This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf repo-rpki.idnic.net/repo/957996f5-a934-4b44-8547-19ec37cf7c14/0/30C39359651C33B59AC32BC46831980108960568.mft File: 30C39359651C33B59AC32BC46831980108960568.mft (raw, json) Hash identifier: D0YVY6woyyIeXt697QuXpYtUzvJlwUPvsstkEGj/qWk= Subject key identifier: 4E:80:3E:95:A0:31:7B:84:55:C3:8B:7A:34:BD:A1:96:52:56:8B:89 Authority key identifier: 30:C3:93:59:65:1C:33:B5:9A:C3:2B:C4:68:31:98:01:08:96:05:68 Certificate issuer: /CN=30C39359651C33B59AC32BC46831980108960568 Certificate serial: 5C1592AAF4934F80E40AE712C72BA66C91DA0B75 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/30C39359651C33B59AC32BC46831980108960568.cer Subject info access: rsync://repo-rpki.idnic.net/repo/957996f5-a934-4b44-8547-19ec37cf7c14/0/30C39359651C33B59AC32BC46831980108960568.mft Manifest number: 0532 Signing time: Wed 24 Dec 2025 04:54:33 +0000 Manifest this update: Wed 24 Dec 2025 04:49:33 +0000 Manifest next update: Sat 27 Dec 2025 12:35:33 +0000 Files and hashes: 1: 30C39359651C33B59AC32BC46831980108960568.crl (hash: ikiNMseyBLCIGQz435NS4xYQy87Js1NfCyCRQ6chzqQ=) 2: 323030313a6466333a643730303a3a2f34382d3438203d3e20313337323937.roa (hash: dFQhxxhIxqRHu+YRpdoF0va5NYJwS4I6YJDx/CCdh1g=) 3: 3130332e3130372e3134302e302f32342d3234203d3e20313337323937.roa (hash: BHlKkUg0NjANH6Mliit3f4KGxxDlGbzPwZhqnWpcPcU=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/957996f5-a934-4b44-8547-19ec37cf7c14/0/30C39359651C33B59AC32BC46831980108960568.crl rsync://repo-rpki.idnic.net/repo/957996f5-a934-4b44-8547-19ec37cf7c14/0/30C39359651C33B59AC32BC46831980108960568.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/30C39359651C33B59AC32BC46831980108960568.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 27 Dec 2025 12:35:33 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 5c:15:92:aa:f4:93:4f:80:e4:0a:e7:12:c7:2b:a6:6c:91:da:0b:75 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=30C39359651C33B59AC32BC46831980108960568 Validity Not Before: Dec 24 04:49:33 2025 GMT Not After : Dec 27 12:35:33 2025 GMT Subject: CN=4E803E95A0317B8455C38B7A34BDA19652568B89 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:df:91:e9:18:c9:73:16:21:2a:57:34:5c:09:a7: f1:95:74:ed:0f:b7:73:83:18:93:bd:4b:f5:64:db: b9:94:4b:a0:0c:f8:7e:6f:cd:5b:05:d1:b8:4a:f0: 2d:55:d2:c0:c9:9f:0a:3d:66:c6:3c:50:66:a3:49: ea:45:54:6a:2f:1a:9d:01:3c:3c:50:22:88:ea:88: eb:16:66:2f:37:3b:1b:37:03:29:79:16:5e:e4:bf: e9:4e:98:b7:db:ee:8d:b0:69:2f:f2:94:ac:8d:49: 12:ea:95:95:b8:8d:9c:ab:f3:ec:60:d3:83:f6:ed: 1f:36:7b:66:ec:3d:f9:22:27:51:83:18:73:65:b1: f3:4d:f8:a7:fe:66:93:15:8c:96:bc:ed:59:a4:3a: 79:16:81:79:78:87:35:71:01:63:6a:32:80:81:2d: 87:b9:64:a7:fe:12:5a:22:ef:27:b0:88:7f:f8:7e: 34:e2:79:8c:98:dd:07:05:cd:e5:72:e0:da:ba:a4: b3:a5:66:8e:21:b3:c8:cf:78:22:4a:69:81:45:6d: 5c:51:54:5a:62:4d:25:07:2b:75:87:cd:da:2a:e3: c3:46:c0:2d:f0:04:b2:bb:a8:7a:32:98:5a:98:f8: f0:7b:40:71:10:da:26:55:b0:0c:52:f8:83:37:10: 8b:6f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 4E:80:3E:95:A0:31:7B:84:55:C3:8B:7A:34:BD:A1:96:52:56:8B:89 X509v3 Authority Key Identifier: keyid:30:C3:93:59:65:1C:33:B5:9A:C3:2B:C4:68:31:98:01:08:96:05:68 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/957996f5-a934-4b44-8547-19ec37cf7c14/0/30C39359651C33B59AC32BC46831980108960568.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/30C39359651C33B59AC32BC46831980108960568.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/957996f5-a934-4b44-8547-19ec37cf7c14/0/30C39359651C33B59AC32BC46831980108960568.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 80:b6:be:76:ad:9e:8e:d9:f5:24:a1:4a:df:c1:d6:55:45:ad: a6:72:f6:c9:89:ac:66:80:da:7e:db:47:1d:a5:ba:d4:15:22: 84:a2:5b:0c:b0:ea:51:f1:7c:46:a7:9e:c2:a0:9d:3a:0c:72: d3:aa:b4:88:14:85:70:84:4c:45:07:14:47:c7:e4:13:1f:8f: 56:77:34:4b:8e:97:ba:a8:bc:d1:b8:7c:81:dc:b4:e4:6a:02: df:6b:9d:76:f7:15:cc:15:b2:8f:20:30:e9:f4:a3:34:4d:4d: 76:55:20:ad:91:d9:e4:52:0e:9a:7e:13:6d:4e:17:7a:42:98: 6e:09:06:f1:fc:04:c5:81:96:e8:39:5d:bd:15:42:d4:a0:7a: 66:4d:53:52:a5:6c:3a:20:45:5b:65:61:5f:1f:03:e2:18:9b: 3d:81:9c:af:e2:c7:75:b5:32:de:ba:af:27:90:fd:7a:76:b0: 5d:24:52:42:37:f6:3a:07:79:1e:25:2b:f1:0a:3f:8f:12:52: 75:4f:45:3f:87:34:0f:4d:c5:fd:65:87:55:c1:15:8c:03:65: 61:14:7d:6b:55:c6:b5:d1:ad:1b:16:ea:42:06:b9:08:c0:19: 43:7d:5d:d6:59:8a:a6:1b:e4:5c:8c:1d:d9:9e:94:15:de:f4: dc:e1:9f:2b -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUXBWSqvSTT4DkCucSxyumbJHaC3UwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMzBDMzkzNTk2NTFDMzNCNTlBQzMyQkM0NjgzMTk4MDEw ODk2MDU2ODAeFw0yNTEyMjQwNDQ5MzNaFw0yNTEyMjcxMjM1MzNaMDMxMTAvBgNV BAMTKDRFODAzRTk1QTAzMTdCODQ1NUMzOEI3QTM0QkRBMTk2NTI1NjhCODkwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDfkekYyXMWISpXNFwJp/GVdO0P t3ODGJO9S/Vk27mUS6AM+H5vzVsF0bhK8C1V0sDJnwo9ZsY8UGajSepFVGovGp0B PDxQIojqiOsWZi83Oxs3Ayl5Fl7kv+lOmLfb7o2waS/ylKyNSRLqlZW4jZyr8+xg 04P27R82e2bsPfkiJ1GDGHNlsfNN+Kf+ZpMVjJa87VmkOnkWgXl4hzVxAWNqMoCB LYe5ZKf+Eloi7yewiH/4fjTieYyY3QcFzeVy4Nq6pLOlZo4hs8jPeCJKaYFFbVxR VFpiTSUHK3WHzdoq48NGwC3wBLK7qHoymFqY+PB7QHEQ2iZVsAxS+IM3EItvAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUToA+laAxe4RVw4t6NL2hllJWi4kwHwYDVR0j BBgwFoAUMMOTWWUcM7WawyvEaDGYAQiWBWgwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby85 NTc5OTZmNS1hOTM0LTRiNDQtODU0Ny0xOWVjMzdjZjdjMTQvMC8zMEMzOTM1OTY1 MUMzM0I1OUFDMzJCQzQ2ODMxOTgwMTA4OTYwNTY4LmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvMzBDMzkzNTk2NTFDMzNCNTlBQzMyQkM0NjgzMTk4MDEwODk2 MDU2OC5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vOTU3OTk2ZjUtYTkzNC00YjQ0LTg1 NDctMTllYzM3Y2Y3YzE0LzAvMzBDMzkzNTk2NTFDMzNCNTlBQzMyQkM0NjgzMTk4 MDEwODk2MDU2OC5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAIC2vnatno7Z9SShSt/B1lVFraZy9smJrGaA 2n7bRx2lutQVIoSiWwyw6lHxfEannsKgnToMctOqtIgUhXCETEUHFEfH5BMfj1Z3 NEuOl7qovNG4fIHctORqAt9rnXb3FcwVso8gMOn0ozRNTXZVIK2R2eRSDpp+E21O F3pCmG4JBvH8BMWBlug5Xb0VQtSgemZNU1KlbDogRVtlYV8fA+IYmz2BnK/ix3W1 Mt66ryeQ/Xp2sF0kUkI39joHeR4lK/EKP48SUnVPRT+HNA9Nxf1lh1XBFYwDZWEU fWtVxrXRrRsW6kIGuQjAGUN9XdZZiqYb5FyMHdmelBXe9Nzhnys= -----END CERTIFICATE-----Generated at Wed Dec 24 23:31:34 2025 by rpki-client