This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf repo-rpki.idnic.net/repo/595dd573-31f4-416c-a1b7-698d6b1697ad/0/1095EA78703826ACF5FA2241EB2B1B66A2C4485A.mft File: 1095EA78703826ACF5FA2241EB2B1B66A2C4485A.mft (raw, json) Hash identifier: 0Nvv9aucp7SgTZ26ecT+WPy/gof5+BRsD0ty9f5RzU4= Subject key identifier: F7:09:37:FB:31:B4:32:00:15:E9:85:EA:FA:30:D1:62:E9:AF:26:A8 Authority key identifier: 10:95:EA:78:70:38:26:AC:F5:FA:22:41:EB:2B:1B:66:A2:C4:48:5A Certificate issuer: /CN=1095EA78703826ACF5FA2241EB2B1B66A2C4485A Certificate serial: 381E340A59F979284F908B6454481827447B9B65 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/1095EA78703826ACF5FA2241EB2B1B66A2C4485A.cer Subject info access: rsync://repo-rpki.idnic.net/repo/595dd573-31f4-416c-a1b7-698d6b1697ad/0/1095EA78703826ACF5FA2241EB2B1B66A2C4485A.mft Manifest number: 052A Signing time: Thu 04 Dec 2025 15:11:31 +0000 Manifest this update: Thu 04 Dec 2025 15:06:31 +0000 Manifest next update: Mon 08 Dec 2025 00:01:31 +0000 Files and hashes: 1: 1095EA78703826ACF5FA2241EB2B1B66A2C4485A.crl (hash: QAEobcwIwTwS2+XoQEObeWUT8LP4aNoPugUI4IDFw98=) 2: 3130332e3231342e3131322e302f32332d3234203d3e20313336303532.roa (hash: XS6giku77XPtxmNRkfOOXOP+iNVcgzmhP0k5pXi56n8=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/595dd573-31f4-416c-a1b7-698d6b1697ad/0/1095EA78703826ACF5FA2241EB2B1B66A2C4485A.crl rsync://repo-rpki.idnic.net/repo/595dd573-31f4-416c-a1b7-698d6b1697ad/0/1095EA78703826ACF5FA2241EB2B1B66A2C4485A.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/1095EA78703826ACF5FA2241EB2B1B66A2C4485A.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 08 Dec 2025 00:01:31 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 38:1e:34:0a:59:f9:79:28:4f:90:8b:64:54:48:18:27:44:7b:9b:65 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=1095EA78703826ACF5FA2241EB2B1B66A2C4485A Validity Not Before: Dec 4 15:06:31 2025 GMT Not After : Dec 8 00:01:31 2025 GMT Subject: CN=F70937FB31B4320015E985EAFA30D162E9AF26A8 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:be:f9:af:aa:ba:c8:a7:75:23:0a:7b:5d:f7:bf: 92:b0:75:68:24:2c:8a:ad:50:c9:49:77:69:69:03: 84:4d:30:30:73:cb:47:d5:ad:79:6e:2a:86:da:67: 03:ed:66:e1:21:7a:2f:df:12:c9:56:0d:aa:24:21: 96:df:cd:6f:49:25:ef:43:c4:9d:8b:ff:df:a4:25: 52:81:81:54:77:66:c9:3a:e1:14:05:6f:0a:d7:55: 9b:b5:f8:08:d5:51:03:76:18:36:61:11:1d:9f:31: c7:8b:aa:fd:cf:7f:07:33:a4:55:46:5c:f0:9b:fe: ce:34:46:a1:48:64:d7:db:6f:eb:6d:4d:2c:cb:a4: 3b:1e:cc:2a:9c:37:a6:1e:20:3b:33:15:6a:6c:13: 81:d8:24:3b:07:35:1a:6c:c9:9c:87:8e:13:a3:84: 84:aa:54:af:6f:e5:cb:af:5a:b3:9c:4a:01:7f:63: 00:f9:88:a8:1f:32:2a:2c:84:bd:5f:27:e8:34:ac: 3a:d9:be:34:28:8e:32:05:5a:81:22:49:32:f4:cd: fe:3a:a8:89:2d:26:7c:2f:8c:14:a6:fe:ba:77:cb: 13:f6:83:85:ae:ba:4b:5f:2a:53:22:6d:3c:f0:5a: e6:42:4e:21:c7:41:49:6b:a2:b6:1e:a6:57:00:e2: c6:ff Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: F7:09:37:FB:31:B4:32:00:15:E9:85:EA:FA:30:D1:62:E9:AF:26:A8 X509v3 Authority Key Identifier: keyid:10:95:EA:78:70:38:26:AC:F5:FA:22:41:EB:2B:1B:66:A2:C4:48:5A X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/595dd573-31f4-416c-a1b7-698d6b1697ad/0/1095EA78703826ACF5FA2241EB2B1B66A2C4485A.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/1095EA78703826ACF5FA2241EB2B1B66A2C4485A.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/595dd573-31f4-416c-a1b7-698d6b1697ad/0/1095EA78703826ACF5FA2241EB2B1B66A2C4485A.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 7b:d7:1e:a5:70:70:f7:a4:7c:87:64:66:17:3e:e7:d1:d7:03: 22:90:63:50:fe:0e:b5:d1:7f:9f:1c:1c:94:ec:2f:3e:19:37: 9a:10:6f:70:e9:79:bb:35:0e:1d:52:7b:1b:97:da:2f:2d:54: 80:c7:22:a8:fd:a7:48:21:ec:ea:8a:1a:3f:fb:60:04:e6:95: 5d:ee:a4:e5:0e:4f:90:44:fc:99:0d:ec:8d:14:23:91:ad:b2: 5b:21:36:7a:60:78:ec:df:39:12:b7:e5:3c:2f:aa:39:b1:36: a9:fc:0a:de:22:e1:0e:8f:4e:11:24:03:2b:f0:e0:6a:1c:9f: c7:a6:7f:ba:8f:36:d0:33:a2:cc:91:5d:f6:4c:15:a6:d5:13: 32:1b:3b:2a:b8:8b:fc:9f:9f:9d:60:59:eb:92:fb:50:a2:bd: 5f:81:6a:1e:0a:69:73:26:23:1d:03:99:f2:99:c2:1d:58:de: 6c:46:e1:9e:5d:a2:07:b0:f7:18:e9:c1:66:90:ef:99:80:78: 30:e3:96:04:00:7c:70:64:ed:b0:6a:8a:b0:2b:37:2c:d9:30: f4:d4:6e:13:c1:1f:81:f4:e1:3f:0c:b6:03:1c:f7:be:88:ca: 13:40:a2:6f:96:c9:9a:c2:82:7f:90:4e:2b:fc:47:85:20:a1: 22:d9:38:4a -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUOB40Cln5eShPkItkVEgYJ0R7m2UwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMTA5NUVBNzg3MDM4MjZBQ0Y1RkEyMjQxRUIyQjFCNjZB MkM0NDg1QTAeFw0yNTEyMDQxNTA2MzFaFw0yNTEyMDgwMDAxMzFaMDMxMTAvBgNV BAMTKEY3MDkzN0ZCMzFCNDMyMDAxNUU5ODVFQUZBMzBEMTYyRTlBRjI2QTgwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC++a+qusindSMKe133v5KwdWgk LIqtUMlJd2lpA4RNMDBzy0fVrXluKobaZwPtZuEhei/fEslWDaokIZbfzW9JJe9D xJ2L/9+kJVKBgVR3Zsk64RQFbwrXVZu1+AjVUQN2GDZhER2fMceLqv3PfwczpFVG XPCb/s40RqFIZNfbb+ttTSzLpDsezCqcN6YeIDszFWpsE4HYJDsHNRpsyZyHjhOj hISqVK9v5cuvWrOcSgF/YwD5iKgfMioshL1fJ+g0rDrZvjQojjIFWoEiSTL0zf46 qIktJnwvjBSm/rp3yxP2g4WuuktfKlMibTzwWuZCTiHHQUlrorYeplcA4sb/AgMB AAGjggI8MIICODAdBgNVHQ4EFgQU9wk3+zG0MgAV6YXq+jDRYumvJqgwHwYDVR0j BBgwFoAUEJXqeHA4Jqz1+iJB6ysbZqLESFowDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby81 OTVkZDU3My0zMWY0LTQxNmMtYTFiNy02OThkNmIxNjk3YWQvMC8xMDk1RUE3ODcw MzgyNkFDRjVGQTIyNDFFQjJCMUI2NkEyQzQ0ODVBLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvMTA5NUVBNzg3MDM4MjZBQ0Y1RkEyMjQxRUIyQjFCNjZBMkM0 NDg1QS5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vNTk1ZGQ1NzMtMzFmNC00MTZjLWEx YjctNjk4ZDZiMTY5N2FkLzAvMTA5NUVBNzg3MDM4MjZBQ0Y1RkEyMjQxRUIyQjFC NjZBMkM0NDg1QS5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAHvXHqVwcPekfIdkZhc+59HXAyKQY1D+DrXR f58cHJTsLz4ZN5oQb3Dpebs1Dh1SexuX2i8tVIDHIqj9p0gh7OqKGj/7YATmlV3u pOUOT5BE/JkN7I0UI5GtslshNnpgeOzfORK35TwvqjmxNqn8Ct4i4Q6PThEkAyvw 4Gocn8emf7qPNtAzosyRXfZMFabVEzIbOyq4i/yfn51gWeuS+1CivV+Bah4KaXMm Ix0DmfKZwh1Y3mxG4Z5dogew9xjpwWaQ75mAeDDjlgQAfHBk7bBqirArNyzZMPTU bhPBH4H04T8MtgMc976IyhNAom+WyZrCgn+QTiv8R4UgoSLZOEo= -----END CERTIFICATE-----Generated at Sat Dec 6 21:49:39 2025 by rpki-client