This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf repo-rpki.idnic.net/repo/84da415b-5f17-4602-9bd9-fd84ac2cae86/0/95FAC38A5CB2CEA3E5FFE2495626A7BEA328D689.mft File: 95FAC38A5CB2CEA3E5FFE2495626A7BEA328D689.mft (raw, json) Hash identifier: EivShYohBmws0jLxO3336cs9sIfz0Y+41mwfiGgxmsM= Subject key identifier: CE:52:05:F3:3B:46:66:89:76:4E:D3:1A:65:81:53:B3:C3:9A:DD:E3 Authority key identifier: 95:FA:C3:8A:5C:B2:CE:A3:E5:FF:E2:49:56:26:A7:BE:A3:28:D6:89 Certificate issuer: /CN=95FAC38A5CB2CEA3E5FFE2495626A7BEA328D689 Certificate serial: 5EFA0F6F98DB175CB5F109B976BF1B5DC2F5F0A6 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/95FAC38A5CB2CEA3E5FFE2495626A7BEA328D689.cer Subject info access: rsync://repo-rpki.idnic.net/repo/84da415b-5f17-4602-9bd9-fd84ac2cae86/0/95FAC38A5CB2CEA3E5FFE2495626A7BEA328D689.mft Manifest number: FD Signing time: Wed 24 Dec 2025 12:42:33 +0000 Manifest this update: Wed 24 Dec 2025 12:37:33 +0000 Manifest next update: Sat 27 Dec 2025 22:06:33 +0000 Files and hashes: 1: 95FAC38A5CB2CEA3E5FFE2495626A7BEA328D689.crl (hash: 7Xb5MR4qHIrdcvwnMGkY5tLDikBJajNiGizoabOJHLE=) 2: 3136302e31392e38382e302f32342d3234203d3e20313437303838.roa (hash: +Xk0mxGkc/lCxZDeUptrpwZhCqCSnBV/uCVgeNZ+WpY=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/84da415b-5f17-4602-9bd9-fd84ac2cae86/0/95FAC38A5CB2CEA3E5FFE2495626A7BEA328D689.crl rsync://repo-rpki.idnic.net/repo/84da415b-5f17-4602-9bd9-fd84ac2cae86/0/95FAC38A5CB2CEA3E5FFE2495626A7BEA328D689.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/95FAC38A5CB2CEA3E5FFE2495626A7BEA328D689.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/60F8BE9C16625C424B269EE06C64A83BAB8506D4.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/60F8BE9C16625C424B269EE06C64A83BAB8506D4.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/YPi-nBZiXEJLJp7gbGSoO6uFBtQ.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 27 Dec 2025 21:07:17 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 5e:fa:0f:6f:98:db:17:5c:b5:f1:09:b9:76:bf:1b:5d:c2:f5:f0:a6 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=95FAC38A5CB2CEA3E5FFE2495626A7BEA328D689 Validity Not Before: Dec 24 12:37:33 2025 GMT Not After : Dec 27 22:06:33 2025 GMT Subject: CN=CE5205F33B466689764ED31A658153B3C39ADDE3 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b2:52:1c:5c:0e:ac:54:91:bd:27:1f:24:cd:34: ab:af:0e:2d:d9:24:aa:00:e6:0a:52:48:f8:37:7a: f5:91:25:9a:58:ef:3d:e2:18:dc:e7:cc:e1:34:20: b2:e3:e9:40:db:0b:ca:52:81:ba:7b:ed:6b:97:c5: a1:a6:51:63:38:1a:41:1d:32:68:46:2e:89:52:9f: 4b:05:70:08:91:de:29:f2:81:94:bc:71:6d:91:9c: 92:d5:69:13:fc:c5:1c:68:43:f4:db:a3:fd:f1:ab: 7e:34:34:65:3f:31:72:c9:37:97:b9:2f:44:f3:16: d1:97:c8:c9:e8:97:3d:d6:00:89:0f:61:54:aa:81: fd:62:ab:3b:07:64:a4:0e:b1:6f:25:4a:e9:25:6f: 7e:e4:dd:6c:45:cd:96:88:7a:09:78:18:99:64:1f: ad:95:7a:7a:ba:b6:62:f3:b4:de:24:f3:fa:8b:c6: 25:c7:08:09:3e:97:d9:dc:2b:ca:a3:45:ef:89:e7: 35:b5:00:58:c2:c5:23:15:ca:17:b4:d7:0a:85:19: 59:2e:ec:80:eb:c7:3b:60:5e:25:62:d1:f4:b8:77: a1:1d:5c:55:55:32:e0:81:00:3f:d3:89:cf:28:ce: 97:d6:81:0b:62:43:d8:7f:35:e9:1e:1c:2a:5a:ae: 03:63 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: CE:52:05:F3:3B:46:66:89:76:4E:D3:1A:65:81:53:B3:C3:9A:DD:E3 X509v3 Authority Key Identifier: keyid:95:FA:C3:8A:5C:B2:CE:A3:E5:FF:E2:49:56:26:A7:BE:A3:28:D6:89 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/84da415b-5f17-4602-9bd9-fd84ac2cae86/0/95FAC38A5CB2CEA3E5FFE2495626A7BEA328D689.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/95FAC38A5CB2CEA3E5FFE2495626A7BEA328D689.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/84da415b-5f17-4602-9bd9-fd84ac2cae86/0/95FAC38A5CB2CEA3E5FFE2495626A7BEA328D689.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 2c:d9:dc:18:ef:c9:4e:39:8b:e5:6c:09:59:90:f5:68:83:d5: 9c:b5:8b:7a:df:f9:e7:3a:68:52:f1:bd:38:49:eb:61:f3:93: a4:cf:93:04:c6:f4:bb:6b:98:78:a5:eb:9c:48:60:dd:78:e5: 39:bd:4d:46:1a:5b:5f:4a:49:7a:5e:a6:e7:e7:c6:8f:f3:51: 20:ed:19:19:3c:c2:3a:80:ad:e4:73:f4:6f:9d:a9:ed:ed:79: 55:bd:6b:96:2f:e9:ad:ed:49:85:09:29:71:4e:c9:43:cd:62: 25:13:ef:c2:c4:24:e9:8b:dd:61:aa:55:3b:51:52:70:8c:c9: cd:02:db:00:50:66:61:17:e4:23:6d:53:02:a4:31:f3:76:a3: 77:35:7f:78:f2:22:32:91:c8:aa:f9:d4:18:12:79:af:70:fc: 01:e5:4a:22:eb:a4:9f:a9:c6:15:6b:b5:b0:a3:11:fa:6d:e1: 8e:73:00:4c:d8:94:9f:6f:e3:7a:47:05:74:3c:95:29:c4:f5: 2c:09:a8:97:c3:5f:1d:d1:01:64:a9:88:35:82:95:60:11:3f: 55:da:b6:bb:d5:ed:90:60:d2:b5:58:a5:76:90:c1:e5:6f:3b: a5:25:21:15:ee:c6:cb:1b:2f:ff:48:93:57:66:7c:9e:7d:5a: cf:70:8b:4c -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUXvoPb5jbF1y18Qm5dr8bXcL18KYwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoOTVGQUMzOEE1Q0IyQ0VBM0U1RkZFMjQ5NTYyNkE3QkVB MzI4RDY4OTAeFw0yNTEyMjQxMjM3MzNaFw0yNTEyMjcyMjA2MzNaMDMxMTAvBgNV BAMTKENFNTIwNUYzM0I0NjY2ODk3NjRFRDMxQTY1ODE1M0IzQzM5QURERTMwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCyUhxcDqxUkb0nHyTNNKuvDi3Z JKoA5gpSSPg3evWRJZpY7z3iGNznzOE0ILLj6UDbC8pSgbp77WuXxaGmUWM4GkEd MmhGLolSn0sFcAiR3inygZS8cW2RnJLVaRP8xRxoQ/Tbo/3xq340NGU/MXLJN5e5 L0TzFtGXyMnolz3WAIkPYVSqgf1iqzsHZKQOsW8lSuklb37k3WxFzZaIegl4GJlk H62Venq6tmLztN4k8/qLxiXHCAk+l9ncK8qjRe+J5zW1AFjCxSMVyhe01wqFGVku 7IDrxztgXiVi0fS4d6EdXFVVMuCBAD/Tic8ozpfWgQtiQ9h/NekeHCpargNjAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUzlIF8ztGZol2TtMaZYFTs8Oa3eMwHwYDVR0j BBgwFoAUlfrDilyyzqPl/+JJVianvqMo1okwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby84 NGRhNDE1Yi01ZjE3LTQ2MDItOWJkOS1mZDg0YWMyY2FlODYvMC85NUZBQzM4QTVD QjJDRUEzRTVGRkUyNDk1NjI2QTdCRUEzMjhENjg5LmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzEvOTVGQUMzOEE1Q0IyQ0VBM0U1RkZFMjQ5NTYyNkE3QkVBMzI4 RDY4OS5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vODRkYTQxNWItNWYxNy00NjAyLTli ZDktZmQ4NGFjMmNhZTg2LzAvOTVGQUMzOEE1Q0IyQ0VBM0U1RkZFMjQ5NTYyNkE3 QkVBMzI4RDY4OS5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBACzZ3BjvyU45i+VsCVmQ9WiD1Zy1i3rf+ec6 aFLxvThJ62Hzk6TPkwTG9LtrmHil65xIYN145Tm9TUYaW19KSXpepufnxo/zUSDt GRk8wjqAreRz9G+dqe3teVW9a5Yv6a3tSYUJKXFOyUPNYiUT78LEJOmL3WGqVTtR UnCMyc0C2wBQZmEX5CNtUwKkMfN2o3c1f3jyIjKRyKr51BgSea9w/AHlSiLrpJ+p xhVrtbCjEfpt4Y5zAEzYlJ9v43pHBXQ8lSnE9SwJqJfDXx3RAWSpiDWClWARP1Xa trvV7ZBg0rVYpXaQweVvO6UlIRXuxssbL/9Ik1dmfJ59Ws9wi0w= -----END CERTIFICATE-----Generated at Thu Dec 25 01:23:47 2025 by rpki-client