This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf repo-rpki.idnic.net/repo/7670ae76-9594-4980-b410-491a6319ff3a/0/30C896473FC5DE403F4651059F6BE1586BFAC473.mft File: 30C896473FC5DE403F4651059F6BE1586BFAC473.mft (raw, json) Hash identifier: u9cVPpWAW7HlYYARupZ1WRRcQR6KZYlF+SPn/u2gdxA= Subject key identifier: 45:64:8E:60:1C:91:12:C0:E3:67:B8:D9:C5:52:2B:F0:4C:4F:AD:52 Authority key identifier: 30:C8:96:47:3F:C5:DE:40:3F:46:51:05:9F:6B:E1:58:6B:FA:C4:73 Certificate issuer: /CN=30C896473FC5DE403F4651059F6BE1586BFAC473 Certificate serial: 17CE5C0972A4BC961A190B5A958953086913DCF4 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/30C896473FC5DE403F4651059F6BE1586BFAC473.cer Subject info access: rsync://repo-rpki.idnic.net/repo/7670ae76-9594-4980-b410-491a6319ff3a/0/30C896473FC5DE403F4651059F6BE1586BFAC473.mft Manifest number: D2 Signing time: Sun 07 Dec 2025 16:11:53 +0000 Manifest this update: Sun 07 Dec 2025 16:06:53 +0000 Manifest next update: Wed 10 Dec 2025 18:21:53 +0000 Files and hashes: 1: 3135372e36362e36372e302f32342d3234203d3e20313532373831.roa (hash: jM3o+qLgLitpWG9aIDTu7g7FqrNoiH7dHWh51KuZSvY=) 2: 3135372e36362e36362e302f32342d3234203d3e20313532373831.roa (hash: x/vtNdgftiP2gNHQRXmqF+bNIt+0K74KbEvvSueFvXY=) 3: 30C896473FC5DE403F4651059F6BE1586BFAC473.crl (hash: Lj5zlfxT44E38wrsndIBVlt2r49TpYUmpcmcnARegXk=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/7670ae76-9594-4980-b410-491a6319ff3a/0/30C896473FC5DE403F4651059F6BE1586BFAC473.crl rsync://repo-rpki.idnic.net/repo/7670ae76-9594-4980-b410-491a6319ff3a/0/30C896473FC5DE403F4651059F6BE1586BFAC473.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/30C896473FC5DE403F4651059F6BE1586BFAC473.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/60F8BE9C16625C424B269EE06C64A83BAB8506D4.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/60F8BE9C16625C424B269EE06C64A83BAB8506D4.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/YPi-nBZiXEJLJp7gbGSoO6uFBtQ.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 09 Dec 2025 06:55:17 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 17:ce:5c:09:72:a4:bc:96:1a:19:0b:5a:95:89:53:08:69:13:dc:f4 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=30C896473FC5DE403F4651059F6BE1586BFAC473 Validity Not Before: Dec 7 16:06:53 2025 GMT Not After : Dec 10 18:21:53 2025 GMT Subject: CN=45648E601C9112C0E367B8D9C5522BF04C4FAD52 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bd:7f:8f:7e:bf:4f:0e:63:c7:4d:71:6c:e1:b3: d1:0d:fe:b5:01:3a:69:a4:e4:76:a1:69:e4:6c:c4: c1:65:0b:08:10:89:ad:71:90:53:18:5a:21:a2:44: 76:a4:6f:42:0a:a6:b1:46:a8:d6:11:24:97:ea:4d: 66:33:10:7e:80:cb:49:f0:19:d6:a9:d0:f4:9a:82: 11:a1:18:1d:23:08:c6:a6:dc:ef:90:bc:38:da:ef: a1:97:37:e2:bf:00:9a:a9:23:bb:35:aa:43:22:21: 71:cb:24:49:e1:6f:fa:69:ca:f3:37:5b:91:bc:d4: 02:22:8d:35:b8:ee:94:1e:21:df:f8:6b:38:bd:ef: e8:6b:44:43:da:b7:df:fe:5b:66:dd:bd:d0:b5:14: 68:b9:a1:c7:9d:16:5b:97:c4:be:3c:f2:ea:83:80: cb:36:fe:07:e9:01:19:46:c7:ae:b2:95:be:aa:da: 54:3b:92:d6:28:26:71:48:56:ac:82:2d:f3:83:08: e5:29:d7:16:88:04:20:c0:13:56:dd:72:59:98:25: 25:02:cd:fe:01:b8:b1:0b:68:5a:fd:62:06:c6:11: 90:3c:be:fe:2a:40:f6:1d:47:23:f9:96:5b:71:fc: 13:37:cd:8d:ed:b5:9b:e5:86:ee:f4:55:82:84:69: e7:d5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 45:64:8E:60:1C:91:12:C0:E3:67:B8:D9:C5:52:2B:F0:4C:4F:AD:52 X509v3 Authority Key Identifier: keyid:30:C8:96:47:3F:C5:DE:40:3F:46:51:05:9F:6B:E1:58:6B:FA:C4:73 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/7670ae76-9594-4980-b410-491a6319ff3a/0/30C896473FC5DE403F4651059F6BE1586BFAC473.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/30C896473FC5DE403F4651059F6BE1586BFAC473.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/7670ae76-9594-4980-b410-491a6319ff3a/0/30C896473FC5DE403F4651059F6BE1586BFAC473.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 6b:db:bc:f6:2f:b2:ef:2b:03:a9:05:e2:8e:74:88:7a:b3:df: 35:cc:2e:c7:93:59:ef:53:16:63:be:2d:b1:25:e1:bd:ea:40: 00:a3:e7:41:5a:fc:db:01:56:6f:a7:d4:c7:74:1a:ad:d9:10: a2:9a:82:4b:ab:04:1c:27:97:c3:9b:9e:6f:6e:1b:fd:1c:c3: 1a:74:59:b8:cb:cd:c5:94:e3:f2:70:f1:ed:ce:b8:90:c8:6a: 3b:67:4c:b7:d8:0f:d9:9d:4d:fa:cf:86:9a:5b:84:1b:a0:8f: f8:f9:c1:99:c8:f2:2b:2f:dc:c7:56:09:ae:09:bc:c3:ce:1c: 38:de:d5:53:33:f0:c4:f4:41:1e:ac:78:9e:9c:4b:10:4b:4b: fa:45:57:13:86:2a:27:f8:3f:99:c8:85:78:d9:f8:ca:5e:33: 43:6b:db:a3:ab:7e:78:d2:fc:00:0f:c9:2a:3f:fe:81:f7:ca: 38:d5:38:69:76:f3:4b:45:88:c0:2c:d1:e9:8a:54:e5:59:f0: 7a:c2:f7:db:30:d7:76:76:f2:ab:49:30:44:8e:e9:f0:da:3f: 3e:7e:35:6f:04:fb:6f:e6:79:d6:07:67:bc:4e:c8:9c:9f:b0: 73:0c:05:1b:46:8c:89:5b:bb:87:92:3a:d2:23:8e:e6:e5:7f: 32:5a:54:c2 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUF85cCXKkvJYaGQtalYlTCGkT3PQwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMzBDODk2NDczRkM1REU0MDNGNDY1MTA1OUY2QkUxNTg2 QkZBQzQ3MzAeFw0yNTEyMDcxNjA2NTNaFw0yNTEyMTAxODIxNTNaMDMxMTAvBgNV BAMTKDQ1NjQ4RTYwMUM5MTEyQzBFMzY3QjhEOUM1NTIyQkYwNEM0RkFENTIwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC9f49+v08OY8dNcWzhs9EN/rUB Ommk5HahaeRsxMFlCwgQia1xkFMYWiGiRHakb0IKprFGqNYRJJfqTWYzEH6Ay0nw Gdap0PSaghGhGB0jCMam3O+QvDja76GXN+K/AJqpI7s1qkMiIXHLJEnhb/ppyvM3 W5G81AIijTW47pQeId/4azi97+hrREPat9/+W2bdvdC1FGi5ocedFluXxL488uqD gMs2/gfpARlGx66ylb6q2lQ7ktYoJnFIVqyCLfODCOUp1xaIBCDAE1bdclmYJSUC zf4BuLELaFr9YgbGEZA8vv4qQPYdRyP5lltx/BM3zY3ttZvlhu70VYKEaefVAgMB AAGjggI8MIICODAdBgNVHQ4EFgQURWSOYByREsDjZ7jZxVIr8ExPrVIwHwYDVR0j BBgwFoAUMMiWRz/F3kA/RlEFn2vhWGv6xHMwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby83 NjcwYWU3Ni05NTk0LTQ5ODAtYjQxMC00OTFhNjMxOWZmM2EvMC8zMEM4OTY0NzNG QzVERTQwM0Y0NjUxMDU5RjZCRTE1ODZCRkFDNDczLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzEvMzBDODk2NDczRkM1REU0MDNGNDY1MTA1OUY2QkUxNTg2QkZB QzQ3My5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vNzY3MGFlNzYtOTU5NC00OTgwLWI0 MTAtNDkxYTYzMTlmZjNhLzAvMzBDODk2NDczRkM1REU0MDNGNDY1MTA1OUY2QkUx NTg2QkZBQzQ3My5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAGvbvPYvsu8rA6kF4o50iHqz3zXMLseTWe9T FmO+LbEl4b3qQACj50Fa/NsBVm+n1Md0Gq3ZEKKagkurBBwnl8Obnm9uG/0cwxp0 WbjLzcWU4/Jw8e3OuJDIajtnTLfYD9mdTfrPhppbhBugj/j5wZnI8isv3MdWCa4J vMPOHDje1VMz8MT0QR6seJ6cSxBLS/pFVxOGKif4P5nIhXjZ+MpeM0Nr26OrfnjS /AAPySo//oH3yjjVOGl280tFiMAs0emKVOVZ8HrC99sw13Z28qtJMESO6fDaPz5+ NW8E+2/medYHZ7xOyJyfsHMMBRtGjIlbu4eSOtIjjublfzJaVMI= -----END CERTIFICATE-----Generated at Sun Dec 7 18:55:12 2025 by rpki-client