This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf repo-rpki.idnic.net/repo/0a788b4a-d451-49fb-b7cd-719810870f1a/0/095AAB2FD179056DA8846FA0E90F79F7D901792C.mft File: 095AAB2FD179056DA8846FA0E90F79F7D901792C.mft (raw, json) Hash identifier: 4nginqHK1oMI2v9/DRFXdMFw+1HzSFSRuql8lpDfUtY= Subject key identifier: C5:C4:71:30:64:95:A8:FF:CD:9C:66:7B:21:8C:0A:75:87:3D:B6:31 Authority key identifier: 09:5A:AB:2F:D1:79:05:6D:A8:84:6F:A0:E9:0F:79:F7:D9:01:79:2C Certificate issuer: /CN=095AAB2FD179056DA8846FA0E90F79F7D901792C Certificate serial: 7BB79D0666A329FE9BB1338ADB2A038D9D0EEF40 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/095AAB2FD179056DA8846FA0E90F79F7D901792C.cer Subject info access: rsync://repo-rpki.idnic.net/repo/0a788b4a-d451-49fb-b7cd-719810870f1a/0/095AAB2FD179056DA8846FA0E90F79F7D901792C.mft Manifest number: 032B Signing time: Mon 01 Dec 2025 08:51:43 +0000 Manifest this update: Mon 01 Dec 2025 08:46:43 +0000 Manifest next update: Thu 04 Dec 2025 16:06:43 +0000 Files and hashes: 1: 3130332e37332e3132352e302f32342d3234203d3e203539313334.roa (hash: Z1EVykTQp5ACC1NPq9JOZKOUUZ9JHZ3If1yc5kffoxA=) 2: 3130332e3235322e35312e302f32342d3234203d3e203539313334.roa (hash: 92hDDvlrQq6+Ep7VlgXGUFdRGUo5NBqpCP5dHFzwWeg=) 3: 3130332e3130382e3132362e302f32342d3234203d3e203539313334.roa (hash: JQPY1hR36z2SwsI5Y4cr/zQo0NDgsurp+zEd8VFWX3Q=) 4: 095AAB2FD179056DA8846FA0E90F79F7D901792C.crl (hash: DQVNme5blGyfpFA6DS5XmDdvpg50t8Ittk+cyAijSSM=) 5: 3130332e3235322e35302e302f32342d3234203d3e203539313334.roa (hash: tg5kgcB+/SuzaicgIITC9CS9oqxnux/xS4/nsX+npzw=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/0a788b4a-d451-49fb-b7cd-719810870f1a/0/095AAB2FD179056DA8846FA0E90F79F7D901792C.crl rsync://repo-rpki.idnic.net/repo/0a788b4a-d451-49fb-b7cd-719810870f1a/0/095AAB2FD179056DA8846FA0E90F79F7D901792C.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/095AAB2FD179056DA8846FA0E90F79F7D901792C.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 04 Dec 2025 16:06:43 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 7b:b7:9d:06:66:a3:29:fe:9b:b1:33:8a:db:2a:03:8d:9d:0e:ef:40 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=095AAB2FD179056DA8846FA0E90F79F7D901792C Validity Not Before: Dec 1 08:46:43 2025 GMT Not After : Dec 4 16:06:43 2025 GMT Subject: CN=C5C471306495A8FFCD9C667B218C0A75873DB631 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d3:40:59:13:05:9b:57:08:ff:e5:7c:ac:e4:3b: fe:f9:e2:ec:f4:a5:36:10:4d:87:74:27:31:02:dd: 16:24:78:c3:29:06:16:96:9d:42:4c:eb:8b:cc:b5: bb:8c:50:e3:78:9c:82:bf:d8:38:76:7f:25:9a:70: 6b:75:29:e5:3a:63:96:c6:12:a9:b3:3c:e2:34:95: 75:49:3f:31:fe:32:ef:08:81:87:b1:e7:74:2c:9b: dd:fc:9a:35:78:ee:28:ac:2d:28:ae:ff:b7:16:29: 33:94:56:35:a6:8c:18:41:ba:68:d7:8e:24:b1:b5: 7d:42:66:3e:b4:7a:6a:38:c8:5d:19:6b:d5:22:ba: 14:eb:57:a0:5a:87:ab:f3:ff:bd:ef:89:dd:34:35: 33:df:05:41:40:29:12:eb:74:93:6c:67:50:20:79: 6a:ce:e1:59:48:2c:2e:7b:69:bd:65:7d:b7:28:77: 47:cd:8b:e8:f7:39:c0:06:69:f6:5d:89:1f:ff:6d: 85:81:fa:d9:c9:9f:ec:96:c8:63:9f:6e:c1:ed:c4: b8:bf:6a:99:1c:d1:12:8a:c3:1c:c8:04:70:db:af: 80:f8:50:75:22:01:7a:a4:81:5d:f8:0e:ca:55:b7: 2d:c7:14:21:aa:9a:03:e1:a9:e8:22:5a:80:d9:40: e8:d5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: C5:C4:71:30:64:95:A8:FF:CD:9C:66:7B:21:8C:0A:75:87:3D:B6:31 X509v3 Authority Key Identifier: keyid:09:5A:AB:2F:D1:79:05:6D:A8:84:6F:A0:E9:0F:79:F7:D9:01:79:2C X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/0a788b4a-d451-49fb-b7cd-719810870f1a/0/095AAB2FD179056DA8846FA0E90F79F7D901792C.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/095AAB2FD179056DA8846FA0E90F79F7D901792C.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/0a788b4a-d451-49fb-b7cd-719810870f1a/0/095AAB2FD179056DA8846FA0E90F79F7D901792C.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 6b:55:b8:82:23:bd:59:ba:99:ec:d7:a4:07:79:63:eb:1b:a6: 1e:42:cc:b3:31:e9:24:27:cf:db:14:ef:d7:57:e0:24:53:f2: df:c1:76:32:4b:a3:8d:8f:13:64:87:96:8f:63:46:ef:a8:f7: 84:18:77:dc:a5:03:dd:3c:e0:ed:d1:7a:aa:1d:a5:66:39:e5: d3:fe:0e:7a:80:7c:57:e4:83:29:73:f7:29:e2:2b:56:9f:12: 65:e8:44:5c:d3:62:bc:3d:fd:87:04:c9:fd:32:69:41:cd:39: 24:41:88:f5:dc:1d:c9:35:f6:28:92:47:e6:ce:42:11:c7:7a: 55:e4:5c:c8:2a:1b:3c:3c:12:0a:b6:1f:a5:a6:3a:04:89:02: d7:cb:de:0b:81:ee:da:ba:b5:93:a0:74:f2:cc:da:d5:3d:26: bb:cb:71:ac:f7:12:d6:75:2e:d5:fc:26:ee:e5:37:b4:1f:ec: 68:47:b3:28:8e:4b:6c:84:67:07:4b:61:1e:58:2a:7c:41:44: 6a:05:19:6f:7e:e9:14:30:1e:5c:ed:79:8d:92:9c:7c:2e:73: d0:42:f7:df:c4:6d:87:9a:0e:1d:2b:80:b5:15:47:48:3e:2e: 50:47:0b:35:df:6f:27:16:39:89:c3:60:31:76:71:f4:6b:14: 0f:47:5c:51 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUe7edBmajKf6bsTOK2yoDjZ0O70AwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMDk1QUFCMkZEMTc5MDU2REE4ODQ2RkEwRTkwRjc5RjdE OTAxNzkyQzAeFw0yNTEyMDEwODQ2NDNaFw0yNTEyMDQxNjA2NDNaMDMxMTAvBgNV BAMTKEM1QzQ3MTMwNjQ5NUE4RkZDRDlDNjY3QjIxOEMwQTc1ODczREI2MzEwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDTQFkTBZtXCP/lfKzkO/754uz0 pTYQTYd0JzEC3RYkeMMpBhaWnUJM64vMtbuMUON4nIK/2Dh2fyWacGt1KeU6Y5bG EqmzPOI0lXVJPzH+Mu8IgYex53Qsm938mjV47iisLSiu/7cWKTOUVjWmjBhBumjX jiSxtX1CZj60emo4yF0Za9UiuhTrV6Bah6vz/73vid00NTPfBUFAKRLrdJNsZ1Ag eWrO4VlILC57ab1lfbcod0fNi+j3OcAGafZdiR//bYWB+tnJn+yWyGOfbsHtxLi/ apkc0RKKwxzIBHDbr4D4UHUiAXqkgV34DspVty3HFCGqmgPhqegiWoDZQOjVAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUxcRxMGSVqP/NnGZ7IYwKdYc9tjEwHwYDVR0j BBgwFoAUCVqrL9F5BW2ohG+g6Q9599kBeSwwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby8w YTc4OGI0YS1kNDUxLTQ5ZmItYjdjZC03MTk4MTA4NzBmMWEvMC8wOTVBQUIyRkQx NzkwNTZEQTg4NDZGQTBFOTBGNzlGN0Q5MDE3OTJDLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvMDk1QUFCMkZEMTc5MDU2REE4ODQ2RkEwRTkwRjc5RjdEOTAx NzkyQy5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vMGE3ODhiNGEtZDQ1MS00OWZiLWI3 Y2QtNzE5ODEwODcwZjFhLzAvMDk1QUFCMkZEMTc5MDU2REE4ODQ2RkEwRTkwRjc5 RjdEOTAxNzkyQy5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAGtVuIIjvVm6mezXpAd5Y+sbph5CzLMx6SQn z9sU79dX4CRT8t/BdjJLo42PE2SHlo9jRu+o94QYd9ylA9084O3ReqodpWY55dP+ DnqAfFfkgylz9yniK1afEmXoRFzTYrw9/YcEyf0yaUHNOSRBiPXcHck19iiSR+bO QhHHelXkXMgqGzw8Egq2H6WmOgSJAtfL3guB7tq6tZOgdPLM2tU9JrvLcaz3EtZ1 LtX8Ju7lN7Qf7GhHsyiOS2yEZwdLYR5YKnxBRGoFGW9+6RQwHlzteY2SnHwuc9BC 99/EbYeaDh0rgLUVR0g+LlBHCzXfbycWOYnDYDF2cfRrFA9HXFE= -----END CERTIFICATE-----Generated at Wed Dec 3 13:26:14 2025 by rpki-client