This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf repo-rpki.idnic.net/repo/7e9e01ba-59c9-4047-ac0b-e9b2fe65853c/0/430E302040DE11D8C84431B3397113EC969694A0.mft File: 430E302040DE11D8C84431B3397113EC969694A0.mft (raw, json) Hash identifier: s/pc3sqoHviR+PPjAHxLrYrnIN6PFXuR/DG7V+e/X9g= Subject key identifier: D9:5C:14:A0:55:59:47:EF:ED:F4:0C:F7:54:82:BC:4A:FA:5A:B7:2F Authority key identifier: 43:0E:30:20:40:DE:11:D8:C8:44:31:B3:39:71:13:EC:96:96:94:A0 Certificate issuer: /CN=430E302040DE11D8C84431B3397113EC969694A0 Certificate serial: 32765CB29B2A07C441D4B22A2EF7074CCF3C02DB Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/430E302040DE11D8C84431B3397113EC969694A0.cer Subject info access: rsync://repo-rpki.idnic.net/repo/7e9e01ba-59c9-4047-ac0b-e9b2fe65853c/0/430E302040DE11D8C84431B3397113EC969694A0.mft Manifest number: 04CF Signing time: Wed 17 Dec 2025 11:22:01 +0000 Manifest this update: Wed 17 Dec 2025 11:17:01 +0000 Manifest next update: Sat 20 Dec 2025 20:15:01 +0000 Files and hashes: 1: 430E302040DE11D8C84431B3397113EC969694A0.crl (hash: UOdZK3G9R+ig7lCRXZGWP9Ns8Sz1O95wTijXXOk+7XM=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/7e9e01ba-59c9-4047-ac0b-e9b2fe65853c/0/430E302040DE11D8C84431B3397113EC969694A0.crl rsync://repo-rpki.idnic.net/repo/7e9e01ba-59c9-4047-ac0b-e9b2fe65853c/0/430E302040DE11D8C84431B3397113EC969694A0.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/430E302040DE11D8C84431B3397113EC969694A0.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 20 Dec 2025 20:15:01 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 32:76:5c:b2:9b:2a:07:c4:41:d4:b2:2a:2e:f7:07:4c:cf:3c:02:db Signature Algorithm: sha256WithRSAEncryption Issuer: CN=430E302040DE11D8C84431B3397113EC969694A0 Validity Not Before: Dec 17 11:17:01 2025 GMT Not After : Dec 20 20:15:01 2025 GMT Subject: CN=D95C14A0555947EFEDF40CF75482BC4AFA5AB72F Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cc:ad:63:4b:15:c1:ad:e6:71:0c:5f:db:cd:5c: 65:8c:c8:eb:72:02:a5:cf:46:fd:85:bb:45:03:99: 93:a6:7a:af:22:17:af:de:39:1e:e2:e2:ca:a1:09: 17:97:fc:07:ae:4b:7f:eb:b4:71:08:aa:87:43:84: e8:7b:72:fe:c3:3f:f3:e7:e1:20:dd:3c:1e:34:ab: 1c:7f:05:90:1f:61:89:e7:96:ba:d6:1c:0d:ab:ad: d8:8b:49:ac:3f:aa:35:32:0d:28:16:8f:7d:db:45: f5:2c:c4:04:e8:6f:33:63:13:5d:ad:3d:5a:62:63: 87:ec:fc:9d:cd:6f:a2:ab:3c:ac:dc:a9:38:3a:ad: c9:96:fc:94:18:0b:8f:d0:92:fa:0f:e5:71:09:06: 0a:b4:88:02:60:97:a2:be:21:27:81:76:ae:6a:ea: e7:61:39:2d:a3:02:24:2e:1c:19:27:5b:cf:00:1b: e5:26:39:c3:43:00:13:f4:3f:7f:73:f3:b3:cc:69: 39:f0:8a:1b:c7:78:ce:f7:47:05:35:a1:96:f1:92: 5c:c6:01:77:c7:fc:51:02:4f:b7:f9:95:33:9e:40: cd:17:5d:62:ca:bc:28:55:ab:bb:6d:38:47:ef:5a: 03:28:a5:7a:3d:96:7e:20:02:ce:da:2c:2c:1d:cd: d8:97 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D9:5C:14:A0:55:59:47:EF:ED:F4:0C:F7:54:82:BC:4A:FA:5A:B7:2F X509v3 Authority Key Identifier: keyid:43:0E:30:20:40:DE:11:D8:C8:44:31:B3:39:71:13:EC:96:96:94:A0 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/7e9e01ba-59c9-4047-ac0b-e9b2fe65853c/0/430E302040DE11D8C84431B3397113EC969694A0.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/430E302040DE11D8C84431B3397113EC969694A0.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/7e9e01ba-59c9-4047-ac0b-e9b2fe65853c/0/430E302040DE11D8C84431B3397113EC969694A0.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption a9:09:08:84:e1:95:5c:2b:fb:21:eb:8e:00:b3:39:bf:34:3c: 46:94:72:77:d1:e7:75:e0:14:1c:47:21:e8:eb:34:e3:26:18: 8f:54:5b:b8:f0:74:26:7c:0d:3b:bd:89:f4:2a:ae:a1:33:ee: 83:84:d9:0b:ac:41:fa:3c:4c:5a:ee:a9:12:c4:bf:a3:b3:48: 62:63:ff:3d:df:7e:a7:71:73:c3:05:be:4a:c6:a7:37:42:bd: 18:87:78:5e:44:1d:7b:97:06:26:50:1b:32:36:95:1d:c7:cc: f2:7f:7d:0c:4e:51:fa:70:9f:8b:5f:9b:db:32:78:9a:49:8c: 89:93:51:c1:97:21:51:df:6a:34:30:7c:8b:c5:9c:d8:bc:fd: 9e:d5:2d:02:7d:38:35:bb:3e:0b:d3:fe:c1:ca:c9:b3:25:d0: 75:c0:d0:2f:67:d3:73:b7:ac:7a:e9:aa:f0:29:7f:e9:99:f3: 7e:ab:af:ca:4d:5a:5a:87:64:22:57:a3:07:12:7c:00:5f:3f: 40:d6:f2:e1:09:e6:7c:ac:07:86:e3:cc:0b:90:72:87:15:65: 69:2c:55:77:20:15:8a:d6:14:2a:58:1f:54:aa:42:2f:bb:36: 9e:a5:8b:53:fc:66:25:45:f8:56:ea:14:2d:a5:80:85:21:0b: e2:2a:78:2a -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUMnZcspsqB8RB1LIqLvcHTM88AtswDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoNDMwRTMwMjA0MERFMTFEOEM4NDQzMUIzMzk3MTEzRUM5 Njk2OTRBMDAeFw0yNTEyMTcxMTE3MDFaFw0yNTEyMjAyMDE1MDFaMDMxMTAvBgNV BAMTKEQ5NUMxNEEwNTU1OTQ3RUZFREY0MENGNzU0ODJCQzRBRkE1QUI3MkYwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDMrWNLFcGt5nEMX9vNXGWMyOty AqXPRv2Fu0UDmZOmeq8iF6/eOR7i4sqhCReX/AeuS3/rtHEIqodDhOh7cv7DP/Pn 4SDdPB40qxx/BZAfYYnnlrrWHA2rrdiLSaw/qjUyDSgWj33bRfUsxATobzNjE12t PVpiY4fs/J3Nb6KrPKzcqTg6rcmW/JQYC4/QkvoP5XEJBgq0iAJgl6K+ISeBdq5q 6udhOS2jAiQuHBknW88AG+UmOcNDABP0P39z87PMaTnwihvHeM73RwU1oZbxklzG AXfH/FECT7f5lTOeQM0XXWLKvChVq7ttOEfvWgMopXo9ln4gAs7aLCwdzdiXAgMB AAGjggI8MIICODAdBgNVHQ4EFgQU2VwUoFVZR+/t9Az3VIK8Svpaty8wHwYDVR0j BBgwFoAUQw4wIEDeEdjIRDGzOXET7JaWlKAwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby83 ZTllMDFiYS01OWM5LTQwNDctYWMwYi1lOWIyZmU2NTg1M2MvMC80MzBFMzAyMDQw REUxMUQ4Qzg0NDMxQjMzOTcxMTNFQzk2OTY5NEEwLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvNDMwRTMwMjA0MERFMTFEOEM4NDQzMUIzMzk3MTEzRUM5Njk2 OTRBMC5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vN2U5ZTAxYmEtNTljOS00MDQ3LWFj MGItZTliMmZlNjU4NTNjLzAvNDMwRTMwMjA0MERFMTFEOEM4NDQzMUIzMzk3MTEz RUM5Njk2OTRBMC5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAKkJCIThlVwr+yHrjgCzOb80PEaUcnfR53Xg FBxHIejrNOMmGI9UW7jwdCZ8DTu9ifQqrqEz7oOE2QusQfo8TFruqRLEv6OzSGJj /z3ffqdxc8MFvkrGpzdCvRiHeF5EHXuXBiZQGzI2lR3HzPJ/fQxOUfpwn4tfm9sy eJpJjImTUcGXIVHfajQwfIvFnNi8/Z7VLQJ9ODW7PgvT/sHKybMl0HXA0C9n03O3 rHrpqvApf+mZ836rr8pNWlqHZCJXowcSfABfP0DW8uEJ5nysB4bjzAuQcocVZWks VXcgFYrWFCpYH1SqQi+7Np6li1P8ZiVF+FbqFC2lgIUhC+IqeCo= -----END CERTIFICATE-----Generated at Fri Dec 19 11:17:34 2025 by rpki-client