This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf repo-rpki.idnic.net/repo/3a1f6299-b155-4212-b5e1-9f5703cd0989/0/C30A3771ECE5F762D6FA6D8728F4C0C9228631F7.mft File: C30A3771ECE5F762D6FA6D8728F4C0C9228631F7.mft (raw, json) Hash identifier: 0HT9aMbn+Yf/wGdtrrwGe37QIqLJLxs83eo9OissE0U= Subject key identifier: DB:A6:5B:A4:48:7F:26:54:D9:93:C6:FE:1B:A2:2C:4E:E5:9D:03:5C Authority key identifier: C3:0A:37:71:EC:E5:F7:62:D6:FA:6D:87:28:F4:C0:C9:22:86:31:F7 Certificate issuer: /CN=C30A3771ECE5F762D6FA6D8728F4C0C9228631F7 Certificate serial: 795C107A4FC0D4A5FA560EBC322902A1ECB078C6 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/C30A3771ECE5F762D6FA6D8728F4C0C9228631F7.cer Subject info access: rsync://repo-rpki.idnic.net/repo/3a1f6299-b155-4212-b5e1-9f5703cd0989/0/C30A3771ECE5F762D6FA6D8728F4C0C9228631F7.mft Manifest number: 0383 Signing time: Thu 25 Dec 2025 17:52:27 +0000 Manifest this update: Thu 25 Dec 2025 17:47:27 +0000 Manifest next update: Sun 28 Dec 2025 19:58:27 +0000 Files and hashes: 1: 3130332e3136382e3134382e302f32342d3234203d3e20313432333530.roa (hash: MTg1tuijanT/fwfxdf3hwp8GNR+2Cd4sBdhUtmiigzQ=) 2: C30A3771ECE5F762D6FA6D8728F4C0C9228631F7.crl (hash: +4g9nmqalcXSvOhL/6bpheAclePGXZRZ0HoqiNZQKCE=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/3a1f6299-b155-4212-b5e1-9f5703cd0989/0/C30A3771ECE5F762D6FA6D8728F4C0C9228631F7.crl rsync://repo-rpki.idnic.net/repo/3a1f6299-b155-4212-b5e1-9f5703cd0989/0/C30A3771ECE5F762D6FA6D8728F4C0C9228631F7.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/C30A3771ECE5F762D6FA6D8728F4C0C9228631F7.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 28 Dec 2025 19:58:27 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 79:5c:10:7a:4f:c0:d4:a5:fa:56:0e:bc:32:29:02:a1:ec:b0:78:c6 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=C30A3771ECE5F762D6FA6D8728F4C0C9228631F7 Validity Not Before: Dec 25 17:47:27 2025 GMT Not After : Dec 28 19:58:27 2025 GMT Subject: CN=DBA65BA4487F2654D993C6FE1BA22C4EE59D035C Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cd:d6:95:61:6f:11:80:02:be:e7:54:50:cd:6d: 95:9d:00:97:a7:4e:fc:bb:bc:35:41:0d:1c:0d:7a: 4e:5e:db:b3:1f:f7:8d:e5:be:d0:8a:5f:b4:22:92: 64:19:dc:a4:90:7c:17:c6:97:db:ef:6c:7e:6c:dc: 67:9b:5f:95:0d:72:09:49:df:ac:cd:9b:93:64:a9: 28:10:70:11:1c:6b:bc:38:b7:e1:bb:91:a7:75:29: e8:75:4e:e4:ea:9f:16:3a:a3:61:ce:69:33:20:2f: c9:a5:0c:c8:0f:ec:a8:81:53:97:f2:3b:5d:3b:74: 68:e6:11:34:20:24:ad:30:45:aa:61:6a:52:1e:32: 10:db:51:59:57:5f:70:e5:61:7d:20:b1:6c:36:38: 21:22:22:54:df:97:da:63:61:de:55:79:99:70:e1: 70:e5:35:92:8d:6a:cf:6e:9e:90:0e:fa:2a:bc:f1: 7c:6e:c5:cb:4b:30:25:60:6a:0d:81:25:6e:fb:6e: 07:0d:a0:c0:2f:0c:3f:db:6b:02:17:60:eb:41:e9: d1:86:10:1d:a0:b4:2a:91:8a:01:f2:92:37:05:e3: db:ec:da:eb:64:f1:76:a1:ae:81:55:35:23:98:74: bb:83:69:9d:fa:89:32:5e:3a:8b:cd:5d:da:a4:e6: 53:8b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: DB:A6:5B:A4:48:7F:26:54:D9:93:C6:FE:1B:A2:2C:4E:E5:9D:03:5C X509v3 Authority Key Identifier: keyid:C3:0A:37:71:EC:E5:F7:62:D6:FA:6D:87:28:F4:C0:C9:22:86:31:F7 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/3a1f6299-b155-4212-b5e1-9f5703cd0989/0/C30A3771ECE5F762D6FA6D8728F4C0C9228631F7.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/C30A3771ECE5F762D6FA6D8728F4C0C9228631F7.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/3a1f6299-b155-4212-b5e1-9f5703cd0989/0/C30A3771ECE5F762D6FA6D8728F4C0C9228631F7.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 62:84:8b:5d:37:da:fb:5a:5f:bb:cd:0d:7c:a7:42:a5:4c:03: a2:72:71:e5:8b:01:0b:83:8a:22:89:dd:ca:6e:97:5d:5d:ae: b1:f9:25:91:fe:43:bd:33:ab:6e:70:39:18:02:f2:3c:01:1b: c4:da:e3:f9:a4:ce:fd:9c:6c:52:76:76:8d:00:e2:5d:a3:f3: 80:4e:53:7c:80:54:8f:37:cc:e4:b4:71:e5:c5:10:a6:c9:fa: a4:37:9d:2b:bf:4f:fd:2e:b3:95:b6:bd:b7:d5:86:d1:10:e0: 2d:14:17:f4:8f:b7:3d:c0:93:62:42:e7:02:e9:6f:e2:a5:6e: 91:17:56:6b:3c:ac:78:73:60:78:f2:4d:ad:67:c6:81:32:c4: ee:1b:49:d0:5e:d8:be:fa:40:de:fd:a7:48:98:6a:90:de:18: 24:71:3c:44:90:03:55:d0:ce:56:00:d4:3e:eb:ba:5f:23:f4: bb:32:35:88:f9:17:c2:96:5b:8b:da:e4:ab:d2:e1:ac:7b:44: 84:15:16:7d:c2:b3:c6:da:30:c4:07:c5:f5:62:53:67:42:6d: 0d:93:fb:0a:fe:3c:b4:cf:cf:d6:5e:de:7c:3d:4d:ae:fc:dd: 8f:91:ee:60:6a:98:8f:98:50:d3:0b:52:d9:b1:7d:c9:2d:be: 8c:91:fb:7c -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUeVwQek/A1KX6Vg68MikCoeyweMYwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoQzMwQTM3NzFFQ0U1Rjc2MkQ2RkE2RDg3MjhGNEMwQzky Mjg2MzFGNzAeFw0yNTEyMjUxNzQ3MjdaFw0yNTEyMjgxOTU4MjdaMDMxMTAvBgNV BAMTKERCQTY1QkE0NDg3RjI2NTREOTkzQzZGRTFCQTIyQzRFRTU5RDAzNUMwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDN1pVhbxGAAr7nVFDNbZWdAJen Tvy7vDVBDRwNek5e27Mf943lvtCKX7QikmQZ3KSQfBfGl9vvbH5s3GebX5UNcglJ 36zNm5NkqSgQcBEca7w4t+G7kad1Keh1TuTqnxY6o2HOaTMgL8mlDMgP7KiBU5fy O107dGjmETQgJK0wRaphalIeMhDbUVlXX3DlYX0gsWw2OCEiIlTfl9pjYd5VeZlw 4XDlNZKNas9unpAO+iq88XxuxctLMCVgag2BJW77bgcNoMAvDD/bawIXYOtB6dGG EB2gtCqRigHykjcF49vs2utk8XahroFVNSOYdLuDaZ36iTJeOovNXdqk5lOLAgMB AAGjggI8MIICODAdBgNVHQ4EFgQU26ZbpEh/JlTZk8b+G6IsTuWdA1wwHwYDVR0j BBgwFoAUwwo3cezl92LW+m2HKPTAySKGMfcwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby8z YTFmNjI5OS1iMTU1LTQyMTItYjVlMS05ZjU3MDNjZDA5ODkvMC9DMzBBMzc3MUVD RTVGNzYyRDZGQTZEODcyOEY0QzBDOTIyODYzMUY3LmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvQzMwQTM3NzFFQ0U1Rjc2MkQ2RkE2RDg3MjhGNEMwQzkyMjg2 MzFGNy5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vM2ExZjYyOTktYjE1NS00MjEyLWI1 ZTEtOWY1NzAzY2QwOTg5LzAvQzMwQTM3NzFFQ0U1Rjc2MkQ2RkE2RDg3MjhGNEMw QzkyMjg2MzFGNy5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAGKEi1032vtaX7vNDXynQqVMA6JyceWLAQuD iiKJ3cpul11drrH5JZH+Q70zq25wORgC8jwBG8Ta4/mkzv2cbFJ2do0A4l2j84BO U3yAVI83zOS0ceXFEKbJ+qQ3nSu/T/0us5W2vbfVhtEQ4C0UF/SPtz3Ak2JC5wLp b+KlbpEXVms8rHhzYHjyTa1nxoEyxO4bSdBe2L76QN79p0iYapDeGCRxPESQA1XQ zlYA1D7rul8j9LsyNYj5F8KWW4va5KvS4ax7RIQVFn3Cs8baMMQHxfViU2dCbQ2T +wr+PLTPz9Ze3nw9Ta783Y+R7mBqmI+YUNMLUtmxfcktvoyR+3w= -----END CERTIFICATE-----Generated at Sat Dec 27 06:36:27 2025 by rpki-client