This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf repo-rpki.idnic.net/repo/84da415b-5f17-4602-9bd9-fd84ac2cae86/0/95FAC38A5CB2CEA3E5FFE2495626A7BEA328D689.mft File: 95FAC38A5CB2CEA3E5FFE2495626A7BEA328D689.mft (raw, json) Hash identifier: AwI44YUXLaq9q3TmeJDtYg41581xQEJQBPFq9OL+YFo= Subject key identifier: 61:7A:45:CE:5A:15:B0:4B:FA:AD:FC:63:62:EE:51:E6:9F:E2:87:D1 Authority key identifier: 95:FA:C3:8A:5C:B2:CE:A3:E5:FF:E2:49:56:26:A7:BE:A3:28:D6:89 Certificate issuer: /CN=95FAC38A5CB2CEA3E5FFE2495626A7BEA328D689 Certificate serial: 44C85B8B290B0F6D1320E8363877A52E9647CDE4 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/95FAC38A5CB2CEA3E5FFE2495626A7BEA328D689.cer Subject info access: rsync://repo-rpki.idnic.net/repo/84da415b-5f17-4602-9bd9-fd84ac2cae86/0/95FAC38A5CB2CEA3E5FFE2495626A7BEA328D689.mft Manifest number: 010E Signing time: Sat 31 Jan 2026 23:21:31 +0000 Manifest this update: Sat 31 Jan 2026 23:16:31 +0000 Manifest next update: Wed 04 Feb 2026 10:42:31 +0000 Files and hashes: 1: 3136302e31392e38382e302f32342d3234203d3e20313437303838.roa (hash: +Xk0mxGkc/lCxZDeUptrpwZhCqCSnBV/uCVgeNZ+WpY=) 2: 95FAC38A5CB2CEA3E5FFE2495626A7BEA328D689.crl (hash: 1DViGjoQ2Ce9jESWoFD14d1yXYmTEj4Kf6PwM6FTcJY=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/84da415b-5f17-4602-9bd9-fd84ac2cae86/0/95FAC38A5CB2CEA3E5FFE2495626A7BEA328D689.crl rsync://repo-rpki.idnic.net/repo/84da415b-5f17-4602-9bd9-fd84ac2cae86/0/95FAC38A5CB2CEA3E5FFE2495626A7BEA328D689.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/95FAC38A5CB2CEA3E5FFE2495626A7BEA328D689.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/60F8BE9C16625C424B269EE06C64A83BAB8506D4.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/60F8BE9C16625C424B269EE06C64A83BAB8506D4.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/YPi-nBZiXEJLJp7gbGSoO6uFBtQ.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 04 Feb 2026 10:42:31 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 44:c8:5b:8b:29:0b:0f:6d:13:20:e8:36:38:77:a5:2e:96:47:cd:e4 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=95FAC38A5CB2CEA3E5FFE2495626A7BEA328D689 Validity Not Before: Jan 31 23:16:31 2026 GMT Not After : Feb 4 10:42:31 2026 GMT Subject: CN=617A45CE5A15B04BFAADFC6362EE51E69FE287D1 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cd:33:86:5c:be:65:bf:e0:5b:e9:a6:5c:73:ec: 83:f7:85:a2:05:54:59:09:a2:b3:49:4c:c8:04:17: 0a:db:13:aa:82:8a:0d:ef:11:46:62:77:46:62:78: 4f:fb:cd:0e:7a:f2:63:40:27:bb:bb:ec:0e:f4:39: a5:ab:6d:92:f3:89:06:9e:5f:c7:84:e8:3e:71:8a: db:11:03:12:e1:be:ac:b2:28:b5:72:15:d7:05:8d: 7d:ef:7b:49:7b:10:82:e8:f6:36:df:08:fd:90:c0: 13:33:32:00:12:d3:d5:11:df:da:0e:dd:1e:4d:bc: 60:ff:c7:1a:7e:ab:79:95:2b:7f:d0:a5:c9:e9:a1: a9:71:a3:61:6b:33:47:98:1b:97:d2:2a:eb:68:0f: fc:ad:cf:f6:fa:70:15:85:cb:5f:35:ff:39:b9:b7: 43:b2:fc:f3:d7:39:e8:2e:df:3a:8b:8f:f5:7e:60: f8:3e:13:ce:24:9b:ee:17:25:9b:46:f8:9b:cf:32: a0:38:51:68:eb:b4:7c:71:e1:77:1f:a9:7f:7c:69: 05:7f:26:49:28:a4:cc:05:46:af:90:91:a3:a0:a5: d4:66:dc:b5:6e:a3:30:57:67:58:5e:b8:4f:af:87: e9:4b:a6:49:2b:0f:21:2b:3b:ca:05:67:ed:d4:53: 54:4b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 61:7A:45:CE:5A:15:B0:4B:FA:AD:FC:63:62:EE:51:E6:9F:E2:87:D1 X509v3 Authority Key Identifier: keyid:95:FA:C3:8A:5C:B2:CE:A3:E5:FF:E2:49:56:26:A7:BE:A3:28:D6:89 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/84da415b-5f17-4602-9bd9-fd84ac2cae86/0/95FAC38A5CB2CEA3E5FFE2495626A7BEA328D689.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/95FAC38A5CB2CEA3E5FFE2495626A7BEA328D689.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/84da415b-5f17-4602-9bd9-fd84ac2cae86/0/95FAC38A5CB2CEA3E5FFE2495626A7BEA328D689.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 6d:fe:50:99:f0:bd:4e:52:97:8c:33:e8:99:65:49:f5:b7:6a: 26:3f:ef:4f:9e:ed:bf:19:6a:1f:95:e6:22:3c:dc:6c:57:6b: 25:35:c6:53:f6:c8:2c:40:0a:28:83:b0:8e:5f:53:6a:06:1c: 8a:4a:f3:24:22:a3:2b:e5:9d:a1:9b:b1:ef:20:46:90:fb:ed: c1:86:2b:35:62:a7:b0:5e:04:0d:27:a2:45:75:81:6b:85:a4: 2c:0b:80:56:9d:a3:59:1f:4a:01:fc:98:24:68:79:44:df:99: a1:92:39:db:ee:b7:c8:06:3f:c6:4f:85:5d:3f:53:18:01:40: 47:55:0a:2e:76:82:24:76:2f:a8:74:3d:9f:96:cc:1a:f0:b0: f2:42:cd:1b:ed:56:e7:8e:f6:b7:9c:19:af:d7:cf:76:e5:d2: ef:d2:7b:ca:ba:c0:5d:53:88:6a:94:8b:44:d4:97:8d:89:47: 9f:41:5c:af:4f:b6:48:04:c7:c8:00:00:c3:57:7d:bd:3a:10: 81:a2:82:bd:16:a9:56:4a:5f:a4:22:6d:76:ed:e4:3d:70:d5: df:00:26:f5:ed:37:b3:cc:cf:f7:0f:8b:f4:6c:86:fc:4e:17: 1e:3b:51:cf:79:2f:ef:01:6f:52:5d:5d:09:ea:b4:de:32:44: b9:c2:96:c7 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIURMhbiykLD20TIOg2OHelLpZHzeQwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoOTVGQUMzOEE1Q0IyQ0VBM0U1RkZFMjQ5NTYyNkE3QkVB MzI4RDY4OTAeFw0yNjAxMzEyMzE2MzFaFw0yNjAyMDQxMDQyMzFaMDMxMTAvBgNV BAMTKDYxN0E0NUNFNUExNUIwNEJGQUFERkM2MzYyRUU1MUU2OUZFMjg3RDEwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDNM4ZcvmW/4Fvpplxz7IP3haIF VFkJorNJTMgEFwrbE6qCig3vEUZid0ZieE/7zQ568mNAJ7u77A70OaWrbZLziQae X8eE6D5xitsRAxLhvqyyKLVyFdcFjX3ve0l7EILo9jbfCP2QwBMzMgAS09UR39oO 3R5NvGD/xxp+q3mVK3/Qpcnpoalxo2FrM0eYG5fSKutoD/ytz/b6cBWFy181/zm5 t0Oy/PPXOegu3zqLj/V+YPg+E84km+4XJZtG+JvPMqA4UWjrtHxx4XcfqX98aQV/ JkkopMwFRq+QkaOgpdRm3LVuozBXZ1heuE+vh+lLpkkrDyErO8oFZ+3UU1RLAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUYXpFzloVsEv6rfxjYu5R5p/ih9EwHwYDVR0j BBgwFoAUlfrDilyyzqPl/+JJVianvqMo1okwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby84 NGRhNDE1Yi01ZjE3LTQ2MDItOWJkOS1mZDg0YWMyY2FlODYvMC85NUZBQzM4QTVD QjJDRUEzRTVGRkUyNDk1NjI2QTdCRUEzMjhENjg5LmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzEvOTVGQUMzOEE1Q0IyQ0VBM0U1RkZFMjQ5NTYyNkE3QkVBMzI4 RDY4OS5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vODRkYTQxNWItNWYxNy00NjAyLTli ZDktZmQ4NGFjMmNhZTg2LzAvOTVGQUMzOEE1Q0IyQ0VBM0U1RkZFMjQ5NTYyNkE3 QkVBMzI4RDY4OS5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAG3+UJnwvU5Sl4wz6JllSfW3aiY/70+e7b8Z ah+V5iI83GxXayU1xlP2yCxACiiDsI5fU2oGHIpK8yQioyvlnaGbse8gRpD77cGG KzVip7BeBA0nokV1gWuFpCwLgFado1kfSgH8mCRoeUTfmaGSOdvut8gGP8ZPhV0/ UxgBQEdVCi52giR2L6h0PZ+WzBrwsPJCzRvtVueO9recGa/Xz3bl0u/Se8q6wF1T iGqUi0TUl42JR59BXK9PtkgEx8gAAMNXfb06EIGigr0WqVZKX6QibXbt5D1w1d8A JvXtN7PMz/cPi/RshvxOFx47Uc95L+8Bb1JdXQnqtN4yRLnClsc= -----END CERTIFICATE-----Generated at Mon Feb 2 19:20:36 2026 by rpki-client