This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf repo-rpki.idnic.net/repo/140e9c9f-d607-4497-af28-4d2b9092d5a6/0/95C3BA7F23B6351721F77DA8020731F9DA46B3C8.mft File: 95C3BA7F23B6351721F77DA8020731F9DA46B3C8.mft (raw, json) Hash identifier: NnvrYR15+3nvw25/prljjrl/XdrbbByHdZaSUApfSSk= Subject key identifier: F8:65:8A:01:6B:79:F5:28:F0:1E:62:67:5D:AB:31:24:5B:FC:38:72 Authority key identifier: 95:C3:BA:7F:23:B6:35:17:21:F7:7D:A8:02:07:31:F9:DA:46:B3:C8 Certificate issuer: /CN=95C3BA7F23B6351721F77DA8020731F9DA46B3C8 Certificate serial: 7B8DF16697747559374C83A440D63B237ED3C2FC Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/95C3BA7F23B6351721F77DA8020731F9DA46B3C8.cer Subject info access: rsync://repo-rpki.idnic.net/repo/140e9c9f-d607-4497-af28-4d2b9092d5a6/0/95C3BA7F23B6351721F77DA8020731F9DA46B3C8.mft Manifest number: 0534 Signing time: Wed 17 Dec 2025 02:01:34 +0000 Manifest this update: Wed 17 Dec 2025 01:56:34 +0000 Manifest next update: Sat 20 Dec 2025 03:08:34 +0000 Files and hashes: 1: 3130332e3134382e38342e302f32332d3233203d3e20313339393836.roa (hash: wl5DevhHVxkmwfDCCC4JaJfUTNabYHb/Lh+cHr1YoI8=) 2: 3130332e3134382e38352e302f32342d3234203d3e20313339393836.roa (hash: rC6h62i9FYTYXRJwY0Brz86k4I7okoBa0s60XGjIzcU=) 3: 3130332e3134382e38342e302f32342d3234203d3e20313339393836.roa (hash: mAx24Mrm6AI9KeLaD2h/5RLJ5ztWp5mCELhp+sgXhQM=) 4: 323030313a6466323a633738303a3a2f34382d3438203d3e20313339393836.roa (hash: 75/DAONeN65KHxljOFhq+chBgFEKtm0A6zWkkY+QXDo=) 5: 95C3BA7F23B6351721F77DA8020731F9DA46B3C8.crl (hash: 7vPcQDfh3Tb0D13w+1wCKVq5mrtatEbSQdrP1GXRtq4=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/140e9c9f-d607-4497-af28-4d2b9092d5a6/0/95C3BA7F23B6351721F77DA8020731F9DA46B3C8.crl rsync://repo-rpki.idnic.net/repo/140e9c9f-d607-4497-af28-4d2b9092d5a6/0/95C3BA7F23B6351721F77DA8020731F9DA46B3C8.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/95C3BA7F23B6351721F77DA8020731F9DA46B3C8.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 20 Dec 2025 03:08:34 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 7b:8d:f1:66:97:74:75:59:37:4c:83:a4:40:d6:3b:23:7e:d3:c2:fc Signature Algorithm: sha256WithRSAEncryption Issuer: CN=95C3BA7F23B6351721F77DA8020731F9DA46B3C8 Validity Not Before: Dec 17 01:56:34 2025 GMT Not After : Dec 20 03:08:34 2025 GMT Subject: CN=F8658A016B79F528F01E62675DAB31245BFC3872 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:da:72:cc:d7:21:94:49:8c:d4:88:41:e3:67:2a: 36:10:19:91:85:b2:27:0d:58:63:d9:2d:db:b4:1f: 72:97:27:09:dd:ca:f6:15:03:3b:b7:e5:ec:aa:ee: 37:88:38:89:43:77:28:af:b2:b0:36:6d:ea:01:24: c0:4c:14:72:da:4b:fe:3a:70:76:b0:f0:8c:e9:6a: 35:30:e5:f5:52:f6:2b:44:c7:1f:0d:9b:91:a2:9b: 14:60:40:57:10:cc:37:4b:61:31:b0:a0:34:81:c8: bb:2b:8b:c1:4d:65:ca:a2:ee:a3:21:5c:13:1c:6c: 99:d7:d9:aa:33:0d:2a:bf:97:66:c2:c5:b6:7d:84: 64:8f:7c:b2:4f:1c:13:7a:00:1b:c5:61:89:53:8d: d0:64:ea:7c:bb:97:f8:c5:5e:e6:5a:cc:50:a9:f0: d1:e0:da:f5:1a:35:65:46:c6:76:44:1e:f2:76:88: dc:ef:b9:d0:18:a2:f2:1a:92:60:49:ab:26:8d:61: 7f:77:4a:62:34:13:dc:22:29:e2:36:e6:a2:8a:5d: 04:9d:b7:db:e5:3f:84:a7:da:e4:fb:a8:bc:17:b8: bc:1b:f0:6c:ad:15:82:61:52:5e:a3:16:54:56:d7: 22:ba:aa:8c:7c:cd:fc:3e:4d:85:ee:a5:a9:f5:c5: 69:d3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: F8:65:8A:01:6B:79:F5:28:F0:1E:62:67:5D:AB:31:24:5B:FC:38:72 X509v3 Authority Key Identifier: keyid:95:C3:BA:7F:23:B6:35:17:21:F7:7D:A8:02:07:31:F9:DA:46:B3:C8 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/140e9c9f-d607-4497-af28-4d2b9092d5a6/0/95C3BA7F23B6351721F77DA8020731F9DA46B3C8.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/95C3BA7F23B6351721F77DA8020731F9DA46B3C8.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/140e9c9f-d607-4497-af28-4d2b9092d5a6/0/95C3BA7F23B6351721F77DA8020731F9DA46B3C8.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 16:1e:fd:ca:db:d9:a3:8e:52:c4:52:98:15:3a:10:12:9c:a0: 06:4a:b1:93:9b:0b:0c:fb:dd:bc:1c:e5:17:18:f7:28:90:13: e2:2d:72:28:a9:fc:81:08:21:c6:0b:48:02:bb:0b:b2:6f:62: 0e:38:39:eb:a2:b0:0f:f4:94:c1:61:d2:47:72:a5:0a:12:6d: 9d:b4:ea:ad:06:33:25:e2:f1:58:44:50:97:40:50:ed:14:26: 55:8b:e4:d6:58:89:dc:c0:bf:5b:b4:04:4d:45:4d:0a:b4:8d: 49:b9:86:c2:7c:0d:a2:09:38:8f:3d:ac:2e:8c:51:6a:ea:f2: 74:d1:b1:a7:52:e1:3a:87:6e:4d:06:c8:70:7e:61:c0:32:4f: d1:61:d0:85:28:a6:c6:63:98:98:72:62:0c:33:31:8d:49:7a: 47:7a:ca:e7:96:76:70:52:88:69:f1:43:3e:73:11:7d:26:7d: 45:9d:1d:b6:7d:49:37:a3:b6:78:ae:a0:93:5a:e3:48:80:46: eb:5b:31:b3:c8:a1:ca:bd:ca:41:1f:13:eb:51:42:9a:f5:d8: b1:74:75:c2:4b:3d:ba:d7:99:38:3c:f2:34:c5:75:82:b5:cb: 22:46:07:82:60:25:0c:57:c5:fd:fd:d3:1c:e0:60:64:a2:0c: 14:7c:bd:f2 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUe43xZpd0dVk3TIOkQNY7I37TwvwwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoOTVDM0JBN0YyM0I2MzUxNzIxRjc3REE4MDIwNzMxRjlE QTQ2QjNDODAeFw0yNTEyMTcwMTU2MzRaFw0yNTEyMjAwMzA4MzRaMDMxMTAvBgNV BAMTKEY4NjU4QTAxNkI3OUY1MjhGMDFFNjI2NzVEQUIzMTI0NUJGQzM4NzIwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDacszXIZRJjNSIQeNnKjYQGZGF sicNWGPZLdu0H3KXJwndyvYVAzu35eyq7jeIOIlDdyivsrA2beoBJMBMFHLaS/46 cHaw8IzpajUw5fVS9itExx8Nm5GimxRgQFcQzDdLYTGwoDSByLsri8FNZcqi7qMh XBMcbJnX2aozDSq/l2bCxbZ9hGSPfLJPHBN6ABvFYYlTjdBk6ny7l/jFXuZazFCp 8NHg2vUaNWVGxnZEHvJ2iNzvudAYovIakmBJqyaNYX93SmI0E9wiKeI25qKKXQSd t9vlP4Sn2uT7qLwXuLwb8GytFYJhUl6jFlRW1yK6qox8zfw+TYXupan1xWnTAgMB AAGjggI8MIICODAdBgNVHQ4EFgQU+GWKAWt59SjwHmJnXasxJFv8OHIwHwYDVR0j BBgwFoAUlcO6fyO2NRch932oAgcx+dpGs8gwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby8x NDBlOWM5Zi1kNjA3LTQ0OTctYWYyOC00ZDJiOTA5MmQ1YTYvMC85NUMzQkE3RjIz QjYzNTE3MjFGNzdEQTgwMjA3MzFGOURBNDZCM0M4LmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvOTVDM0JBN0YyM0I2MzUxNzIxRjc3REE4MDIwNzMxRjlEQTQ2 QjNDOC5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vMTQwZTljOWYtZDYwNy00NDk3LWFm MjgtNGQyYjkwOTJkNWE2LzAvOTVDM0JBN0YyM0I2MzUxNzIxRjc3REE4MDIwNzMx RjlEQTQ2QjNDOC5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBABYe/crb2aOOUsRSmBU6EBKcoAZKsZObCwz7 3bwc5RcY9yiQE+Itciip/IEIIcYLSAK7C7JvYg44OeuisA/0lMFh0kdypQoSbZ20 6q0GMyXi8VhEUJdAUO0UJlWL5NZYidzAv1u0BE1FTQq0jUm5hsJ8DaIJOI89rC6M UWrq8nTRsadS4TqHbk0GyHB+YcAyT9Fh0IUopsZjmJhyYgwzMY1Jekd6yueWdnBS iGnxQz5zEX0mfUWdHbZ9STejtniuoJNa40iARutbMbPIocq9ykEfE+tRQpr12LF0 dcJLPbrXmTg88jTFdYK1yyJGB4JgJQxXxf390xzgYGSiDBR8vfI= -----END CERTIFICATE-----Generated at Fri Dec 19 11:19:36 2025 by rpki-client