This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf repo-rpki.idnic.net/repo/f6b5ae1e-be66-4a30-a948-7d478c22ea2b/0/95E800EBFF64709892CB5741D9EDC75EE74E2A6D.mft File: 95E800EBFF64709892CB5741D9EDC75EE74E2A6D.mft (raw, json) Hash identifier: +njLHDQY4MFyie+ixdQ5z+pv+OVAf5eB9wbNSB2NQfA= Subject key identifier: D3:31:C7:BB:49:E3:09:E2:FC:5E:CA:9A:20:F4:27:E4:3A:3A:73:CF Authority key identifier: 95:E8:00:EB:FF:64:70:98:92:CB:57:41:D9:ED:C7:5E:E7:4E:2A:6D Certificate issuer: /CN=95E800EBFF64709892CB5741D9EDC75EE74E2A6D Certificate serial: 46E71148331615378780D43225C9E60DAF4FDC7C Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/95E800EBFF64709892CB5741D9EDC75EE74E2A6D.cer Subject info access: rsync://repo-rpki.idnic.net/repo/f6b5ae1e-be66-4a30-a948-7d478c22ea2b/0/95E800EBFF64709892CB5741D9EDC75EE74E2A6D.mft Manifest number: 0531 Signing time: Thu 18 Dec 2025 11:11:50 +0000 Manifest this update: Thu 18 Dec 2025 11:06:50 +0000 Manifest next update: Sun 21 Dec 2025 11:31:50 +0000 Files and hashes: 1: 95E800EBFF64709892CB5741D9EDC75EE74E2A6D.crl (hash: lEfZsXCyGXfcIfPWuZrcFQBlAvxwvghL918HJhrubn0=) 2: 3130332e3133342e3130342e302f32342d3234203d3e203633343937.roa (hash: z8oVsj820WikG58Kg7XuHuFP7zjS3wrrsGJ5kGPWB6k=) 3: 3130332e3133342e3130352e302f32342d3234203d3e203633343937.roa (hash: pnePfPpninK+12GFjtU9XZZuD9qIupgPZ4/SoFot86c=) 4: 3130332e3133342e3130372e302f32342d3234203d3e203633343937.roa (hash: tJ7W+A0ln7oQ2TKBeYCrxZXeI+2+Ch9yjit0aZIq8qs=) 5: 3130332e3133342e3130342e302f32322d3232203d3e203633343937.roa (hash: JYyU73FxSsbah75XLPK5+70mS+1BuWT1qs954OCbSn8=) 6: 3130332e3133342e3130362e302f32332d3233203d3e203633343937.roa (hash: 6u0QjcaXuZCe/xDwNoPsOwMyKh9MBkPufQ0B3cPlReE=) 7: 3130332e3133342e3130362e302f32342d3234203d3e203633343937.roa (hash: fYXLcgnYZQvFF+Sx+nAnnoQPnhu4qBL7MV7MXCijhoM=) 8: 3130332e3133342e3130342e302f32332d3233203d3e203633343937.roa (hash: MowxodGXifPkFbwcnbxmYI86u52XQ+RqEsK4tBHU6Kc=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/f6b5ae1e-be66-4a30-a948-7d478c22ea2b/0/95E800EBFF64709892CB5741D9EDC75EE74E2A6D.crl rsync://repo-rpki.idnic.net/repo/f6b5ae1e-be66-4a30-a948-7d478c22ea2b/0/95E800EBFF64709892CB5741D9EDC75EE74E2A6D.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/95E800EBFF64709892CB5741D9EDC75EE74E2A6D.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 21 Dec 2025 11:31:50 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 46:e7:11:48:33:16:15:37:87:80:d4:32:25:c9:e6:0d:af:4f:dc:7c Signature Algorithm: sha256WithRSAEncryption Issuer: CN=95E800EBFF64709892CB5741D9EDC75EE74E2A6D Validity Not Before: Dec 18 11:06:50 2025 GMT Not After : Dec 21 11:31:50 2025 GMT Subject: CN=D331C7BB49E309E2FC5ECA9A20F427E43A3A73CF Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:98:65:ec:99:b6:27:6f:29:79:f4:9f:1b:c2:52: 8d:e4:d3:c8:88:7c:1b:65:45:1e:8a:09:43:24:89: 28:ff:dc:48:c7:5b:09:0c:60:78:5f:a6:77:f0:97: ff:46:34:9b:d9:c2:67:39:d4:05:51:b1:0a:a1:0e: c3:3d:bc:69:47:e6:cf:9a:ec:10:64:f3:34:c0:7e: e0:df:e2:c5:81:c1:d8:0a:9e:ca:c7:b4:0c:48:ce: 09:0f:94:f1:7c:f0:ee:5e:7d:0b:14:62:a7:6c:e6: da:bf:05:23:27:5e:92:42:a9:af:5d:a7:2a:0e:7e: d1:8d:a8:da:99:79:4a:51:47:1d:e2:96:8a:01:7b: 25:39:9d:cb:91:ee:06:d6:9b:3c:f9:cb:2a:f6:0f: 61:5d:fb:77:08:dd:40:2d:11:6a:8d:3b:2f:ae:08: 35:70:ff:0d:fb:0a:a1:77:2b:ee:09:78:2f:19:a1: f1:4f:13:d9:c8:c0:71:99:26:9e:59:56:f6:84:81: c6:00:78:02:a8:fd:63:27:19:f0:c6:18:74:b8:c2: 93:1a:2f:11:01:80:56:e1:79:48:4c:89:2a:34:7a: cd:15:e2:9a:a9:58:86:f4:6b:23:d7:09:fb:0f:ee: 2c:19:ec:10:96:7a:8c:88:b7:18:ff:9c:ed:6f:5c: 28:c5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D3:31:C7:BB:49:E3:09:E2:FC:5E:CA:9A:20:F4:27:E4:3A:3A:73:CF X509v3 Authority Key Identifier: keyid:95:E8:00:EB:FF:64:70:98:92:CB:57:41:D9:ED:C7:5E:E7:4E:2A:6D X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/f6b5ae1e-be66-4a30-a948-7d478c22ea2b/0/95E800EBFF64709892CB5741D9EDC75EE74E2A6D.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/95E800EBFF64709892CB5741D9EDC75EE74E2A6D.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/f6b5ae1e-be66-4a30-a948-7d478c22ea2b/0/95E800EBFF64709892CB5741D9EDC75EE74E2A6D.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 05:94:30:65:bd:39:11:0a:f6:cc:0f:df:04:c4:b5:b4:5b:4c: e0:0e:98:8f:69:50:25:11:86:35:b1:e3:01:4a:8e:47:42:96: 9c:80:b0:47:84:ee:54:ea:51:be:c1:e1:96:de:88:e3:f0:da: ea:bb:ce:a7:cc:81:58:10:15:3f:5d:65:52:de:86:10:19:83: 98:77:59:29:07:be:89:61:48:27:01:fc:e7:3c:5f:9a:0b:12: be:0f:01:d4:3f:e0:2c:f4:23:f2:ba:96:86:5c:ac:83:dd:32: ae:eb:a2:68:d3:0d:f6:f0:8d:2f:28:02:d5:c5:45:67:52:0b: a3:dd:9a:9c:b7:2d:1a:c0:aa:67:d6:5b:ef:8a:fa:d6:d5:7d: 7e:f8:fc:f5:1f:5d:b1:1e:37:69:f3:82:7b:56:58:3c:91:da: ab:7f:5c:d7:11:7e:f6:b6:67:13:f0:93:9e:05:c7:a0:75:81: 46:94:30:c9:3b:7b:ac:25:4b:93:fd:0a:4b:36:01:f4:d6:7e: 0d:49:6a:2b:9e:a6:a0:92:e7:df:6c:04:5d:ba:4c:21:fd:e3: be:a1:fb:5b:bb:ce:7d:c3:bd:75:b0:ba:93:d3:17:03:fc:27: e2:f6:3d:75:d9:6e:2a:f9:9d:3c:8f:8c:4d:26:c8:0f:f0:2a: aa:33:08:bc -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIURucRSDMWFTeHgNQyJcnmDa9P3HwwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoOTVFODAwRUJGRjY0NzA5ODkyQ0I1NzQxRDlFREM3NUVF NzRFMkE2RDAeFw0yNTEyMTgxMTA2NTBaFw0yNTEyMjExMTMxNTBaMDMxMTAvBgNV BAMTKEQzMzFDN0JCNDlFMzA5RTJGQzVFQ0E5QTIwRjQyN0U0M0EzQTczQ0YwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCYZeyZtidvKXn0nxvCUo3k08iI fBtlRR6KCUMkiSj/3EjHWwkMYHhfpnfwl/9GNJvZwmc51AVRsQqhDsM9vGlH5s+a 7BBk8zTAfuDf4sWBwdgKnsrHtAxIzgkPlPF88O5efQsUYqds5tq/BSMnXpJCqa9d pyoOftGNqNqZeUpRRx3ilooBeyU5ncuR7gbWmzz5yyr2D2Fd+3cI3UAtEWqNOy+u CDVw/w37CqF3K+4JeC8ZofFPE9nIwHGZJp5ZVvaEgcYAeAKo/WMnGfDGGHS4wpMa LxEBgFbheUhMiSo0es0V4pqpWIb0ayPXCfsP7iwZ7BCWeoyItxj/nO1vXCjFAgMB AAGjggI8MIICODAdBgNVHQ4EFgQU0zHHu0njCeL8XsqaIPQn5Do6c88wHwYDVR0j BBgwFoAUlegA6/9kcJiSy1dB2e3HXudOKm0wDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby9m NmI1YWUxZS1iZTY2LTRhMzAtYTk0OC03ZDQ3OGMyMmVhMmIvMC85NUU4MDBFQkZG NjQ3MDk4OTJDQjU3NDFEOUVEQzc1RUU3NEUyQTZELmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvOTVFODAwRUJGRjY0NzA5ODkyQ0I1NzQxRDlFREM3NUVFNzRF MkE2RC5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vZjZiNWFlMWUtYmU2Ni00YTMwLWE5 NDgtN2Q0NzhjMjJlYTJiLzAvOTVFODAwRUJGRjY0NzA5ODkyQ0I1NzQxRDlFREM3 NUVFNzRFMkE2RC5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAAWUMGW9OREK9swP3wTEtbRbTOAOmI9pUCUR hjWx4wFKjkdClpyAsEeE7lTqUb7B4ZbeiOPw2uq7zqfMgVgQFT9dZVLehhAZg5h3 WSkHvolhSCcB/Oc8X5oLEr4PAdQ/4Cz0I/K6loZcrIPdMq7romjTDfbwjS8oAtXF RWdSC6Pdmpy3LRrAqmfWW++K+tbVfX74/PUfXbEeN2nzgntWWDyR2qt/XNcRfva2 ZxPwk54Fx6B1gUaUMMk7e6wlS5P9Cks2AfTWfg1JaiuepqCS599sBF26TCH9476h +1u7zn3DvXWwupPTFwP8J+L2PXXZbir5nTyPjE0myA/wKqozCLw= -----END CERTIFICATE-----Generated at Thu Dec 18 23:42:13 2025 by rpki-client