This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf repo-rpki.idnic.net/repo/d4f48a89-90c5-4f5a-8015-36f1196a71c8/0/F30F14F4AEB6630FF4E270B0729358AEBFA97733.mft File: F30F14F4AEB6630FF4E270B0729358AEBFA97733.mft (raw, json) Hash identifier: bBa1zGPNYla1i+ymFDie3OxHSMAXpH0ANyIhZcmX3e8= Subject key identifier: F9:8B:F0:26:BA:93:CD:C0:32:F4:D0:C0:B9:65:89:63:1E:FE:C1:87 Authority key identifier: F3:0F:14:F4:AE:B6:63:0F:F4:E2:70:B0:72:93:58:AE:BF:A9:77:33 Certificate issuer: /CN=F30F14F4AEB6630FF4E270B0729358AEBFA97733 Certificate serial: 0330237BB901318E197127577F9340B887ED088F Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/F30F14F4AEB6630FF4E270B0729358AEBFA97733.cer Subject info access: rsync://repo-rpki.idnic.net/repo/d4f48a89-90c5-4f5a-8015-36f1196a71c8/0/F30F14F4AEB6630FF4E270B0729358AEBFA97733.mft Manifest number: 052C Signing time: Wed 03 Dec 2025 06:12:08 +0000 Manifest this update: Wed 03 Dec 2025 06:07:08 +0000 Manifest next update: Sat 06 Dec 2025 15:25:08 +0000 Files and hashes: 1: 323430373a343630303a3a2f33322d3438203d3e203435323935.roa (hash: 4LpQRgrp7oBVnTYb85mIa1GKQ4oBc22IhdekLi1TA6c=) 2: 3130332e3135312e39322e302f32332d3234203d3e203435323935.roa (hash: WCf4k80HtpWJXreA4Q6XD5iDNEeVQ9AU8BVWi8IEoSM=) 3: F30F14F4AEB6630FF4E270B0729358AEBFA97733.crl (hash: thWk7ACKVIJD9ym/zCVigDRuSyHhB0fnfjxPrw5T8Ak=) 4: 3131332e3231322e3136302e302f32312d3234203d3e203435323935.roa (hash: ykBCC6a4TUa9u53qD+3M0qE2NkGoJtCXa3OdoYw7FhA=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/d4f48a89-90c5-4f5a-8015-36f1196a71c8/0/F30F14F4AEB6630FF4E270B0729358AEBFA97733.crl rsync://repo-rpki.idnic.net/repo/d4f48a89-90c5-4f5a-8015-36f1196a71c8/0/F30F14F4AEB6630FF4E270B0729358AEBFA97733.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/F30F14F4AEB6630FF4E270B0729358AEBFA97733.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 06 Dec 2025 12:07:02 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 03:30:23:7b:b9:01:31:8e:19:71:27:57:7f:93:40:b8:87:ed:08:8f Signature Algorithm: sha256WithRSAEncryption Issuer: CN=F30F14F4AEB6630FF4E270B0729358AEBFA97733 Validity Not Before: Dec 3 06:07:08 2025 GMT Not After : Dec 6 15:25:08 2025 GMT Subject: CN=F98BF026BA93CDC032F4D0C0B96589631EFEC187 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a2:13:85:42:15:2c:81:92:74:ae:3c:99:62:d8: c9:1d:bb:a3:a3:15:dc:4f:e6:1e:c1:50:61:dc:ce: 6d:ba:93:f5:fe:ee:53:4d:57:2e:29:22:e6:16:bb: a8:09:65:bc:96:c1:7e:c7:7a:3c:89:8a:96:49:43: f8:ef:02:4c:8e:4c:08:0c:03:4e:2f:fa:98:d1:ce: c5:f5:3c:d5:96:a9:07:79:5c:4c:f6:f1:c6:29:40: 84:e5:16:7f:ed:25:c3:23:d2:c6:38:82:f7:e8:fc: 81:11:79:ab:2e:c3:ef:3a:a7:08:70:bb:5c:32:8d: 46:d4:3a:42:6e:bf:7a:c1:5b:c1:96:f2:7e:a0:aa: 54:51:00:aa:ee:2c:09:9f:ba:39:82:2a:b5:80:bf: 03:a4:84:11:16:f4:53:47:65:8f:87:61:e3:6c:01: 6c:cb:fa:6d:b0:08:89:55:76:ce:37:f9:5a:b8:51: 54:ba:50:db:e7:cb:f0:80:ab:25:6b:d9:72:89:2d: f0:b5:b3:e4:e2:85:36:21:63:dc:62:a9:ab:3a:48: ca:59:85:87:2e:34:c8:7a:47:15:35:cf:ec:a6:c9: f7:fe:63:5e:2b:67:33:3d:d7:0b:ef:7c:d9:93:b7: 4e:78:4d:50:9b:ce:ca:9a:26:f6:e4:19:e0:16:0c: 61:97 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: F9:8B:F0:26:BA:93:CD:C0:32:F4:D0:C0:B9:65:89:63:1E:FE:C1:87 X509v3 Authority Key Identifier: keyid:F3:0F:14:F4:AE:B6:63:0F:F4:E2:70:B0:72:93:58:AE:BF:A9:77:33 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/d4f48a89-90c5-4f5a-8015-36f1196a71c8/0/F30F14F4AEB6630FF4E270B0729358AEBFA97733.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/F30F14F4AEB6630FF4E270B0729358AEBFA97733.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/d4f48a89-90c5-4f5a-8015-36f1196a71c8/0/F30F14F4AEB6630FF4E270B0729358AEBFA97733.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 0b:93:15:c4:7a:76:6d:9b:0e:50:de:49:b3:de:6a:a2:59:2d: 56:49:a5:fc:b4:07:69:1b:05:20:1f:26:9a:d1:46:5e:4e:60: 2c:04:d1:23:9a:e6:55:fd:9b:a4:d1:81:56:89:c8:cd:9e:72: 9b:bb:8a:4f:24:d0:43:56:19:fd:95:53:77:cc:3f:58:8a:69: 30:8d:8b:ff:a9:63:a5:a0:dd:10:0d:50:9a:90:b9:45:2c:e7: c4:5c:21:9a:f0:3b:ff:62:bf:26:57:66:ba:2f:d9:85:38:07: f1:39:60:e4:d4:2f:ae:0e:22:8a:cc:cd:82:47:64:fe:24:8d: 15:1e:ea:6e:1e:f1:8b:22:8b:07:e3:d0:a1:85:16:22:4b:67: d4:a1:7c:0d:66:cb:03:0f:17:a6:f7:37:b4:e9:2f:ff:18:83: e4:54:2f:68:9a:ce:25:73:c8:00:22:6e:44:b7:40:02:0d:5a: d9:20:50:6b:52:d5:60:c0:31:c0:b8:55:fc:94:53:6b:05:f9: 75:70:d1:2c:10:2a:e8:0e:48:fe:c1:da:aa:a6:b5:37:e7:48: c0:11:13:14:6c:aa:5c:d6:2e:67:bb:2a:a0:5a:de:ae:a6:9e: b0:0f:c2:98:2b:46:25:38:67:5f:f8:4d:9c:dd:03:3e:69:84: 54:e1:b8:17 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUAzAje7kBMY4ZcSdXf5NAuIftCI8wDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoRjMwRjE0RjRBRUI2NjMwRkY0RTI3MEIwNzI5MzU4QUVC RkE5NzczMzAeFw0yNTEyMDMwNjA3MDhaFw0yNTEyMDYxNTI1MDhaMDMxMTAvBgNV BAMTKEY5OEJGMDI2QkE5M0NEQzAzMkY0RDBDMEI5NjU4OTYzMUVGRUMxODcwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCiE4VCFSyBknSuPJli2Mkdu6Oj FdxP5h7BUGHczm26k/X+7lNNVy4pIuYWu6gJZbyWwX7HejyJipZJQ/jvAkyOTAgM A04v+pjRzsX1PNWWqQd5XEz28cYpQITlFn/tJcMj0sY4gvfo/IEReasuw+86pwhw u1wyjUbUOkJuv3rBW8GW8n6gqlRRAKruLAmfujmCKrWAvwOkhBEW9FNHZY+HYeNs AWzL+m2wCIlVds43+Vq4UVS6UNvny/CAqyVr2XKJLfC1s+TihTYhY9xiqas6SMpZ hYcuNMh6RxU1z+ymyff+Y14rZzM91wvvfNmTt054TVCbzsqaJvbkGeAWDGGXAgMB AAGjggI8MIICODAdBgNVHQ4EFgQU+YvwJrqTzcAy9NDAuWWJYx7+wYcwHwYDVR0j BBgwFoAU8w8U9K62Yw/04nCwcpNYrr+pdzMwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby9k NGY0OGE4OS05MGM1LTRmNWEtODAxNS0zNmYxMTk2YTcxYzgvMC9GMzBGMTRGNEFF QjY2MzBGRjRFMjcwQjA3MjkzNThBRUJGQTk3NzMzLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvRjMwRjE0RjRBRUI2NjMwRkY0RTI3MEIwNzI5MzU4QUVCRkE5 NzczMy5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vZDRmNDhhODktOTBjNS00ZjVhLTgw MTUtMzZmMTE5NmE3MWM4LzAvRjMwRjE0RjRBRUI2NjMwRkY0RTI3MEIwNzI5MzU4 QUVCRkE5NzczMy5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAAuTFcR6dm2bDlDeSbPeaqJZLVZJpfy0B2kb BSAfJprRRl5OYCwE0SOa5lX9m6TRgVaJyM2ecpu7ik8k0ENWGf2VU3fMP1iKaTCN i/+pY6Wg3RANUJqQuUUs58RcIZrwO/9ivyZXZrov2YU4B/E5YOTUL64OIorMzYJH ZP4kjRUe6m4e8Ysiiwfj0KGFFiJLZ9ShfA1mywMPF6b3N7TpL/8Yg+RUL2iaziVz yAAibkS3QAINWtkgUGtS1WDAMcC4VfyUU2sF+XVw0SwQKugOSP7B2qqmtTfnSMAR ExRsqlzWLme7KqBa3q6mnrAPwpgrRiU4Z1/4TZzdAz5phFThuBc= -----END CERTIFICATE-----Generated at Wed Dec 3 14:56:37 2025 by rpki-client