This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf repo-rpki.idnic.net/repo/0a788b4a-d451-49fb-b7cd-719810870f1a/0/095AAB2FD179056DA8846FA0E90F79F7D901792C.mft File: 095AAB2FD179056DA8846FA0E90F79F7D901792C.mft (raw, json) Hash identifier: FM81gA+eCJrnLW3uGxIoGfohjhmoL0nX6oBlsmNAP2k= Subject key identifier: 33:F5:0D:F0:C3:65:5A:3B:BB:2C:CA:7B:CC:87:ED:94:0B:97:8D:71 Authority key identifier: 09:5A:AB:2F:D1:79:05:6D:A8:84:6F:A0:E9:0F:79:F7:D9:01:79:2C Certificate issuer: /CN=095AAB2FD179056DA8846FA0E90F79F7D901792C Certificate serial: 059ADDF039250100E806D2132E04A24AA57A7920 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/095AAB2FD179056DA8846FA0E90F79F7D901792C.cer Subject info access: rsync://repo-rpki.idnic.net/repo/0a788b4a-d451-49fb-b7cd-719810870f1a/0/095AAB2FD179056DA8846FA0E90F79F7D901792C.mft Manifest number: 0343 Signing time: Sun 25 Jan 2026 13:31:41 +0000 Manifest this update: Sun 25 Jan 2026 13:26:41 +0000 Manifest next update: Wed 28 Jan 2026 14:35:41 +0000 Files and hashes: 1: 3130332e3235322e35312e302f32342d3234203d3e203539313334.roa (hash: 92hDDvlrQq6+Ep7VlgXGUFdRGUo5NBqpCP5dHFzwWeg=) 2: 3130332e3235322e35302e302f32342d3234203d3e203539313334.roa (hash: tg5kgcB+/SuzaicgIITC9CS9oqxnux/xS4/nsX+npzw=) 3: 3130332e3130382e3132362e302f32342d3234203d3e203539313334.roa (hash: JQPY1hR36z2SwsI5Y4cr/zQo0NDgsurp+zEd8VFWX3Q=) 4: 095AAB2FD179056DA8846FA0E90F79F7D901792C.crl (hash: sLwDQZArb+pMYFfT64ogAXTFgGYfapKmECSe4j4QH5M=) 5: 3130332e37332e3132352e302f32342d3234203d3e203539313334.roa (hash: Z1EVykTQp5ACC1NPq9JOZKOUUZ9JHZ3If1yc5kffoxA=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/0a788b4a-d451-49fb-b7cd-719810870f1a/0/095AAB2FD179056DA8846FA0E90F79F7D901792C.crl rsync://repo-rpki.idnic.net/repo/0a788b4a-d451-49fb-b7cd-719810870f1a/0/095AAB2FD179056DA8846FA0E90F79F7D901792C.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/095AAB2FD179056DA8846FA0E90F79F7D901792C.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 28 Jan 2026 14:00:57 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 05:9a:dd:f0:39:25:01:00:e8:06:d2:13:2e:04:a2:4a:a5:7a:79:20 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=095AAB2FD179056DA8846FA0E90F79F7D901792C Validity Not Before: Jan 25 13:26:41 2026 GMT Not After : Jan 28 14:35:41 2026 GMT Subject: CN=33F50DF0C3655A3BBB2CCA7BCC87ED940B978D71 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c3:12:68:26:cc:ac:08:54:a3:99:b1:98:be:76: 95:db:e9:d9:22:79:a6:37:63:99:34:4b:9b:8d:99: fd:c4:70:6a:56:51:4a:09:39:ad:ab:45:39:fb:43: a2:f8:d8:59:1e:0a:39:c4:62:c7:94:8c:3e:8b:78: 31:3f:39:fd:10:d0:eb:e7:c3:e1:04:73:e4:3b:ee: 26:bf:81:03:23:50:a5:c0:39:dd:31:80:58:26:a2: 06:f4:14:ca:89:b0:10:da:55:22:3f:f7:96:cb:96: 8e:0c:2f:76:e2:d8:61:6b:6c:6b:65:cf:19:d0:99: ab:97:75:3c:4a:28:66:89:8f:22:e7:1b:ab:6f:17: 6b:9c:2d:bd:e0:bc:c0:6b:e7:6e:41:ca:a1:a9:9f: 0e:8e:5c:2b:4e:16:71:a3:04:33:48:78:52:0f:0f: 8e:f6:f2:7a:ed:de:3b:ef:30:9d:e0:fb:7d:0f:27: 78:88:fa:29:8f:79:17:84:47:e4:df:20:77:92:d7: 05:48:b7:60:47:b6:93:5d:05:36:94:aa:a4:bc:95: 25:f3:a8:15:57:c7:0c:23:32:df:6b:b7:46:7d:ad: 81:2f:e0:6a:21:27:80:7d:72:0c:61:bf:bc:98:1e: ff:e3:e3:89:ce:a4:d1:0a:de:bf:2a:b3:a7:00:dc: d7:c7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 33:F5:0D:F0:C3:65:5A:3B:BB:2C:CA:7B:CC:87:ED:94:0B:97:8D:71 X509v3 Authority Key Identifier: keyid:09:5A:AB:2F:D1:79:05:6D:A8:84:6F:A0:E9:0F:79:F7:D9:01:79:2C X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/0a788b4a-d451-49fb-b7cd-719810870f1a/0/095AAB2FD179056DA8846FA0E90F79F7D901792C.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/095AAB2FD179056DA8846FA0E90F79F7D901792C.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/0a788b4a-d451-49fb-b7cd-719810870f1a/0/095AAB2FD179056DA8846FA0E90F79F7D901792C.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption d4:22:27:73:de:7c:63:63:9c:f2:ae:e8:f4:30:f9:fe:6c:73: 20:05:bd:65:ae:d1:6c:2e:97:72:50:5c:73:44:b4:3b:66:55: d4:c3:5a:c8:58:e4:a8:41:4e:1d:bf:44:cd:75:dd:b5:8c:61: a8:5e:56:35:48:f1:d9:75:6b:e9:2b:45:62:8b:40:4a:ea:e1: a9:25:17:c3:b9:11:f3:9e:bf:c5:a9:91:db:4a:4b:40:68:a3: 17:09:dc:27:9e:af:6c:f7:b8:e3:af:38:03:45:fb:07:c6:68: 8e:23:6d:64:11:a4:54:59:05:57:2a:c9:bb:69:8b:e0:7a:a6: 7d:92:55:d4:86:3e:c0:0a:8f:e9:7a:7b:74:5d:ac:78:d3:1e: ca:58:8e:ac:74:18:de:09:47:45:67:95:f1:ae:3f:71:a4:c8: 59:ce:aa:06:d2:09:d4:8b:de:fe:f5:a4:11:50:2b:8a:a0:50: f3:04:d5:2f:8f:d8:1b:42:ec:d8:fd:83:76:cb:43:4f:dd:d8: ed:87:5f:4f:d0:89:34:71:a4:68:6d:5c:ba:e3:fa:78:ef:b8: 9b:5f:0a:fb:7e:bf:18:28:62:6c:9d:6b:0c:38:2b:a0:fe:9d: c7:49:d4:61:6e:72:83:71:a2:37:7a:99:57:4e:bc:7e:cb:3f: 83:97:20:98 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUBZrd8DklAQDoBtITLgSiSqV6eSAwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMDk1QUFCMkZEMTc5MDU2REE4ODQ2RkEwRTkwRjc5RjdE OTAxNzkyQzAeFw0yNjAxMjUxMzI2NDFaFw0yNjAxMjgxNDM1NDFaMDMxMTAvBgNV BAMTKDMzRjUwREYwQzM2NTVBM0JCQjJDQ0E3QkNDODdFRDk0MEI5NzhENzEwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDDEmgmzKwIVKOZsZi+dpXb6dki eaY3Y5k0S5uNmf3EcGpWUUoJOa2rRTn7Q6L42FkeCjnEYseUjD6LeDE/Of0Q0Ovn w+EEc+Q77ia/gQMjUKXAOd0xgFgmogb0FMqJsBDaVSI/95bLlo4ML3bi2GFrbGtl zxnQmauXdTxKKGaJjyLnG6tvF2ucLb3gvMBr525ByqGpnw6OXCtOFnGjBDNIeFIP D4728nrt3jvvMJ3g+30PJ3iI+imPeReER+TfIHeS1wVIt2BHtpNdBTaUqqS8lSXz qBVXxwwjMt9rt0Z9rYEv4GohJ4B9cgxhv7yYHv/j44nOpNEK3r8qs6cA3NfHAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUM/UN8MNlWju7LMp7zIftlAuXjXEwHwYDVR0j BBgwFoAUCVqrL9F5BW2ohG+g6Q9599kBeSwwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby8w YTc4OGI0YS1kNDUxLTQ5ZmItYjdjZC03MTk4MTA4NzBmMWEvMC8wOTVBQUIyRkQx NzkwNTZEQTg4NDZGQTBFOTBGNzlGN0Q5MDE3OTJDLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvMDk1QUFCMkZEMTc5MDU2REE4ODQ2RkEwRTkwRjc5RjdEOTAx NzkyQy5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vMGE3ODhiNGEtZDQ1MS00OWZiLWI3 Y2QtNzE5ODEwODcwZjFhLzAvMDk1QUFCMkZEMTc5MDU2REE4ODQ2RkEwRTkwRjc5 RjdEOTAxNzkyQy5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBANQiJ3PefGNjnPKu6PQw+f5scyAFvWWu0Wwu l3JQXHNEtDtmVdTDWshY5KhBTh2/RM113bWMYaheVjVI8dl1a+krRWKLQErq4akl F8O5EfOev8WpkdtKS0BooxcJ3Ceer2z3uOOvOANF+wfGaI4jbWQRpFRZBVcqybtp i+B6pn2SVdSGPsAKj+l6e3RdrHjTHspYjqx0GN4JR0VnlfGuP3GkyFnOqgbSCdSL 3v71pBFQK4qgUPME1S+P2BtC7Nj9g3bLQ0/d2O2HX0/QiTRxpGhtXLrj+njvuJtf Cvt+vxgoYmydaww4K6D+ncdJ1GFucoNxojd6mVdOvH7LP4OXIJg= -----END CERTIFICATE-----Generated at Sun Jan 25 21:22:35 2026 by rpki-client