This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf repo-rpki.idnic.net/repo/6d75088e-49af-472b-9b62-81e73daaf1d6/0/B30FDBDE70FBE70CC44F3C710B467069B1194DD8.mft File: B30FDBDE70FBE70CC44F3C710B467069B1194DD8.mft (raw, json) Hash identifier: bUVdUwOLdnv14a3MT6FGlmDCqS0mrrU86HZqRZHCwvA= Subject key identifier: 7E:25:53:4C:FD:83:42:61:53:1D:C5:7C:E1:3E:35:4A:DB:6A:C6:11 Authority key identifier: B3:0F:DB:DE:70:FB:E7:0C:C4:4F:3C:71:0B:46:70:69:B1:19:4D:D8 Certificate issuer: /CN=B30FDBDE70FBE70CC44F3C710B467069B1194DD8 Certificate serial: 7E3D395EE13B6E098B0063DFA21655CA287072AE Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/B30FDBDE70FBE70CC44F3C710B467069B1194DD8.cer Subject info access: rsync://repo-rpki.idnic.net/repo/6d75088e-49af-472b-9b62-81e73daaf1d6/0/B30FDBDE70FBE70CC44F3C710B467069B1194DD8.mft Manifest number: 018F Signing time: Tue 02 Dec 2025 06:31:11 +0000 Manifest this update: Tue 02 Dec 2025 06:26:11 +0000 Manifest next update: Fri 05 Dec 2025 13:40:11 +0000 Files and hashes: 1: B30FDBDE70FBE70CC44F3C710B467069B1194DD8.crl (hash: IaDhHXZTqZ9vAclltIAyEpWN6TGrsb4qzAwfBUGyVKs=) 2: 3130332e3232372e3138352e302f32342d3234203d3e20313531303132.roa (hash: 5p8DeVWE4ixdVzTUD+2z3ALmeQQXrFM+ymQAz8yvg9Q=) 3: 3130332e3232372e3138342e302f32342d3234203d3e20313531303132.roa (hash: HxY+qbSnnto1Z4HzXSATggf6s2/jsThuJ9IKEWbevzQ=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/6d75088e-49af-472b-9b62-81e73daaf1d6/0/B30FDBDE70FBE70CC44F3C710B467069B1194DD8.crl rsync://repo-rpki.idnic.net/repo/6d75088e-49af-472b-9b62-81e73daaf1d6/0/B30FDBDE70FBE70CC44F3C710B467069B1194DD8.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/B30FDBDE70FBE70CC44F3C710B467069B1194DD8.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 05 Dec 2025 13:40:11 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 7e:3d:39:5e:e1:3b:6e:09:8b:00:63:df:a2:16:55:ca:28:70:72:ae Signature Algorithm: sha256WithRSAEncryption Issuer: CN=B30FDBDE70FBE70CC44F3C710B467069B1194DD8 Validity Not Before: Dec 2 06:26:11 2025 GMT Not After : Dec 5 13:40:11 2025 GMT Subject: CN=7E25534CFD834261531DC57CE13E354ADB6AC611 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b1:ff:2a:fd:33:c7:8c:50:70:3d:e6:cd:ed:7c: 7a:98:d2:e1:7c:d4:8a:e0:c8:c8:2e:03:55:06:a0: 9a:4f:e7:70:9f:51:8d:7f:f3:d7:e2:44:ef:09:31: ee:04:03:3c:7f:4e:32:2b:08:35:ad:b0:31:25:0d: 1f:68:a1:a2:14:e2:a4:b6:ae:e4:a1:b7:4b:74:a6: b9:6a:07:7a:c7:91:a5:67:ab:48:f0:81:4c:71:b9: c5:78:ce:96:39:bb:18:52:8c:87:7c:ff:e4:48:f2: 51:e6:23:c0:b0:5e:ea:8a:2c:50:6c:22:8e:d9:f2: 17:fd:ff:4f:81:a7:2f:02:d5:df:3d:10:f7:b3:35: 9b:b6:92:d4:fb:94:63:53:7a:8c:11:6b:9c:64:0e: b5:28:76:7d:7d:9d:60:92:a8:d6:91:c9:a4:7d:c0: bc:b3:32:77:74:ad:e9:aa:b5:9c:1c:d9:54:d8:95: 92:71:d4:b4:cd:bd:6b:85:4f:18:45:4d:fd:89:9d: a3:a6:cb:ec:c5:52:56:8c:be:b1:d4:a7:17:6c:17: 25:d3:81:ca:43:23:ab:8e:14:33:b8:76:b4:83:47: 9f:c8:b2:88:80:73:57:b2:88:77:0c:09:25:84:64: 4d:28:79:b6:c1:83:ea:cc:27:61:0d:57:26:f1:5b: 05:59 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 7E:25:53:4C:FD:83:42:61:53:1D:C5:7C:E1:3E:35:4A:DB:6A:C6:11 X509v3 Authority Key Identifier: keyid:B3:0F:DB:DE:70:FB:E7:0C:C4:4F:3C:71:0B:46:70:69:B1:19:4D:D8 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/6d75088e-49af-472b-9b62-81e73daaf1d6/0/B30FDBDE70FBE70CC44F3C710B467069B1194DD8.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/B30FDBDE70FBE70CC44F3C710B467069B1194DD8.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/6d75088e-49af-472b-9b62-81e73daaf1d6/0/B30FDBDE70FBE70CC44F3C710B467069B1194DD8.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 3e:14:d1:d0:d0:2e:d4:f3:9a:87:49:45:1e:36:2a:3d:23:24: 4a:c2:88:9c:50:4d:9e:3e:78:49:45:95:3a:63:16:5a:09:c5: 1b:85:9c:9b:75:9c:61:98:69:f5:e5:f1:77:92:fe:b5:cd:c0: 96:c4:c1:4b:7c:ab:49:69:3b:ee:7b:bb:24:f2:01:55:36:4a: d6:9b:69:4f:e5:1a:3c:c5:4b:fa:d4:76:ab:80:18:80:57:58: 9e:af:57:27:22:53:f0:d0:30:ee:94:0e:46:9e:46:a6:47:87: 90:3d:9c:ef:1e:eb:41:37:b9:ca:71:08:b1:93:6e:de:43:7b: 30:e6:4a:c5:a8:d5:e0:15:97:ee:6a:d8:16:79:c9:f7:5c:54: 5d:d7:42:09:ad:23:44:cb:7b:8e:b6:90:73:bc:eb:0f:c2:81: df:03:2e:46:82:28:ab:76:04:4f:1a:5e:31:5b:74:f0:d6:6e: 73:f7:b7:c9:3f:53:8e:5b:aa:d4:36:ff:99:75:0a:13:77:dd: 80:34:37:59:99:62:e5:e0:cb:18:e9:80:91:6e:cd:5b:d0:fa: b9:6f:48:67:5b:07:2e:e2:d2:44:e3:0e:00:55:0f:6f:e4:0f: af:34:ba:fe:1b:80:2a:8a:b6:8b:b0:0d:fb:e7:b3:87:a1:ca: c9:0f:83:ae -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUfj05XuE7bgmLAGPfohZVyihwcq4wDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoQjMwRkRCREU3MEZCRTcwQ0M0NEYzQzcxMEI0NjcwNjlC MTE5NEREODAeFw0yNTEyMDIwNjI2MTFaFw0yNTEyMDUxMzQwMTFaMDMxMTAvBgNV BAMTKDdFMjU1MzRDRkQ4MzQyNjE1MzFEQzU3Q0UxM0UzNTRBREI2QUM2MTEwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCx/yr9M8eMUHA95s3tfHqY0uF8 1IrgyMguA1UGoJpP53CfUY1/89fiRO8JMe4EAzx/TjIrCDWtsDElDR9ooaIU4qS2 ruSht0t0prlqB3rHkaVnq0jwgUxxucV4zpY5uxhSjId8/+RI8lHmI8CwXuqKLFBs Io7Z8hf9/0+Bpy8C1d89EPezNZu2ktT7lGNTeowRa5xkDrUodn19nWCSqNaRyaR9 wLyzMnd0remqtZwc2VTYlZJx1LTNvWuFTxhFTf2JnaOmy+zFUlaMvrHUpxdsFyXT gcpDI6uOFDO4drSDR5/IsoiAc1eyiHcMCSWEZE0oebbBg+rMJ2ENVybxWwVZAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUfiVTTP2DQmFTHcV84T41SttqxhEwHwYDVR0j BBgwFoAUsw/b3nD75wzETzxxC0ZwabEZTdgwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby82 ZDc1MDg4ZS00OWFmLTQ3MmItOWI2Mi04MWU3M2RhYWYxZDYvMC9CMzBGREJERTcw RkJFNzBDQzQ0RjNDNzEwQjQ2NzA2OUIxMTk0REQ4LmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvQjMwRkRCREU3MEZCRTcwQ0M0NEYzQzcxMEI0NjcwNjlCMTE5 NEREOC5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vNmQ3NTA4OGUtNDlhZi00NzJiLTli NjItODFlNzNkYWFmMWQ2LzAvQjMwRkRCREU3MEZCRTcwQ0M0NEYzQzcxMEI0Njcw NjlCMTE5NEREOC5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAD4U0dDQLtTzmodJRR42Kj0jJErCiJxQTZ4+ eElFlTpjFloJxRuFnJt1nGGYafXl8XeS/rXNwJbEwUt8q0lpO+57uyTyAVU2Stab aU/lGjzFS/rUdquAGIBXWJ6vVyciU/DQMO6UDkaeRqZHh5A9nO8e60E3ucpxCLGT bt5DezDmSsWo1eAVl+5q2BZ5yfdcVF3XQgmtI0TLe462kHO86w/Cgd8DLkaCKKt2 BE8aXjFbdPDWbnP3t8k/U45bqtQ2/5l1ChN33YA0N1mZYuXgyxjpgJFuzVvQ+rlv SGdbBy7i0kTjDgBVD2/kD680uv4bgCqKtouwDfvns4ehyskPg64= -----END CERTIFICATE-----Generated at Wed Dec 3 14:45:39 2025 by rpki-client