This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

$ rpki-client -vvf repo-rpki.idnic.net/repo/140e9c9f-d607-4497-af28-4d2b9092d5a6/0/95C3BA7F23B6351721F77DA8020731F9DA46B3C8.mft
File: 95C3BA7F23B6351721F77DA8020731F9DA46B3C8.mft (raw, json)
Hash identifier: CW/WLV/FwmE+5djrcDmDzjdQQtljz22QlIvxA/Tr8Hk=
Subject key identifier: 9B:E3:F8:4D:C6:10:75:95:51:0F:D1:31:DC:DC:F2:85:18:C5:BB:41
Authority key identifier: 95:C3:BA:7F:23:B6:35:17:21:F7:7D:A8:02:07:31:F9:DA:46:B3:C8
Certificate issuer: /CN=95C3BA7F23B6351721F77DA8020731F9DA46B3C8
Certificate serial: 447686E40B671360D536AD6F1495E0CB8588C3A3
Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/95C3BA7F23B6351721F77DA8020731F9DA46B3C8.cer
Subject info access: rsync://repo-rpki.idnic.net/repo/140e9c9f-d607-4497-af28-4d2b9092d5a6/0/95C3BA7F23B6351721F77DA8020731F9DA46B3C8.mft
Manifest number: 0548
Signing time: Sat 31 Jan 2026 16:31:32 +0000
Manifest this update: Sat 31 Jan 2026 16:26:32 +0000
Manifest next update: Tue 03 Feb 2026 18:00:32 +0000
Files and hashes: 1: 95C3BA7F23B6351721F77DA8020731F9DA46B3C8.crl (hash: MnViiG0on5e82e9xTAiqR1z4Mt/3o4AOERZ63A14e+s=)
2: 323030313a6466323a633738303a3a2f34382d3438203d3e20313339393836.roa (hash: 75/DAONeN65KHxljOFhq+chBgFEKtm0A6zWkkY+QXDo=)
3: 3130332e3134382e38342e302f32332d3233203d3e20313339393836.roa (hash: wl5DevhHVxkmwfDCCC4JaJfUTNabYHb/Lh+cHr1YoI8=)
4: 3130332e3134382e38342e302f32342d3234203d3e20313339393836.roa (hash: mAx24Mrm6AI9KeLaD2h/5RLJ5ztWp5mCELhp+sgXhQM=)
5: 3130332e3134382e38352e302f32342d3234203d3e20313339393836.roa (hash: rC6h62i9FYTYXRJwY0Brz86k4I7okoBa0s60XGjIzcU=)
Validation: OK
Signature path: rsync://repo-rpki.idnic.net/repo/140e9c9f-d607-4497-af28-4d2b9092d5a6/0/95C3BA7F23B6351721F77DA8020731F9DA46B3C8.crl
rsync://repo-rpki.idnic.net/repo/140e9c9f-d607-4497-af28-4d2b9092d5a6/0/95C3BA7F23B6351721F77DA8020731F9DA46B3C8.mft
rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/95C3BA7F23B6351721F77DA8020731F9DA46B3C8.cer
rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl
rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Tue 03 Feb 2026 18:00:32 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
44:76:86:e4:0b:67:13:60:d5:36:ad:6f:14:95:e0:cb:85:88:c3:a3
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=95C3BA7F23B6351721F77DA8020731F9DA46B3C8
Validity
Not Before: Jan 31 16:26:32 2026 GMT
Not After : Feb 3 18:00:32 2026 GMT
Subject: CN=9BE3F84DC6107595510FD131DCDCF28518C5BB41
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d9:61:40:84:e6:79:2d:68:8d:4d:65:d1:17:b4:
f3:6c:0e:b7:e9:69:8a:1f:8f:fd:3b:20:6b:2b:5d:
8b:26:17:f5:14:ea:e3:2a:d2:22:d5:84:2d:f9:9b:
4f:1a:2f:50:26:06:bf:6f:41:20:ba:f0:58:47:54:
a5:21:96:be:43:00:04:4e:e4:79:cc:46:f0:b4:36:
c6:59:66:10:62:77:e8:5d:a0:63:fc:36:64:5b:6f:
cf:9d:cc:6d:6c:37:82:9e:45:3a:60:05:ba:c5:1c:
52:24:74:2f:b2:11:b2:2a:06:be:e9:54:04:e1:19:
c6:b4:81:80:e6:87:04:07:61:6c:f1:e3:67:cb:5f:
93:a3:3e:bc:17:10:a6:5e:32:7e:d0:71:41:6a:21:
70:d3:1a:a1:d2:16:c2:2f:6e:af:5a:13:dd:22:6c:
66:2c:47:8e:d4:e8:a3:d7:52:de:7a:b8:6a:92:c0:
6a:6c:17:09:58:73:57:46:15:2f:fe:a6:a6:b6:4a:
12:ea:a2:ca:a5:31:cb:e9:7c:04:30:2f:8f:6c:dc:
3e:9d:b6:0b:34:25:b9:cd:10:24:0f:b5:49:2d:38:
10:9f:93:0f:0d:45:8b:97:cc:bd:44:be:16:ea:28:
65:a2:ec:18:48:d4:be:37:1b:e0:b7:4c:c3:c1:a0:
e9:87
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
9B:E3:F8:4D:C6:10:75:95:51:0F:D1:31:DC:DC:F2:85:18:C5:BB:41
X509v3 Authority Key Identifier:
keyid:95:C3:BA:7F:23:B6:35:17:21:F7:7D:A8:02:07:31:F9:DA:46:B3:C8
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://repo-rpki.idnic.net/repo/140e9c9f-d607-4497-af28-4d2b9092d5a6/0/95C3BA7F23B6351721F77DA8020731F9DA46B3C8.crl
Authority Information Access:
CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/95C3BA7F23B6351721F77DA8020731F9DA46B3C8.cer
Subject Information Access:
Signed Object - URI:rsync://repo-rpki.idnic.net/repo/140e9c9f-d607-4497-af28-4d2b9092d5a6/0/95C3BA7F23B6351721F77DA8020731F9DA46B3C8.mft
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
7a:87:bd:f7:cb:c5:73:00:8d:0d:9a:56:df:d4:e5:1e:24:93:
fb:41:c6:e0:81:48:a7:e9:47:ac:c0:00:12:78:4d:55:46:f9:
58:01:3b:9b:99:e7:7a:61:8f:6b:65:1a:ca:81:f0:c0:69:22:
2f:fc:91:97:28:52:6e:be:d7:d7:ef:81:4e:9b:1d:36:d2:2c:
5d:14:61:e9:e2:3b:45:08:2e:fa:83:84:9a:ab:ed:8e:c1:01:
05:24:5f:f3:a3:29:99:11:61:79:48:aa:98:ba:6c:eb:b6:68:
3e:5f:46:96:c6:78:83:11:f5:c2:a6:1a:79:2f:a0:e2:9f:41:
42:3e:10:49:35:3e:31:fb:dd:97:17:1f:49:91:c9:8f:4d:28:
4b:54:94:88:df:d7:c9:3a:64:ef:62:e9:c9:27:e5:20:d7:81:
d5:5f:3f:ba:a8:67:e1:36:a2:36:23:a3:ad:e7:0f:15:86:c8:
6d:46:8d:f2:d0:86:c5:ea:4f:c7:1e:99:a7:85:e2:1b:76:82:
d4:2a:fb:f6:42:4a:23:db:96:f3:1e:c7:05:95:62:b0:de:7c:
89:62:f3:4f:91:13:77:3a:db:17:16:61:54:b9:c0:7e:a3:6f:
17:66:d6:83:f1:d0:3d:50:ca:21:73:af:71:51:05:1e:fd:8e:
9b:f8:6e:8f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Feb 2 09:42:15 2026 by rpki-client