This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf repo-rpki.idnic.net/repo/84da415b-5f17-4602-9bd9-fd84ac2cae86/0/95FAC38A5CB2CEA3E5FFE2495626A7BEA328D689.mft File: 95FAC38A5CB2CEA3E5FFE2495626A7BEA328D689.mft (raw, json) Hash identifier: Wf9SWNSzFQuKxu2/z6nxv7O1iX9xSJngWRAGJmSDLSI= Subject key identifier: 61:1E:02:9A:04:0F:43:42:F8:D0:58:F1:29:FC:EE:29:A7:66:BE:71 Authority key identifier: 95:FA:C3:8A:5C:B2:CE:A3:E5:FF:E2:49:56:26:A7:BE:A3:28:D6:89 Certificate issuer: /CN=95FAC38A5CB2CEA3E5FFE2495626A7BEA328D689 Certificate serial: 1C1F0D55B8C471E693356141FC7A331BCCFF43F0 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/95FAC38A5CB2CEA3E5FFE2495626A7BEA328D689.cer Subject info access: rsync://repo-rpki.idnic.net/repo/84da415b-5f17-4602-9bd9-fd84ac2cae86/0/95FAC38A5CB2CEA3E5FFE2495626A7BEA328D689.mft Manifest number: F3 Signing time: Mon 01 Dec 2025 16:11:29 +0000 Manifest this update: Mon 01 Dec 2025 16:06:29 +0000 Manifest next update: Fri 05 Dec 2025 01:54:29 +0000 Files and hashes: 1: 95FAC38A5CB2CEA3E5FFE2495626A7BEA328D689.crl (hash: vjrtyhyml0ZiJsx7CebsKysK3VZvhXUq2so7OdrT56k=) 2: 3136302e31392e38382e302f32342d3234203d3e20313437303838.roa (hash: +Xk0mxGkc/lCxZDeUptrpwZhCqCSnBV/uCVgeNZ+WpY=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/84da415b-5f17-4602-9bd9-fd84ac2cae86/0/95FAC38A5CB2CEA3E5FFE2495626A7BEA328D689.crl rsync://repo-rpki.idnic.net/repo/84da415b-5f17-4602-9bd9-fd84ac2cae86/0/95FAC38A5CB2CEA3E5FFE2495626A7BEA328D689.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/95FAC38A5CB2CEA3E5FFE2495626A7BEA328D689.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/60F8BE9C16625C424B269EE06C64A83BAB8506D4.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/60F8BE9C16625C424B269EE06C64A83BAB8506D4.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/YPi-nBZiXEJLJp7gbGSoO6uFBtQ.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 05 Dec 2025 01:54:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1c:1f:0d:55:b8:c4:71:e6:93:35:61:41:fc:7a:33:1b:cc:ff:43:f0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=95FAC38A5CB2CEA3E5FFE2495626A7BEA328D689 Validity Not Before: Dec 1 16:06:29 2025 GMT Not After : Dec 5 01:54:29 2025 GMT Subject: CN=611E029A040F4342F8D058F129FCEE29A766BE71 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ce:b7:2e:b0:6c:1e:36:ca:2b:4d:51:4e:f6:91: 84:0b:aa:79:ef:2c:a0:1f:90:1f:2f:95:af:a3:06: 0e:be:a5:65:e6:c6:0e:c2:99:c0:e2:ba:a8:37:2d: ab:d8:8e:17:20:35:6d:13:7f:b7:97:02:28:4e:c3: 7c:43:7c:92:93:5e:30:f5:7d:8c:2d:e7:25:30:41: 5b:62:95:0c:4e:c5:06:f8:b6:c0:e4:6b:ae:fb:64: b6:f9:48:8e:09:d9:e2:c8:1b:ef:6f:40:8c:b4:d8: 1f:e3:6a:b7:d1:0d:8d:3d:e2:9e:9b:88:6f:ac:44: 03:47:c0:2e:15:ae:05:32:da:b3:7d:67:03:f9:19: 5f:c5:9c:31:1c:2d:c2:70:33:c7:c7:cd:73:2f:8a: bd:16:0c:28:2c:64:20:a6:de:df:65:0a:53:7e:7c: fd:ea:d1:fe:c8:71:43:46:56:5e:2b:23:f0:5a:d8: 95:eb:b3:ca:c2:43:da:69:5d:ca:a7:ab:a3:63:db: d4:90:03:5e:45:cd:45:d4:b6:42:63:1b:45:15:54: 61:ad:55:ed:8f:e4:09:8b:97:2c:fd:ef:21:e3:47: 07:5c:ea:43:e8:3c:9e:df:81:40:e9:56:dd:3a:72: a0:26:ce:a1:af:ac:f5:7d:a1:6c:9c:23:f8:6e:21: df:e5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 61:1E:02:9A:04:0F:43:42:F8:D0:58:F1:29:FC:EE:29:A7:66:BE:71 X509v3 Authority Key Identifier: keyid:95:FA:C3:8A:5C:B2:CE:A3:E5:FF:E2:49:56:26:A7:BE:A3:28:D6:89 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/84da415b-5f17-4602-9bd9-fd84ac2cae86/0/95FAC38A5CB2CEA3E5FFE2495626A7BEA328D689.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/95FAC38A5CB2CEA3E5FFE2495626A7BEA328D689.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/84da415b-5f17-4602-9bd9-fd84ac2cae86/0/95FAC38A5CB2CEA3E5FFE2495626A7BEA328D689.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 95:28:7f:70:78:54:7e:59:71:38:b4:ae:58:e2:bb:d9:89:ad: 13:f8:c0:00:24:50:a6:e3:4d:37:18:46:70:8f:2b:dd:56:92: f2:a4:7d:63:1f:98:b7:57:d9:99:e4:9d:10:47:c6:66:33:ad: 24:1f:7e:38:8b:d7:9f:c0:e7:23:99:02:11:b5:ef:4d:79:66: e3:2a:13:59:4e:49:f1:66:db:69:6e:92:e9:c1:36:42:78:aa: 3e:29:41:82:12:59:2e:ec:8e:9e:f3:d2:e0:56:2b:1d:3b:b8: a5:7f:76:e2:3b:bc:75:47:1c:50:45:b9:a5:77:3c:17:49:55: df:b8:c1:c4:f7:27:20:2e:66:94:4f:b2:28:a9:5c:79:61:0e: 74:96:b4:37:43:cf:21:ef:dc:93:3d:ec:70:ac:dc:79:ae:dd: 0b:75:d1:5a:5a:ad:88:51:aa:c6:2a:d4:cd:f6:16:f0:d4:da: ee:6b:a0:9c:bd:00:ad:20:97:7a:49:c0:e8:1f:79:cd:c5:17: d7:94:bd:ee:80:87:b9:48:5f:2d:75:0c:3f:de:95:f1:3e:9c: aa:e5:a5:59:6d:3a:41:16:a5:7a:e2:76:26:bf:48:46:97:2d: c2:28:b0:93:84:a7:16:c8:a2:31:03:a4:d8:08:db:08:c2:76: a6:c6:65:d7 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUHB8NVbjEceaTNWFB/HozG8z/Q/AwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoOTVGQUMzOEE1Q0IyQ0VBM0U1RkZFMjQ5NTYyNkE3QkVB MzI4RDY4OTAeFw0yNTEyMDExNjA2MjlaFw0yNTEyMDUwMTU0MjlaMDMxMTAvBgNV BAMTKDYxMUUwMjlBMDQwRjQzNDJGOEQwNThGMTI5RkNFRTI5QTc2NkJFNzEwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDOty6wbB42yitNUU72kYQLqnnv LKAfkB8vla+jBg6+pWXmxg7CmcDiuqg3LavYjhcgNW0Tf7eXAihOw3xDfJKTXjD1 fYwt5yUwQVtilQxOxQb4tsDka677ZLb5SI4J2eLIG+9vQIy02B/jarfRDY094p6b iG+sRANHwC4VrgUy2rN9ZwP5GV/FnDEcLcJwM8fHzXMvir0WDCgsZCCm3t9lClN+ fP3q0f7IcUNGVl4rI/Ba2JXrs8rCQ9ppXcqnq6Nj29SQA15FzUXUtkJjG0UVVGGt Ve2P5AmLlyz97yHjRwdc6kPoPJ7fgUDpVt06cqAmzqGvrPV9oWycI/huId/lAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUYR4CmgQPQ0L40FjxKfzuKadmvnEwHwYDVR0j BBgwFoAUlfrDilyyzqPl/+JJVianvqMo1okwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby84 NGRhNDE1Yi01ZjE3LTQ2MDItOWJkOS1mZDg0YWMyY2FlODYvMC85NUZBQzM4QTVD QjJDRUEzRTVGRkUyNDk1NjI2QTdCRUEzMjhENjg5LmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzEvOTVGQUMzOEE1Q0IyQ0VBM0U1RkZFMjQ5NTYyNkE3QkVBMzI4 RDY4OS5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vODRkYTQxNWItNWYxNy00NjAyLTli ZDktZmQ4NGFjMmNhZTg2LzAvOTVGQUMzOEE1Q0IyQ0VBM0U1RkZFMjQ5NTYyNkE3 QkVBMzI4RDY4OS5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAJUof3B4VH5ZcTi0rljiu9mJrRP4wAAkUKbj TTcYRnCPK91WkvKkfWMfmLdX2ZnknRBHxmYzrSQffjiL15/A5yOZAhG17015ZuMq E1lOSfFm22lukunBNkJ4qj4pQYISWS7sjp7z0uBWKx07uKV/duI7vHVHHFBFuaV3 PBdJVd+4wcT3JyAuZpRPsiipXHlhDnSWtDdDzyHv3JM97HCs3Hmu3Qt10VparYhR qsYq1M32FvDU2u5roJy9AK0gl3pJwOgfec3FF9eUve6Ah7lIXy11DD/elfE+nKrl pVltOkEWpXridia/SEaXLcIosJOEpxbIojEDpNgI2wjCdqbGZdc= -----END CERTIFICATE-----Generated at Wed Dec 3 15:45:31 2025 by rpki-client