This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf repo-rpki.idnic.net/repo/f6b5ae1e-be66-4a30-a948-7d478c22ea2b/0/95E800EBFF64709892CB5741D9EDC75EE74E2A6D.mft File: 95E800EBFF64709892CB5741D9EDC75EE74E2A6D.mft (raw, json) Hash identifier: unRASl3/MOHxFv2kkYTuMhNdSt32De1QMrJxfFvdZaQ= Subject key identifier: 45:11:50:6A:8E:01:50:D1:7B:71:9B:D0:20:0C:41:31:81:B1:AD:5C Authority key identifier: 95:E8:00:EB:FF:64:70:98:92:CB:57:41:D9:ED:C7:5E:E7:4E:2A:6D Certificate issuer: /CN=95E800EBFF64709892CB5741D9EDC75EE74E2A6D Certificate serial: 21D70EA83CBB5B4BF49F1421DAB37065FD22D24B Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/95E800EBFF64709892CB5741D9EDC75EE74E2A6D.cer Subject info access: rsync://repo-rpki.idnic.net/repo/f6b5ae1e-be66-4a30-a948-7d478c22ea2b/0/95E800EBFF64709892CB5741D9EDC75EE74E2A6D.mft Manifest number: 052C Signing time: Sat 06 Dec 2025 20:41:51 +0000 Manifest this update: Sat 06 Dec 2025 20:36:51 +0000 Manifest next update: Wed 10 Dec 2025 01:53:51 +0000 Files and hashes: 1: 3130332e3133342e3130342e302f32342d3234203d3e203633343937.roa (hash: z8oVsj820WikG58Kg7XuHuFP7zjS3wrrsGJ5kGPWB6k=) 2: 3130332e3133342e3130362e302f32332d3233203d3e203633343937.roa (hash: 6u0QjcaXuZCe/xDwNoPsOwMyKh9MBkPufQ0B3cPlReE=) 3: 3130332e3133342e3130342e302f32322d3232203d3e203633343937.roa (hash: JYyU73FxSsbah75XLPK5+70mS+1BuWT1qs954OCbSn8=) 4: 3130332e3133342e3130362e302f32342d3234203d3e203633343937.roa (hash: fYXLcgnYZQvFF+Sx+nAnnoQPnhu4qBL7MV7MXCijhoM=) 5: 3130332e3133342e3130342e302f32332d3233203d3e203633343937.roa (hash: MowxodGXifPkFbwcnbxmYI86u52XQ+RqEsK4tBHU6Kc=) 6: 95E800EBFF64709892CB5741D9EDC75EE74E2A6D.crl (hash: NNNtjoeukdBj7O50e8/mgY4+qiItjUUliYtpIdmRrAg=) 7: 3130332e3133342e3130352e302f32342d3234203d3e203633343937.roa (hash: pnePfPpninK+12GFjtU9XZZuD9qIupgPZ4/SoFot86c=) 8: 3130332e3133342e3130372e302f32342d3234203d3e203633343937.roa (hash: tJ7W+A0ln7oQ2TKBeYCrxZXeI+2+Ch9yjit0aZIq8qs=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/f6b5ae1e-be66-4a30-a948-7d478c22ea2b/0/95E800EBFF64709892CB5741D9EDC75EE74E2A6D.crl rsync://repo-rpki.idnic.net/repo/f6b5ae1e-be66-4a30-a948-7d478c22ea2b/0/95E800EBFF64709892CB5741D9EDC75EE74E2A6D.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/95E800EBFF64709892CB5741D9EDC75EE74E2A6D.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 09 Dec 2025 15:57:52 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 21:d7:0e:a8:3c:bb:5b:4b:f4:9f:14:21:da:b3:70:65:fd:22:d2:4b Signature Algorithm: sha256WithRSAEncryption Issuer: CN=95E800EBFF64709892CB5741D9EDC75EE74E2A6D Validity Not Before: Dec 6 20:36:51 2025 GMT Not After : Dec 10 01:53:51 2025 GMT Subject: CN=4511506A8E0150D17B719BD0200C413181B1AD5C Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c9:1b:53:29:3d:0a:d6:10:a3:fe:82:f9:10:c4: 99:09:51:d1:04:9c:9b:06:4e:f2:52:02:5b:a4:04: 53:bf:e3:34:3e:7e:a8:29:62:e3:47:3a:d2:e7:d3: a2:bd:40:2f:7c:3d:04:2a:d1:8f:5a:2e:75:0e:c1: f8:e7:76:16:e7:d0:1d:03:d2:c1:34:44:27:3f:28: 91:db:8f:4f:56:bc:4e:0b:66:21:a8:eb:f2:11:a5: 4f:e1:59:03:34:90:1e:ab:3f:cc:26:2d:d8:e9:9c: b2:96:e1:a1:55:0d:77:3c:fe:5d:a2:43:c5:fa:65: cc:fd:73:96:8d:65:aa:8a:f6:59:c4:b4:f6:1c:81: c2:0f:8f:ea:d2:21:06:aa:48:79:3d:d9:18:96:e2: bd:78:0f:1b:75:d2:80:49:6c:91:dd:f9:07:f4:b1: f3:81:26:d4:3f:2b:34:15:a6:b0:1a:4c:f9:2d:5d: 57:7e:8f:45:d9:b2:63:f8:1f:60:7f:79:f7:15:82: 27:48:69:04:4b:d7:bc:01:79:4f:b2:46:d0:a3:05: f0:07:b8:dc:bb:bb:0b:7d:d2:f9:13:8d:65:d8:d2: 7e:c0:19:cc:f7:21:77:3c:67:fe:8b:59:18:9d:0e: 57:a1:8c:51:27:27:f4:8c:f5:d6:8e:2a:b5:9f:eb: 77:f7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 45:11:50:6A:8E:01:50:D1:7B:71:9B:D0:20:0C:41:31:81:B1:AD:5C X509v3 Authority Key Identifier: keyid:95:E8:00:EB:FF:64:70:98:92:CB:57:41:D9:ED:C7:5E:E7:4E:2A:6D X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/f6b5ae1e-be66-4a30-a948-7d478c22ea2b/0/95E800EBFF64709892CB5741D9EDC75EE74E2A6D.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/95E800EBFF64709892CB5741D9EDC75EE74E2A6D.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/f6b5ae1e-be66-4a30-a948-7d478c22ea2b/0/95E800EBFF64709892CB5741D9EDC75EE74E2A6D.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 1b:29:11:de:5d:d7:ff:e4:ee:65:5b:65:56:a3:71:cd:55:72: 2a:d4:1d:5f:b4:da:33:fc:15:f7:64:af:49:5c:1b:8d:d7:28: 7c:5d:91:95:12:c6:00:a0:e6:da:67:30:a2:c3:5a:dd:47:41: 53:18:ba:5f:c6:ac:22:96:80:bc:78:21:7d:fe:34:e9:99:96: 1d:6f:ac:a0:7c:58:0a:8b:5c:f6:27:f9:22:03:a8:6e:04:bc: 94:3a:d0:e9:c4:68:04:29:ab:32:fd:c4:a7:77:8b:9e:d4:5b: a2:47:46:da:10:94:3c:1b:24:14:d0:90:96:57:91:e5:0a:cb: 48:dc:b2:79:3c:da:cf:ae:5d:fa:f4:a9:24:f0:03:43:d8:92: 16:77:99:f5:08:0c:3e:d2:e6:28:1d:50:b8:b7:74:9b:5c:35: 7f:7f:d4:a3:e0:6a:90:d2:7c:08:90:39:d3:f4:11:00:e5:45: 6a:37:54:f0:2b:e4:c5:f3:89:81:4e:0e:5c:c6:c8:b4:49:5b: d4:b9:ad:67:26:82:43:8a:06:d1:47:75:36:60:6b:33:70:96: d5:2c:46:4e:40:0b:f4:97:b3:e0:c8:b9:a8:83:39:fa:a4:fd: 18:bf:c9:18:ea:21:d9:f0:bc:40:ac:e9:0d:d2:a8:dc:fb:09: 29:dc:0c:0e -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUIdcOqDy7W0v0nxQh2rNwZf0i0kswDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoOTVFODAwRUJGRjY0NzA5ODkyQ0I1NzQxRDlFREM3NUVF NzRFMkE2RDAeFw0yNTEyMDYyMDM2NTFaFw0yNTEyMTAwMTUzNTFaMDMxMTAvBgNV BAMTKDQ1MTE1MDZBOEUwMTUwRDE3QjcxOUJEMDIwMEM0MTMxODFCMUFENUMwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDJG1MpPQrWEKP+gvkQxJkJUdEE nJsGTvJSAlukBFO/4zQ+fqgpYuNHOtLn06K9QC98PQQq0Y9aLnUOwfjndhbn0B0D 0sE0RCc/KJHbj09WvE4LZiGo6/IRpU/hWQM0kB6rP8wmLdjpnLKW4aFVDXc8/l2i Q8X6Zcz9c5aNZaqK9lnEtPYcgcIPj+rSIQaqSHk92RiW4r14Dxt10oBJbJHd+Qf0 sfOBJtQ/KzQVprAaTPktXVd+j0XZsmP4H2B/efcVgidIaQRL17wBeU+yRtCjBfAH uNy7uwt90vkTjWXY0n7AGcz3IXc8Z/6LWRidDlehjFEnJ/SM9daOKrWf63f3AgMB AAGjggI8MIICODAdBgNVHQ4EFgQURRFQao4BUNF7cZvQIAxBMYGxrVwwHwYDVR0j BBgwFoAUlegA6/9kcJiSy1dB2e3HXudOKm0wDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby9m NmI1YWUxZS1iZTY2LTRhMzAtYTk0OC03ZDQ3OGMyMmVhMmIvMC85NUU4MDBFQkZG NjQ3MDk4OTJDQjU3NDFEOUVEQzc1RUU3NEUyQTZELmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvOTVFODAwRUJGRjY0NzA5ODkyQ0I1NzQxRDlFREM3NUVFNzRF MkE2RC5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vZjZiNWFlMWUtYmU2Ni00YTMwLWE5 NDgtN2Q0NzhjMjJlYTJiLzAvOTVFODAwRUJGRjY0NzA5ODkyQ0I1NzQxRDlFREM3 NUVFNzRFMkE2RC5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBABspEd5d1//k7mVbZVajcc1VcirUHV+02jP8 Ffdkr0lcG43XKHxdkZUSxgCg5tpnMKLDWt1HQVMYul/GrCKWgLx4IX3+NOmZlh1v rKB8WAqLXPYn+SIDqG4EvJQ60OnEaAQpqzL9xKd3i57UW6JHRtoQlDwbJBTQkJZX keUKy0jcsnk82s+uXfr0qSTwA0PYkhZ3mfUIDD7S5igdULi3dJtcNX9/1KPgapDS fAiQOdP0EQDlRWo3VPAr5MXziYFODlzGyLRJW9S5rWcmgkOKBtFHdTZgazNwltUs Rk5AC/SXs+DIuaiDOfqk/Ri/yRjqIdnwvECs6Q3SqNz7CSncDA4= -----END CERTIFICATE-----Generated at Sun Dec 7 00:49:25 2025 by rpki-client