This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf repo-rpki.idnic.net/repo/03b59ce4-66a2-4f4d-b3d6-9299484ba56b/0/C30DE71F7CAE16CA2D8DAB6D01CA43D72FB4FE6E.mft File: C30DE71F7CAE16CA2D8DAB6D01CA43D72FB4FE6E.mft (raw, json) Hash identifier: x6b7PHFSgoooX14lLTmcePS0u/XFNk7k/jICNSUfevc= Subject key identifier: 5B:61:53:48:0E:8D:F5:CF:06:73:54:8F:92:5A:65:9A:96:EF:9E:33 Authority key identifier: C3:0D:E7:1F:7C:AE:16:CA:2D:8D:AB:6D:01:CA:43:D7:2F:B4:FE:6E Certificate issuer: /CN=C30DE71F7CAE16CA2D8DAB6D01CA43D72FB4FE6E Certificate serial: 230D390131F645B19B3D5B8F728DCFD098BFCF67 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/C30DE71F7CAE16CA2D8DAB6D01CA43D72FB4FE6E.cer Subject info access: rsync://repo-rpki.idnic.net/repo/03b59ce4-66a2-4f4d-b3d6-9299484ba56b/0/C30DE71F7CAE16CA2D8DAB6D01CA43D72FB4FE6E.mft Manifest number: 0420 Signing time: Thu 18 Dec 2025 18:31:29 +0000 Manifest this update: Thu 18 Dec 2025 18:26:29 +0000 Manifest next update: Mon 22 Dec 2025 05:27:29 +0000 Files and hashes: 1: C30DE71F7CAE16CA2D8DAB6D01CA43D72FB4FE6E.crl (hash: JSbmpjDrjriHoyxwJTyGRB6qW/LDPw6kbUyBK1bT2ik=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/03b59ce4-66a2-4f4d-b3d6-9299484ba56b/0/C30DE71F7CAE16CA2D8DAB6D01CA43D72FB4FE6E.crl rsync://repo-rpki.idnic.net/repo/03b59ce4-66a2-4f4d-b3d6-9299484ba56b/0/C30DE71F7CAE16CA2D8DAB6D01CA43D72FB4FE6E.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/C30DE71F7CAE16CA2D8DAB6D01CA43D72FB4FE6E.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 22 Dec 2025 03:43:10 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 23:0d:39:01:31:f6:45:b1:9b:3d:5b:8f:72:8d:cf:d0:98:bf:cf:67 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=C30DE71F7CAE16CA2D8DAB6D01CA43D72FB4FE6E Validity Not Before: Dec 18 18:26:29 2025 GMT Not After : Dec 22 05:27:29 2025 GMT Subject: CN=5B6153480E8DF5CF0673548F925A659A96EF9E33 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c5:dd:4b:10:e0:72:95:73:d4:05:7f:9d:87:f3: 2c:13:47:55:61:3b:03:ea:e0:94:b5:9c:b3:62:61: cb:74:3a:d3:1c:96:9f:e1:ac:83:13:52:a6:75:4b: ed:e2:4b:c7:b1:37:16:8f:aa:c5:e5:45:80:77:26: 7e:24:91:83:2e:0b:9d:76:8f:3e:23:40:4f:08:2c: 1d:02:33:67:ed:6c:db:32:5f:42:3a:5e:a9:5a:a8: 0d:9c:b1:8b:1c:e0:63:f2:9c:84:c4:e6:f6:ae:f7: 12:28:3c:52:65:f5:64:cb:1d:07:a2:92:42:6b:cf: 79:d5:a6:fd:9e:cc:fe:16:b8:e3:f1:c6:72:b0:5d: be:a5:08:44:62:bc:6d:7d:64:5a:b2:69:21:d8:90: 7e:6c:ed:c4:d2:b6:1a:9c:dd:52:49:11:c4:cc:52: f0:e7:ad:47:2a:45:0f:32:85:03:19:8e:63:9a:cc: f8:f6:2c:d9:91:59:4b:88:5c:e3:7f:50:9d:cc:7e: 99:ca:5a:90:86:a1:a9:5e:1b:28:15:44:4e:53:0a: 83:f9:10:dd:0a:74:52:e1:61:ae:8b:94:4c:ca:d9: bf:01:cb:58:73:26:4f:26:f2:e0:b3:59:90:92:85: 7a:db:1a:4e:5d:d5:bc:c6:f4:78:f8:6f:84:96:48: c8:cf Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 5B:61:53:48:0E:8D:F5:CF:06:73:54:8F:92:5A:65:9A:96:EF:9E:33 X509v3 Authority Key Identifier: keyid:C3:0D:E7:1F:7C:AE:16:CA:2D:8D:AB:6D:01:CA:43:D7:2F:B4:FE:6E X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/03b59ce4-66a2-4f4d-b3d6-9299484ba56b/0/C30DE71F7CAE16CA2D8DAB6D01CA43D72FB4FE6E.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/C30DE71F7CAE16CA2D8DAB6D01CA43D72FB4FE6E.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/03b59ce4-66a2-4f4d-b3d6-9299484ba56b/0/C30DE71F7CAE16CA2D8DAB6D01CA43D72FB4FE6E.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 8e:de:cb:3f:09:c6:01:4a:eb:79:95:f4:6c:a3:b5:b8:a1:d8: 4a:cc:d3:59:cb:8e:7c:6c:55:73:df:d4:55:df:f3:ff:dd:84: 44:32:26:e7:40:4e:ae:b0:77:ce:b1:b8:56:4d:28:50:d8:86: 45:4a:83:4b:a1:3e:4f:17:3c:63:7d:51:07:25:74:d9:56:f1: 5e:4b:bc:f8:d0:74:e8:71:f9:4f:60:f6:67:fc:89:70:9f:08: a7:9a:eb:1d:41:d7:ba:d1:72:87:26:23:ed:45:f1:00:f2:10: df:66:f7:be:42:b5:00:66:24:eb:df:cb:ca:c3:54:61:b2:fb: 83:ac:89:2e:ed:9e:3a:64:9a:11:f8:6a:78:0c:47:3b:51:ec: d2:40:b6:73:7d:d4:08:0c:0e:b3:9a:2b:88:c6:4b:8f:5c:5e: 0d:e2:b7:b3:45:a0:47:f8:3b:3c:57:93:0a:c7:ed:fe:e5:84: 11:a2:6c:77:db:45:ce:95:bf:2f:00:e3:8a:d0:a2:23:6e:db: 6a:52:76:91:6e:28:14:80:3a:cc:2e:c8:1b:de:7c:67:dd:12: d7:d3:d6:63:27:50:3d:2f:d6:07:dd:e1:12:44:e9:fa:7b:ee: ed:7f:8f:82:39:72:d3:1b:fd:f0:64:33:36:cd:9c:27:22:ec: e4:a2:70:89 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUIw05ATH2RbGbPVuPco3P0Ji/z2cwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoQzMwREU3MUY3Q0FFMTZDQTJEOERBQjZEMDFDQTQzRDcy RkI0RkU2RTAeFw0yNTEyMTgxODI2MjlaFw0yNTEyMjIwNTI3MjlaMDMxMTAvBgNV BAMTKDVCNjE1MzQ4MEU4REY1Q0YwNjczNTQ4RjkyNUE2NTlBOTZFRjlFMzMwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDF3UsQ4HKVc9QFf52H8ywTR1Vh OwPq4JS1nLNiYct0OtMclp/hrIMTUqZ1S+3iS8exNxaPqsXlRYB3Jn4kkYMuC512 jz4jQE8ILB0CM2ftbNsyX0I6XqlaqA2csYsc4GPynITE5vau9xIoPFJl9WTLHQei kkJrz3nVpv2ezP4WuOPxxnKwXb6lCERivG19ZFqyaSHYkH5s7cTSthqc3VJJEcTM UvDnrUcqRQ8yhQMZjmOazPj2LNmRWUuIXON/UJ3MfpnKWpCGoaleGygVRE5TCoP5 EN0KdFLhYa6LlEzK2b8By1hzJk8m8uCzWZCShXrbGk5d1bzG9Hj4b4SWSMjPAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUW2FTSA6N9c8Gc1SPklplmpbvnjMwHwYDVR0j BBgwFoAUww3nH3yuFsotjattAcpD1y+0/m4wDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby8w M2I1OWNlNC02NmEyLTRmNGQtYjNkNi05Mjk5NDg0YmE1NmIvMC9DMzBERTcxRjdD QUUxNkNBMkQ4REFCNkQwMUNBNDNENzJGQjRGRTZFLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvQzMwREU3MUY3Q0FFMTZDQTJEOERBQjZEMDFDQTQzRDcyRkI0 RkU2RS5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vMDNiNTljZTQtNjZhMi00ZjRkLWIz ZDYtOTI5OTQ4NGJhNTZiLzAvQzMwREU3MUY3Q0FFMTZDQTJEOERBQjZEMDFDQTQz RDcyRkI0RkU2RS5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAI7eyz8JxgFK63mV9Gyjtbih2ErM01nLjnxs VXPf1FXf8//dhEQyJudATq6wd86xuFZNKFDYhkVKg0uhPk8XPGN9UQcldNlW8V5L vPjQdOhx+U9g9mf8iXCfCKea6x1B17rRcocmI+1F8QDyEN9m975CtQBmJOvfy8rD VGGy+4OsiS7tnjpkmhH4angMRztR7NJAtnN91AgMDrOaK4jGS49cXg3it7NFoEf4 OzxXkwrH7f7lhBGibHfbRc6Vvy8A44rQoiNu22pSdpFuKBSAOswuyBvefGfdEtfT 1mMnUD0v1gfd4RJE6fp77u1/j4I5ctMb/fBkMzbNnCci7OSicIk= -----END CERTIFICATE-----Generated at Fri Dec 19 03:05:39 2025 by rpki-client