This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf repo-rpki.idnic.net/repo/6d75088e-49af-472b-9b62-81e73daaf1d6/0/B30FDBDE70FBE70CC44F3C710B467069B1194DD8.mft File: B30FDBDE70FBE70CC44F3C710B467069B1194DD8.mft (raw, json) Hash identifier: y8vPMp4wPVpSQJivucX4DC21svdcGOcprpd+LJEXNjs= Subject key identifier: 2B:12:C5:E8:A6:60:D9:6C:75:E4:CA:9B:95:98:C9:8D:BE:B3:7C:8A Authority key identifier: B3:0F:DB:DE:70:FB:E7:0C:C4:4F:3C:71:0B:46:70:69:B1:19:4D:D8 Certificate issuer: /CN=B30FDBDE70FBE70CC44F3C710B467069B1194DD8 Certificate serial: 70E288A9706BF19E6FCA414D26DDBA34060DC0F6 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/B30FDBDE70FBE70CC44F3C710B467069B1194DD8.cer Subject info access: rsync://repo-rpki.idnic.net/repo/6d75088e-49af-472b-9b62-81e73daaf1d6/0/B30FDBDE70FBE70CC44F3C710B467069B1194DD8.mft Manifest number: 0196 Signing time: Wed 17 Dec 2025 20:01:15 +0000 Manifest this update: Wed 17 Dec 2025 19:56:15 +0000 Manifest next update: Sun 21 Dec 2025 07:36:15 +0000 Files and hashes: 1: 3130332e3232372e3138342e302f32342d3234203d3e20313531303132.roa (hash: HxY+qbSnnto1Z4HzXSATggf6s2/jsThuJ9IKEWbevzQ=) 2: 3130332e3232372e3138352e302f32342d3234203d3e20313531303132.roa (hash: 5p8DeVWE4ixdVzTUD+2z3ALmeQQXrFM+ymQAz8yvg9Q=) 3: B30FDBDE70FBE70CC44F3C710B467069B1194DD8.crl (hash: lPVOUFI6pk0BSRWaZtC7rebogiB0Y0jHg2KzDi/qx/c=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/6d75088e-49af-472b-9b62-81e73daaf1d6/0/B30FDBDE70FBE70CC44F3C710B467069B1194DD8.crl rsync://repo-rpki.idnic.net/repo/6d75088e-49af-472b-9b62-81e73daaf1d6/0/B30FDBDE70FBE70CC44F3C710B467069B1194DD8.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/B30FDBDE70FBE70CC44F3C710B467069B1194DD8.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 21 Dec 2025 07:36:15 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 70:e2:88:a9:70:6b:f1:9e:6f:ca:41:4d:26:dd:ba:34:06:0d:c0:f6 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=B30FDBDE70FBE70CC44F3C710B467069B1194DD8 Validity Not Before: Dec 17 19:56:15 2025 GMT Not After : Dec 21 07:36:15 2025 GMT Subject: CN=2B12C5E8A660D96C75E4CA9B9598C98DBEB37C8A Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bb:97:f7:4b:fe:c8:a5:42:dc:92:5c:4b:6d:fa: 00:cb:b4:5e:cc:ce:0c:a5:c0:2e:69:48:cd:dc:b1: ac:e7:cf:db:b7:62:ce:4f:09:e7:b6:0e:dc:19:ab: 7d:51:ad:21:d9:93:09:24:f6:38:47:6c:ad:33:7b: 52:04:c9:a8:91:fd:40:7d:29:f5:03:c1:a0:1e:48: 8f:d5:8b:bf:ae:4b:60:44:47:aa:19:2a:d8:6f:3f: c2:12:56:86:b4:06:6e:e0:94:74:6b:ad:6d:9b:a4: bc:ea:d1:0d:ae:98:b1:d5:c4:9b:d5:07:56:5c:b3: ae:9f:5a:64:58:cc:3e:9e:90:f9:74:87:18:14:a7: 2a:18:2b:03:76:3a:85:ed:ea:f3:70:01:ed:99:c7: c2:01:95:93:12:4d:98:7b:41:62:82:50:37:bf:1d: 6f:7f:dc:83:77:8e:c9:25:a1:69:a7:a5:7e:7b:7b: c3:da:00:99:c0:b0:f4:2f:41:da:ea:22:b6:7c:9d: c2:11:66:98:b7:a7:26:3d:f0:dd:6b:b5:a6:40:e8: 0d:bd:55:92:2a:67:c5:cf:41:08:b9:d4:c3:c8:97: 8f:51:e9:43:40:13:08:db:ac:45:84:68:f7:34:c3: fe:d0:a7:b5:c2:f7:dc:ea:2f:f3:9a:e0:20:28:61: 70:b9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 2B:12:C5:E8:A6:60:D9:6C:75:E4:CA:9B:95:98:C9:8D:BE:B3:7C:8A X509v3 Authority Key Identifier: keyid:B3:0F:DB:DE:70:FB:E7:0C:C4:4F:3C:71:0B:46:70:69:B1:19:4D:D8 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/6d75088e-49af-472b-9b62-81e73daaf1d6/0/B30FDBDE70FBE70CC44F3C710B467069B1194DD8.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/B30FDBDE70FBE70CC44F3C710B467069B1194DD8.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/6d75088e-49af-472b-9b62-81e73daaf1d6/0/B30FDBDE70FBE70CC44F3C710B467069B1194DD8.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption d8:bc:a8:1f:1d:09:ba:a4:a2:56:96:25:09:ec:92:6c:76:a6: 80:60:e9:ba:5b:e1:44:5d:7a:6c:ef:04:b5:58:66:35:0b:98: f3:59:73:71:49:97:67:d3:a5:49:cf:a3:c6:65:27:02:9e:95: f8:26:53:20:af:1d:01:0f:f3:b9:c0:bc:7d:23:c8:25:23:7a: c5:ce:74:e3:01:37:9f:1c:80:e8:52:f6:1d:2d:80:5f:a5:b6: 86:b7:a1:88:5e:41:51:33:af:72:da:70:6a:c8:d1:92:29:05: bf:7b:e4:ce:3d:26:d7:e6:f6:55:8f:33:08:ad:5b:a9:68:e7: 45:5d:a2:18:36:7b:36:0b:3f:32:f5:c2:4d:ed:87:04:73:9a: d1:65:2c:6a:58:c4:89:d4:4d:ac:8b:06:73:1b:7d:27:d7:21: a0:06:53:6c:eb:d0:67:ad:83:21:2a:79:c7:c5:85:46:67:1e: f6:e4:41:b6:4e:15:cc:64:95:a2:c4:77:a7:85:ec:5f:55:1f: 4e:69:3d:ed:04:6e:23:0c:e4:ed:09:66:6d:2b:8c:8a:21:8e: d5:f5:28:56:73:d6:16:55:9e:3c:9d:59:9e:80:18:26:b1:ed: 06:bb:7b:51:64:a4:0f:4a:39:93:40:e2:fb:bb:fd:87:32:37: 6b:55:85:bd -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUcOKIqXBr8Z5vykFNJt26NAYNwPYwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoQjMwRkRCREU3MEZCRTcwQ0M0NEYzQzcxMEI0NjcwNjlC MTE5NEREODAeFw0yNTEyMTcxOTU2MTVaFw0yNTEyMjEwNzM2MTVaMDMxMTAvBgNV BAMTKDJCMTJDNUU4QTY2MEQ5NkM3NUU0Q0E5Qjk1OThDOThEQkVCMzdDOEEwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC7l/dL/silQtySXEtt+gDLtF7M zgylwC5pSM3csaznz9u3Ys5PCee2DtwZq31RrSHZkwkk9jhHbK0ze1IEyaiR/UB9 KfUDwaAeSI/Vi7+uS2BER6oZKthvP8ISVoa0Bm7glHRrrW2bpLzq0Q2umLHVxJvV B1Zcs66fWmRYzD6ekPl0hxgUpyoYKwN2OoXt6vNwAe2Zx8IBlZMSTZh7QWKCUDe/ HW9/3IN3jskloWmnpX57e8PaAJnAsPQvQdrqIrZ8ncIRZpi3pyY98N1rtaZA6A29 VZIqZ8XPQQi51MPIl49R6UNAEwjbrEWEaPc0w/7Qp7XC99zqL/Oa4CAoYXC5AgMB AAGjggI8MIICODAdBgNVHQ4EFgQUKxLF6KZg2Wx15MqblZjJjb6zfIowHwYDVR0j BBgwFoAUsw/b3nD75wzETzxxC0ZwabEZTdgwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby82 ZDc1MDg4ZS00OWFmLTQ3MmItOWI2Mi04MWU3M2RhYWYxZDYvMC9CMzBGREJERTcw RkJFNzBDQzQ0RjNDNzEwQjQ2NzA2OUIxMTk0REQ4LmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvQjMwRkRCREU3MEZCRTcwQ0M0NEYzQzcxMEI0NjcwNjlCMTE5 NEREOC5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vNmQ3NTA4OGUtNDlhZi00NzJiLTli NjItODFlNzNkYWFmMWQ2LzAvQjMwRkRCREU3MEZCRTcwQ0M0NEYzQzcxMEI0Njcw NjlCMTE5NEREOC5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBANi8qB8dCbqkolaWJQnskmx2poBg6bpb4URd emzvBLVYZjULmPNZc3FJl2fTpUnPo8ZlJwKelfgmUyCvHQEP87nAvH0jyCUjesXO dOMBN58cgOhS9h0tgF+ltoa3oYheQVEzr3LacGrI0ZIpBb975M49Jtfm9lWPMwit W6lo50Vdohg2ezYLPzL1wk3thwRzmtFlLGpYxInUTayLBnMbfSfXIaAGU2zr0Get gyEqecfFhUZnHvbkQbZOFcxklaLEd6eF7F9VH05pPe0EbiMM5O0JZm0rjIohjtX1 KFZz1hZVnjydWZ6AGCax7Qa7e1FkpA9KOZNA4vu7/YcyN2tVhb0= -----END CERTIFICATE-----Generated at Fri Dec 19 11:20:40 2025 by rpki-client