This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf repo-rpki.idnic.net/repo/429f8902-1a06-45a8-a998-72e46aaae8fc/0/30E2B4617B8B9CFC4FC57B1C5A4D74FC7E912D45.mft File: 30E2B4617B8B9CFC4FC57B1C5A4D74FC7E912D45.mft (raw, json) Hash identifier: Q/pXtffcnPc8xmh+izTLDahT8D9ZMeaXLGAucLVJr6E= Subject key identifier: 23:07:85:87:47:4B:83:35:6A:C7:8A:5C:95:92:A8:C9:74:7E:4E:D2 Authority key identifier: 30:E2:B4:61:7B:8B:9C:FC:4F:C5:7B:1C:5A:4D:74:FC:7E:91:2D:45 Certificate issuer: /CN=30E2B4617B8B9CFC4FC57B1C5A4D74FC7E912D45 Certificate serial: 2B2CFF85635CF23A703AC6C7FE64FDE3D76FB068 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/30E2B4617B8B9CFC4FC57B1C5A4D74FC7E912D45.cer Subject info access: rsync://repo-rpki.idnic.net/repo/429f8902-1a06-45a8-a998-72e46aaae8fc/0/30E2B4617B8B9CFC4FC57B1C5A4D74FC7E912D45.mft Manifest number: 0207 Signing time: Tue 23 Dec 2025 23:22:12 +0000 Manifest this update: Tue 23 Dec 2025 23:17:12 +0000 Manifest next update: Sat 27 Dec 2025 10:13:12 +0000 Files and hashes: 1: 3130332e3136362e3235342e302f32342d3234203d3e20313431393636.roa (hash: Udg26cCHQ+Qftm36Kch+i7dbSWtv7odm32FXa+73LYY=) 2: 30E2B4617B8B9CFC4FC57B1C5A4D74FC7E912D45.crl (hash: J+0HVXHRbTu60it4X4+FxXBGaJ+K0alEHfW/539NZx4=) 3: 3130332e3136362e3235352e302f32342d3234203d3e20313431393636.roa (hash: xce0AmVhdIuoA0s5G07BTYqxfWM/i2bbCDllzfV1P80=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/429f8902-1a06-45a8-a998-72e46aaae8fc/0/30E2B4617B8B9CFC4FC57B1C5A4D74FC7E912D45.crl rsync://repo-rpki.idnic.net/repo/429f8902-1a06-45a8-a998-72e46aaae8fc/0/30E2B4617B8B9CFC4FC57B1C5A4D74FC7E912D45.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/30E2B4617B8B9CFC4FC57B1C5A4D74FC7E912D45.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 27 Dec 2025 10:13:12 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2b:2c:ff:85:63:5c:f2:3a:70:3a:c6:c7:fe:64:fd:e3:d7:6f:b0:68 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=30E2B4617B8B9CFC4FC57B1C5A4D74FC7E912D45 Validity Not Before: Dec 23 23:17:12 2025 GMT Not After : Dec 27 10:13:12 2025 GMT Subject: CN=23078587474B83356AC78A5C9592A8C9747E4ED2 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d8:ce:d0:9e:d0:36:c8:fb:8f:35:0d:6f:b2:4e: f3:2a:1d:57:30:42:e2:92:a1:2b:13:d3:6a:01:d0: a5:79:71:97:2c:21:9c:be:4a:48:f3:b5:1c:b2:4a: 5a:da:eb:30:27:b2:29:8f:41:2e:d0:5a:a0:f7:92: d5:e0:12:4d:42:f3:ca:dc:d5:d0:f6:4b:6c:64:6c: 04:6a:85:42:ad:89:f5:cf:44:98:63:2f:3b:87:52: e1:fb:00:e4:80:b6:31:98:3d:b3:8c:32:eb:c1:51: bd:3b:26:5d:a9:71:ab:58:2c:30:17:d2:34:fe:94: 3e:b7:95:15:d6:11:95:11:8e:79:3c:f8:28:95:73: b4:87:22:8d:d0:e0:65:85:9e:70:b5:aa:26:95:0f: 02:1d:8e:92:3a:e7:d9:b9:85:11:36:d6:7c:a7:c1: 70:4c:d9:85:34:26:1a:aa:69:89:44:23:1a:21:ab: 90:47:8c:da:cb:2c:cb:c2:c8:6d:4e:1c:24:1f:e3: 4d:34:ec:b0:1e:d7:43:50:c1:6b:00:59:dc:de:f9: 9b:f2:9e:35:c8:e3:a4:52:2b:04:33:44:3a:47:6a: 34:07:f0:03:10:6d:03:82:59:de:03:21:21:80:6e: e2:4c:d9:01:48:43:fe:e6:ce:19:d1:b5:5f:e8:13: da:d7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 23:07:85:87:47:4B:83:35:6A:C7:8A:5C:95:92:A8:C9:74:7E:4E:D2 X509v3 Authority Key Identifier: keyid:30:E2:B4:61:7B:8B:9C:FC:4F:C5:7B:1C:5A:4D:74:FC:7E:91:2D:45 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/429f8902-1a06-45a8-a998-72e46aaae8fc/0/30E2B4617B8B9CFC4FC57B1C5A4D74FC7E912D45.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/30E2B4617B8B9CFC4FC57B1C5A4D74FC7E912D45.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/429f8902-1a06-45a8-a998-72e46aaae8fc/0/30E2B4617B8B9CFC4FC57B1C5A4D74FC7E912D45.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 68:b8:a7:6e:42:a7:57:b7:97:68:1c:c1:e9:c2:46:5a:d0:16: c0:8d:98:9d:89:b3:34:50:a0:90:44:ba:9c:e6:02:e0:a8:3d: 26:05:a0:5e:77:97:da:17:e6:4b:18:a5:7e:d3:46:2f:0c:98: fa:65:3a:e7:6f:67:0c:a3:ca:a8:bb:05:42:86:53:5e:0e:fb: 99:ac:a9:38:1f:64:48:9f:0d:51:ce:82:90:c4:34:1e:0f:7d: a4:7e:62:25:18:9f:90:41:1a:14:5b:8f:0b:12:4e:0b:b3:a2: bb:d1:f2:bc:b7:ee:da:85:37:f7:a1:76:00:2c:84:31:00:04: b8:99:35:2f:19:7c:c2:8c:c1:4a:2f:5f:b7:de:41:68:1d:b8: 02:af:1a:aa:27:8a:dd:2d:d0:12:51:cc:00:a1:6f:60:f4:d5: ec:e5:b3:c3:b8:38:80:fd:76:13:f4:48:ef:18:b4:12:68:6e: 21:4a:38:72:8a:d8:42:40:64:ed:c6:2a:a3:16:50:d1:b4:4b: 70:46:47:f7:c0:a3:12:00:37:e8:61:66:01:c6:67:af:c7:18: da:d0:95:2a:db:5d:9e:fe:09:2a:a5:35:c1:f6:3a:c5:87:68: bb:7c:18:fa:a0:6d:f4:8b:c6:1a:9d:dc:4a:cc:25:b1:83:30: f7:79:48:dc -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUKyz/hWNc8jpwOsbH/mT949dvsGgwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMzBFMkI0NjE3QjhCOUNGQzRGQzU3QjFDNUE0RDc0RkM3 RTkxMkQ0NTAeFw0yNTEyMjMyMzE3MTJaFw0yNTEyMjcxMDEzMTJaMDMxMTAvBgNV BAMTKDIzMDc4NTg3NDc0QjgzMzU2QUM3OEE1Qzk1OTJBOEM5NzQ3RTRFRDIwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDYztCe0DbI+481DW+yTvMqHVcw QuKSoSsT02oB0KV5cZcsIZy+SkjztRyySlra6zAnsimPQS7QWqD3ktXgEk1C88rc 1dD2S2xkbARqhUKtifXPRJhjLzuHUuH7AOSAtjGYPbOMMuvBUb07Jl2pcatYLDAX 0jT+lD63lRXWEZURjnk8+CiVc7SHIo3Q4GWFnnC1qiaVDwIdjpI659m5hRE21nyn wXBM2YU0JhqqaYlEIxohq5BHjNrLLMvCyG1OHCQf40007LAe10NQwWsAWdze+Zvy njXI46RSKwQzRDpHajQH8AMQbQOCWd4DISGAbuJM2QFIQ/7mzhnRtV/oE9rXAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUIweFh0dLgzVqx4pclZKoyXR+TtIwHwYDVR0j BBgwFoAUMOK0YXuLnPxPxXscWk10/H6RLUUwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby80 MjlmODkwMi0xYTA2LTQ1YTgtYTk5OC03MmU0NmFhYWU4ZmMvMC8zMEUyQjQ2MTdC OEI5Q0ZDNEZDNTdCMUM1QTRENzRGQzdFOTEyRDQ1LmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvMzBFMkI0NjE3QjhCOUNGQzRGQzU3QjFDNUE0RDc0RkM3RTkx MkQ0NS5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vNDI5Zjg5MDItMWEwNi00NWE4LWE5 OTgtNzJlNDZhYWFlOGZjLzAvMzBFMkI0NjE3QjhCOUNGQzRGQzU3QjFDNUE0RDc0 RkM3RTkxMkQ0NS5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAGi4p25Cp1e3l2gcwenCRlrQFsCNmJ2JszRQ oJBEupzmAuCoPSYFoF53l9oX5ksYpX7TRi8MmPplOudvZwyjyqi7BUKGU14O+5ms qTgfZEifDVHOgpDENB4PfaR+YiUYn5BBGhRbjwsSTguzorvR8ry37tqFN/ehdgAs hDEABLiZNS8ZfMKMwUovX7feQWgduAKvGqonit0t0BJRzAChb2D01ezls8O4OID9 dhP0SO8YtBJobiFKOHKK2EJAZO3GKqMWUNG0S3BGR/fAoxIAN+hhZgHGZ6/HGNrQ lSrbXZ7+CSqlNcH2OsWHaLt8GPqgbfSLxhqd3ErMJbGDMPd5SNw= -----END CERTIFICATE-----Generated at Wed Dec 24 22:08:38 2025 by rpki-client