This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf repo-rpki.idnic.net/repo/4711c110-7ab1-4a39-b9ca-3a9b0e81bcf5/0/30FC12E903AE0EE87BD1A1E58A062C8026A0CE51.mft File: 30FC12E903AE0EE87BD1A1E58A062C8026A0CE51.mft (raw, json) Hash identifier: zIb65KSl+RbmPcuGCC/I/4+xdnR2vzP1L1y50MrIeUc= Subject key identifier: 73:D8:A2:FB:2C:2B:C6:D3:33:08:A7:53:7D:3F:E9:CE:FA:43:65:95 Authority key identifier: 30:FC:12:E9:03:AE:0E:E8:7B:D1:A1:E5:8A:06:2C:80:26:A0:CE:51 Certificate issuer: /CN=30FC12E903AE0EE87BD1A1E58A062C8026A0CE51 Certificate serial: 31A441F32742938F333095F1AA79A66A831AA940 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/30FC12E903AE0EE87BD1A1E58A062C8026A0CE51.cer Subject info access: rsync://repo-rpki.idnic.net/repo/4711c110-7ab1-4a39-b9ca-3a9b0e81bcf5/0/30FC12E903AE0EE87BD1A1E58A062C8026A0CE51.mft Manifest number: 040A Signing time: Thu 18 Dec 2025 02:31:48 +0000 Manifest this update: Thu 18 Dec 2025 02:26:48 +0000 Manifest next update: Sun 21 Dec 2025 02:57:48 +0000 Files and hashes: 1: 30FC12E903AE0EE87BD1A1E58A062C8026A0CE51.crl (hash: q+H1Pvdx7+cHi6cI1yuiSjBSNel2ozuKZYk4hHWDP3A=) 2: 3130332e3130372e31382e302f32342d3234203d3e20313337323838.roa (hash: FCHx6FaRMarTOvIyDDJKyaewpvcQNtFaDUPbc3o5Lx0=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/4711c110-7ab1-4a39-b9ca-3a9b0e81bcf5/0/30FC12E903AE0EE87BD1A1E58A062C8026A0CE51.crl rsync://repo-rpki.idnic.net/repo/4711c110-7ab1-4a39-b9ca-3a9b0e81bcf5/0/30FC12E903AE0EE87BD1A1E58A062C8026A0CE51.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/30FC12E903AE0EE87BD1A1E58A062C8026A0CE51.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 21 Dec 2025 02:57:48 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 31:a4:41:f3:27:42:93:8f:33:30:95:f1:aa:79:a6:6a:83:1a:a9:40 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=30FC12E903AE0EE87BD1A1E58A062C8026A0CE51 Validity Not Before: Dec 18 02:26:48 2025 GMT Not After : Dec 21 02:57:48 2025 GMT Subject: CN=73D8A2FB2C2BC6D33308A7537D3FE9CEFA436595 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d3:76:e2:e7:27:19:3f:7a:50:f6:35:ad:71:52: 53:94:8b:b8:72:9f:d3:5e:ad:11:be:2c:9a:08:dc: 0a:21:dd:a4:f6:95:ce:15:ab:c1:ee:37:54:7c:15: 75:28:a6:71:11:59:e9:a5:2f:94:37:d0:69:1d:dc: 12:80:c6:47:a6:16:34:8f:ce:82:c0:53:e8:c9:68: 01:1f:16:c3:39:fd:f0:8c:54:89:3f:60:d8:46:09: 94:fa:bc:d7:6a:96:82:72:32:35:dc:9d:d9:f4:7b: 83:05:bb:cf:f9:28:f3:57:1f:47:ef:6a:f8:81:ff: 88:7d:e8:be:b4:b5:f3:cd:68:b3:0b:34:41:80:d5: 59:19:5e:b7:af:b5:c6:1c:c6:ae:80:2e:9f:93:9e: 81:35:f3:07:c6:57:23:52:1f:05:21:e8:64:d6:de: e0:25:8b:3f:9e:f2:0c:15:9b:34:ac:43:f0:ff:93: 10:0a:02:dc:de:9d:9f:a8:1e:57:af:37:eb:a4:b0: 64:8a:de:a3:af:0f:35:9c:69:cf:23:dc:5d:d7:52: 7a:2e:f4:51:55:66:24:fd:86:6a:57:4f:07:c2:ba: 22:2c:40:6f:96:3b:b2:12:d5:b5:f8:ac:ef:48:35: 35:dc:9e:bd:1d:42:44:a1:9f:15:1e:bf:c0:54:36: e2:b1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 73:D8:A2:FB:2C:2B:C6:D3:33:08:A7:53:7D:3F:E9:CE:FA:43:65:95 X509v3 Authority Key Identifier: keyid:30:FC:12:E9:03:AE:0E:E8:7B:D1:A1:E5:8A:06:2C:80:26:A0:CE:51 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/4711c110-7ab1-4a39-b9ca-3a9b0e81bcf5/0/30FC12E903AE0EE87BD1A1E58A062C8026A0CE51.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/30FC12E903AE0EE87BD1A1E58A062C8026A0CE51.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/4711c110-7ab1-4a39-b9ca-3a9b0e81bcf5/0/30FC12E903AE0EE87BD1A1E58A062C8026A0CE51.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption ae:eb:40:b9:4d:bc:d6:35:7d:9f:3b:5b:0e:e9:89:c8:07:57: bd:c6:1e:18:17:49:ce:64:9d:12:66:e8:45:45:d9:2a:d0:a3: e4:fc:8b:dd:7b:50:17:cf:26:91:1d:f3:3b:a3:a4:71:6d:80: d6:3a:e1:50:7a:43:93:d5:87:0a:dd:e8:21:9c:9b:ca:de:09: 67:fc:93:d0:20:6b:71:a0:64:a1:a3:2e:bd:e9:44:31:4d:70: c0:2e:47:cc:04:e2:a1:b6:0d:aa:10:1f:1b:fa:11:19:d3:3e: 42:81:42:63:2b:82:b1:9f:92:c4:02:8c:50:f0:df:bd:ac:d9: c1:dd:c5:fa:3f:5c:0c:26:5e:ae:4c:29:1f:42:43:b0:f7:f5: 5d:ea:1f:7e:28:90:61:1c:85:a7:a3:d6:40:c7:ec:7d:fa:d9: a3:9a:ed:b1:a4:a3:15:f5:13:c8:eb:9f:41:68:78:de:a3:8c: db:5c:62:90:b0:23:95:76:0d:72:61:4a:0b:ee:db:c9:c6:35: 27:cc:59:c7:71:04:6d:8b:d8:6c:12:98:b2:ad:02:d4:47:32: 12:7c:d3:79:a3:12:ea:5b:d7:fd:a7:ba:aa:ea:e6:c3:50:4e: 72:8f:17:b1:b0:a3:31:f9:8f:d2:d2:be:d3:21:71:74:18:e8: 20:b5:14:3c -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUMaRB8ydCk48zMJXxqnmmaoMaqUAwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMzBGQzEyRTkwM0FFMEVFODdCRDFBMUU1OEEwNjJDODAy NkEwQ0U1MTAeFw0yNTEyMTgwMjI2NDhaFw0yNTEyMjEwMjU3NDhaMDMxMTAvBgNV BAMTKDczRDhBMkZCMkMyQkM2RDMzMzA4QTc1MzdEM0ZFOUNFRkE0MzY1OTUwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDTduLnJxk/elD2Na1xUlOUi7hy n9NerRG+LJoI3Aoh3aT2lc4Vq8HuN1R8FXUopnERWemlL5Q30Gkd3BKAxkemFjSP zoLAU+jJaAEfFsM5/fCMVIk/YNhGCZT6vNdqloJyMjXcndn0e4MFu8/5KPNXH0fv aviB/4h96L60tfPNaLMLNEGA1VkZXrevtcYcxq6ALp+TnoE18wfGVyNSHwUh6GTW 3uAliz+e8gwVmzSsQ/D/kxAKAtzenZ+oHlevN+uksGSK3qOvDzWcac8j3F3XUnou 9FFVZiT9hmpXTwfCuiIsQG+WO7IS1bX4rO9INTXcnr0dQkShnxUev8BUNuKxAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUc9ii+ywrxtMzCKdTfT/pzvpDZZUwHwYDVR0j BBgwFoAUMPwS6QOuDuh70aHligYsgCagzlEwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby80 NzExYzExMC03YWIxLTRhMzktYjljYS0zYTliMGU4MWJjZjUvMC8zMEZDMTJFOTAz QUUwRUU4N0JEMUExRTU4QTA2MkM4MDI2QTBDRTUxLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvMzBGQzEyRTkwM0FFMEVFODdCRDFBMUU1OEEwNjJDODAyNkEw Q0U1MS5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vNDcxMWMxMTAtN2FiMS00YTM5LWI5 Y2EtM2E5YjBlODFiY2Y1LzAvMzBGQzEyRTkwM0FFMEVFODdCRDFBMUU1OEEwNjJD ODAyNkEwQ0U1MS5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAK7rQLlNvNY1fZ87Ww7picgHV73GHhgXSc5k nRJm6EVF2SrQo+T8i917UBfPJpEd8zujpHFtgNY64VB6Q5PVhwrd6CGcm8reCWf8 k9Aga3GgZKGjLr3pRDFNcMAuR8wE4qG2DaoQHxv6ERnTPkKBQmMrgrGfksQCjFDw 372s2cHdxfo/XAwmXq5MKR9CQ7D39V3qH34okGEchaej1kDH7H362aOa7bGkoxX1 E8jrn0FoeN6jjNtcYpCwI5V2DXJhSgvu28nGNSfMWcdxBG2L2GwSmLKtAtRHMhJ8 03mjEupb1/2nuqrq5sNQTnKPF7GwozH5j9LSvtMhcXQY6CC1FDw= -----END CERTIFICATE-----Generated at Fri Dec 19 11:16:53 2025 by rpki-client