This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf repo-rpki.idnic.net/repo/d9b899ac-4870-4e28-8e4e-2c23752a4a60/0/30D21A97E1EED902F151C3022374D979F0A4A7EF.mft File: 30D21A97E1EED902F151C3022374D979F0A4A7EF.mft (raw, json) Hash identifier: rRP4zaFg7oEI3kMAxjwJV2b0lp0zqGZ1qsajZK6Q9hw= Subject key identifier: 3F:49:40:01:C3:10:99:C2:54:A6:9E:09:28:BC:BE:1B:7B:80:F2:EF Authority key identifier: 30:D2:1A:97:E1:EE:D9:02:F1:51:C3:02:23:74:D9:79:F0:A4:A7:EF Certificate issuer: /CN=30D21A97E1EED902F151C3022374D979F0A4A7EF Certificate serial: 01D546BD635B112294E6592D7F97D3608B99A78E Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/30D21A97E1EED902F151C3022374D979F0A4A7EF.cer Subject info access: rsync://repo-rpki.idnic.net/repo/d9b899ac-4870-4e28-8e4e-2c23752a4a60/0/30D21A97E1EED902F151C3022374D979F0A4A7EF.mft Manifest number: 0160 Signing time: Sat 31 Jan 2026 05:41:49 +0000 Manifest this update: Sat 31 Jan 2026 05:36:49 +0000 Manifest next update: Tue 03 Feb 2026 10:55:49 +0000 Files and hashes: 1: 34352e3234392e3232342e302f32342d3234203d3e20313532303237.roa (hash: Lbof0Eu5fIUUt+ZOnyAgcQnzposa001pRsoMaWB/hPw=) 2: 34352e3234392e3232352e302f32342d3234203d3e20313532303237.roa (hash: C52489RC5C7/6xA/AFGhqaTac2q7UpLljZUsc+WdOYU=) 3: 34352e3234392e3232342e302f32332d3233203d3e20313532303237.roa (hash: dHytxOoYwuE6ev+ouL2C7HNOfk2qBxU0rZwmruiXqlc=) 4: 30D21A97E1EED902F151C3022374D979F0A4A7EF.crl (hash: tETOOd1H4C7tuUEvwzH+poYUvHAdp638rlTCqQLnXec=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/d9b899ac-4870-4e28-8e4e-2c23752a4a60/0/30D21A97E1EED902F151C3022374D979F0A4A7EF.crl rsync://repo-rpki.idnic.net/repo/d9b899ac-4870-4e28-8e4e-2c23752a4a60/0/30D21A97E1EED902F151C3022374D979F0A4A7EF.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/30D21A97E1EED902F151C3022374D979F0A4A7EF.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 03 Feb 2026 10:55:49 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:d5:46:bd:63:5b:11:22:94:e6:59:2d:7f:97:d3:60:8b:99:a7:8e Signature Algorithm: sha256WithRSAEncryption Issuer: CN=30D21A97E1EED902F151C3022374D979F0A4A7EF Validity Not Before: Jan 31 05:36:49 2026 GMT Not After : Feb 3 10:55:49 2026 GMT Subject: CN=3F494001C31099C254A69E0928BCBE1B7B80F2EF Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:db:54:ef:f4:c5:d6:ac:c3:98:40:31:88:33:1b: 04:75:4b:08:7c:ba:4f:56:ff:1d:92:48:79:49:df: 3f:14:bc:c7:fe:a5:7e:57:7a:19:3e:04:46:a7:0b: 43:21:e2:69:a4:ff:57:46:c7:b7:04:fa:8f:c5:5f: 03:9a:56:0c:d7:76:f0:07:87:43:39:45:9f:33:81: ce:66:b0:9a:ce:65:dc:0f:66:12:08:c0:a5:ee:d3: 66:8f:24:88:6e:87:93:ae:29:25:6d:c9:91:a6:3e: 54:e1:11:fc:bd:b7:cf:11:0a:df:d7:52:8a:04:1e: 00:50:d8:93:6f:67:a7:ee:65:4e:dc:a1:45:63:b2: 03:ac:e7:87:7f:4a:6d:87:70:63:f4:16:66:0b:a5: 25:2b:ad:45:22:55:88:38:51:78:b6:fc:b2:c9:e1: 4e:62:e5:02:89:4c:7e:28:21:84:a3:19:83:e9:1b: b0:c7:0f:30:ed:c1:32:8b:f5:be:b8:2b:57:b4:4e: 4d:1d:56:1d:58:71:66:c3:9e:b9:27:99:36:f0:7e: b8:86:47:af:ee:fb:3d:12:1d:f8:34:dd:30:19:cc: 2d:50:d1:d9:a1:3e:6b:7d:cc:d6:2e:3d:e6:5c:d0: fe:e0:a3:c8:63:51:2d:3d:84:61:1b:e4:8b:3e:b3: cc:c9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 3F:49:40:01:C3:10:99:C2:54:A6:9E:09:28:BC:BE:1B:7B:80:F2:EF X509v3 Authority Key Identifier: keyid:30:D2:1A:97:E1:EE:D9:02:F1:51:C3:02:23:74:D9:79:F0:A4:A7:EF X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/d9b899ac-4870-4e28-8e4e-2c23752a4a60/0/30D21A97E1EED902F151C3022374D979F0A4A7EF.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/30D21A97E1EED902F151C3022374D979F0A4A7EF.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/d9b899ac-4870-4e28-8e4e-2c23752a4a60/0/30D21A97E1EED902F151C3022374D979F0A4A7EF.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 16:89:89:bb:9f:f8:eb:53:72:55:db:3d:0a:2a:16:11:ca:a4: e6:7d:e5:d0:b6:cd:d1:71:47:45:e7:bb:92:bb:bf:8b:5e:33: 34:ba:19:b3:9d:b6:c1:bd:38:40:42:e4:a9:ec:71:ca:cf:6f: fc:92:98:24:3b:0a:a4:40:fa:98:9b:c5:e9:e5:96:0b:4b:48: 0c:bd:4d:76:43:17:0e:4a:e5:2d:55:5f:70:13:c1:79:85:97: 7e:6f:1e:83:e0:f5:cc:58:f2:40:bc:5d:71:03:f6:3c:83:86: 24:99:a5:d8:18:08:f2:f0:40:ed:6a:88:b9:f6:45:9e:de:14: 18:be:61:2a:a0:3c:54:27:20:76:1c:f0:15:c2:2f:35:06:33: 93:91:62:55:33:70:cf:be:9d:00:d7:91:03:49:45:eb:04:6a: 0a:96:0f:59:17:79:64:f0:1e:72:0e:99:c7:92:b1:37:ed:5a: 97:de:49:26:05:1b:84:df:07:1a:c5:6b:00:57:49:77:e6:5d: 21:a4:a9:86:09:19:6c:3d:23:0e:a6:9f:ac:58:47:d0:fb:1d: d4:63:60:4f:e2:a6:fd:19:c7:05:71:3c:08:1f:09:66:9b:85: d1:c4:c8:f7:3b:eb:5a:1a:29:c6:53:ef:23:e3:8f:5a:5a:bd: 54:bb:32:8c -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUAdVGvWNbESKU5lktf5fTYIuZp44wDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMzBEMjFBOTdFMUVFRDkwMkYxNTFDMzAyMjM3NEQ5NzlG MEE0QTdFRjAeFw0yNjAxMzEwNTM2NDlaFw0yNjAyMDMxMDU1NDlaMDMxMTAvBgNV BAMTKDNGNDk0MDAxQzMxMDk5QzI1NEE2OUUwOTI4QkNCRTFCN0I4MEYyRUYwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDbVO/0xdasw5hAMYgzGwR1Swh8 uk9W/x2SSHlJ3z8UvMf+pX5Xehk+BEanC0Mh4mmk/1dGx7cE+o/FXwOaVgzXdvAH h0M5RZ8zgc5msJrOZdwPZhIIwKXu02aPJIhuh5OuKSVtyZGmPlThEfy9t88RCt/X UooEHgBQ2JNvZ6fuZU7coUVjsgOs54d/Sm2HcGP0FmYLpSUrrUUiVYg4UXi2/LLJ 4U5i5QKJTH4oIYSjGYPpG7DHDzDtwTKL9b64K1e0Tk0dVh1YcWbDnrknmTbwfriG R6/u+z0SHfg03TAZzC1Q0dmhPmt9zNYuPeZc0P7go8hjUS09hGEb5Is+s8zJAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUP0lAAcMQmcJUpp4JKLy+G3uA8u8wHwYDVR0j BBgwFoAUMNIal+Hu2QLxUcMCI3TZefCkp+8wDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby9k OWI4OTlhYy00ODcwLTRlMjgtOGU0ZS0yYzIzNzUyYTRhNjAvMC8zMEQyMUE5N0Ux RUVEOTAyRjE1MUMzMDIyMzc0RDk3OUYwQTRBN0VGLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvMzBEMjFBOTdFMUVFRDkwMkYxNTFDMzAyMjM3NEQ5NzlGMEE0 QTdFRi5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vZDliODk5YWMtNDg3MC00ZTI4LThl NGUtMmMyMzc1MmE0YTYwLzAvMzBEMjFBOTdFMUVFRDkwMkYxNTFDMzAyMjM3NEQ5 NzlGMEE0QTdFRi5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBABaJibuf+OtTclXbPQoqFhHKpOZ95dC2zdFx R0Xnu5K7v4teMzS6GbOdtsG9OEBC5KnsccrPb/ySmCQ7CqRA+pibxenllgtLSAy9 TXZDFw5K5S1VX3ATwXmFl35vHoPg9cxY8kC8XXED9jyDhiSZpdgYCPLwQO1qiLn2 RZ7eFBi+YSqgPFQnIHYc8BXCLzUGM5ORYlUzcM++nQDXkQNJResEagqWD1kXeWTw HnIOmceSsTftWpfeSSYFG4TfBxrFawBXSXfmXSGkqYYJGWw9Iw6mn6xYR9D7HdRj YE/ipv0ZxwVxPAgfCWabhdHEyPc761oaKcZT7yPjj1pavVS7Mow= -----END CERTIFICATE-----Generated at Mon Feb 2 09:43:13 2026 by rpki-client