This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf repo-rpki.idnic.net/repo/7e9e01ba-59c9-4047-ac0b-e9b2fe65853c/0/430E302040DE11D8C84431B3397113EC969694A0.mft File: 430E302040DE11D8C84431B3397113EC969694A0.mft (raw, json) Hash identifier: gu5vq+gySNs2TPhzrbLWRrJnffmFa42EBuijRa3BDzA= Subject key identifier: 8F:2C:F6:6F:1F:5A:A5:D5:D5:E9:57:5E:B7:97:1C:7C:C7:5D:96:F5 Authority key identifier: 43:0E:30:20:40:DE:11:D8:C8:44:31:B3:39:71:13:EC:96:96:94:A0 Certificate issuer: /CN=430E302040DE11D8C84431B3397113EC969694A0 Certificate serial: 694E5CCC04169D11ED04EF827C0BCF3CB7CEC3F6 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/430E302040DE11D8C84431B3397113EC969694A0.cer Subject info access: rsync://repo-rpki.idnic.net/repo/7e9e01ba-59c9-4047-ac0b-e9b2fe65853c/0/430E302040DE11D8C84431B3397113EC969694A0.mft Manifest number: 04C8 Signing time: Mon 01 Dec 2025 10:11:59 +0000 Manifest this update: Mon 01 Dec 2025 10:06:59 +0000 Manifest next update: Thu 04 Dec 2025 21:51:59 +0000 Files and hashes: 1: 430E302040DE11D8C84431B3397113EC969694A0.crl (hash: IvDYhzhi3dBhr2bhMHsLXIzCRnFE4ergSgf0s38iZrU=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/7e9e01ba-59c9-4047-ac0b-e9b2fe65853c/0/430E302040DE11D8C84431B3397113EC969694A0.crl rsync://repo-rpki.idnic.net/repo/7e9e01ba-59c9-4047-ac0b-e9b2fe65853c/0/430E302040DE11D8C84431B3397113EC969694A0.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/430E302040DE11D8C84431B3397113EC969694A0.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 04 Dec 2025 21:51:59 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 69:4e:5c:cc:04:16:9d:11:ed:04:ef:82:7c:0b:cf:3c:b7:ce:c3:f6 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=430E302040DE11D8C84431B3397113EC969694A0 Validity Not Before: Dec 1 10:06:59 2025 GMT Not After : Dec 4 21:51:59 2025 GMT Subject: CN=8F2CF66F1F5AA5D5D5E9575EB7971C7CC75D96F5 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:be:12:57:46:ab:74:4e:32:92:7f:02:7d:7b:65: 26:6d:32:6b:05:60:ab:23:b5:2b:78:b0:5e:03:af: 5e:5a:9a:ac:c5:0d:dd:b3:7c:c4:4c:d7:26:cd:91: 7f:c2:18:1e:aa:a7:c1:24:4f:c4:0b:f8:a3:5d:e3: 4b:5f:1b:e2:d1:9b:6a:95:b6:3b:62:ba:3f:a3:93: c9:6d:cd:e9:37:80:95:56:8f:d8:ff:61:78:70:9a: 06:54:a8:8b:50:d8:cc:35:01:8b:0d:4c:ad:80:64: f3:ac:29:a0:3c:c6:de:c0:41:55:fa:ee:d1:52:2f: 2a:18:68:4a:57:5d:24:80:2f:cf:d2:3d:6f:9d:56: 78:b2:bd:3e:6c:c0:0d:a0:ee:c7:59:b4:ba:0f:3d: bc:0e:d8:6f:ba:24:dc:36:29:cc:99:a1:2d:8f:91: de:80:1b:ee:4b:40:ce:6b:6a:52:a8:3a:8e:95:dc: 27:1b:eb:9e:a1:c3:8d:8a:7f:ac:68:35:2b:b4:54: 9e:65:1d:a2:20:36:9c:1c:4c:01:b0:1e:56:47:06: 25:ec:f4:a6:65:62:43:e2:03:c7:d4:34:87:17:ed: 4e:f2:e4:4c:71:bb:7a:84:40:10:38:ad:5f:e0:0e: 88:4a:95:08:2e:14:ce:73:29:0e:79:69:31:c1:5a: 18:c7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 8F:2C:F6:6F:1F:5A:A5:D5:D5:E9:57:5E:B7:97:1C:7C:C7:5D:96:F5 X509v3 Authority Key Identifier: keyid:43:0E:30:20:40:DE:11:D8:C8:44:31:B3:39:71:13:EC:96:96:94:A0 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/7e9e01ba-59c9-4047-ac0b-e9b2fe65853c/0/430E302040DE11D8C84431B3397113EC969694A0.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/430E302040DE11D8C84431B3397113EC969694A0.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/7e9e01ba-59c9-4047-ac0b-e9b2fe65853c/0/430E302040DE11D8C84431B3397113EC969694A0.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 4c:75:70:bd:ac:7f:aa:56:d6:6a:e9:df:57:d4:08:f7:3b:af: 7e:54:80:a5:72:7e:46:9e:b4:04:f4:1a:b7:35:ad:e5:e7:3b: 29:2c:e3:bd:90:e9:60:65:dd:86:8b:71:99:8a:6a:b1:73:a8: b3:70:4f:1f:11:b8:46:ec:cc:0f:ea:cf:6b:5c:fd:29:c4:c2: 3f:56:58:98:3b:5f:3d:72:b9:bd:de:34:8d:a3:99:40:c5:c5: f9:69:eb:f1:1b:af:28:49:02:7a:7a:a5:16:77:19:8f:53:ed: 2d:6f:fd:e1:24:a5:65:61:ed:58:09:8a:aa:05:37:e9:83:77: 52:02:ca:1e:13:9b:0a:b5:40:52:0f:b9:2e:a0:cc:b4:cd:51: 26:98:e9:7c:4d:11:3d:90:45:56:da:37:9f:36:7c:9c:c4:50: e0:7e:cf:53:0e:b0:91:71:12:28:83:33:4f:7b:d0:c0:44:d9: 07:ec:98:39:f6:3d:70:ef:a0:33:1e:d4:ea:64:45:5d:f5:0d: 42:7e:41:81:8b:0f:5a:11:6c:3c:a8:cf:50:3e:cc:3c:d9:a3: 83:8a:44:65:0d:5a:c8:d9:31:63:ae:1a:e7:32:14:f0:7b:9c: 74:70:97:06:b4:6e:f2:58:ba:97:12:fc:a8:ac:4f:02:98:87: 12:be:9f:bb -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUaU5czAQWnRHtBO+CfAvPPLfOw/YwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoNDMwRTMwMjA0MERFMTFEOEM4NDQzMUIzMzk3MTEzRUM5 Njk2OTRBMDAeFw0yNTEyMDExMDA2NTlaFw0yNTEyMDQyMTUxNTlaMDMxMTAvBgNV BAMTKDhGMkNGNjZGMUY1QUE1RDVENUU5NTc1RUI3OTcxQzdDQzc1RDk2RjUwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC+EldGq3ROMpJ/An17ZSZtMmsF YKsjtSt4sF4Dr15amqzFDd2zfMRM1ybNkX/CGB6qp8EkT8QL+KNd40tfG+LRm2qV tjtiuj+jk8ltzek3gJVWj9j/YXhwmgZUqItQ2Mw1AYsNTK2AZPOsKaA8xt7AQVX6 7tFSLyoYaEpXXSSAL8/SPW+dVniyvT5swA2g7sdZtLoPPbwO2G+6JNw2KcyZoS2P kd6AG+5LQM5ralKoOo6V3Ccb656hw42Kf6xoNSu0VJ5lHaIgNpwcTAGwHlZHBiXs 9KZlYkPiA8fUNIcX7U7y5Exxu3qEQBA4rV/gDohKlQguFM5zKQ55aTHBWhjHAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUjyz2bx9apdXV6Vdet5ccfMddlvUwHwYDVR0j BBgwFoAUQw4wIEDeEdjIRDGzOXET7JaWlKAwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby83 ZTllMDFiYS01OWM5LTQwNDctYWMwYi1lOWIyZmU2NTg1M2MvMC80MzBFMzAyMDQw REUxMUQ4Qzg0NDMxQjMzOTcxMTNFQzk2OTY5NEEwLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvNDMwRTMwMjA0MERFMTFEOEM4NDQzMUIzMzk3MTEzRUM5Njk2 OTRBMC5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vN2U5ZTAxYmEtNTljOS00MDQ3LWFj MGItZTliMmZlNjU4NTNjLzAvNDMwRTMwMjA0MERFMTFEOEM4NDQzMUIzMzk3MTEz RUM5Njk2OTRBMC5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAEx1cL2sf6pW1mrp31fUCPc7r35UgKVyfkae tAT0Grc1reXnOyks472Q6WBl3YaLcZmKarFzqLNwTx8RuEbszA/qz2tc/SnEwj9W WJg7Xz1yub3eNI2jmUDFxflp6/EbryhJAnp6pRZ3GY9T7S1v/eEkpWVh7VgJiqoF N+mDd1ICyh4Tmwq1QFIPuS6gzLTNUSaY6XxNET2QRVbaN582fJzEUOB+z1MOsJFx EiiDM0970MBE2QfsmDn2PXDvoDMe1OpkRV31DUJ+QYGLD1oRbDyoz1A+zDzZo4OK RGUNWsjZMWOuGucyFPB7nHRwlwa0bvJYupcS/KisTwKYhxK+n7s= -----END CERTIFICATE-----Generated at Wed Dec 3 13:56:31 2025 by rpki-client