This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

$ rpki-client -vvf repo-rpki.idnic.net/repo/358c8f9f-4213-4a2a-85c3-b24b0d0b5107/0/030BE557286D3A4FE6E9AA70636EC79D178ACE1F.mft
File: 030BE557286D3A4FE6E9AA70636EC79D178ACE1F.mft (raw, json)
Hash identifier: bLfG8HiC0eJg/i9TP3Pbdr2DBtjplnTT5YeFW8koLV4=
Subject key identifier: 9D:5E:D6:9E:C1:BC:F5:87:94:A7:53:42:F6:6D:4F:6F:24:D2:EF:99
Authority key identifier: 03:0B:E5:57:28:6D:3A:4F:E6:E9:AA:70:63:6E:C7:9D:17:8A:CE:1F
Certificate issuer: /CN=030BE557286D3A4FE6E9AA70636EC79D178ACE1F
Certificate serial: 4026909AFE03474FE3AC48E0614F6F02DF731767
Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/030BE557286D3A4FE6E9AA70636EC79D178ACE1F.cer
Subject info access: rsync://repo-rpki.idnic.net/repo/358c8f9f-4213-4a2a-85c3-b24b0d0b5107/0/030BE557286D3A4FE6E9AA70636EC79D178ACE1F.mft
Manifest number: 0258
Signing time: Thu 18 Dec 2025 21:51:29 +0000
Manifest this update: Thu 18 Dec 2025 21:46:29 +0000
Manifest next update: Mon 22 Dec 2025 05:13:29 +0000
Files and hashes: 1: 3130332e3136322e3232302e302f32332d3233203d3e20313339393532.roa (hash: UmBaN4f8daXm7YcJHiYwqui5FgHxOYUATLUGSQyoA5A=)
2: 030BE557286D3A4FE6E9AA70636EC79D178ACE1F.crl (hash: plxA9uTORCDhRPrhORHJ8Jap361IAjS57jazcZUdV88=)
3: 3130332e3136322e3232302e302f32342d3234203d3e20313339393532.roa (hash: vtfkthTc4w7PTqVhacRm/ULh3HaRPjLVVlG+25ZUsBM=)
4: 3130332e3136322e3232312e302f32342d3234203d3e20313339393532.roa (hash: VRZHFUOGnmJp2lMdZGt7kB8GjqU3aUc9sCQrVZdvzM8=)
Validation: OK
Signature path: rsync://repo-rpki.idnic.net/repo/358c8f9f-4213-4a2a-85c3-b24b0d0b5107/0/030BE557286D3A4FE6E9AA70636EC79D178ACE1F.crl
rsync://repo-rpki.idnic.net/repo/358c8f9f-4213-4a2a-85c3-b24b0d0b5107/0/030BE557286D3A4FE6E9AA70636EC79D178ACE1F.mft
rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/030BE557286D3A4FE6E9AA70636EC79D178ACE1F.cer
rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl
rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Mon 22 Dec 2025 03:43:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
40:26:90:9a:fe:03:47:4f:e3:ac:48:e0:61:4f:6f:02:df:73:17:67
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=030BE557286D3A4FE6E9AA70636EC79D178ACE1F
Validity
Not Before: Dec 18 21:46:29 2025 GMT
Not After : Dec 22 05:13:29 2025 GMT
Subject: CN=9D5ED69EC1BCF58794A75342F66D4F6F24D2EF99
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bc:f9:6d:3f:47:eb:26:cd:78:43:de:4a:0a:ad:
bc:dc:03:d7:b6:55:5f:10:2a:13:0b:71:2d:14:60:
8e:fc:b1:08:74:d9:3b:04:38:2a:f2:fc:9a:03:55:
8f:24:0e:05:cf:4f:fe:75:0d:e3:b2:ee:ab:c2:9e:
7f:94:32:74:dc:19:44:ab:53:39:26:69:00:eb:a7:
34:6b:2d:e7:09:ed:4f:f0:57:02:b6:87:43:fc:c4:
85:39:de:da:7e:5f:5f:f8:aa:86:b0:9f:9d:96:a6:
fe:89:65:e0:60:1d:6e:b2:c0:49:c1:42:d5:2e:f3:
d9:8c:3d:0e:89:53:e1:32:0e:46:db:c2:49:ab:56:
e5:a9:c3:7b:13:6c:bb:17:ae:eb:3a:c0:b9:83:c2:
6c:38:b8:0f:08:96:0b:24:cb:2e:2e:0c:61:1f:a0:
30:a1:12:01:26:ad:4f:ea:02:6d:b6:e1:e3:a2:2c:
40:47:8b:01:c7:ca:7c:5a:73:08:e0:d2:55:41:f5:
44:87:4d:0c:63:f3:fb:71:0a:cd:ab:19:46:b9:a8:
e3:7c:15:0b:4c:a6:cd:2d:d5:88:17:2b:04:bb:1e:
e8:e5:60:39:33:bf:51:eb:34:40:d6:72:1e:57:6c:
2c:d6:29:24:a3:a3:90:ee:25:db:b2:34:a9:02:cc:
f1:89
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
9D:5E:D6:9E:C1:BC:F5:87:94:A7:53:42:F6:6D:4F:6F:24:D2:EF:99
X509v3 Authority Key Identifier:
keyid:03:0B:E5:57:28:6D:3A:4F:E6:E9:AA:70:63:6E:C7:9D:17:8A:CE:1F
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://repo-rpki.idnic.net/repo/358c8f9f-4213-4a2a-85c3-b24b0d0b5107/0/030BE557286D3A4FE6E9AA70636EC79D178ACE1F.crl
Authority Information Access:
CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/030BE557286D3A4FE6E9AA70636EC79D178ACE1F.cer
Subject Information Access:
Signed Object - URI:rsync://repo-rpki.idnic.net/repo/358c8f9f-4213-4a2a-85c3-b24b0d0b5107/0/030BE557286D3A4FE6E9AA70636EC79D178ACE1F.mft
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
44:2b:ba:02:34:48:e4:2f:5a:87:74:87:2c:ee:62:3d:c7:3c:
9d:69:95:3b:ed:06:40:22:92:26:87:96:b0:8c:e6:3d:c5:a9:
72:28:97:68:67:7b:91:48:6e:7b:67:18:79:d9:75:e7:94:1c:
29:20:38:d4:4d:b9:1d:76:42:aa:06:63:fd:e4:c7:dc:d4:c3:
a2:c9:c4:8e:4d:8f:25:9a:df:be:4c:cb:79:a3:94:84:1e:49:
28:82:b2:53:4b:42:43:78:42:21:d0:44:70:e3:ca:e4:2a:f4:
56:c7:43:f1:54:75:65:82:88:e6:6a:22:94:96:4f:8e:23:ff:
af:5d:fa:ab:33:27:3b:3f:01:72:ca:2c:c6:e4:58:48:c9:d7:
37:c4:fd:71:d8:0d:05:81:6c:5c:82:c1:e1:e2:ac:77:28:d2:
e6:32:68:a3:d1:2d:fe:1a:39:7e:80:ba:22:c1:1b:cc:80:b6:
30:9f:5d:aa:bb:45:df:7d:bd:b2:a4:18:c7:6d:09:ee:ed:04:
45:29:92:32:95:be:2d:1f:b3:31:85:1c:d1:42:51:35:a7:57:
30:c7:33:63:ee:e5:09:18:21:bb:c7:93:73:0c:cc:ea:9a:c8:
50:f1:3c:92:b1:21:2f:08:c1:73:6b:6c:e1:ff:c4:c3:6a:94:
32:e1:de:40
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Dec 19 14:33:25 2025 by rpki-client