This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf repo-rpki.idnic.net/repo/c03802e2-03af-4dd0-8dce-54c28a72563d/0/30CE8572EA9DEDA805151BBD165E699D1191FED0.mft
File:                     30CE8572EA9DEDA805151BBD165E699D1191FED0.mft (raw, json)
Hash identifier:          +lkeISQlFATiQhIztdrTmHdDdMjQ12uW/Nzx8uOfF5I=
Subject key identifier:   FC:00:72:E5:12:1F:E7:4D:26:8F:57:1C:46:97:91:77:00:35:AF:E3
Authority key identifier: 30:CE:85:72:EA:9D:ED:A8:05:15:1B:BD:16:5E:69:9D:11:91:FE:D0
Certificate issuer:       /CN=30CE8572EA9DEDA805151BBD165E699D1191FED0
Certificate serial:       39D057B928A799CCC0E1A7F3B02A8FA9943FC3B3
Authority info access:    rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/30CE8572EA9DEDA805151BBD165E699D1191FED0.cer
Subject info access:      rsync://repo-rpki.idnic.net/repo/c03802e2-03af-4dd0-8dce-54c28a72563d/0/30CE8572EA9DEDA805151BBD165E699D1191FED0.mft
Manifest number:          01AD
Signing time:             Thu 18 Dec 2025 19:42:31 +0000
Manifest this update:     Thu 18 Dec 2025 19:37:31 +0000
Manifest next update:     Sun 21 Dec 2025 23:14:31 +0000
Files and hashes:         1: 30CE8572EA9DEDA805151BBD165E699D1191FED0.crl (hash: nCLJng62HOceF7MBwczM3IRfPLfAwDLrwx+SrXttQYI=)
                          2: 3130332e3231312e3139362e302f32342d3234203d3e20313530393532.roa (hash: Q2j6s7F7V0sOCSPl3aHs6rPupunQzCX/dgkjx2YSfjU=)
Validation:               OK
Signature path:           rsync://repo-rpki.idnic.net/repo/c03802e2-03af-4dd0-8dce-54c28a72563d/0/30CE8572EA9DEDA805151BBD165E699D1191FED0.crl
                          rsync://repo-rpki.idnic.net/repo/c03802e2-03af-4dd0-8dce-54c28a72563d/0/30CE8572EA9DEDA805151BBD165E699D1191FED0.mft
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/30CE8572EA9DEDA805151BBD165E699D1191FED0.cer
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sun 21 Dec 2025 23:14:31 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            39:d0:57:b9:28:a7:99:cc:c0:e1:a7:f3:b0:2a:8f:a9:94:3f:c3:b3
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=30CE8572EA9DEDA805151BBD165E699D1191FED0
        Validity
            Not Before: Dec 18 19:37:31 2025 GMT
            Not After : Dec 21 23:14:31 2025 GMT
        Subject: CN=FC0072E5121FE74D268F571C469791770035AFE3
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ac:e1:6d:c6:c2:3c:22:f2:74:e7:fd:62:e8:96:
                    1d:15:84:f5:d8:7c:11:99:bd:5f:ad:b8:0d:95:de:
                    5b:60:87:52:e3:16:3a:fd:5e:91:21:58:7f:50:a1:
                    70:ce:d7:0c:65:8d:6b:9b:8c:d7:ff:07:f4:87:0d:
                    5d:be:eb:6d:41:32:de:2a:40:04:03:6f:66:a4:62:
                    c6:e9:73:3e:52:1c:76:5e:16:4b:be:79:4e:a1:43:
                    30:e3:99:3e:56:ab:19:d5:be:6f:6e:49:2e:f6:4a:
                    c3:db:e8:b4:cd:cd:a9:d5:f2:06:7c:0c:e0:65:fe:
                    fe:88:2a:d1:40:80:c2:d3:79:14:d3:e4:db:73:da:
                    98:14:11:1b:2d:6c:50:42:a1:8f:8d:4d:5f:5d:68:
                    9e:16:e4:2f:da:ee:de:1f:a0:4c:85:a8:ee:62:4a:
                    69:fb:a9:78:24:bd:2b:f0:db:40:a0:95:7c:a0:b7:
                    df:7c:f3:fd:3a:07:c4:c0:03:19:42:14:82:a7:c7:
                    97:f6:32:1f:0c:7a:11:c9:83:fb:8a:4e:3e:93:18:
                    c0:f2:d6:86:70:f5:41:e9:86:da:09:9c:b7:74:2f:
                    5d:05:df:87:8e:6e:e2:19:e1:17:6b:5c:aa:2f:cb:
                    d1:73:51:2e:aa:04:5c:90:b7:c8:80:6e:32:1a:0c:
                    fa:35
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                FC:00:72:E5:12:1F:E7:4D:26:8F:57:1C:46:97:91:77:00:35:AF:E3
            X509v3 Authority Key Identifier:
                keyid:30:CE:85:72:EA:9D:ED:A8:05:15:1B:BD:16:5E:69:9D:11:91:FE:D0

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repo-rpki.idnic.net/repo/c03802e2-03af-4dd0-8dce-54c28a72563d/0/30CE8572EA9DEDA805151BBD165E699D1191FED0.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/30CE8572EA9DEDA805151BBD165E699D1191FED0.cer

            Subject Information Access:
                Signed Object - URI:rsync://repo-rpki.idnic.net/repo/c03802e2-03af-4dd0-8dce-54c28a72563d/0/30CE8572EA9DEDA805151BBD165E699D1191FED0.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         07:1a:53:8a:d8:1c:de:73:2d:a7:61:94:ce:e0:f6:55:d4:8e:
         71:b2:46:78:cd:56:33:69:66:b5:60:b8:39:0f:f0:99:82:1c:
         6f:57:6f:78:cd:8c:b9:f0:de:34:10:cf:74:a2:e4:f9:11:e3:
         6e:dc:e8:46:62:84:65:75:f5:93:79:f5:22:e4:8e:ff:bc:d4:
         b2:87:55:b5:f5:e8:e9:a0:3b:1e:c1:47:25:3f:77:0e:73:d7:
         f7:55:77:64:a8:be:e0:23:7f:05:98:e4:df:3c:05:99:f7:e0:
         53:f6:42:da:8c:16:00:4c:61:4a:e8:a2:af:09:24:58:7b:40:
         4f:5f:f7:a2:ef:3e:e4:10:34:4f:9e:3b:4e:98:86:fb:b3:53:
         39:65:8a:ee:04:9b:7f:57:b0:a7:1f:99:0c:19:e1:f5:81:71:
         22:2a:7c:ea:94:44:6f:fc:33:d3:ee:b4:aa:1f:0d:39:a3:00:
         09:ee:30:2f:41:3c:3b:c5:93:cf:15:8d:0f:6d:30:36:3b:68:
         b7:39:3c:ab:2e:df:33:d4:d6:73:df:c4:d0:92:14:37:56:4b:
         f7:75:0f:b3:05:c1:d5:e5:cb:f5:f4:df:57:b3:36:97:40:1b:
         cf:56:bd:4e:06:4c:6b:7e:40:17:9f:42:7c:bd:b9:e9:18:9d:
         be:46:b4:6c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Dec 19 11:19:39 2025 by rpki-client