This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf repo-rpki.idnic.net/repo/595dd573-31f4-416c-a1b7-698d6b1697ad/0/1095EA78703826ACF5FA2241EB2B1B66A2C4485A.mft File: 1095EA78703826ACF5FA2241EB2B1B66A2C4485A.mft (raw, json) Hash identifier: QOmL88zmDBzqRM9nWqIBZAlAFl036M+gA4uy6jTkSpI= Subject key identifier: 1D:F0:8D:53:79:CC:99:3A:6A:70:6D:7A:0A:52:3D:EB:EF:E1:25:7B Authority key identifier: 10:95:EA:78:70:38:26:AC:F5:FA:22:41:EB:2B:1B:66:A2:C4:48:5A Certificate issuer: /CN=1095EA78703826ACF5FA2241EB2B1B66A2C4485A Certificate serial: 56CB68F9F312EA2A50C99D85D41FF62406D8A4C1 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/1095EA78703826ACF5FA2241EB2B1B66A2C4485A.cer Subject info access: rsync://repo-rpki.idnic.net/repo/595dd573-31f4-416c-a1b7-698d6b1697ad/0/1095EA78703826ACF5FA2241EB2B1B66A2C4485A.mft Manifest number: 0530 Signing time: Thu 18 Dec 2025 16:01:31 +0000 Manifest this update: Thu 18 Dec 2025 15:56:31 +0000 Manifest next update: Sun 21 Dec 2025 17:04:31 +0000 Files and hashes: 1: 3130332e3231342e3131322e302f32332d3234203d3e20313336303532.roa (hash: XS6giku77XPtxmNRkfOOXOP+iNVcgzmhP0k5pXi56n8=) 2: 1095EA78703826ACF5FA2241EB2B1B66A2C4485A.crl (hash: CAWK7PoHy+68xPOuHFqv+tx3q2z6GtW8F5MLKxjQpok=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/595dd573-31f4-416c-a1b7-698d6b1697ad/0/1095EA78703826ACF5FA2241EB2B1B66A2C4485A.crl rsync://repo-rpki.idnic.net/repo/595dd573-31f4-416c-a1b7-698d6b1697ad/0/1095EA78703826ACF5FA2241EB2B1B66A2C4485A.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/1095EA78703826ACF5FA2241EB2B1B66A2C4485A.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 21 Dec 2025 17:04:31 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 56:cb:68:f9:f3:12:ea:2a:50:c9:9d:85:d4:1f:f6:24:06:d8:a4:c1 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=1095EA78703826ACF5FA2241EB2B1B66A2C4485A Validity Not Before: Dec 18 15:56:31 2025 GMT Not After : Dec 21 17:04:31 2025 GMT Subject: CN=1DF08D5379CC993A6A706D7A0A523DEBEFE1257B Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:af:07:da:f9:f8:5f:69:a9:83:c4:aa:0b:11:15: c1:c3:42:a1:f9:58:dd:89:19:73:bb:20:08:86:70: ef:11:57:03:44:8a:83:76:d2:88:31:9a:e2:39:bb: 39:d7:0e:72:a9:d6:0b:64:de:8a:d8:66:4c:3e:bb: bd:ee:5c:23:5d:7c:d6:79:87:9c:37:f7:e7:ce:8e: 99:f6:8d:ac:51:4d:a4:09:94:d2:ad:e5:ba:b8:a9: e2:56:05:10:0c:71:6a:09:dd:13:c9:62:6f:17:22: 68:74:f6:97:b6:1f:f1:d7:e2:2e:45:11:fe:13:f0: d5:ce:73:a9:8e:d1:fa:50:a4:49:2f:f5:5f:55:84: 3e:67:3f:de:73:da:e4:80:fe:91:b1:a6:97:dd:c8: 96:9d:1f:df:39:72:f4:38:32:19:90:99:fd:f8:e8: 15:77:d0:be:f1:67:8c:c2:b6:8b:2c:55:ba:1b:74: e0:60:ec:94:a9:47:9e:82:9d:c8:60:ef:10:06:90: 19:86:6e:68:4d:96:4c:68:3c:3a:6b:eb:ce:f0:64: 2e:39:2e:d1:88:26:75:cf:16:7f:13:4a:17:a0:4d: 4d:51:bf:64:06:a9:1d:54:59:b4:ef:b9:c7:05:b4: 27:79:be:cf:33:5f:b6:79:30:ec:c9:b9:fb:ca:0a: b3:9f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 1D:F0:8D:53:79:CC:99:3A:6A:70:6D:7A:0A:52:3D:EB:EF:E1:25:7B X509v3 Authority Key Identifier: keyid:10:95:EA:78:70:38:26:AC:F5:FA:22:41:EB:2B:1B:66:A2:C4:48:5A X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/595dd573-31f4-416c-a1b7-698d6b1697ad/0/1095EA78703826ACF5FA2241EB2B1B66A2C4485A.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/1095EA78703826ACF5FA2241EB2B1B66A2C4485A.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/595dd573-31f4-416c-a1b7-698d6b1697ad/0/1095EA78703826ACF5FA2241EB2B1B66A2C4485A.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 48:9f:b9:d8:bb:dd:15:55:2c:33:18:ce:68:c5:56:a1:0e:d1: e5:a6:15:1e:a4:80:3b:d2:ac:19:8d:03:a0:fb:a2:c8:af:fc: f9:a0:f7:73:57:9b:12:46:04:11:bf:43:b9:eb:81:79:97:af: 91:e0:49:4c:9a:36:86:2a:d1:7b:69:cc:5a:6b:cd:8f:1b:2d: fa:9a:90:91:ed:a3:f9:d7:34:e2:1a:df:47:72:ec:2d:db:1f: bc:47:ed:17:c7:c3:ee:b6:1a:e9:20:02:e2:2a:df:2c:db:f6: eb:d0:87:25:91:2a:bf:ee:60:38:21:b4:e8:f9:59:a6:d2:7f: 4f:4f:bf:1d:c8:db:a0:b7:56:ae:e3:30:73:a8:be:cd:85:31: 64:ed:2c:86:44:ca:8c:78:7d:28:33:a5:53:ec:27:da:63:72: 79:60:f8:84:eb:42:0d:97:65:50:28:6a:31:bf:09:ba:2d:8a: 31:02:ef:b0:56:3e:4d:e1:fe:97:d0:a8:f1:c2:5c:98:07:2c: 50:a1:f1:41:97:8a:13:ae:12:66:d0:5e:3c:40:87:48:db:31: 66:d4:5e:9f:64:3b:64:5a:b2:95:2c:0f:12:89:ed:5a:e9:20: a8:84:d8:85:96:79:6c:b6:53:bf:2f:4f:10:9e:ab:27:d9:5d: 4d:64:bc:83 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUVsto+fMS6ipQyZ2F1B/2JAbYpMEwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMTA5NUVBNzg3MDM4MjZBQ0Y1RkEyMjQxRUIyQjFCNjZB MkM0NDg1QTAeFw0yNTEyMTgxNTU2MzFaFw0yNTEyMjExNzA0MzFaMDMxMTAvBgNV BAMTKDFERjA4RDUzNzlDQzk5M0E2QTcwNkQ3QTBBNTIzREVCRUZFMTI1N0IwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCvB9r5+F9pqYPEqgsRFcHDQqH5 WN2JGXO7IAiGcO8RVwNEioN20ogxmuI5uznXDnKp1gtk3orYZkw+u73uXCNdfNZ5 h5w39+fOjpn2jaxRTaQJlNKt5bq4qeJWBRAMcWoJ3RPJYm8XImh09pe2H/HX4i5F Ef4T8NXOc6mO0fpQpEkv9V9VhD5nP95z2uSA/pGxppfdyJadH985cvQ4MhmQmf34 6BV30L7xZ4zCtossVbobdOBg7JSpR56Cnchg7xAGkBmGbmhNlkxoPDpr687wZC45 LtGIJnXPFn8TShegTU1Rv2QGqR1UWbTvuccFtCd5vs8zX7Z5MOzJufvKCrOfAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUHfCNU3nMmTpqcG16ClI96+/hJXswHwYDVR0j BBgwFoAUEJXqeHA4Jqz1+iJB6ysbZqLESFowDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby81 OTVkZDU3My0zMWY0LTQxNmMtYTFiNy02OThkNmIxNjk3YWQvMC8xMDk1RUE3ODcw MzgyNkFDRjVGQTIyNDFFQjJCMUI2NkEyQzQ0ODVBLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvMTA5NUVBNzg3MDM4MjZBQ0Y1RkEyMjQxRUIyQjFCNjZBMkM0 NDg1QS5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vNTk1ZGQ1NzMtMzFmNC00MTZjLWEx YjctNjk4ZDZiMTY5N2FkLzAvMTA5NUVBNzg3MDM4MjZBQ0Y1RkEyMjQxRUIyQjFC NjZBMkM0NDg1QS5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAEifudi73RVVLDMYzmjFVqEO0eWmFR6kgDvS rBmNA6D7osiv/Pmg93NXmxJGBBG/Q7nrgXmXr5HgSUyaNoYq0XtpzFprzY8bLfqa kJHto/nXNOIa30dy7C3bH7xH7RfHw+62GukgAuIq3yzb9uvQhyWRKr/uYDghtOj5 WabSf09Pvx3I26C3Vq7jMHOovs2FMWTtLIZEyox4fSgzpVPsJ9pjcnlg+ITrQg2X ZVAoajG/CbotijEC77BWPk3h/pfQqPHCXJgHLFCh8UGXihOuEmbQXjxAh0jbMWbU Xp9kO2RaspUsDxKJ7VrpIKiE2IWWeWy2U78vTxCeqyfZXU1kvIM= -----END CERTIFICATE-----Generated at Sat Dec 20 05:02:40 2025 by rpki-client