This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf repo-rpki.idnic.net/repo/b3785e65-51e2-4b1b-82f9-e753ad4b240f/0/95D9136845FAFA0795735D4A9B0FF9F746461AB3.mft File: 95D9136845FAFA0795735D4A9B0FF9F746461AB3.mft (raw, json) Hash identifier: ono2ua8z/oxnPts+/BlxBmoCfUtfkNJW7jQcsVe6T0M= Subject key identifier: E8:36:F4:44:7F:EA:14:26:38:E5:FA:F2:84:F0:28:41:97:A3:08:5F Authority key identifier: 95:D9:13:68:45:FA:FA:07:95:73:5D:4A:9B:0F:F9:F7:46:46:1A:B3 Certificate issuer: /CN=95D9136845FAFA0795735D4A9B0FF9F746461AB3 Certificate serial: 7FEDFDBF7AFB4DE88E879731B77A181A8F51945E Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/95D9136845FAFA0795735D4A9B0FF9F746461AB3.cer Subject info access: rsync://repo-rpki.idnic.net/repo/b3785e65-51e2-4b1b-82f9-e753ad4b240f/0/95D9136845FAFA0795735D4A9B0FF9F746461AB3.mft Manifest number: 052A Signing time: Fri 05 Dec 2025 17:42:20 +0000 Manifest this update: Fri 05 Dec 2025 17:37:20 +0000 Manifest next update: Tue 09 Dec 2025 02:26:20 +0000 Files and hashes: 1: 323030313a6466333a623938303a3a2f34382d3438203d3e203137353338.roa (hash: ifCGuusxkGprBC7NulQNufNvo7SVC5amSJ/1S4uaqjQ=) 2: 95D9136845FAFA0795735D4A9B0FF9F746461AB3.crl (hash: vFvJbJtxkVXGW3vUgwpEmYchCvmSMusUfJeH4KBeVdk=) 3: 3130332e3135312e39392e302f32342d3234203d3e203137353338.roa (hash: hccolhWeQwMhTE4DUNZtMqz3UE4I8axgnsLj/aGjWu0=) 4: 3130332e3135312e39382e302f32342d3234203d3e203137353338.roa (hash: LZPQ7rMeaDVcHWLsKLTFoADUeRBC0AnGmqL6VPS4zMA=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/b3785e65-51e2-4b1b-82f9-e753ad4b240f/0/95D9136845FAFA0795735D4A9B0FF9F746461AB3.crl rsync://repo-rpki.idnic.net/repo/b3785e65-51e2-4b1b-82f9-e753ad4b240f/0/95D9136845FAFA0795735D4A9B0FF9F746461AB3.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/95D9136845FAFA0795735D4A9B0FF9F746461AB3.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 09 Dec 2025 02:26:20 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 7f:ed:fd:bf:7a:fb:4d:e8:8e:87:97:31:b7:7a:18:1a:8f:51:94:5e Signature Algorithm: sha256WithRSAEncryption Issuer: CN=95D9136845FAFA0795735D4A9B0FF9F746461AB3 Validity Not Before: Dec 5 17:37:20 2025 GMT Not After : Dec 9 02:26:20 2025 GMT Subject: CN=E836F4447FEA142638E5FAF284F0284197A3085F Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b9:4b:a8:45:a9:f4:53:ce:29:05:e8:c3:d9:53: f7:8d:a7:f6:69:aa:2f:24:66:92:f6:4c:91:37:2f: 8d:ac:e0:8d:cf:dc:62:36:7f:2f:48:60:e4:c9:23: 35:67:47:bb:11:b1:82:d2:45:66:d3:d1:ad:3c:36: 6f:37:1a:6e:36:cb:38:d1:21:e7:bf:97:38:68:66: 3a:63:08:8a:8e:bb:2b:3a:cc:67:ed:77:72:75:65: b2:bc:11:07:4a:f6:d3:a7:8e:8f:5d:8b:10:fa:3d: 0e:8d:0a:bf:b8:5d:17:a9:c0:10:ee:ee:42:be:29: e8:21:a2:70:86:69:9f:c0:2e:e4:e6:e3:bb:b1:64: eb:66:0f:7e:5a:ae:69:1e:7f:e5:b8:43:cd:1a:7c: 05:25:50:a7:f9:b7:29:be:59:ad:8f:6a:e0:46:4e: a3:e6:d4:e3:4c:96:c1:6d:00:8a:9a:7a:d7:7d:a9: cc:47:19:13:94:70:8f:c2:91:ca:da:0b:35:7a:13: d8:c8:72:26:07:09:68:fa:9b:6a:ca:3f:5b:18:6b: 33:a3:95:4e:e2:34:2c:cd:34:33:1f:51:cd:a6:35: d1:03:90:20:dc:27:bb:3a:07:5a:4d:64:b8:10:1a: 73:f3:06:bd:72:7e:c4:83:2a:c5:97:4f:f2:93:d8: 98:0f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: E8:36:F4:44:7F:EA:14:26:38:E5:FA:F2:84:F0:28:41:97:A3:08:5F X509v3 Authority Key Identifier: keyid:95:D9:13:68:45:FA:FA:07:95:73:5D:4A:9B:0F:F9:F7:46:46:1A:B3 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/b3785e65-51e2-4b1b-82f9-e753ad4b240f/0/95D9136845FAFA0795735D4A9B0FF9F746461AB3.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/95D9136845FAFA0795735D4A9B0FF9F746461AB3.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/b3785e65-51e2-4b1b-82f9-e753ad4b240f/0/95D9136845FAFA0795735D4A9B0FF9F746461AB3.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 5d:a9:4a:1b:25:6b:83:f7:c7:3e:74:0f:6e:c3:cc:e4:e8:ad: dc:ee:0f:e5:6d:7d:f0:aa:d1:41:51:a1:49:a6:0c:f9:82:44: a1:95:db:75:46:98:c3:12:da:d1:6a:e9:74:4b:20:30:6a:f4: b5:de:06:cd:e8:6c:8e:d9:4d:68:9a:9f:9d:bb:f0:b3:8d:78: 89:66:e4:70:8b:ba:08:4f:76:f7:47:d2:4d:b7:55:c6:73:51: f6:82:49:44:a9:ce:49:49:fa:97:d0:ca:17:f5:f5:26:3d:c6: 85:ff:4d:80:42:62:8e:14:e5:ef:b5:49:28:8c:5d:04:b1:7a: 9f:b0:15:9e:65:1f:63:2d:91:75:41:74:45:38:a6:a8:00:41: 5f:25:b6:0a:90:35:6b:7a:d8:22:87:c1:9e:2d:59:97:65:ef: e0:0f:5b:93:f6:32:60:5e:ce:6c:37:5f:5c:4e:ed:6d:72:84: 72:fc:6a:8e:d2:2f:e6:f1:3e:2a:da:b2:7f:5e:da:93:48:5e: 4d:16:b5:25:c4:8a:1d:5f:05:f2:0a:ed:42:7a:a0:b9:20:62: a1:f8:01:a9:22:fc:95:90:e0:2e:b9:aa:0d:cf:4f:95:e9:12: ff:be:66:d0:bf:25:d3:11:e1:91:b4:95:2a:96:19:5d:c1:87: 51:e3:07:81 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUf+39v3r7TeiOh5cxt3oYGo9RlF4wDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoOTVEOTEzNjg0NUZBRkEwNzk1NzM1RDRBOUIwRkY5Rjc0 NjQ2MUFCMzAeFw0yNTEyMDUxNzM3MjBaFw0yNTEyMDkwMjI2MjBaMDMxMTAvBgNV BAMTKEU4MzZGNDQ0N0ZFQTE0MjYzOEU1RkFGMjg0RjAyODQxOTdBMzA4NUYwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC5S6hFqfRTzikF6MPZU/eNp/Zp qi8kZpL2TJE3L42s4I3P3GI2fy9IYOTJIzVnR7sRsYLSRWbT0a08Nm83Gm42yzjR Iee/lzhoZjpjCIqOuys6zGftd3J1ZbK8EQdK9tOnjo9dixD6PQ6NCr+4XRepwBDu 7kK+KeghonCGaZ/ALuTm47uxZOtmD35armkef+W4Q80afAUlUKf5tym+Wa2PauBG TqPm1ONMlsFtAIqaetd9qcxHGROUcI/CkcraCzV6E9jIciYHCWj6m2rKP1sYazOj lU7iNCzNNDMfUc2mNdEDkCDcJ7s6B1pNZLgQGnPzBr1yfsSDKsWXT/KT2JgPAgMB AAGjggI8MIICODAdBgNVHQ4EFgQU6Db0RH/qFCY45fryhPAoQZejCF8wHwYDVR0j BBgwFoAUldkTaEX6+geVc11Kmw/590ZGGrMwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby9i Mzc4NWU2NS01MWUyLTRiMWItODJmOS1lNzUzYWQ0YjI0MGYvMC85NUQ5MTM2ODQ1 RkFGQTA3OTU3MzVENEE5QjBGRjlGNzQ2NDYxQUIzLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvOTVEOTEzNjg0NUZBRkEwNzk1NzM1RDRBOUIwRkY5Rjc0NjQ2 MUFCMy5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vYjM3ODVlNjUtNTFlMi00YjFiLTgy ZjktZTc1M2FkNGIyNDBmLzAvOTVEOTEzNjg0NUZBRkEwNzk1NzM1RDRBOUIwRkY5 Rjc0NjQ2MUFCMy5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAF2pShsla4P3xz50D27DzOTordzuD+VtffCq 0UFRoUmmDPmCRKGV23VGmMMS2tFq6XRLIDBq9LXeBs3obI7ZTWian5278LONeIlm 5HCLughPdvdH0k23VcZzUfaCSUSpzklJ+pfQyhf19SY9xoX/TYBCYo4U5e+1SSiM XQSxep+wFZ5lH2MtkXVBdEU4pqgAQV8ltgqQNWt62CKHwZ4tWZdl7+APW5P2MmBe zmw3X1xO7W1yhHL8ao7SL+bxPirasn9e2pNIXk0WtSXEih1fBfIK7UJ6oLkgYqH4 Aaki/JWQ4C65qg3PT5XpEv++ZtC/JdMR4ZG0lSqWGV3Bh1HjB4E= -----END CERTIFICATE-----Generated at Sun Dec 7 03:05:46 2025 by rpki-client