This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf repo-rpki.idnic.net/repo/d9b899ac-4870-4e28-8e4e-2c23752a4a60/0/30D21A97E1EED902F151C3022374D979F0A4A7EF.mft File: 30D21A97E1EED902F151C3022374D979F0A4A7EF.mft (raw, json) Hash identifier: /ogzwXrZEjIiqlBi9Os/c1cS5a+BUyT+voqatZKxBmE= Subject key identifier: 92:42:BB:D1:46:D3:D0:D9:18:4A:3A:F7:98:9C:53:40:36:6B:C5:C4 Authority key identifier: 30:D2:1A:97:E1:EE:D9:02:F1:51:C3:02:23:74:D9:79:F0:A4:A7:EF Certificate issuer: /CN=30D21A97E1EED902F151C3022374D979F0A4A7EF Certificate serial: 0736A3A93F6412CBBF8155E95C96CABF0B28D9CE Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/30D21A97E1EED902F151C3022374D979F0A4A7EF.cer Subject info access: rsync://repo-rpki.idnic.net/repo/d9b899ac-4870-4e28-8e4e-2c23752a4a60/0/30D21A97E1EED902F151C3022374D979F0A4A7EF.mft Manifest number: 014F Signing time: Wed 24 Dec 2025 16:42:06 +0000 Manifest this update: Wed 24 Dec 2025 16:37:06 +0000 Manifest next update: Sat 27 Dec 2025 22:34:06 +0000 Files and hashes: 1: 34352e3234392e3232352e302f32342d3234203d3e20313532303237.roa (hash: C52489RC5C7/6xA/AFGhqaTac2q7UpLljZUsc+WdOYU=) 2: 30D21A97E1EED902F151C3022374D979F0A4A7EF.crl (hash: HvINtRyaU3Xyfid8PxFbK8cNKmGWzvaAx7mvudrDmM0=) 3: 34352e3234392e3232342e302f32342d3234203d3e20313532303237.roa (hash: Lbof0Eu5fIUUt+ZOnyAgcQnzposa001pRsoMaWB/hPw=) 4: 34352e3234392e3232342e302f32332d3233203d3e20313532303237.roa (hash: dHytxOoYwuE6ev+ouL2C7HNOfk2qBxU0rZwmruiXqlc=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/d9b899ac-4870-4e28-8e4e-2c23752a4a60/0/30D21A97E1EED902F151C3022374D979F0A4A7EF.crl rsync://repo-rpki.idnic.net/repo/d9b899ac-4870-4e28-8e4e-2c23752a4a60/0/30D21A97E1EED902F151C3022374D979F0A4A7EF.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/30D21A97E1EED902F151C3022374D979F0A4A7EF.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 27 Dec 2025 17:20:12 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 07:36:a3:a9:3f:64:12:cb:bf:81:55:e9:5c:96:ca:bf:0b:28:d9:ce Signature Algorithm: sha256WithRSAEncryption Issuer: CN=30D21A97E1EED902F151C3022374D979F0A4A7EF Validity Not Before: Dec 24 16:37:06 2025 GMT Not After : Dec 27 22:34:06 2025 GMT Subject: CN=9242BBD146D3D0D9184A3AF7989C5340366BC5C4 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c2:b5:47:6f:e8:43:b3:2a:9f:96:85:b5:70:bb: 6e:b3:5d:0b:52:9d:02:4c:c0:dc:9b:6d:e0:75:22: 8e:ed:04:02:6c:49:4e:17:8f:cd:3a:a7:07:4a:be: d8:9c:09:2f:6d:ee:03:bd:ce:d7:3f:7d:5f:d1:3a: f2:fb:d9:df:9b:24:c0:ad:6e:e9:03:99:46:d9:46: 37:91:b3:50:8e:99:f3:62:c7:f7:dc:37:47:13:0c: b2:fb:19:a2:58:51:bf:11:7a:44:8f:58:1e:12:1e: b1:72:40:cc:47:cf:b1:0d:72:90:84:3a:38:6f:f7: a2:ea:18:09:be:d5:d0:16:98:47:c4:be:b3:3a:e9: 50:7b:67:2c:ee:bd:25:cf:b2:e0:a9:6b:81:6c:1c: 66:b0:b8:24:36:b5:08:e3:ed:fc:8e:f9:55:dd:ff: 59:0a:39:b4:5a:20:32:85:8f:49:91:71:36:d9:4e: 75:7e:7c:39:f5:6f:1e:fe:19:76:eb:a0:2c:d1:21: de:97:44:9b:17:02:13:38:66:4e:a3:a6:b0:08:a4: 36:83:7d:01:1c:48:08:51:58:08:6e:ca:f3:ff:c1: 22:ae:3c:be:8d:dd:13:2b:fc:8b:17:1c:c6:7f:fc: 5e:21:4f:87:44:ad:35:db:4e:20:a6:ef:96:08:04: 2f:6d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 92:42:BB:D1:46:D3:D0:D9:18:4A:3A:F7:98:9C:53:40:36:6B:C5:C4 X509v3 Authority Key Identifier: keyid:30:D2:1A:97:E1:EE:D9:02:F1:51:C3:02:23:74:D9:79:F0:A4:A7:EF X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/d9b899ac-4870-4e28-8e4e-2c23752a4a60/0/30D21A97E1EED902F151C3022374D979F0A4A7EF.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/30D21A97E1EED902F151C3022374D979F0A4A7EF.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/d9b899ac-4870-4e28-8e4e-2c23752a4a60/0/30D21A97E1EED902F151C3022374D979F0A4A7EF.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 30:1f:ea:28:31:ec:3e:9a:90:3a:45:48:54:59:80:21:0f:1b: 6b:0b:92:f9:1e:51:43:f0:28:37:d4:ef:2f:e3:81:19:40:d6: df:13:2c:d7:7e:3c:30:ce:50:72:fb:6f:ea:a9:1a:92:65:6c: 78:1b:df:5b:e6:21:a7:57:ac:23:01:b1:fb:9d:c8:50:00:83: af:3e:90:ef:0f:79:66:b4:9e:49:c5:01:bf:bf:a1:aa:43:17: 55:50:ad:9a:0e:a7:55:8b:13:75:3f:71:2e:2d:c9:ec:14:69: b8:12:b2:96:9f:af:b4:6a:5a:0b:78:69:eb:c5:6a:e6:ef:80: d9:e2:e0:e4:3a:8f:af:7f:c3:89:45:ad:4f:d4:50:bf:43:74: a1:76:d6:02:c6:17:31:d9:7d:2f:ba:b9:f3:50:a6:fd:a3:fa: 6f:78:59:82:85:3b:54:97:61:e2:3c:d9:ad:50:84:a0:2a:cf: 92:93:ff:bb:c3:e6:2e:db:96:41:6a:2e:db:cf:3f:98:8f:fd: 74:31:0b:6d:8e:de:5d:ee:39:ab:af:db:87:1c:bb:3c:3f:e1: a5:93:59:7e:b1:c1:ba:54:5c:e2:2f:75:c8:f8:c9:55:fb:21: 9b:a6:a3:eb:73:60:9c:57:31:53:64:18:e1:c7:0d:e4:4e:f1: 85:b2:24:c5 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUBzajqT9kEsu/gVXpXJbKvwso2c4wDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMzBEMjFBOTdFMUVFRDkwMkYxNTFDMzAyMjM3NEQ5NzlG MEE0QTdFRjAeFw0yNTEyMjQxNjM3MDZaFw0yNTEyMjcyMjM0MDZaMDMxMTAvBgNV BAMTKDkyNDJCQkQxNDZEM0QwRDkxODRBM0FGNzk4OUM1MzQwMzY2QkM1QzQwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDCtUdv6EOzKp+WhbVwu26zXQtS nQJMwNybbeB1Io7tBAJsSU4Xj806pwdKvticCS9t7gO9ztc/fV/ROvL72d+bJMCt bukDmUbZRjeRs1COmfNix/fcN0cTDLL7GaJYUb8RekSPWB4SHrFyQMxHz7ENcpCE Ojhv96LqGAm+1dAWmEfEvrM66VB7ZyzuvSXPsuCpa4FsHGawuCQ2tQjj7fyO+VXd /1kKObRaIDKFj0mRcTbZTnV+fDn1bx7+GXbroCzRId6XRJsXAhM4Zk6jprAIpDaD fQEcSAhRWAhuyvP/wSKuPL6N3RMr/IsXHMZ//F4hT4dErTXbTiCm75YIBC9tAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUkkK70UbT0NkYSjr3mJxTQDZrxcQwHwYDVR0j BBgwFoAUMNIal+Hu2QLxUcMCI3TZefCkp+8wDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby9k OWI4OTlhYy00ODcwLTRlMjgtOGU0ZS0yYzIzNzUyYTRhNjAvMC8zMEQyMUE5N0Ux RUVEOTAyRjE1MUMzMDIyMzc0RDk3OUYwQTRBN0VGLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvMzBEMjFBOTdFMUVFRDkwMkYxNTFDMzAyMjM3NEQ5NzlGMEE0 QTdFRi5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vZDliODk5YWMtNDg3MC00ZTI4LThl NGUtMmMyMzc1MmE0YTYwLzAvMzBEMjFBOTdFMUVFRDkwMkYxNTFDMzAyMjM3NEQ5 NzlGMEE0QTdFRi5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBADAf6igx7D6akDpFSFRZgCEPG2sLkvkeUUPw KDfU7y/jgRlA1t8TLNd+PDDOUHL7b+qpGpJlbHgb31vmIadXrCMBsfudyFAAg68+ kO8PeWa0nknFAb+/oapDF1VQrZoOp1WLE3U/cS4tyewUabgSspafr7RqWgt4aevF aubvgNni4OQ6j69/w4lFrU/UUL9DdKF21gLGFzHZfS+6ufNQpv2j+m94WYKFO1SX YeI82a1QhKAqz5KT/7vD5i7blkFqLtvPP5iP/XQxC22O3l3uOauv24ccuzw/4aWT WX6xwbpUXOIvdcj4yVX7IZumo+tzYJxXMVNkGOHHDeRO8YWyJMU= -----END CERTIFICATE-----Generated at Wed Dec 24 22:05:08 2025 by rpki-client