This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf repo-rpki.idnic.net/repo/84da415b-5f17-4602-9bd9-fd84ac2cae86/0/95FAC38A5CB2CEA3E5FFE2495626A7BEA328D689.mft File: 95FAC38A5CB2CEA3E5FFE2495626A7BEA328D689.mft (raw, json) Hash identifier: oAFYvcTjSX7z4mXfqLp/73QuyURpOCozftM7leVDR2s= Subject key identifier: 6C:11:6F:E2:D7:87:85:44:CC:83:CB:07:BE:5B:5E:0D:33:34:9F:16 Authority key identifier: 95:FA:C3:8A:5C:B2:CE:A3:E5:FF:E2:49:56:26:A7:BE:A3:28:D6:89 Certificate issuer: /CN=95FAC38A5CB2CEA3E5FFE2495626A7BEA328D689 Certificate serial: 0DDECEB6855BCFED3B13529A7B00D55E500CF2EC Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/95FAC38A5CB2CEA3E5FFE2495626A7BEA328D689.cer Subject info access: rsync://repo-rpki.idnic.net/repo/84da415b-5f17-4602-9bd9-fd84ac2cae86/0/95FAC38A5CB2CEA3E5FFE2495626A7BEA328D689.mft Manifest number: FA Signing time: Wed 17 Dec 2025 10:41:26 +0000 Manifest this update: Wed 17 Dec 2025 10:36:26 +0000 Manifest next update: Sat 20 Dec 2025 18:18:26 +0000 Files and hashes: 1: 3136302e31392e38382e302f32342d3234203d3e20313437303838.roa (hash: +Xk0mxGkc/lCxZDeUptrpwZhCqCSnBV/uCVgeNZ+WpY=) 2: 95FAC38A5CB2CEA3E5FFE2495626A7BEA328D689.crl (hash: 2RBgq4wF0flZkARPSz80+ZZCZKNKnl1x6HJnVzv0rsE=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/84da415b-5f17-4602-9bd9-fd84ac2cae86/0/95FAC38A5CB2CEA3E5FFE2495626A7BEA328D689.crl rsync://repo-rpki.idnic.net/repo/84da415b-5f17-4602-9bd9-fd84ac2cae86/0/95FAC38A5CB2CEA3E5FFE2495626A7BEA328D689.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/95FAC38A5CB2CEA3E5FFE2495626A7BEA328D689.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/60F8BE9C16625C424B269EE06C64A83BAB8506D4.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/60F8BE9C16625C424B269EE06C64A83BAB8506D4.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/YPi-nBZiXEJLJp7gbGSoO6uFBtQ.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 20 Dec 2025 18:18:26 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 0d:de:ce:b6:85:5b:cf:ed:3b:13:52:9a:7b:00:d5:5e:50:0c:f2:ec Signature Algorithm: sha256WithRSAEncryption Issuer: CN=95FAC38A5CB2CEA3E5FFE2495626A7BEA328D689 Validity Not Before: Dec 17 10:36:26 2025 GMT Not After : Dec 20 18:18:26 2025 GMT Subject: CN=6C116FE2D7878544CC83CB07BE5B5E0D33349F16 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ae:36:d4:b1:f9:71:5e:97:55:e8:db:76:af:f8: 0a:85:c5:cc:30:77:75:09:44:2f:eb:a6:c7:cc:e7: da:24:6c:c2:84:7a:ed:b3:9f:0f:55:5f:5e:a4:13: c7:2b:98:63:cd:9b:58:c7:fb:03:57:42:0a:8a:df: 2b:d9:8e:1f:a0:86:ff:dd:75:67:16:18:bd:db:b3: 99:ba:a7:62:e7:97:b7:9c:f5:af:1a:fc:42:61:91: 9e:f8:6f:f9:d1:f1:ef:0e:89:b3:53:71:a5:3b:67: 52:59:d3:89:09:3e:f6:88:9f:b0:5c:7d:64:54:c8: df:b3:e8:5b:04:56:33:e0:dd:df:e2:35:40:58:5b: 30:79:f1:e8:1a:d3:95:2c:bd:6f:63:51:47:66:3e: 2a:cc:56:72:49:05:27:42:07:f5:83:60:80:80:21: 85:69:9f:ff:00:76:32:bb:ce:8c:b4:91:4f:4e:2c: 45:ad:89:e6:7b:ab:de:a0:26:ac:61:6c:a6:30:f0: 43:54:a3:fd:a0:88:58:52:c4:fb:85:2f:1a:68:cc: e9:e0:23:3c:c0:08:5d:48:3d:cf:c2:23:8c:21:1c: bc:03:07:33:13:1d:25:1a:a7:4e:33:94:09:df:f2: f7:a7:f4:c5:95:92:26:53:32:8b:11:7f:d3:18:e5: b0:09 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 6C:11:6F:E2:D7:87:85:44:CC:83:CB:07:BE:5B:5E:0D:33:34:9F:16 X509v3 Authority Key Identifier: keyid:95:FA:C3:8A:5C:B2:CE:A3:E5:FF:E2:49:56:26:A7:BE:A3:28:D6:89 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/84da415b-5f17-4602-9bd9-fd84ac2cae86/0/95FAC38A5CB2CEA3E5FFE2495626A7BEA328D689.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/95FAC38A5CB2CEA3E5FFE2495626A7BEA328D689.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/84da415b-5f17-4602-9bd9-fd84ac2cae86/0/95FAC38A5CB2CEA3E5FFE2495626A7BEA328D689.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 70:ba:b9:68:8e:f6:84:7f:b8:99:04:d9:ce:b2:64:04:b6:b9: 53:b0:da:9b:a1:b0:35:93:bf:ff:98:ce:a0:38:b8:fe:a3:00: 7e:cd:62:f8:d7:26:69:17:52:d7:69:6c:17:d3:f4:6b:f0:37: 7c:4a:8b:42:c5:28:cc:91:ad:b6:d9:89:ce:37:67:e9:f8:15: 9c:66:3a:76:7e:4b:22:ca:82:91:2f:d4:f5:da:ee:ce:15:d1: d7:85:e3:ad:a4:0b:d8:c0:53:c5:28:39:56:dc:59:3b:25:47: 23:0a:c1:77:ea:9e:96:a7:65:76:ab:40:44:15:7e:f1:b5:c6: f7:2c:a8:ad:ba:0b:b1:5c:d8:85:29:37:84:8b:1c:b8:37:50: 25:92:df:7b:65:e5:3e:a8:27:48:38:09:ed:8e:58:6c:5c:e4: 6f:ed:ea:8c:4f:c9:8f:84:70:5b:e8:36:bc:a3:97:7c:82:c8: d4:ac:41:4d:48:61:a7:36:49:53:41:19:87:da:ca:4a:cb:37: 36:35:43:b4:d1:2e:9a:64:aa:4d:99:0c:0f:ce:ac:0f:10:79: 48:28:41:86:d2:4f:cf:a6:93:0d:97:23:03:e4:c9:e5:64:9d: 22:93:e1:44:74:62:48:03:90:63:4c:3c:72:68:94:d1:bd:60: 50:79:99:ec -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUDd7OtoVbz+07E1KaewDVXlAM8uwwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoOTVGQUMzOEE1Q0IyQ0VBM0U1RkZFMjQ5NTYyNkE3QkVB MzI4RDY4OTAeFw0yNTEyMTcxMDM2MjZaFw0yNTEyMjAxODE4MjZaMDMxMTAvBgNV BAMTKDZDMTE2RkUyRDc4Nzg1NDRDQzgzQ0IwN0JFNUI1RTBEMzMzNDlGMTYwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCuNtSx+XFel1Xo23av+AqFxcww d3UJRC/rpsfM59okbMKEeu2znw9VX16kE8crmGPNm1jH+wNXQgqK3yvZjh+ghv/d dWcWGL3bs5m6p2Lnl7ec9a8a/EJhkZ74b/nR8e8OibNTcaU7Z1JZ04kJPvaIn7Bc fWRUyN+z6FsEVjPg3d/iNUBYWzB58ega05UsvW9jUUdmPirMVnJJBSdCB/WDYICA IYVpn/8AdjK7zoy0kU9OLEWtieZ7q96gJqxhbKYw8ENUo/2giFhSxPuFLxpozOng IzzACF1IPc/CI4whHLwDBzMTHSUap04zlAnf8ven9MWVkiZTMosRf9MY5bAJAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUbBFv4teHhUTMg8sHvlteDTM0nxYwHwYDVR0j BBgwFoAUlfrDilyyzqPl/+JJVianvqMo1okwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby84 NGRhNDE1Yi01ZjE3LTQ2MDItOWJkOS1mZDg0YWMyY2FlODYvMC85NUZBQzM4QTVD QjJDRUEzRTVGRkUyNDk1NjI2QTdCRUEzMjhENjg5LmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzEvOTVGQUMzOEE1Q0IyQ0VBM0U1RkZFMjQ5NTYyNkE3QkVBMzI4 RDY4OS5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vODRkYTQxNWItNWYxNy00NjAyLTli ZDktZmQ4NGFjMmNhZTg2LzAvOTVGQUMzOEE1Q0IyQ0VBM0U1RkZFMjQ5NTYyNkE3 QkVBMzI4RDY4OS5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAHC6uWiO9oR/uJkE2c6yZAS2uVOw2puhsDWT v/+YzqA4uP6jAH7NYvjXJmkXUtdpbBfT9GvwN3xKi0LFKMyRrbbZic43Z+n4FZxm OnZ+SyLKgpEv1PXa7s4V0deF462kC9jAU8UoOVbcWTslRyMKwXfqnpanZXarQEQV fvG1xvcsqK26C7Fc2IUpN4SLHLg3UCWS33tl5T6oJ0g4Ce2OWGxc5G/t6oxPyY+E cFvoNryjl3yCyNSsQU1IYac2SVNBGYfaykrLNzY1Q7TRLppkqk2ZDA/OrA8QeUgo QYbST8+mkw2XIwPkyeVknSKT4UR0YkgDkGNMPHJolNG9YFB5mew= -----END CERTIFICATE-----Generated at Fri Dec 19 04:52:46 2025 by rpki-client