/30FC12E903AE0EE87BD1A1E58A062C8026A0CE51.mft Manifest number: 0403 Signing time: Mon 01 Dec 2025 16:31:48 +0000 Manifest this update: Mon 01 Dec 2025 16:26:48 +0000 Manifest next update: Thu 04 Dec 2025 23:29:48 +0000 Files and hashes: 1: 3130332e3130372e31382e302f32342d3234203d3e20313337323838.roa (hash: FCHx6FaRMarTOvIyDDJKyaewpvcQNtFaDUPbc3o5Lx0=) 2: 30FC12E903AE0EE87BD1A1E58A062C8026A0CE51.crl (hash: G7mbJ0HdzwIZsbKF0VA3NOMCJspg8zxgxsVWNBPUK4c=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/4711c110-7ab1-4a39-b9ca-3a9b0e81bcf5/0/30FC12E903AE0EE87BD1A1E58A062C8026A0CE51.crl rsync://repo-rpki.idnic.net/repo/4711c110-7ab1-4a39-b9ca-3a9b0e81bcf5/0/30FC12E903AE0EE87BD1A1E58A062C8026A0CE51.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/30FC12E903AE0EE87BD1A1E58A062C8026A0CE51.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 04 Dec 2025 23:29:48 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 4d:5b:d0:98:ec:db:ce:75:a9:d5:6f:da:94:36:03:55:d8:e5:72:6d Signature Algorithm: sha256WithRSAEncryption Issuer: CN=30FC12E903AE0EE87BD1A1E58A062C8026A0CE51 Validity Not Before: Dec 1 16:26:48 2025 GMT Not After : Dec 4 23:29:48 2025 GMT Subject: CN=311B2896185318B931B6A395751DD0B47DCCC1C5 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b1:d5:c8:bc:ff:a7:6b:dd:93:66:03:25:13:c8: 5e:bc:77:29:5f:58:95:40:ca:75:68:f8:36:c1:01: 5d:95:18:aa:99:9a:16:b7:b1:3f:5d:7f:ca:20:4e: e5:21:98:a5:88:de:49:c4:4a:ac:25:70:1f:99:e0: dc:10:70:5e:80:d7:80:dd:2f:a0:25:7d:87:28:1a: cc:e0:75:01:4f:48:88:27:9b:6f:5e:c4:28:01:51: e4:e1:c0:95:55:34:a8:b3:2e:75:ac:9d:7b:ce:77: 67:b3:d1:33:64:3d:df:3c:21:88:da:ac:71:8f:51: f4:d2:4b:00:d3:a2:a3:af:e4:a1:49:2c:87:ae:30: e4:1b:a4:fe:70:dc:3d:2f:c0:40:b7:19:a3:f0:57: 4d:e1:b6:92:7d:b7:88:d7:73:1d:a9:87:a3:ba:6b: e9:f5:86:11:f1:56:e2:1f:d0:80:f5:5d:e0:5a:8c: 01:24:8b:08:c3:ac:99:ff:00:30:e0:f2:5b:3f:1a: 61:dc:e4:db:5d:38:ed:29:8c:89:7c:d7:88:57:7d: 91:7d:d6:6b:bb:e0:52:f9:2c:a5:4c:e4:1d:38:69: ae:09:5b:79:e9:79:b8:0f:c3:08:94:9e:d4:d6:f4: 13:d5:30:dc:b3:fa:67:36:7a:45:4b:5f:31:5e:6c: 41:59 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 31:1B:28:96:18:53:18:B9:31:B6:A3:95:75:1D:D0:B4:7D:CC:C1:C5 X509v3 Authority Key Identifier: keyid:30:FC:12:E9:03:AE:0E:E8:7B:D1:A1:E5:8A:06:2C:80:26:A0:CE:51 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/4711c110-7ab1-4a39-b9ca-3a9b0e81bcf5/0/30FC12E903AE0EE87BD1A1E58A062C8026A0CE51.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/30FC12E903AE0EE87BD1A1E58A062C8026A0CE51.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/4711c110-7ab1-4a39-b9ca-3a9b0e81bcf5/0/30FC12E903AE0EE87BD1A1E58A062C8026A0CE51.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption ab:fc:fd:26:c5:b0:66:8e:2b:f5:7f:b0:50:a0:ca:6a:49:ab: d2:bb:bb:88:ee:06:7b:e6:dc:3f:3d:d4:c9:c8:62:42:6a:ca: 93:1a:36:64:b5:ba:a4:fa:7d:1c:9a:cc:19:71:b6:0e:33:38: e6:af:8e:6c:7a:20:19:74:de:9e:a1:df:8c:bc:23:f8:4f:6b: 0e:3e:44:a4:50:fc:ae:bc:9c:5f:f1:a7:cd:e8:bf:eb:94:f7: 61:35:2a:f6:a3:77:8f:7c:d9:7c:af:d2:b6:85:14:e7:de:d7: 1e:36:f6:4d:45:cb:ef:55:b4:20:ec:4b:fc:ef:8a:58:ca:3e: eb:0c:93:3b:99:6d:bf:15:44:cd:41:48:a5:41:fc:30:cb:9a: 83:30:8c:c5:88:e1:82:ea:69:73:4a:d1:a4:68:f4:d7:80:da: 2c:5d:34:3c:f8:1f:15:ed:d3:52:72:a9:2e:75:39:f0:8d:30: c9:1d:be:58:a3:0d:75:e6:09:d2:29:16:ea:6e:b7:8d:3d:ce: 42:79:31:e1:ac:e4:3a:33:26:90:06:72:34:b8:d6:d0:36:62: be:41:d0:cc:36:b8:4f:d3:2f:d9:a5:33:b9:ca:5d:bd:2e:28: 75:9a:ad:41:d1:b6:7f:d1:af:fc:03:ba:e5:5c:77:32:34:9e: 21:47:e5:4a -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUTVvQmOzbznWp1W/alDYDVdjlcm0wDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMzBGQzEyRTkwM0FFMEVFODdCRDFBMUU1OEEwNjJDODAy NkEwQ0U1MTAeFw0yNTEyMDExNjI2NDhaFw0yNTEyMDQyMzI5NDhaMDMxMTAvBgNV BAMTKDMxMUIyODk2MTg1MzE4QjkzMUI2QTM5NTc1MUREMEI0N0RDQ0MxQzUwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCx1ci8/6dr3ZNmAyUTyF68dylf WJVAynVo+DbBAV2VGKqZmha3sT9df8ogTuUhmKWI3knESqwlcB+Z4NwQcF6A14Dd L6AlfYcoGszgdQFPSIgnm29exCgBUeThwJVVNKizLnWsnXvOd2ez0TNkPd88IYja rHGPUfTSSwDToqOv5KFJLIeuMOQbpP5w3D0vwEC3GaPwV03htpJ9t4jXcx2ph6O6 a+n1hhHxVuIf0ID1XeBajAEkiwjDrJn/ADDg8ls/GmHc5NtdOO0pjIl814hXfZF9 1mu74FL5LKVM5B04aa4JW3npebgPwwiUntTW9BPVMNyz+mc2ekVLXzFebEFZAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUMRsolhhTGLkxtqOVdR3QtH3MwcUwHwYDVR0j BBgwFoAUMPwS6QOuDuh70aHligYsgCagzlEwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby80 NzExYzExMC03YWIxLTRhMzktYjljYS0zYTliMGU4MWJjZjUvMC8zMEZDMTJFOTAz QUUwRUU4N0JEMUExRTU4QTA2MkM4MDI2QTBDRTUxLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvMzBGQzEyRTkwM0FFMEVFODdCRDFBMUU1OEEwNjJDODAyNkEw Q0U1MS5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vNDcxMWMxMTAtN2FiMS00YTM5LWI5 Y2EtM2E5YjBlODFiY2Y1LzAvMzBGQzEyRTkwM0FFMEVFODdCRDFBMUU1OEEwNjJD ODAyNkEwQ0U1MS5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAKv8/SbFsGaOK/V/sFCgympJq9K7u4juBnvm 3D891MnIYkJqypMaNmS1uqT6fRyazBlxtg4zOOavjmx6IBl03p6h34y8I/hPaw4+ RKRQ/K68nF/xp83ov+uU92E1Kvajd4982Xyv0raFFOfe1x429k1Fy+9VtCDsS/zv iljKPusMkzuZbb8VRM1BSKVB/DDLmoMwjMWI4YLqaXNK0aRo9NeA2ixdNDz4HxXt 01JyqS51OfCNMMkdvlijDXXmCdIpFuput409zkJ5MeGs5DozJpAGcjS41tA2Yr5B 0Mw2uE/TL9mlM7nKXb0uKHWarUHRtn/Rr/wDuuVcdzI0niFH5Uo= -----END CERTIFICATE-----Generated at Wed Dec 3 15:48:45 2025 by rpki-client