This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf repo-rpki.idnic.net/repo/d2f1417a-5718-4071-9f35-c122555dac7a/0/95966A8DB250307CF9852483F96922EE520F6E2A.mft File: 95966A8DB250307CF9852483F96922EE520F6E2A.mft (raw, json) Hash identifier: hOWRl9vydr37HuTxL+x71WrKE1d0hxjuPgMvzXxUOPw= Subject key identifier: 87:53:FF:BE:31:BB:33:AD:25:D6:FF:F3:66:F7:53:F7:15:7D:47:94 Authority key identifier: 95:96:6A:8D:B2:50:30:7C:F9:85:24:83:F9:69:22:EE:52:0F:6E:2A Certificate issuer: /CN=95966A8DB250307CF9852483F96922EE520F6E2A Certificate serial: 4CF2818396AB786CDD296DD607B33ED5AA75DA1F Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/95966A8DB250307CF9852483F96922EE520F6E2A.cer Subject info access: rsync://repo-rpki.idnic.net/repo/d2f1417a-5718-4071-9f35-c122555dac7a/0/95966A8DB250307CF9852483F96922EE520F6E2A.mft Manifest number: 0331 Signing time: Sun 25 Jan 2026 06:10:00 +0000 Manifest this update: Sun 25 Jan 2026 06:05:00 +0000 Manifest next update: Wed 28 Jan 2026 11:23:00 +0000 Files and hashes: 1: 3130332e31392e3232392e302f32342d3234203d3e20313332363638.roa (hash: lJA11B888lTAIORO0k9rdft4p7t0vrr4FyWBG++arwA=) 2: 3130332e31392e3232382e302f32342d3234203d3e20313332363638.roa (hash: MitWmX3yxsYyPd+sKi7YcLOVm2fefPu2Qs/7NDCXxb8=) 3: 95966A8DB250307CF9852483F96922EE520F6E2A.crl (hash: ZiXqOvJ/9jgZkEY7f/M+EZYDLACiv3IK0pU8e9XvMtE=) 4: 3130332e31392e3233312e302f32342d3234203d3e20313332363638.roa (hash: xt2DiIsS1Hm+P8ldmkaqq+Mf+LiIX+U17UKLw/Y34Uk=) 5: 3130332e31392e3233302e302f32342d3234203d3e20313332363638.roa (hash: QAndsMLECtqgWCCHyuYe9oOyMMkwnZ8QhtRk2OHf9FQ=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/d2f1417a-5718-4071-9f35-c122555dac7a/0/95966A8DB250307CF9852483F96922EE520F6E2A.crl rsync://repo-rpki.idnic.net/repo/d2f1417a-5718-4071-9f35-c122555dac7a/0/95966A8DB250307CF9852483F96922EE520F6E2A.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/95966A8DB250307CF9852483F96922EE520F6E2A.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 28 Jan 2026 11:23:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 4c:f2:81:83:96:ab:78:6c:dd:29:6d:d6:07:b3:3e:d5:aa:75:da:1f Signature Algorithm: sha256WithRSAEncryption Issuer: CN=95966A8DB250307CF9852483F96922EE520F6E2A Validity Not Before: Jan 25 06:05:00 2026 GMT Not After : Jan 28 11:23:00 2026 GMT Subject: CN=8753FFBE31BB33AD25D6FFF366F753F7157D4794 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b5:41:b3:ad:65:c3:2e:48:de:93:99:43:59:25: df:b5:00:64:d9:36:99:06:53:6e:57:6e:08:dc:fb: e4:68:1c:e1:1a:e9:cb:d3:54:83:92:ba:14:f7:62: df:18:db:eb:64:d4:81:52:a7:79:6c:1e:ad:7e:6b: 33:c9:c2:c7:fc:a7:9f:d0:84:1d:aa:62:35:cf:a7: a6:ed:e3:5e:7d:10:d0:62:c8:19:0b:21:d5:00:d0: 87:de:8e:d1:35:81:4a:42:98:f0:0d:85:59:bb:14: e4:74:ab:9a:1e:44:9a:27:c4:8d:8c:b7:95:2a:2a: 79:c4:b7:db:ad:8e:7a:19:61:3d:4a:13:57:0f:d4: 18:7c:02:07:75:d8:2c:bb:8d:0e:a6:59:22:4c:7a: cb:ef:50:69:ea:fa:0a:a0:36:03:d6:df:f0:f0:e5: c2:00:b0:3c:d5:10:d8:5b:c6:aa:7c:fe:c2:43:02: b1:40:53:fd:67:ba:d1:8d:ab:1f:6a:bb:51:d7:16: 51:2b:ef:45:6a:d8:f4:c7:d5:da:a0:59:0b:12:9c: 62:78:da:c1:4f:20:d0:62:1c:08:f4:eb:19:6c:6b: 07:60:50:10:82:6f:9c:0e:a3:1a:84:7f:de:c6:47: e6:64:da:95:5e:e7:94:87:07:c7:32:24:a8:32:36: d6:f3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 87:53:FF:BE:31:BB:33:AD:25:D6:FF:F3:66:F7:53:F7:15:7D:47:94 X509v3 Authority Key Identifier: keyid:95:96:6A:8D:B2:50:30:7C:F9:85:24:83:F9:69:22:EE:52:0F:6E:2A X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/d2f1417a-5718-4071-9f35-c122555dac7a/0/95966A8DB250307CF9852483F96922EE520F6E2A.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/95966A8DB250307CF9852483F96922EE520F6E2A.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/d2f1417a-5718-4071-9f35-c122555dac7a/0/95966A8DB250307CF9852483F96922EE520F6E2A.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 87:9e:25:56:20:26:5a:68:ff:31:7f:ad:89:1e:b7:11:08:93: 25:96:1b:91:e8:33:1f:be:0a:05:81:d5:67:f7:20:5e:d7:20: 7b:67:b9:e5:62:9c:7f:34:71:65:94:51:64:9d:34:76:fd:22: 2f:fd:d7:da:c9:04:64:16:78:a0:c7:30:21:01:c1:33:58:10: a3:99:1d:42:6f:8d:94:66:bb:67:bf:ac:b0:fa:1a:07:6d:c0: 8e:9c:b9:d6:83:e1:f4:28:a3:3b:7d:63:cd:e1:fa:f4:7e:58: 9e:01:71:19:51:e8:73:51:54:e9:49:81:cc:50:1d:6d:dc:ef: 94:d9:71:f1:0e:17:fa:11:21:d3:78:63:e1:d1:df:91:8a:8b: 27:6e:f0:d4:d8:64:76:6e:de:37:36:c0:1f:61:f5:e7:e5:1d: 65:64:c1:ec:74:7c:f0:2b:7b:8b:89:00:19:36:84:3b:5f:75: bb:08:2e:e8:ee:18:73:20:4f:a8:e0:09:37:8e:f1:91:6e:4f: 01:80:ed:27:c8:e9:69:d5:bd:d8:0d:b0:1f:15:b0:12:f6:17: a3:cf:d3:1e:6b:35:85:b0:ff:75:b2:da:a8:3a:e2:1f:91:5f: 44:e3:26:88:79:4d:5d:86:4b:11:55:3b:ae:7c:ab:95:a4:ee: f4:12:9f:4d -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUTPKBg5areGzdKW3WB7M+1ap12h8wDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoOTU5NjZBOERCMjUwMzA3Q0Y5ODUyNDgzRjk2OTIyRUU1 MjBGNkUyQTAeFw0yNjAxMjUwNjA1MDBaFw0yNjAxMjgxMTIzMDBaMDMxMTAvBgNV BAMTKDg3NTNGRkJFMzFCQjMzQUQyNUQ2RkZGMzY2Rjc1M0Y3MTU3RDQ3OTQwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC1QbOtZcMuSN6TmUNZJd+1AGTZ NpkGU25Xbgjc++RoHOEa6cvTVIOSuhT3Yt8Y2+tk1IFSp3lsHq1+azPJwsf8p5/Q hB2qYjXPp6bt4159ENBiyBkLIdUA0IfejtE1gUpCmPANhVm7FOR0q5oeRJonxI2M t5UqKnnEt9utjnoZYT1KE1cP1Bh8Agd12Cy7jQ6mWSJMesvvUGnq+gqgNgPW3/Dw 5cIAsDzVENhbxqp8/sJDArFAU/1nutGNqx9qu1HXFlEr70Vq2PTH1dqgWQsSnGJ4 2sFPINBiHAj06xlsawdgUBCCb5wOoxqEf97GR+Zk2pVe55SHB8cyJKgyNtbzAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUh1P/vjG7M60l1v/zZvdT9xV9R5QwHwYDVR0j BBgwFoAUlZZqjbJQMHz5hSSD+Wki7lIPbiowDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby9k MmYxNDE3YS01NzE4LTQwNzEtOWYzNS1jMTIyNTU1ZGFjN2EvMC85NTk2NkE4REIy NTAzMDdDRjk4NTI0ODNGOTY5MjJFRTUyMEY2RTJBLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvOTU5NjZBOERCMjUwMzA3Q0Y5ODUyNDgzRjk2OTIyRUU1MjBG NkUyQS5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vZDJmMTQxN2EtNTcxOC00MDcxLTlm MzUtYzEyMjU1NWRhYzdhLzAvOTU5NjZBOERCMjUwMzA3Q0Y5ODUyNDgzRjk2OTIy RUU1MjBGNkUyQS5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAIeeJVYgJlpo/zF/rYketxEIkyWWG5HoMx++ CgWB1Wf3IF7XIHtnueVinH80cWWUUWSdNHb9Ii/919rJBGQWeKDHMCEBwTNYEKOZ HUJvjZRmu2e/rLD6GgdtwI6cudaD4fQoozt9Y83h+vR+WJ4BcRlR6HNRVOlJgcxQ HW3c75TZcfEOF/oRIdN4Y+HR35GKiydu8NTYZHZu3jc2wB9h9eflHWVkwex0fPAr e4uJABk2hDtfdbsILujuGHMgT6jgCTeO8ZFuTwGA7SfI6WnVvdgNsB8VsBL2F6PP 0x5rNYWw/3Wy2qg64h+RX0TjJoh5TV2GSxFVO658q5Wk7vQSn00= -----END CERTIFICATE-----Generated at Sun Jan 25 18:59:17 2026 by rpki-client