This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

$ rpki-client -vvf repo-rpki.idnic.net/repo/3305177a-a500-4996-b3ff-70c144edfece/0/95FC6072A4A690A61A0B5F14B36882B43DA2F098.mft
File: 95FC6072A4A690A61A0B5F14B36882B43DA2F098.mft (raw, json)
Hash identifier: Obgz2cX+NsKMOG4HpED+9Wt2i4Ca4XScjZN7+VQZy14=
Subject key identifier: E1:DA:9E:8E:94:0B:85:D1:11:41:54:F8:26:50:3D:01:23:AD:C8:C9
Authority key identifier: 95:FC:60:72:A4:A6:90:A6:1A:0B:5F:14:B3:68:82:B4:3D:A2:F0:98
Certificate issuer: /CN=95FC6072A4A690A61A0B5F14B36882B43DA2F098
Certificate serial: 09D41010022959281A2ED9CD7ECED5CA5D97B5DC
Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/95FC6072A4A690A61A0B5F14B36882B43DA2F098.cer
Subject info access: rsync://repo-rpki.idnic.net/repo/3305177a-a500-4996-b3ff-70c144edfece/0/95FC6072A4A690A61A0B5F14B36882B43DA2F098.mft
Manifest number: 053D
Signing time: Sat 20 Dec 2025 03:42:20 +0000
Manifest this update: Sat 20 Dec 2025 03:37:20 +0000
Manifest next update: Tue 23 Dec 2025 09:57:20 +0000
Files and hashes: 1: 323430343a666230303a3a2f33322d3332203d3e203538343734.roa (hash: T0GxcffUorQqKvKWvoQBmwT56g/pt1WC0GNCeIbnIXI=)
2: 3130332e32382e35372e302f32342d3234203d3e203538343734.roa (hash: RKuA2CS77/iBc1MhX2FD3Oj8MLTo/sw4r4vfbH4WpPI=)
3: 3130332e32382e35382e302f32342d3234203d3e203538343734.roa (hash: SVVnOcpEzNW3GyvGQSrBzvX2ix4zPecYqTfJmTpW5Ek=)
4: 3130332e32382e35362e302f32342d3234203d3e203538343734.roa (hash: lS8odvouHADOZvGcEIZX6cESZX3v05ZwGGbLJRnmmPg=)
5: 34332e3234382e3231322e302f32342d3234203d3e203538343734.roa (hash: lJiN/1jPk6sVzBu+b+dWtXwNwMFWgXWbUliAdUar1AU=)
6: 34332e3234382e3231352e302f32342d3234203d3e203538343734.roa (hash: 2rfcy4tUpo7HgU2cGwZC6pQYZQAR7WSsi/1k28TkJlU=)
7: 95FC6072A4A690A61A0B5F14B36882B43DA2F098.crl (hash: v2bUdMTv9Z3XhPrNzT0Vyc70KflZz8CY7sJO6hXa33Y=)
8: 34332e3234382e3231342e302f32342d3234203d3e203538343734.roa (hash: KABMcwwuj0PcVg0DF+2S7mT8pkOrI1Q8USpOkuuxMXI=)
9: 3130332e32382e35392e302f32342d3234203d3e203538343734.roa (hash: GggD4UAIQuJ2Ici9kI1FCxhBRH2erQ0+Zgb75d0bwAQ=)
10: 34332e3234382e3231332e302f32342d3234203d3e203538343734.roa (hash: I3OA1TXXrn7Ho4Bbdaoik2HHmIJMRdT3vdvqOadCgWc=)
Validation: OK
Signature path: rsync://repo-rpki.idnic.net/repo/3305177a-a500-4996-b3ff-70c144edfece/0/95FC6072A4A690A61A0B5F14B36882B43DA2F098.crl
rsync://repo-rpki.idnic.net/repo/3305177a-a500-4996-b3ff-70c144edfece/0/95FC6072A4A690A61A0B5F14B36882B43DA2F098.mft
rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/95FC6072A4A690A61A0B5F14B36882B43DA2F098.cer
rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl
rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Tue 23 Dec 2025 09:57:20 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
09:d4:10:10:02:29:59:28:1a:2e:d9:cd:7e:ce:d5:ca:5d:97:b5:dc
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=95FC6072A4A690A61A0B5F14B36882B43DA2F098
Validity
Not Before: Dec 20 03:37:20 2025 GMT
Not After : Dec 23 09:57:20 2025 GMT
Subject: CN=E1DA9E8E940B85D1114154F826503D0123ADC8C9
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ae:cb:9d:d1:ee:47:0f:ef:15:70:eb:ce:a2:12:
e3:04:c3:ff:1c:55:de:62:33:0a:4f:b1:21:88:69:
f2:56:b5:41:a9:7e:7d:0d:0b:d5:2c:29:c3:a2:42:
b2:39:15:61:76:de:b1:b6:1f:e1:3c:08:e0:09:79:
46:04:db:33:75:2b:f7:d5:57:a9:d2:0e:62:3a:2b:
8f:5f:13:bb:5f:c7:38:dc:ab:02:99:11:1e:81:4c:
cb:f7:4d:35:c4:d0:40:02:60:e3:ee:0d:75:70:13:
65:58:8c:af:ac:68:ca:a2:82:9e:69:38:a4:a2:12:
a8:61:78:c2:63:4f:91:64:7c:30:d6:f6:45:37:65:
b9:31:16:b0:46:21:c0:95:ae:e6:69:54:a1:51:99:
d5:0a:bd:47:4a:da:b1:aa:a8:d6:98:ec:ed:a9:a7:
35:0f:b8:29:82:72:b1:0f:73:2c:27:52:86:8f:31:
09:90:c2:db:6c:f8:f7:f5:d3:71:28:e6:fd:9f:1b:
42:4d:29:25:64:dd:6b:ef:9f:10:e4:6d:b3:3c:a7:
57:b8:bb:aa:d3:a5:0d:b9:99:97:4d:df:0b:8e:18:
78:4b:a9:f8:b5:71:10:61:af:59:e3:bb:e2:38:10:
71:69:f7:aa:1a:33:aa:50:d9:82:a1:90:b2:cc:81:
eb:ff
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E1:DA:9E:8E:94:0B:85:D1:11:41:54:F8:26:50:3D:01:23:AD:C8:C9
X509v3 Authority Key Identifier:
keyid:95:FC:60:72:A4:A6:90:A6:1A:0B:5F:14:B3:68:82:B4:3D:A2:F0:98
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://repo-rpki.idnic.net/repo/3305177a-a500-4996-b3ff-70c144edfece/0/95FC6072A4A690A61A0B5F14B36882B43DA2F098.crl
Authority Information Access:
CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/95FC6072A4A690A61A0B5F14B36882B43DA2F098.cer
Subject Information Access:
Signed Object - URI:rsync://repo-rpki.idnic.net/repo/3305177a-a500-4996-b3ff-70c144edfece/0/95FC6072A4A690A61A0B5F14B36882B43DA2F098.mft
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
10:56:c7:2a:c0:94:34:8a:f8:66:08:f8:1c:2e:ad:3c:91:08:
9d:40:72:dc:53:6e:6e:1e:a1:06:f0:b3:b1:ec:67:e4:f4:da:
8c:59:38:72:ba:b6:36:a9:0a:e8:fb:f3:0b:65:ac:2b:60:b2:
f0:f3:0f:11:26:c0:a0:c8:c5:b6:fa:b3:b7:33:79:a7:38:d7:
ee:30:72:d8:68:82:e2:50:e3:bb:ba:cf:8d:89:24:51:f1:f6:
89:a3:29:05:4d:49:c4:fa:fd:b0:6d:8c:bf:46:fb:42:2a:b1:
1e:17:d2:50:30:e5:05:63:0d:cb:27:b7:67:46:c3:f7:56:bf:
fc:dc:5f:20:cb:61:b3:7d:38:10:90:62:c3:02:b1:87:7b:c4:
99:2e:dc:94:01:a0:81:85:56:2d:42:fe:b7:03:4f:4e:71:a7:
ec:ef:d7:3d:81:ce:a7:ee:54:71:92:40:64:96:28:f5:c7:9f:
8f:76:70:dd:f3:82:01:23:94:d5:b5:88:88:38:60:a4:7c:6b:
d9:b9:81:0e:54:61:e7:10:c4:ac:f0:13:1c:a5:a4:87:76:2e:
d0:2b:42:23:0e:f1:54:62:61:83:79:0c:53:10:60:aa:47:18:
96:2d:f7:5e:97:25:1d:f0:56:bd:d1:fd:5f:ba:23:de:7a:1d:
9d:ac:f9:0d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Dec 21 15:04:57 2025 by rpki-client