This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf repo-rpki.idnic.net/repo/140e9c9f-d607-4497-af28-4d2b9092d5a6/0/95C3BA7F23B6351721F77DA8020731F9DA46B3C8.mft File: 95C3BA7F23B6351721F77DA8020731F9DA46B3C8.mft (raw, json) Hash identifier: d/dvieXmJBQUR+jykOG8FXMecaf0FCbosJqPBoN/8k4= Subject key identifier: 2A:06:C8:AB:EC:61:53:B0:3D:3F:56:3C:D4:49:6A:E3:33:54:2E:BF Authority key identifier: 95:C3:BA:7F:23:B6:35:17:21:F7:7D:A8:02:07:31:F9:DA:46:B3:C8 Certificate issuer: /CN=95C3BA7F23B6351721F77DA8020731F9DA46B3C8 Certificate serial: 787C45DEBD17EDF83AA6E84A1BA42B46AF15409B Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/95C3BA7F23B6351721F77DA8020731F9DA46B3C8.cer Subject info access: rsync://repo-rpki.idnic.net/repo/140e9c9f-d607-4497-af28-4d2b9092d5a6/0/95C3BA7F23B6351721F77DA8020731F9DA46B3C8.mft Manifest number: 052D Signing time: Tue 02 Dec 2025 07:51:33 +0000 Manifest this update: Tue 02 Dec 2025 07:46:33 +0000 Manifest next update: Fri 05 Dec 2025 19:39:33 +0000 Files and hashes: 1: 323030313a6466323a633738303a3a2f34382d3438203d3e20313339393836.roa (hash: 75/DAONeN65KHxljOFhq+chBgFEKtm0A6zWkkY+QXDo=) 2: 3130332e3134382e38352e302f32342d3234203d3e20313339393836.roa (hash: KI4DRCx0w4L0nKpvK1CNtCzzpw68TT41WCumN5kF9lM=) 3: 3130332e3134382e38342e302f32332d3233203d3e20313339393836.roa (hash: mKTM+95IO3RuRjGvD78UIawuJIUBHI8BVt6K80x3Fpw=) 4: 3130332e3134382e38342e302f32342d3234203d3e20313339393836.roa (hash: mAx24Mrm6AI9KeLaD2h/5RLJ5ztWp5mCELhp+sgXhQM=) 5: 95C3BA7F23B6351721F77DA8020731F9DA46B3C8.crl (hash: eADNU/36hiqKuUKEbOW82am2SjF1+43oH67iMLH1vCc=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/140e9c9f-d607-4497-af28-4d2b9092d5a6/0/95C3BA7F23B6351721F77DA8020731F9DA46B3C8.crl rsync://repo-rpki.idnic.net/repo/140e9c9f-d607-4497-af28-4d2b9092d5a6/0/95C3BA7F23B6351721F77DA8020731F9DA46B3C8.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/95C3BA7F23B6351721F77DA8020731F9DA46B3C8.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 05 Dec 2025 19:39:33 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 78:7c:45:de:bd:17:ed:f8:3a:a6:e8:4a:1b:a4:2b:46:af:15:40:9b Signature Algorithm: sha256WithRSAEncryption Issuer: CN=95C3BA7F23B6351721F77DA8020731F9DA46B3C8 Validity Not Before: Dec 2 07:46:33 2025 GMT Not After : Dec 5 19:39:33 2025 GMT Subject: CN=2A06C8ABEC6153B03D3F563CD4496AE333542EBF Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a4:78:7d:fe:fe:8a:68:73:4d:dd:e3:c5:a2:42: 90:5a:b1:1e:97:1b:96:10:92:f1:00:a5:a1:f2:8a: c4:cb:da:a8:5a:f5:67:a2:d1:cc:dd:50:1b:95:24: 34:83:74:0c:4a:1d:3e:22:01:54:f0:d5:fe:de:8d: 57:db:f7:db:d6:03:c9:b6:cb:df:5f:c9:aa:b0:6e: ff:a7:b6:59:80:a3:ec:88:f3:8c:ef:a0:32:a2:aa: ae:02:dc:12:31:75:8c:80:fd:29:8e:83:f7:f7:21: b6:e2:38:d9:46:05:3d:30:4a:b6:b8:60:41:c4:9d: d4:be:43:32:3e:b1:f8:ba:1d:7f:97:66:76:1f:ff: 8b:1e:ae:1e:4f:e1:29:eb:4b:44:60:cf:0b:56:77: da:b7:98:0d:5d:2c:ff:73:dd:c6:1d:51:b1:40:df: 4e:27:31:4e:b8:67:b0:54:5b:11:10:b2:dc:20:ea: 8a:6b:0c:ad:64:23:36:39:90:bb:85:a7:2d:d2:f8: 87:92:be:d7:e7:70:1f:f6:4f:a8:59:36:97:e4:e3: 06:55:22:1d:10:4a:90:df:40:03:66:6e:a3:83:cf: 3f:43:c3:7c:88:61:8a:78:24:7f:d8:9c:6d:a6:cf: 34:e1:24:6c:84:37:b3:86:1c:eb:1c:e3:6b:1b:53: 90:53 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 2A:06:C8:AB:EC:61:53:B0:3D:3F:56:3C:D4:49:6A:E3:33:54:2E:BF X509v3 Authority Key Identifier: keyid:95:C3:BA:7F:23:B6:35:17:21:F7:7D:A8:02:07:31:F9:DA:46:B3:C8 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/140e9c9f-d607-4497-af28-4d2b9092d5a6/0/95C3BA7F23B6351721F77DA8020731F9DA46B3C8.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/95C3BA7F23B6351721F77DA8020731F9DA46B3C8.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/140e9c9f-d607-4497-af28-4d2b9092d5a6/0/95C3BA7F23B6351721F77DA8020731F9DA46B3C8.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 8e:35:d2:ab:37:d8:97:21:30:a6:74:a4:1b:80:e5:01:cc:12: 0b:26:c3:58:00:4e:c2:c3:84:e3:14:ab:b9:e6:9d:52:29:fd: 03:bf:78:54:bf:ca:6b:17:51:af:f5:34:18:b2:5f:66:69:1a: 67:8a:ae:5c:b5:de:be:fa:b0:d7:b6:dd:18:22:32:ee:63:84: 82:17:70:d9:68:eb:0c:95:0b:69:17:00:be:43:e7:3b:2d:a3: 9a:2e:83:73:d9:4f:09:a9:5d:0e:c5:8d:3b:89:92:98:0b:12: 56:0a:cc:81:bd:bf:68:cb:47:20:1d:e5:d2:23:16:23:05:e3: 3e:bd:5e:98:6f:67:e7:95:34:47:db:5c:b4:ea:17:02:d4:1d: a5:7c:34:f5:68:ea:b2:29:9c:98:6f:5d:18:f5:54:26:b6:02: bd:96:5f:d6:9d:c8:82:f4:4e:81:c2:e5:5e:ef:c3:f0:a9:a4: ae:ac:32:5d:84:be:78:00:be:da:5f:be:30:30:6b:16:8a:52: 7c:b1:d4:ab:46:85:c1:98:97:e3:10:59:29:8e:ff:87:57:c1: 7e:fd:25:73:ff:9a:ee:25:08:fc:5d:1d:fb:df:13:82:5b:c2: 08:80:74:d9:b7:09:61:2d:08:30:06:e5:d5:40:bf:75:f7:ac: 05:e6:1b:a1 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUeHxF3r0X7fg6puhKG6QrRq8VQJswDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoOTVDM0JBN0YyM0I2MzUxNzIxRjc3REE4MDIwNzMxRjlE QTQ2QjNDODAeFw0yNTEyMDIwNzQ2MzNaFw0yNTEyMDUxOTM5MzNaMDMxMTAvBgNV BAMTKDJBMDZDOEFCRUM2MTUzQjAzRDNGNTYzQ0Q0NDk2QUUzMzM1NDJFQkYwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCkeH3+/opoc03d48WiQpBasR6X G5YQkvEApaHyisTL2qha9Wei0czdUBuVJDSDdAxKHT4iAVTw1f7ejVfb99vWA8m2 y99fyaqwbv+ntlmAo+yI84zvoDKiqq4C3BIxdYyA/SmOg/f3IbbiONlGBT0wSra4 YEHEndS+QzI+sfi6HX+XZnYf/4serh5P4SnrS0RgzwtWd9q3mA1dLP9z3cYdUbFA 304nMU64Z7BUWxEQstwg6oprDK1kIzY5kLuFpy3S+IeSvtfncB/2T6hZNpfk4wZV Ih0QSpDfQANmbqODzz9Dw3yIYYp4JH/YnG2mzzThJGyEN7OGHOsc42sbU5BTAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUKgbIq+xhU7A9P1Y81Elq4zNULr8wHwYDVR0j BBgwFoAUlcO6fyO2NRch932oAgcx+dpGs8gwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby8x NDBlOWM5Zi1kNjA3LTQ0OTctYWYyOC00ZDJiOTA5MmQ1YTYvMC85NUMzQkE3RjIz QjYzNTE3MjFGNzdEQTgwMjA3MzFGOURBNDZCM0M4LmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvOTVDM0JBN0YyM0I2MzUxNzIxRjc3REE4MDIwNzMxRjlEQTQ2 QjNDOC5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vMTQwZTljOWYtZDYwNy00NDk3LWFm MjgtNGQyYjkwOTJkNWE2LzAvOTVDM0JBN0YyM0I2MzUxNzIxRjc3REE4MDIwNzMx RjlEQTQ2QjNDOC5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAI410qs32JchMKZ0pBuA5QHMEgsmw1gATsLD hOMUq7nmnVIp/QO/eFS/ymsXUa/1NBiyX2ZpGmeKrly13r76sNe23RgiMu5jhIIX cNlo6wyVC2kXAL5D5zsto5oug3PZTwmpXQ7FjTuJkpgLElYKzIG9v2jLRyAd5dIj FiMF4z69XphvZ+eVNEfbXLTqFwLUHaV8NPVo6rIpnJhvXRj1VCa2Ar2WX9adyIL0 ToHC5V7vw/CppK6sMl2EvngAvtpfvjAwaxaKUnyx1KtGhcGYl+MQWSmO/4dXwX79 JXP/mu4lCPxdHfvfE4JbwgiAdNm3CWEtCDAG5dVAv3X3rAXmG6E= -----END CERTIFICATE-----Generated at Wed Dec 3 13:57:10 2025 by rpki-client