This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf repo-rpki.idnic.net/repo/595dd573-31f4-416c-a1b7-698d6b1697ad/0/1095EA78703826ACF5FA2241EB2B1B66A2C4485A.mft File: 1095EA78703826ACF5FA2241EB2B1B66A2C4485A.mft (raw, json) Hash identifier: 6EVQ45K/9E5hUDUlSrDgPAo6Gl9UmMDH1bJps9b3P7Q= Subject key identifier: ED:AE:E6:8A:BB:B0:A3:F2:99:7E:38:98:F3:26:BA:A2:9F:B8:92:91 Authority key identifier: 10:95:EA:78:70:38:26:AC:F5:FA:22:41:EB:2B:1B:66:A2:C4:48:5A Certificate issuer: /CN=1095EA78703826ACF5FA2241EB2B1B66A2C4485A Certificate serial: 29BAC944AF191660433E899EB1A6962A2E9C4469 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/1095EA78703826ACF5FA2241EB2B1B66A2C4485A.cer Subject info access: rsync://repo-rpki.idnic.net/repo/595dd573-31f4-416c-a1b7-698d6b1697ad/0/1095EA78703826ACF5FA2241EB2B1B66A2C4485A.mft Manifest number: 0541 Signing time: Sun 25 Jan 2026 16:11:32 +0000 Manifest this update: Sun 25 Jan 2026 16:06:32 +0000 Manifest next update: Thu 29 Jan 2026 01:52:32 +0000 Files and hashes: 1: 1095EA78703826ACF5FA2241EB2B1B66A2C4485A.crl (hash: kIT18ig2jir0/4Di5NTl45RApHkgwdp+MPCwVbeX2Yk=) 2: 3130332e3231342e3131322e302f32332d3234203d3e20313336303532.roa (hash: XS6giku77XPtxmNRkfOOXOP+iNVcgzmhP0k5pXi56n8=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/595dd573-31f4-416c-a1b7-698d6b1697ad/0/1095EA78703826ACF5FA2241EB2B1B66A2C4485A.crl rsync://repo-rpki.idnic.net/repo/595dd573-31f4-416c-a1b7-698d6b1697ad/0/1095EA78703826ACF5FA2241EB2B1B66A2C4485A.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/1095EA78703826ACF5FA2241EB2B1B66A2C4485A.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 28 Jan 2026 14:00:57 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 29:ba:c9:44:af:19:16:60:43:3e:89:9e:b1:a6:96:2a:2e:9c:44:69 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=1095EA78703826ACF5FA2241EB2B1B66A2C4485A Validity Not Before: Jan 25 16:06:32 2026 GMT Not After : Jan 29 01:52:32 2026 GMT Subject: CN=EDAEE68ABBB0A3F2997E3898F326BAA29FB89291 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e0:65:92:29:cf:9a:9b:a9:10:aa:49:f2:c3:06: 35:f2:37:b2:06:25:b7:3b:33:bf:b6:ad:25:bf:22: 73:0a:66:32:04:de:24:73:83:19:de:ee:0e:59:fe: 87:ff:2a:f3:13:c2:e5:eb:92:10:62:dd:90:22:cf: 63:34:3d:9e:cd:f5:22:06:8e:c8:8d:7a:8e:15:be: 29:1c:70:f8:ef:b0:27:0f:df:80:c9:a7:ad:b1:b2: d1:b9:2f:da:d4:ef:8e:6c:a3:6b:f7:e2:25:cd:51: 19:b2:f9:2f:ea:93:d7:14:3c:6a:0f:26:75:9f:2b: 65:15:30:03:a7:31:b9:b9:23:f3:e3:c3:e0:ff:ba: c0:66:53:a7:4d:3a:ca:28:40:68:1b:10:bf:d9:20: 37:3a:0a:8c:16:04:e8:fa:9f:fa:15:67:0e:c7:57: f7:9c:bc:82:28:90:2a:9c:74:bf:d9:fd:57:6b:6d: ae:db:9f:f5:ae:06:2a:d7:3b:a2:88:b6:ee:5c:a4: 35:1b:81:11:7e:5c:9f:28:b1:97:09:18:28:b6:82: 6d:4b:48:02:7e:43:03:85:8a:9e:66:e3:2c:f8:de: d0:b9:66:09:39:e4:6a:ae:c9:a0:72:87:c5:29:68: 74:75:7e:9b:84:70:2a:de:f4:23:c0:72:3c:57:75: c6:3f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: ED:AE:E6:8A:BB:B0:A3:F2:99:7E:38:98:F3:26:BA:A2:9F:B8:92:91 X509v3 Authority Key Identifier: keyid:10:95:EA:78:70:38:26:AC:F5:FA:22:41:EB:2B:1B:66:A2:C4:48:5A X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/595dd573-31f4-416c-a1b7-698d6b1697ad/0/1095EA78703826ACF5FA2241EB2B1B66A2C4485A.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/1095EA78703826ACF5FA2241EB2B1B66A2C4485A.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/595dd573-31f4-416c-a1b7-698d6b1697ad/0/1095EA78703826ACF5FA2241EB2B1B66A2C4485A.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 27:6e:a8:ff:95:b6:97:62:b3:f5:87:cb:09:89:90:e2:02:77: 1e:46:58:09:6c:0a:6f:a2:1d:a1:b8:e3:66:40:24:c2:4c:ce: bd:7b:1b:d0:ac:02:89:5e:72:ee:b0:7f:6a:b1:04:e8:30:af: 16:b5:d4:63:b4:cb:57:0f:6d:bb:47:3a:5d:09:d9:0c:e9:db: b8:ab:15:22:b0:cc:79:e5:ea:06:b6:8d:40:a9:9e:e1:42:5c: d6:7f:35:62:0f:d8:37:e1:8d:0d:aa:7a:b6:06:35:0c:ca:d4: 0d:1e:82:bf:e0:f4:af:d4:ff:b6:dc:3f:a8:b3:d7:5f:c3:9d: 7c:53:b0:a8:f0:34:ae:0a:7a:6e:cf:95:90:0d:d7:42:f5:a1: 3c:bb:2e:07:d6:76:3f:d9:ff:8b:3f:89:e3:a0:8a:ca:64:a5: 2f:59:e9:2e:74:ef:c7:20:16:f9:85:f0:16:da:07:69:1b:c8: 3b:44:10:7d:63:19:ed:2c:89:dc:66:25:13:e1:7d:95:8e:f6: 9c:b8:45:82:94:ef:15:b8:5c:e5:c3:82:dc:ab:c1:c6:2a:a9: be:41:fa:b8:b4:4f:2c:55:05:7a:20:1e:be:d5:12:45:2a:26: 3d:69:38:13:ce:9f:ad:01:0c:fc:d4:e7:c5:d4:b3:4c:a3:d4: e2:39:19:97 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUKbrJRK8ZFmBDPomesaaWKi6cRGkwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMTA5NUVBNzg3MDM4MjZBQ0Y1RkEyMjQxRUIyQjFCNjZB MkM0NDg1QTAeFw0yNjAxMjUxNjA2MzJaFw0yNjAxMjkwMTUyMzJaMDMxMTAvBgNV BAMTKEVEQUVFNjhBQkJCMEEzRjI5OTdFMzg5OEYzMjZCQUEyOUZCODkyOTEwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDgZZIpz5qbqRCqSfLDBjXyN7IG Jbc7M7+2rSW/InMKZjIE3iRzgxne7g5Z/of/KvMTwuXrkhBi3ZAiz2M0PZ7N9SIG jsiNeo4VvikccPjvsCcP34DJp62xstG5L9rU745so2v34iXNURmy+S/qk9cUPGoP JnWfK2UVMAOnMbm5I/Pjw+D/usBmU6dNOsooQGgbEL/ZIDc6CowWBOj6n/oVZw7H V/ecvIIokCqcdL/Z/Vdrba7bn/WuBirXO6KItu5cpDUbgRF+XJ8osZcJGCi2gm1L SAJ+QwOFip5m4yz43tC5Zgk55GquyaByh8UpaHR1fpuEcCre9CPAcjxXdcY/AgMB AAGjggI8MIICODAdBgNVHQ4EFgQU7a7miruwo/KZfjiY8ya6op+4kpEwHwYDVR0j BBgwFoAUEJXqeHA4Jqz1+iJB6ysbZqLESFowDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby81 OTVkZDU3My0zMWY0LTQxNmMtYTFiNy02OThkNmIxNjk3YWQvMC8xMDk1RUE3ODcw MzgyNkFDRjVGQTIyNDFFQjJCMUI2NkEyQzQ0ODVBLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvMTA5NUVBNzg3MDM4MjZBQ0Y1RkEyMjQxRUIyQjFCNjZBMkM0 NDg1QS5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vNTk1ZGQ1NzMtMzFmNC00MTZjLWEx YjctNjk4ZDZiMTY5N2FkLzAvMTA5NUVBNzg3MDM4MjZBQ0Y1RkEyMjQxRUIyQjFC NjZBMkM0NDg1QS5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBACduqP+Vtpdis/WHywmJkOICdx5GWAlsCm+i HaG442ZAJMJMzr17G9CsAolecu6wf2qxBOgwrxa11GO0y1cPbbtHOl0J2Qzp27ir FSKwzHnl6ga2jUCpnuFCXNZ/NWIP2DfhjQ2qerYGNQzK1A0egr/g9K/U/7bcP6iz 11/DnXxTsKjwNK4Kem7PlZAN10L1oTy7LgfWdj/Z/4s/ieOgispkpS9Z6S5078cg FvmF8BbaB2kbyDtEEH1jGe0sidxmJRPhfZWO9py4RYKU7xW4XOXDgtyrwcYqqb5B +ri0TyxVBXogHr7VEkUqJj1pOBPOn60BDPzU58XUs0yj1OI5GZc= -----END CERTIFICATE-----Generated at Sun Jan 25 23:19:38 2026 by rpki-client