This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf repo-rpki.idnic.net/repo/0a788b4a-d451-49fb-b7cd-719810870f1a/0/095AAB2FD179056DA8846FA0E90F79F7D901792C.mft File: 095AAB2FD179056DA8846FA0E90F79F7D901792C.mft (raw, json) Hash identifier: 3uGRlyjmKMgkFh4vNPc969MlmSEZ2n9tON5QjFjGZGA= Subject key identifier: E7:CE:35:0F:11:5B:05:6F:89:C8:44:1B:E2:10:2D:71:60:3E:E4:43 Authority key identifier: 09:5A:AB:2F:D1:79:05:6D:A8:84:6F:A0:E9:0F:79:F7:D9:01:79:2C Certificate issuer: /CN=095AAB2FD179056DA8846FA0E90F79F7D901792C Certificate serial: 63E9DB0CAB3C04D6D5CA4CA40D4363D905045666 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/095AAB2FD179056DA8846FA0E90F79F7D901792C.cer Subject info access: rsync://repo-rpki.idnic.net/repo/0a788b4a-d451-49fb-b7cd-719810870f1a/0/095AAB2FD179056DA8846FA0E90F79F7D901792C.mft Manifest number: 032D Signing time: Sat 06 Dec 2025 03:51:41 +0000 Manifest this update: Sat 06 Dec 2025 03:46:41 +0000 Manifest next update: Tue 09 Dec 2025 05:59:41 +0000 Files and hashes: 1: 3130332e3235322e35302e302f32342d3234203d3e203539313334.roa (hash: tg5kgcB+/SuzaicgIITC9CS9oqxnux/xS4/nsX+npzw=) 2: 095AAB2FD179056DA8846FA0E90F79F7D901792C.crl (hash: XCeCQmzz9CXBF4iycNgmm+iFtDJT6Kdb74s+/yw3Jfo=) 3: 3130332e3130382e3132362e302f32342d3234203d3e203539313334.roa (hash: JQPY1hR36z2SwsI5Y4cr/zQo0NDgsurp+zEd8VFWX3Q=) 4: 3130332e3235322e35312e302f32342d3234203d3e203539313334.roa (hash: 92hDDvlrQq6+Ep7VlgXGUFdRGUo5NBqpCP5dHFzwWeg=) 5: 3130332e37332e3132352e302f32342d3234203d3e203539313334.roa (hash: Z1EVykTQp5ACC1NPq9JOZKOUUZ9JHZ3If1yc5kffoxA=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/0a788b4a-d451-49fb-b7cd-719810870f1a/0/095AAB2FD179056DA8846FA0E90F79F7D901792C.crl rsync://repo-rpki.idnic.net/repo/0a788b4a-d451-49fb-b7cd-719810870f1a/0/095AAB2FD179056DA8846FA0E90F79F7D901792C.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/095AAB2FD179056DA8846FA0E90F79F7D901792C.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 09 Dec 2025 05:59:41 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 63:e9:db:0c:ab:3c:04:d6:d5:ca:4c:a4:0d:43:63:d9:05:04:56:66 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=095AAB2FD179056DA8846FA0E90F79F7D901792C Validity Not Before: Dec 6 03:46:41 2025 GMT Not After : Dec 9 05:59:41 2025 GMT Subject: CN=E7CE350F115B056F89C8441BE2102D71603EE443 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a7:d5:42:3a:e5:53:c4:25:c6:55:0e:4a:73:da: e9:92:d0:2b:53:fa:6d:83:3e:09:0f:89:f7:e3:69: a8:08:31:f0:82:d4:54:6f:7f:5f:d6:d1:7e:90:80: ac:57:66:cd:d9:47:aa:8c:de:b6:87:7b:fc:f4:a8: 7b:3a:81:b0:42:83:e7:a4:3a:16:3c:eb:54:0a:f5: 8d:ff:a5:d8:5b:fd:53:73:b0:4b:43:f6:87:c5:07: ab:b2:a9:23:49:8e:e6:49:49:20:44:ce:8a:06:d0: 1a:5d:d1:0e:1d:21:66:ec:17:8b:d8:50:84:f1:fd: e6:d0:cb:8c:a4:5e:3c:18:53:a1:ce:a6:e9:db:5e: df:df:7a:75:05:dd:7c:c4:6c:98:00:21:0e:f0:c5: a4:51:86:51:b4:4b:97:1a:99:52:80:c4:94:f4:95: 90:44:11:63:6f:ce:08:a8:dc:a0:9e:d0:6a:bb:cb: dd:54:e9:b0:5b:9b:40:de:f2:11:e4:ae:e2:a8:e4: 3b:d8:08:f7:da:c0:f3:f8:96:5a:59:e4:c9:ec:41: 42:91:39:6b:26:1e:07:04:92:a7:d1:78:71:91:fc: 8a:cd:e4:a8:9d:9b:c0:b5:a4:87:a2:7a:d7:d9:e1: cb:8f:23:a0:53:ae:1e:16:30:6a:6b:5e:04:81:c1: 4c:3f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: E7:CE:35:0F:11:5B:05:6F:89:C8:44:1B:E2:10:2D:71:60:3E:E4:43 X509v3 Authority Key Identifier: keyid:09:5A:AB:2F:D1:79:05:6D:A8:84:6F:A0:E9:0F:79:F7:D9:01:79:2C X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/0a788b4a-d451-49fb-b7cd-719810870f1a/0/095AAB2FD179056DA8846FA0E90F79F7D901792C.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/095AAB2FD179056DA8846FA0E90F79F7D901792C.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/0a788b4a-d451-49fb-b7cd-719810870f1a/0/095AAB2FD179056DA8846FA0E90F79F7D901792C.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 1d:57:87:81:80:03:63:26:93:a6:6a:07:30:dd:f2:55:d5:dc: a6:bc:8b:ea:ee:c8:f7:4a:e1:37:c0:61:f5:6c:e3:c1:4a:4d: 80:46:3a:bd:97:00:56:de:4a:74:0e:e7:71:87:1a:e1:f4:21: e3:94:76:7d:2f:59:9b:b5:6f:54:0e:39:0e:05:59:f7:f8:a7: 15:1f:b0:bd:18:c5:b0:bf:1e:35:d2:0e:cc:31:c9:7f:a1:ce: 73:10:4a:f2:d0:a9:4b:eb:73:b8:3c:14:8a:8c:9a:e3:6e:4e: d5:05:50:c7:21:e1:80:e7:a3:4a:c8:ec:ab:5f:fa:16:6a:2a: 3e:70:f9:63:e7:46:ae:45:52:03:e8:a5:cf:05:88:25:c3:50: c0:36:fe:b7:fb:f7:8f:d7:dc:74:f3:38:78:80:e8:ec:d8:6c: 72:83:49:ea:9b:5a:49:06:78:8d:69:bd:de:12:8c:67:76:57: a8:d1:9c:b2:a7:45:36:f3:bf:3a:b1:64:8c:b0:4c:57:db:83: 34:8c:06:4c:72:2d:a9:48:a5:9f:65:e5:ea:5a:37:ca:db:a2: e0:8c:b0:d3:ee:af:ef:49:26:ca:02:4e:0a:47:1d:3b:b6:d3: c7:f9:02:f5:14:8f:58:11:ff:7c:df:cc:94:55:49:37:0a:42: 06:a8:9e:6f -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUY+nbDKs8BNbVykykDUNj2QUEVmYwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMDk1QUFCMkZEMTc5MDU2REE4ODQ2RkEwRTkwRjc5RjdE OTAxNzkyQzAeFw0yNTEyMDYwMzQ2NDFaFw0yNTEyMDkwNTU5NDFaMDMxMTAvBgNV BAMTKEU3Q0UzNTBGMTE1QjA1NkY4OUM4NDQxQkUyMTAyRDcxNjAzRUU0NDMwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCn1UI65VPEJcZVDkpz2umS0CtT +m2DPgkPiffjaagIMfCC1FRvf1/W0X6QgKxXZs3ZR6qM3raHe/z0qHs6gbBCg+ek OhY861QK9Y3/pdhb/VNzsEtD9ofFB6uyqSNJjuZJSSBEzooG0Bpd0Q4dIWbsF4vY UITx/ebQy4ykXjwYU6HOpunbXt/fenUF3XzEbJgAIQ7wxaRRhlG0S5camVKAxJT0 lZBEEWNvzgio3KCe0Gq7y91U6bBbm0De8hHkruKo5DvYCPfawPP4llpZ5MnsQUKR OWsmHgcEkqfReHGR/IrN5Kidm8C1pIeietfZ4cuPI6BTrh4WMGprXgSBwUw/AgMB AAGjggI8MIICODAdBgNVHQ4EFgQU5841DxFbBW+JyEQb4hAtcWA+5EMwHwYDVR0j BBgwFoAUCVqrL9F5BW2ohG+g6Q9599kBeSwwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby8w YTc4OGI0YS1kNDUxLTQ5ZmItYjdjZC03MTk4MTA4NzBmMWEvMC8wOTVBQUIyRkQx NzkwNTZEQTg4NDZGQTBFOTBGNzlGN0Q5MDE3OTJDLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvMDk1QUFCMkZEMTc5MDU2REE4ODQ2RkEwRTkwRjc5RjdEOTAx NzkyQy5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vMGE3ODhiNGEtZDQ1MS00OWZiLWI3 Y2QtNzE5ODEwODcwZjFhLzAvMDk1QUFCMkZEMTc5MDU2REE4ODQ2RkEwRTkwRjc5 RjdEOTAxNzkyQy5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAB1Xh4GAA2Mmk6ZqBzDd8lXV3Ka8i+ruyPdK 4TfAYfVs48FKTYBGOr2XAFbeSnQO53GHGuH0IeOUdn0vWZu1b1QOOQ4FWff4pxUf sL0YxbC/HjXSDswxyX+hznMQSvLQqUvrc7g8FIqMmuNuTtUFUMch4YDno0rI7Ktf +hZqKj5w+WPnRq5FUgPopc8FiCXDUMA2/rf794/X3HTzOHiA6OzYbHKDSeqbWkkG eI1pvd4SjGd2V6jRnLKnRTbzvzqxZIywTFfbgzSMBkxyLalIpZ9l5epaN8rbouCM sNPur+9JJsoCTgpHHTu208f5AvUUj1gR/3zfzJRVSTcKQgaonm8= -----END CERTIFICATE-----Generated at Sat Dec 6 16:40:01 2025 by rpki-client