This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf repo-rpki.idnic.net/repo/7670ae76-9594-4980-b410-491a6319ff3a/0/30C896473FC5DE403F4651059F6BE1586BFAC473.mft File: 30C896473FC5DE403F4651059F6BE1586BFAC473.mft (raw, json) Hash identifier: jZ6eLyXUw4ZSuYu46I0MKn9CdfmMwM1evJ5SFmTmclw= Subject key identifier: 07:78:74:B9:B4:22:97:A9:9F:FB:93:47:66:74:7B:30:C5:55:75:9A Authority key identifier: 30:C8:96:47:3F:C5:DE:40:3F:46:51:05:9F:6B:E1:58:6B:FA:C4:73 Certificate issuer: /CN=30C896473FC5DE403F4651059F6BE1586BFAC473 Certificate serial: 0853713DCB8600697F1C3E3F4CA13253FB88E177 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/30C896473FC5DE403F4651059F6BE1586BFAC473.cer Subject info access: rsync://repo-rpki.idnic.net/repo/7670ae76-9594-4980-b410-491a6319ff3a/0/30C896473FC5DE403F4651059F6BE1586BFAC473.mft Manifest number: D8 Signing time: Sat 20 Dec 2025 23:02:25 +0000 Manifest this update: Sat 20 Dec 2025 22:57:25 +0000 Manifest next update: Wed 24 Dec 2025 02:41:25 +0000 Files and hashes: 1: 3135372e36362e36362e302f32342d3234203d3e20313532373831.roa (hash: x/vtNdgftiP2gNHQRXmqF+bNIt+0K74KbEvvSueFvXY=) 2: 3135372e36362e36372e302f32342d3234203d3e20313532373831.roa (hash: jM3o+qLgLitpWG9aIDTu7g7FqrNoiH7dHWh51KuZSvY=) 3: 30C896473FC5DE403F4651059F6BE1586BFAC473.crl (hash: hCOBHL5PyIWfrmu714CSiALnm8qoaJ49ll9lMqqQwlg=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/7670ae76-9594-4980-b410-491a6319ff3a/0/30C896473FC5DE403F4651059F6BE1586BFAC473.crl rsync://repo-rpki.idnic.net/repo/7670ae76-9594-4980-b410-491a6319ff3a/0/30C896473FC5DE403F4651059F6BE1586BFAC473.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/30C896473FC5DE403F4651059F6BE1586BFAC473.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/60F8BE9C16625C424B269EE06C64A83BAB8506D4.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/60F8BE9C16625C424B269EE06C64A83BAB8506D4.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/YPi-nBZiXEJLJp7gbGSoO6uFBtQ.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 23 Dec 2025 15:37:53 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 08:53:71:3d:cb:86:00:69:7f:1c:3e:3f:4c:a1:32:53:fb:88:e1:77 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=30C896473FC5DE403F4651059F6BE1586BFAC473 Validity Not Before: Dec 20 22:57:25 2025 GMT Not After : Dec 24 02:41:25 2025 GMT Subject: CN=077874B9B42297A99FFB934766747B30C555759A Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a9:ce:30:d6:51:06:eb:4a:9e:fb:29:fe:0c:62: 9c:7c:c1:5e:e7:a3:96:a6:36:4c:d3:0c:78:f3:1e: d9:56:3e:c8:42:12:2a:e1:4f:21:b5:3a:64:f3:1c: 17:29:76:d1:84:ba:2e:f2:67:d1:48:fb:f5:dc:f9: 3d:b1:bd:6a:1f:6a:e8:8d:99:56:8d:a6:1c:09:ee: 7b:77:af:b8:ed:fa:72:e3:a2:48:4c:9f:aa:8e:75: 24:e0:aa:f0:fb:66:da:66:4d:4d:fd:9a:1e:a5:b3: 02:ff:d4:46:5f:1f:d8:65:07:35:11:80:2c:27:c8: 65:33:f4:05:67:c3:55:fb:3a:f4:f5:bc:60:ad:82: 26:64:c8:4d:fc:72:79:84:e8:17:17:f0:d7:90:59: 9e:9b:98:4d:92:a7:7f:3b:cd:f3:c9:d1:2b:1c:a8: 3a:b3:39:0f:50:1d:1e:fa:8f:e8:4d:25:0c:a0:39: 8d:e3:9d:c3:e2:53:ad:7d:c4:79:c7:d1:95:02:4a: 8a:cc:09:a5:ee:9c:34:5b:b1:2a:db:9c:0b:78:e7: 7d:54:b9:cc:e5:89:3d:4f:1c:ce:72:c8:8a:d8:63: 5a:fb:8c:bd:c4:86:61:17:71:50:b0:ad:7a:08:e1: c4:8c:49:98:5b:19:e2:c5:42:8c:89:cb:c5:f7:cd: 4e:63 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 07:78:74:B9:B4:22:97:A9:9F:FB:93:47:66:74:7B:30:C5:55:75:9A X509v3 Authority Key Identifier: keyid:30:C8:96:47:3F:C5:DE:40:3F:46:51:05:9F:6B:E1:58:6B:FA:C4:73 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/7670ae76-9594-4980-b410-491a6319ff3a/0/30C896473FC5DE403F4651059F6BE1586BFAC473.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/30C896473FC5DE403F4651059F6BE1586BFAC473.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/7670ae76-9594-4980-b410-491a6319ff3a/0/30C896473FC5DE403F4651059F6BE1586BFAC473.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 03:43:80:2e:51:df:66:22:b6:45:f4:a0:cc:dd:68:32:4a:a2: a4:65:a2:e1:1d:6e:09:33:14:58:ca:42:b9:be:12:28:be:ab: e4:b6:59:b9:54:b7:d0:3b:49:99:e9:d2:f5:ba:79:6b:e4:7e: da:80:2c:50:3e:da:2c:60:e2:1e:1e:6a:24:55:78:f6:cd:fd: d6:14:07:0d:25:88:29:f6:f7:81:9f:c0:7e:cb:7c:90:84:ba: f6:7c:b8:49:37:53:33:61:b3:f0:39:43:d7:df:c1:87:a9:2f: e6:f4:5c:f1:4e:bc:c2:39:0d:9b:f9:63:69:24:ed:d7:01:ca: 13:3c:d1:06:15:4a:f1:07:00:78:11:04:81:e0:82:48:5f:a5: 24:c4:06:bd:a2:e1:7a:bb:2a:12:20:b3:72:e4:18:06:80:1b: d7:4f:a2:44:cc:9f:b9:89:8f:8f:a7:3e:6a:c2:b3:58:3f:4b: fe:01:3e:f6:cc:67:e0:f4:16:9d:af:ea:dc:28:6b:64:1d:c1: 9f:06:83:ea:29:c7:e8:42:00:49:68:60:76:13:91:31:62:17: 2c:64:25:87:f8:93:5c:b3:e7:23:be:9c:33:91:0f:3c:bc:0b: 32:74:1f:f7:64:0f:53:19:87:9d:83:24:09:1b:59:e5:0e:9b: fe:2f:e0:d7 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUCFNxPcuGAGl/HD4/TKEyU/uI4XcwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMzBDODk2NDczRkM1REU0MDNGNDY1MTA1OUY2QkUxNTg2 QkZBQzQ3MzAeFw0yNTEyMjAyMjU3MjVaFw0yNTEyMjQwMjQxMjVaMDMxMTAvBgNV BAMTKDA3Nzg3NEI5QjQyMjk3QTk5RkZCOTM0NzY2NzQ3QjMwQzU1NTc1OUEwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCpzjDWUQbrSp77Kf4MYpx8wV7n o5amNkzTDHjzHtlWPshCEirhTyG1OmTzHBcpdtGEui7yZ9FI+/Xc+T2xvWofauiN mVaNphwJ7nt3r7jt+nLjokhMn6qOdSTgqvD7ZtpmTU39mh6lswL/1EZfH9hlBzUR gCwnyGUz9AVnw1X7OvT1vGCtgiZkyE38cnmE6BcX8NeQWZ6bmE2Sp387zfPJ0Ssc qDqzOQ9QHR76j+hNJQygOY3jncPiU619xHnH0ZUCSorMCaXunDRbsSrbnAt4531U uczliT1PHM5yyIrYY1r7jL3EhmEXcVCwrXoI4cSMSZhbGeLFQoyJy8X3zU5jAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUB3h0ubQil6mf+5NHZnR7MMVVdZowHwYDVR0j BBgwFoAUMMiWRz/F3kA/RlEFn2vhWGv6xHMwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby83 NjcwYWU3Ni05NTk0LTQ5ODAtYjQxMC00OTFhNjMxOWZmM2EvMC8zMEM4OTY0NzNG QzVERTQwM0Y0NjUxMDU5RjZCRTE1ODZCRkFDNDczLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzEvMzBDODk2NDczRkM1REU0MDNGNDY1MTA1OUY2QkUxNTg2QkZB QzQ3My5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vNzY3MGFlNzYtOTU5NC00OTgwLWI0 MTAtNDkxYTYzMTlmZjNhLzAvMzBDODk2NDczRkM1REU0MDNGNDY1MTA1OUY2QkUx NTg2QkZBQzQ3My5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAANDgC5R32YitkX0oMzdaDJKoqRlouEdbgkz FFjKQrm+Eii+q+S2WblUt9A7SZnp0vW6eWvkftqALFA+2ixg4h4eaiRVePbN/dYU Bw0liCn294GfwH7LfJCEuvZ8uEk3UzNhs/A5Q9ffwYepL+b0XPFOvMI5DZv5Y2kk 7dcByhM80QYVSvEHAHgRBIHggkhfpSTEBr2i4Xq7KhIgs3LkGAaAG9dPokTMn7mJ j4+nPmrCs1g/S/4BPvbMZ+D0Fp2v6twoa2QdwZ8Gg+opx+hCAEloYHYTkTFiFyxk JYf4k1yz5yO+nDORDzy8CzJ0H/dkD1MZh52DJAkbWeUOm/4v4Nc= -----END CERTIFICATE-----Generated at Mon Dec 22 20:50:09 2025 by rpki-client