This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf repo-rpki.idnic.net/repo/c03802e2-03af-4dd0-8dce-54c28a72563d/0/30CE8572EA9DEDA805151BBD165E699D1191FED0.mft File: 30CE8572EA9DEDA805151BBD165E699D1191FED0.mft (raw, json) Hash identifier: PAKmjmVTvj6BKIN+6XHACX2x7/03GbfUpEDRv6A9c4U= Subject key identifier: 4A:F3:7D:EC:40:73:BE:DB:84:93:FA:62:93:18:2C:7F:9A:4D:4A:99 Authority key identifier: 30:CE:85:72:EA:9D:ED:A8:05:15:1B:BD:16:5E:69:9D:11:91:FE:D0 Certificate issuer: /CN=30CE8572EA9DEDA805151BBD165E699D1191FED0 Certificate serial: 7BF07AB08B8BADB57CDF076BA97A1296B295BE35 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/30CE8572EA9DEDA805151BBD165E699D1191FED0.cer Subject info access: rsync://repo-rpki.idnic.net/repo/c03802e2-03af-4dd0-8dce-54c28a72563d/0/30CE8572EA9DEDA805151BBD165E699D1191FED0.mft Manifest number: 01A6 Signing time: Tue 02 Dec 2025 02:11:54 +0000 Manifest this update: Tue 02 Dec 2025 02:06:54 +0000 Manifest next update: Fri 05 Dec 2025 13:59:54 +0000 Files and hashes: 1: 3130332e3231312e3139362e302f32342d3234203d3e20313530393532.roa (hash: Q2j6s7F7V0sOCSPl3aHs6rPupunQzCX/dgkjx2YSfjU=) 2: 30CE8572EA9DEDA805151BBD165E699D1191FED0.crl (hash: o+7EANfI1+QHHdcWQQU7nLXwXFQ+qa6ngu4sdqS4egE=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/c03802e2-03af-4dd0-8dce-54c28a72563d/0/30CE8572EA9DEDA805151BBD165E699D1191FED0.crl rsync://repo-rpki.idnic.net/repo/c03802e2-03af-4dd0-8dce-54c28a72563d/0/30CE8572EA9DEDA805151BBD165E699D1191FED0.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/30CE8572EA9DEDA805151BBD165E699D1191FED0.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 05 Dec 2025 13:59:54 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 7b:f0:7a:b0:8b:8b:ad:b5:7c:df:07:6b:a9:7a:12:96:b2:95:be:35 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=30CE8572EA9DEDA805151BBD165E699D1191FED0 Validity Not Before: Dec 2 02:06:54 2025 GMT Not After : Dec 5 13:59:54 2025 GMT Subject: CN=4AF37DEC4073BEDB8493FA6293182C7F9A4D4A99 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a4:6d:99:92:c9:0c:cd:2f:46:5c:2f:9a:3d:fa: 6b:47:40:60:0a:78:45:71:7e:5f:8f:7c:a0:aa:cf: f7:21:74:b8:4e:b4:e7:dc:d2:5a:be:dd:d6:12:5b: f2:06:36:a5:95:e9:06:a9:4c:6e:b9:0c:b4:a4:3a: e3:51:ab:96:ea:4d:00:1c:0d:9c:34:0e:49:be:92: 63:36:58:a6:da:b2:1d:4a:74:a6:27:1d:a5:bc:4b: 85:cf:da:c6:69:0c:98:0c:5e:49:f3:be:99:62:e2: 20:a0:50:57:da:4e:24:f2:06:a2:57:cb:86:a3:08: fa:c1:73:0e:49:54:6c:be:06:d2:d8:b1:6e:61:8f: f3:e6:e6:45:0f:13:64:09:1e:c8:ab:21:3f:56:3d: b1:e9:8d:fb:7c:9c:5a:de:51:73:66:f6:82:49:f8: a6:ab:6f:95:20:95:86:aa:8a:78:02:e5:63:af:86: fe:36:dd:4f:09:d6:d5:ae:f8:e5:de:f3:ad:d6:b1: 6e:37:9d:2b:d2:17:a3:54:33:ff:b9:a1:67:4a:b5: 05:6e:76:32:a3:c3:3c:a3:d0:78:b9:c2:24:a8:da: 07:12:4a:ef:e8:55:82:88:e7:00:f6:29:69:40:ee: 16:85:3f:62:07:da:12:0b:fb:78:52:df:58:60:a2: 64:f9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 4A:F3:7D:EC:40:73:BE:DB:84:93:FA:62:93:18:2C:7F:9A:4D:4A:99 X509v3 Authority Key Identifier: keyid:30:CE:85:72:EA:9D:ED:A8:05:15:1B:BD:16:5E:69:9D:11:91:FE:D0 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/c03802e2-03af-4dd0-8dce-54c28a72563d/0/30CE8572EA9DEDA805151BBD165E699D1191FED0.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/30CE8572EA9DEDA805151BBD165E699D1191FED0.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/c03802e2-03af-4dd0-8dce-54c28a72563d/0/30CE8572EA9DEDA805151BBD165E699D1191FED0.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption b6:f8:c9:a5:ae:b9:fb:33:2d:b3:76:0b:5c:1e:d4:c5:7b:7f: 60:a4:d8:63:1e:60:57:5d:67:95:14:56:a9:67:70:a7:e2:5f: 7a:44:c4:46:01:28:27:42:51:68:19:1b:97:01:93:7c:e3:67: 48:96:54:00:bd:e0:5d:1d:c5:4d:88:50:33:87:98:56:22:cf: 77:50:4e:32:23:8e:14:ab:b3:76:c6:d3:7b:cc:32:82:bd:b6: 0f:bc:b1:8d:ee:66:f4:71:c4:20:ab:1f:c6:d1:99:9c:dc:e3: 6c:7f:94:1c:70:3e:b6:64:7a:47:d6:c8:51:3d:74:bd:d6:fc: 2d:13:f3:d0:1b:27:42:78:04:57:f8:d1:2d:a3:4e:fe:65:66: 83:fb:9f:ea:18:b2:37:38:99:28:39:78:f5:86:d0:f9:ba:6a: d9:cd:97:d9:e8:a8:fb:69:f1:95:3d:01:e0:0e:29:1a:d9:49: 49:62:cc:dc:c8:56:3a:0e:8b:77:27:8f:4b:e5:4e:33:61:72: 0e:7d:72:32:fc:d4:72:86:de:e9:57:74:ef:23:26:77:63:34: aa:45:75:dd:65:da:97:a8:a5:31:65:d2:f4:a4:0b:18:3c:d3: 78:7e:52:34:50:5e:6a:0a:86:b1:d1:82:7b:e4:df:85:04:d7: f4:07:d6:c0 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUe/B6sIuLrbV83wdrqXoSlrKVvjUwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMzBDRTg1NzJFQTlERURBODA1MTUxQkJEMTY1RTY5OUQx MTkxRkVEMDAeFw0yNTEyMDIwMjA2NTRaFw0yNTEyMDUxMzU5NTRaMDMxMTAvBgNV BAMTKDRBRjM3REVDNDA3M0JFREI4NDkzRkE2MjkzMTgyQzdGOUE0RDRBOTkwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCkbZmSyQzNL0ZcL5o9+mtHQGAK eEVxfl+PfKCqz/chdLhOtOfc0lq+3dYSW/IGNqWV6QapTG65DLSkOuNRq5bqTQAc DZw0Dkm+kmM2WKbash1KdKYnHaW8S4XP2sZpDJgMXknzvpli4iCgUFfaTiTyBqJX y4ajCPrBcw5JVGy+BtLYsW5hj/Pm5kUPE2QJHsirIT9WPbHpjft8nFreUXNm9oJJ +Karb5UglYaqingC5WOvhv423U8J1tWu+OXe863WsW43nSvSF6NUM/+5oWdKtQVu djKjwzyj0Hi5wiSo2gcSSu/oVYKI5wD2KWlA7haFP2IH2hIL+3hS31hgomT5AgMB AAGjggI8MIICODAdBgNVHQ4EFgQUSvN97EBzvtuEk/pikxgsf5pNSpkwHwYDVR0j BBgwFoAUMM6Fcuqd7agFFRu9Fl5pnRGR/tAwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby9j MDM4MDJlMi0wM2FmLTRkZDAtOGRjZS01NGMyOGE3MjU2M2QvMC8zMENFODU3MkVB OURFREE4MDUxNTFCQkQxNjVFNjk5RDExOTFGRUQwLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvMzBDRTg1NzJFQTlERURBODA1MTUxQkJEMTY1RTY5OUQxMTkx RkVEMC5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vYzAzODAyZTItMDNhZi00ZGQwLThk Y2UtNTRjMjhhNzI1NjNkLzAvMzBDRTg1NzJFQTlERURBODA1MTUxQkJEMTY1RTY5 OUQxMTkxRkVEMC5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBALb4yaWuufszLbN2C1we1MV7f2Ck2GMeYFdd Z5UUVqlncKfiX3pExEYBKCdCUWgZG5cBk3zjZ0iWVAC94F0dxU2IUDOHmFYiz3dQ TjIjjhSrs3bG03vMMoK9tg+8sY3uZvRxxCCrH8bRmZzc42x/lBxwPrZkekfWyFE9 dL3W/C0T89AbJ0J4BFf40S2jTv5lZoP7n+oYsjc4mSg5ePWG0Pm6atnNl9noqPtp 8ZU9AeAOKRrZSUlizNzIVjoOi3cnj0vlTjNhcg59cjL81HKG3ulXdO8jJndjNKpF dd1l2peopTFl0vSkCxg803h+UjRQXmoKhrHRgnvk34UE1/QH1sA= -----END CERTIFICATE-----Generated at Wed Dec 3 13:57:12 2025 by rpki-client