This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf repo-rpki.idnic.net/repo/d4f48a89-90c5-4f5a-8015-36f1196a71c8/0/F30F14F4AEB6630FF4E270B0729358AEBFA97733.mft File: F30F14F4AEB6630FF4E270B0729358AEBFA97733.mft (raw, json) Hash identifier: B4igUnHzM2TCzESKN7a0lLQ4FDj/vImyPjF5hCWZGsg= Subject key identifier: 86:B5:6F:72:44:A6:9D:D1:26:68:ED:6B:AC:2E:7B:05:06:FD:75:8A Authority key identifier: F3:0F:14:F4:AE:B6:63:0F:F4:E2:70:B0:72:93:58:AE:BF:A9:77:33 Certificate issuer: /CN=F30F14F4AEB6630FF4E270B0729358AEBFA97733 Certificate serial: 25BC649821212EB8BF7F3CBE541BB980CD1F1756 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/F30F14F4AEB6630FF4E270B0729358AEBFA97733.cer Subject info access: rsync://repo-rpki.idnic.net/repo/d4f48a89-90c5-4f5a-8015-36f1196a71c8/0/F30F14F4AEB6630FF4E270B0729358AEBFA97733.mft Manifest number: 0533 Signing time: Fri 19 Dec 2025 05:44:14 +0000 Manifest this update: Fri 19 Dec 2025 05:39:14 +0000 Manifest next update: Mon 22 Dec 2025 16:53:14 +0000 Files and hashes: 1: 323430373a343630303a3a2f33322d3438203d3e203435323935.roa (hash: 4LpQRgrp7oBVnTYb85mIa1GKQ4oBc22IhdekLi1TA6c=) 2: F30F14F4AEB6630FF4E270B0729358AEBFA97733.crl (hash: SzK9cQ5BvXmN6YsGsSQg0HiD3n2ywF6AYYxUkOVOEmQ=) 3: 3130332e3135312e39322e302f32332d3234203d3e203435323935.roa (hash: WCf4k80HtpWJXreA4Q6XD5iDNEeVQ9AU8BVWi8IEoSM=) 4: 3131332e3231322e3136302e302f32312d3234203d3e203435323935.roa (hash: ykBCC6a4TUa9u53qD+3M0qE2NkGoJtCXa3OdoYw7FhA=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/d4f48a89-90c5-4f5a-8015-36f1196a71c8/0/F30F14F4AEB6630FF4E270B0729358AEBFA97733.crl rsync://repo-rpki.idnic.net/repo/d4f48a89-90c5-4f5a-8015-36f1196a71c8/0/F30F14F4AEB6630FF4E270B0729358AEBFA97733.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/F30F14F4AEB6630FF4E270B0729358AEBFA97733.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 22 Dec 2025 16:53:14 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 25:bc:64:98:21:21:2e:b8:bf:7f:3c:be:54:1b:b9:80:cd:1f:17:56 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=F30F14F4AEB6630FF4E270B0729358AEBFA97733 Validity Not Before: Dec 19 05:39:14 2025 GMT Not After : Dec 22 16:53:14 2025 GMT Subject: CN=86B56F7244A69DD12668ED6BAC2E7B0506FD758A Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b5:27:03:a2:cf:a6:55:44:a7:d2:7f:01:c5:d2: 89:6f:56:7f:fc:5f:ba:ed:63:ca:9c:27:1c:72:70: 3f:6e:d9:ec:94:00:23:3c:1d:11:18:70:9b:9c:f6: c3:d8:e1:3e:b1:c3:b8:05:9e:14:76:7d:d9:83:bd: 55:50:29:78:d8:2c:85:d3:fd:ed:e8:2c:ee:36:5d: 77:a8:2c:30:6a:f5:60:db:9a:b6:dd:fe:c7:12:bf: 5a:dd:65:ce:44:ab:14:b5:2a:92:b6:e1:f7:0a:1f: 73:cc:27:a2:93:4e:16:5f:dc:59:60:c6:73:15:39: c0:e5:d9:87:8a:40:b8:e2:5f:7d:73:13:78:37:bf: f0:5e:75:0e:87:36:22:17:b0:e0:97:ec:0d:b2:91: 5e:50:3a:5c:41:64:f6:58:ff:1e:73:95:fb:1a:5f: 29:60:8d:9d:8a:d5:a9:86:ed:54:5c:3d:da:d6:ae: de:34:6c:26:5d:f4:76:de:4b:b0:02:90:45:31:80: 4d:c8:fa:a4:35:5c:ce:5e:24:ec:03:01:b8:5c:92: 19:e5:1c:9a:08:6f:7a:23:5a:68:53:b3:8f:6e:c6: e0:76:5c:c0:df:8f:8a:32:3c:95:b9:b0:d0:56:39: 17:d9:e0:79:da:37:2f:3b:6f:a9:aa:ff:dd:40:3e: 79:fd Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 86:B5:6F:72:44:A6:9D:D1:26:68:ED:6B:AC:2E:7B:05:06:FD:75:8A X509v3 Authority Key Identifier: keyid:F3:0F:14:F4:AE:B6:63:0F:F4:E2:70:B0:72:93:58:AE:BF:A9:77:33 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/d4f48a89-90c5-4f5a-8015-36f1196a71c8/0/F30F14F4AEB6630FF4E270B0729358AEBFA97733.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/F30F14F4AEB6630FF4E270B0729358AEBFA97733.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/d4f48a89-90c5-4f5a-8015-36f1196a71c8/0/F30F14F4AEB6630FF4E270B0729358AEBFA97733.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 82:3a:ea:28:63:4d:aa:f6:71:d4:ee:f5:96:b9:4b:2c:e5:30: 9f:0a:27:5d:1f:a8:c7:8d:0a:fd:88:6d:05:e4:02:d9:00:7f: 1d:32:71:b7:a3:76:b2:35:38:fc:ff:b7:f7:8d:d7:f0:c9:92: 03:80:e0:e1:c9:fe:b3:dc:a1:58:9b:65:a0:3c:6c:ec:02:b3: cc:02:32:f1:24:31:c0:1d:b3:a4:f1:eb:2f:6d:65:b1:47:25: 7b:52:db:a1:07:a8:ef:97:82:8a:08:99:c3:14:6c:76:18:70: a0:dd:9f:c4:b8:62:ce:f8:07:04:ca:c8:07:b7:c3:55:10:9e: 43:d1:b4:4f:4b:3e:b3:4c:05:bb:4a:6c:c1:26:c5:68:ba:b7: 2c:d9:c6:bd:1b:aa:26:cd:da:07:e1:39:29:f6:ed:ed:e7:4e: 53:93:f0:ce:6e:8f:e1:6f:d0:a4:98:0e:0b:3d:28:0c:a2:2d: 61:7c:fa:3d:61:cc:34:56:a5:88:b7:bb:b4:e8:ae:29:7e:1b: b3:86:01:4a:41:af:5d:35:40:7a:e0:74:4b:b7:75:95:0c:a8: ef:32:6d:db:0a:39:03:1b:5b:32:a2:9e:83:3b:59:ff:ff:91: 44:5f:be:62:97:ea:ac:33:79:63:d1:c6:36:9f:a0:00:a9:36: cb:3c:39:b1 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUJbxkmCEhLri/fzy+VBu5gM0fF1YwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoRjMwRjE0RjRBRUI2NjMwRkY0RTI3MEIwNzI5MzU4QUVC RkE5NzczMzAeFw0yNTEyMTkwNTM5MTRaFw0yNTEyMjIxNjUzMTRaMDMxMTAvBgNV BAMTKDg2QjU2RjcyNDRBNjlERDEyNjY4RUQ2QkFDMkU3QjA1MDZGRDc1OEEwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC1JwOiz6ZVRKfSfwHF0olvVn/8 X7rtY8qcJxxycD9u2eyUACM8HREYcJuc9sPY4T6xw7gFnhR2fdmDvVVQKXjYLIXT /e3oLO42XXeoLDBq9WDbmrbd/scSv1rdZc5EqxS1KpK24fcKH3PMJ6KTThZf3Flg xnMVOcDl2YeKQLjiX31zE3g3v/BedQ6HNiIXsOCX7A2ykV5QOlxBZPZY/x5zlfsa XylgjZ2K1amG7VRcPdrWrt40bCZd9HbeS7ACkEUxgE3I+qQ1XM5eJOwDAbhckhnl HJoIb3ojWmhTs49uxuB2XMDfj4oyPJW5sNBWORfZ4HnaNy87b6mq/91APnn9AgMB AAGjggI8MIICODAdBgNVHQ4EFgQUhrVvckSmndEmaO1rrC57BQb9dYowHwYDVR0j BBgwFoAU8w8U9K62Yw/04nCwcpNYrr+pdzMwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby9k NGY0OGE4OS05MGM1LTRmNWEtODAxNS0zNmYxMTk2YTcxYzgvMC9GMzBGMTRGNEFF QjY2MzBGRjRFMjcwQjA3MjkzNThBRUJGQTk3NzMzLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvRjMwRjE0RjRBRUI2NjMwRkY0RTI3MEIwNzI5MzU4QUVCRkE5 NzczMy5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vZDRmNDhhODktOTBjNS00ZjVhLTgw MTUtMzZmMTE5NmE3MWM4LzAvRjMwRjE0RjRBRUI2NjMwRkY0RTI3MEIwNzI5MzU4 QUVCRkE5NzczMy5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAII66ihjTar2cdTu9Za5SyzlMJ8KJ10fqMeN Cv2IbQXkAtkAfx0ycbejdrI1OPz/t/eN1/DJkgOA4OHJ/rPcoVibZaA8bOwCs8wC MvEkMcAds6Tx6y9tZbFHJXtS26EHqO+XgooImcMUbHYYcKDdn8S4Ys74BwTKyAe3 w1UQnkPRtE9LPrNMBbtKbMEmxWi6tyzZxr0bqibN2gfhOSn27e3nTlOT8M5uj+Fv 0KSYDgs9KAyiLWF8+j1hzDRWpYi3u7Toril+G7OGAUpBr101QHrgdEu3dZUMqO8y bdsKOQMbWzKinoM7Wf//kURfvmKX6qwzeWPRxjafoACpNss8ObE= -----END CERTIFICATE-----Generated at Sun Dec 21 17:00:36 2025 by rpki-client