This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf repo-rpki.idnic.net/repo/b3785e65-51e2-4b1b-82f9-e753ad4b240f/0/95D9136845FAFA0795735D4A9B0FF9F746461AB3.mft File: 95D9136845FAFA0795735D4A9B0FF9F746461AB3.mft (raw, json) Hash identifier: 0q4ReBuUtpR81qB5qMvtjyLQQTJ4CFJs/yGKcSmJvpM= Subject key identifier: 2B:2F:5E:C9:8E:CF:45:C4:9C:92:3D:18:A3:38:04:46:B3:45:18:9A Authority key identifier: 95:D9:13:68:45:FA:FA:07:95:73:5D:4A:9B:0F:F9:F7:46:46:1A:B3 Certificate issuer: /CN=95D9136845FAFA0795735D4A9B0FF9F746461AB3 Certificate serial: 22E244DC454DF217C6590DAFCA570EFA2CAB410B Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/95D9136845FAFA0795735D4A9B0FF9F746461AB3.cer Subject info access: rsync://repo-rpki.idnic.net/repo/b3785e65-51e2-4b1b-82f9-e753ad4b240f/0/95D9136845FAFA0795735D4A9B0FF9F746461AB3.mft Manifest number: 0531 Signing time: Sun 21 Dec 2025 02:33:19 +0000 Manifest this update: Sun 21 Dec 2025 02:28:19 +0000 Manifest next update: Wed 24 Dec 2025 14:05:19 +0000 Files and hashes: 1: 323030313a6466333a623938303a3a2f34382d3438203d3e203137353338.roa (hash: ifCGuusxkGprBC7NulQNufNvo7SVC5amSJ/1S4uaqjQ=) 2: 3130332e3135312e39392e302f32342d3234203d3e203137353338.roa (hash: hccolhWeQwMhTE4DUNZtMqz3UE4I8axgnsLj/aGjWu0=) 3: 3130332e3135312e39382e302f32342d3234203d3e203137353338.roa (hash: LZPQ7rMeaDVcHWLsKLTFoADUeRBC0AnGmqL6VPS4zMA=) 4: 95D9136845FAFA0795735D4A9B0FF9F746461AB3.crl (hash: kIm8Ld7CjQ0fs0bjKXghObwGM5X3foA7rz0jA63AhiQ=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/b3785e65-51e2-4b1b-82f9-e753ad4b240f/0/95D9136845FAFA0795735D4A9B0FF9F746461AB3.crl rsync://repo-rpki.idnic.net/repo/b3785e65-51e2-4b1b-82f9-e753ad4b240f/0/95D9136845FAFA0795735D4A9B0FF9F746461AB3.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/95D9136845FAFA0795735D4A9B0FF9F746461AB3.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 24 Dec 2025 07:39:25 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 22:e2:44:dc:45:4d:f2:17:c6:59:0d:af:ca:57:0e:fa:2c:ab:41:0b Signature Algorithm: sha256WithRSAEncryption Issuer: CN=95D9136845FAFA0795735D4A9B0FF9F746461AB3 Validity Not Before: Dec 21 02:28:19 2025 GMT Not After : Dec 24 14:05:19 2025 GMT Subject: CN=2B2F5EC98ECF45C49C923D18A3380446B345189A Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:f9:23:0e:ed:62:a3:6f:3f:fd:09:ee:0d:7b:f3: 03:1d:6c:c4:99:db:e4:84:81:aa:1e:1c:33:c2:ed: ee:d7:0b:85:21:33:dd:0d:9f:24:b6:d1:71:3d:40: da:80:5c:37:37:05:fc:d9:81:12:85:7a:74:4d:15: 61:e7:d7:74:4e:3b:ca:bf:05:42:f1:1e:97:16:b9: b5:c1:af:81:29:e5:c0:3a:c8:48:53:e9:6e:ef:dc: ae:ee:a9:bf:c8:e9:5e:08:9a:22:1a:92:c8:3a:6b: 2c:60:4b:ca:31:49:a9:1f:ae:58:55:76:d0:0b:7c: 28:87:56:80:f4:0c:17:7d:cc:6d:19:06:b9:77:12: ae:30:55:c7:0e:b1:67:bc:ca:b9:21:b5:8c:16:58: 1c:e0:a2:57:a2:86:71:be:d8:5d:c8:0f:3f:71:0f: 58:4c:cf:59:b9:35:0c:2d:44:ca:a0:ff:25:4d:80: 8f:5e:10:8d:04:47:70:1e:7e:10:6d:41:e6:42:7a: ec:d2:5d:fd:3f:ef:24:d0:96:17:12:e5:d0:b8:08: a6:70:73:11:e8:06:1e:4f:a5:9d:8d:4e:9b:c7:b5: ca:c1:c9:df:67:ab:71:ef:77:84:3d:01:2a:41:77: f5:2a:47:8e:60:b9:5b:e9:e3:4f:58:07:f6:77:49: 93:6f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 2B:2F:5E:C9:8E:CF:45:C4:9C:92:3D:18:A3:38:04:46:B3:45:18:9A X509v3 Authority Key Identifier: keyid:95:D9:13:68:45:FA:FA:07:95:73:5D:4A:9B:0F:F9:F7:46:46:1A:B3 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/b3785e65-51e2-4b1b-82f9-e753ad4b240f/0/95D9136845FAFA0795735D4A9B0FF9F746461AB3.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/95D9136845FAFA0795735D4A9B0FF9F746461AB3.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/b3785e65-51e2-4b1b-82f9-e753ad4b240f/0/95D9136845FAFA0795735D4A9B0FF9F746461AB3.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 38:9d:6b:dc:22:d7:5f:c7:27:57:b6:fb:5d:f6:2a:e3:53:ab: 4b:1f:ed:c2:2c:91:76:7d:ef:fb:2e:90:79:b9:93:dd:18:d3: 4e:b4:04:9e:cb:27:37:b9:bf:d6:57:2d:32:a7:6b:0e:76:a1: 8c:f5:8b:4e:73:27:61:2f:8f:57:a2:4d:82:62:1a:5f:36:33: 08:fc:7a:87:b7:96:24:b6:7c:ec:b7:e2:aa:46:b2:4d:da:ce: da:04:96:28:83:50:ad:cf:35:ca:39:48:75:ac:05:8a:00:3f: 42:25:cd:e0:09:28:ac:6c:c5:e9:1b:5f:fd:82:7a:86:55:9c: 90:43:ad:cf:29:a8:90:5c:06:f3:54:6b:c6:95:b4:d9:2e:13: 71:21:a8:21:1b:66:88:06:f6:f7:53:9e:80:79:b5:b4:7e:eb: a4:19:39:66:a6:c1:9c:36:aa:2e:ae:51:8b:78:43:ff:19:9d: 23:7c:2a:40:8a:aa:1e:1e:01:17:0d:fa:17:63:65:58:dd:bb: a2:7b:47:23:1e:e4:04:7c:a3:7a:91:81:33:51:59:ae:6f:04: 35:71:01:66:58:7b:4a:2a:b5:93:d3:27:a9:af:ab:6c:fe:51: cb:a6:3e:37:15:8f:a4:79:c6:aa:dd:17:8b:5a:3d:18:db:da: 09:95:5a:d1 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUIuJE3EVN8hfGWQ2vylcO+iyrQQswDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoOTVEOTEzNjg0NUZBRkEwNzk1NzM1RDRBOUIwRkY5Rjc0 NjQ2MUFCMzAeFw0yNTEyMjEwMjI4MTlaFw0yNTEyMjQxNDA1MTlaMDMxMTAvBgNV BAMTKDJCMkY1RUM5OEVDRjQ1QzQ5QzkyM0QxOEEzMzgwNDQ2QjM0NTE4OUEwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQD5Iw7tYqNvP/0J7g178wMdbMSZ 2+SEgaoeHDPC7e7XC4UhM90NnyS20XE9QNqAXDc3BfzZgRKFenRNFWHn13ROO8q/ BULxHpcWubXBr4Ep5cA6yEhT6W7v3K7uqb/I6V4ImiIaksg6ayxgS8oxSakfrlhV dtALfCiHVoD0DBd9zG0ZBrl3Eq4wVccOsWe8yrkhtYwWWBzgoleihnG+2F3IDz9x D1hMz1m5NQwtRMqg/yVNgI9eEI0ER3AefhBtQeZCeuzSXf0/7yTQlhcS5dC4CKZw cxHoBh5PpZ2NTpvHtcrByd9nq3Hvd4Q9ASpBd/UqR45guVvp409YB/Z3SZNvAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUKy9eyY7PRcSckj0YozgERrNFGJowHwYDVR0j BBgwFoAUldkTaEX6+geVc11Kmw/590ZGGrMwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby9i Mzc4NWU2NS01MWUyLTRiMWItODJmOS1lNzUzYWQ0YjI0MGYvMC85NUQ5MTM2ODQ1 RkFGQTA3OTU3MzVENEE5QjBGRjlGNzQ2NDYxQUIzLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvOTVEOTEzNjg0NUZBRkEwNzk1NzM1RDRBOUIwRkY5Rjc0NjQ2 MUFCMy5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vYjM3ODVlNjUtNTFlMi00YjFiLTgy ZjktZTc1M2FkNGIyNDBmLzAvOTVEOTEzNjg0NUZBRkEwNzk1NzM1RDRBOUIwRkY5 Rjc0NjQ2MUFCMy5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBADida9wi11/HJ1e2+132KuNTq0sf7cIskXZ9 7/sukHm5k90Y0060BJ7LJze5v9ZXLTKnaw52oYz1i05zJ2Evj1eiTYJiGl82Mwj8 eoe3liS2fOy34qpGsk3aztoEliiDUK3PNco5SHWsBYoAP0IlzeAJKKxsxekbX/2C eoZVnJBDrc8pqJBcBvNUa8aVtNkuE3EhqCEbZogG9vdTnoB5tbR+66QZOWamwZw2 qi6uUYt4Q/8ZnSN8KkCKqh4eARcN+hdjZVjdu6J7RyMe5AR8o3qRgTNRWa5vBDVx AWZYe0oqtZPTJ6mvq2z+UcumPjcVj6R5xqrdF4taPRjb2gmVWtE= -----END CERTIFICATE-----Generated at Sun Dec 21 19:04:55 2025 by rpki-client