This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf repo-rpki.idnic.net/repo/b3785e65-51e2-4b1b-82f9-e753ad4b240f/0/95D9136845FAFA0795735D4A9B0FF9F746461AB3.mft File: 95D9136845FAFA0795735D4A9B0FF9F746461AB3.mft (raw, json) Hash identifier: Y/nTNDmq+RbSE60qOf5QGyI2ywfhwZKJ0XTQgncJUPU= Subject key identifier: E4:8A:78:75:9D:5E:C2:C1:AD:0D:86:AB:AD:4A:A5:F2:DD:90:62:B2 Authority key identifier: 95:D9:13:68:45:FA:FA:07:95:73:5D:4A:9B:0F:F9:F7:46:46:1A:B3 Certificate issuer: /CN=95D9136845FAFA0795735D4A9B0FF9F746461AB3 Certificate serial: 2976C23BD246E7FB73815887C48A8535C26F5F24 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/95D9136845FAFA0795735D4A9B0FF9F746461AB3.cer Subject info access: rsync://repo-rpki.idnic.net/repo/b3785e65-51e2-4b1b-82f9-e753ad4b240f/0/95D9136845FAFA0795735D4A9B0FF9F746461AB3.mft Manifest number: 0544 Signing time: Mon 02 Feb 2026 00:22:22 +0000 Manifest this update: Mon 02 Feb 2026 00:17:22 +0000 Manifest next update: Thu 05 Feb 2026 11:42:22 +0000 Files and hashes: 1: 3130332e3135312e39382e302f32342d3234203d3e203137353338.roa (hash: LZPQ7rMeaDVcHWLsKLTFoADUeRBC0AnGmqL6VPS4zMA=) 2: 323030313a6466333a623938303a3a2f34382d3438203d3e203137353338.roa (hash: ifCGuusxkGprBC7NulQNufNvo7SVC5amSJ/1S4uaqjQ=) 3: 3130332e3135312e39392e302f32342d3234203d3e203137353338.roa (hash: hccolhWeQwMhTE4DUNZtMqz3UE4I8axgnsLj/aGjWu0=) 4: 95D9136845FAFA0795735D4A9B0FF9F746461AB3.crl (hash: nI8F/mQZDhrUQEzJrAzNjGpS7tWdM30nfPu3ocbakkU=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/b3785e65-51e2-4b1b-82f9-e753ad4b240f/0/95D9136845FAFA0795735D4A9B0FF9F746461AB3.crl rsync://repo-rpki.idnic.net/repo/b3785e65-51e2-4b1b-82f9-e753ad4b240f/0/95D9136845FAFA0795735D4A9B0FF9F746461AB3.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/95D9136845FAFA0795735D4A9B0FF9F746461AB3.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 05 Feb 2026 05:24:03 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 29:76:c2:3b:d2:46:e7:fb:73:81:58:87:c4:8a:85:35:c2:6f:5f:24 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=95D9136845FAFA0795735D4A9B0FF9F746461AB3 Validity Not Before: Feb 2 00:17:22 2026 GMT Not After : Feb 5 11:42:22 2026 GMT Subject: CN=E48A78759D5EC2C1AD0D86ABAD4AA5F2DD9062B2 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a8:87:20:3d:2f:3d:d9:c0:ad:ab:64:a4:79:74: ea:4b:46:96:09:84:f2:42:8c:fe:c8:21:c8:e8:04: 07:da:e7:78:f5:ef:5f:08:cc:f8:49:50:a3:de:ad: 6d:cd:3f:f8:f5:2e:16:d3:cb:4e:e4:bb:c1:91:78: 44:fa:e6:17:bf:8d:a7:dc:26:ae:5d:53:85:21:ab: b3:9e:e8:ce:a6:11:20:2f:0a:f4:bf:c9:cb:6e:1d: 18:6a:8d:d3:52:57:c0:d4:a3:23:ab:ae:b9:17:a2: 31:97:a2:a1:bc:39:43:25:bd:e7:09:8d:db:f3:a8: 4f:f6:6e:0d:21:15:82:52:6e:43:e8:52:c4:5d:3f: c8:29:ef:96:ab:02:2b:f7:52:ed:e9:23:3f:02:73: 89:af:7f:22:45:1e:a2:ea:f8:76:03:89:ab:8e:5e: 04:24:e6:6a:a0:da:a4:a0:51:c5:e2:ac:6c:cf:53: 48:5f:24:56:bd:1e:ef:96:b0:22:4f:54:00:da:74: 02:bb:5d:28:28:69:2f:a9:86:74:4f:93:8c:8d:17: 78:b2:a4:78:19:47:3d:02:2f:da:6f:00:70:52:fc: 6a:e6:14:90:cb:53:e0:ee:10:c1:33:91:b1:14:db: 88:05:18:62:ec:ac:09:e9:38:7e:3c:d9:43:50:72: 0c:69 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: E4:8A:78:75:9D:5E:C2:C1:AD:0D:86:AB:AD:4A:A5:F2:DD:90:62:B2 X509v3 Authority Key Identifier: keyid:95:D9:13:68:45:FA:FA:07:95:73:5D:4A:9B:0F:F9:F7:46:46:1A:B3 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/b3785e65-51e2-4b1b-82f9-e753ad4b240f/0/95D9136845FAFA0795735D4A9B0FF9F746461AB3.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/95D9136845FAFA0795735D4A9B0FF9F746461AB3.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/b3785e65-51e2-4b1b-82f9-e753ad4b240f/0/95D9136845FAFA0795735D4A9B0FF9F746461AB3.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 8c:79:64:c2:84:4e:92:cd:7a:fb:a6:72:69:1d:15:ba:2e:d1: 2e:ac:81:11:85:e6:73:42:33:2c:82:26:8c:6b:8c:a5:27:da: 82:99:b1:6f:4d:cd:de:9c:91:87:9a:da:a1:cc:ae:09:3e:cc: 1c:b2:54:c6:d4:d3:3d:a8:7a:d5:17:2c:b7:2d:c2:ab:32:da: 27:e4:a4:a5:62:fc:5c:da:94:6f:ae:1a:df:2a:38:d5:80:cf: 20:f0:6c:3a:4a:a6:61:fc:04:2d:d7:ea:32:6b:89:a4:dd:82: cd:a4:11:b6:84:8f:fc:77:bd:7a:4d:7f:ac:c4:c6:c9:73:85: 15:a8:08:68:bc:24:41:fa:0a:37:c3:a8:13:b5:9c:ec:af:36: 65:fd:5c:ef:2b:02:f9:3a:eb:85:08:90:b9:59:55:a0:e2:83: 0d:69:62:75:97:9d:3c:a4:7c:b8:dd:a9:b9:ff:ed:ab:4b:fd: d2:39:2e:56:7c:ee:bc:ec:61:46:fb:c7:62:16:bc:af:9f:6f: 13:50:b4:5e:12:3c:a3:4f:f0:06:0b:03:45:ed:21:28:18:ae: e8:51:27:6c:32:08:bb:8d:f1:d2:81:d1:81:55:ea:3f:63:04: b0:c6:29:fb:60:c0:de:77:b5:ae:aa:06:74:6d:f9:44:13:5e: 0a:46:13:5a -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUKXbCO9JG5/tzgViHxIqFNcJvXyQwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoOTVEOTEzNjg0NUZBRkEwNzk1NzM1RDRBOUIwRkY5Rjc0 NjQ2MUFCMzAeFw0yNjAyMDIwMDE3MjJaFw0yNjAyMDUxMTQyMjJaMDMxMTAvBgNV BAMTKEU0OEE3ODc1OUQ1RUMyQzFBRDBEODZBQkFENEFBNUYyREQ5MDYyQjIwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCohyA9Lz3ZwK2rZKR5dOpLRpYJ hPJCjP7IIcjoBAfa53j1718IzPhJUKPerW3NP/j1LhbTy07ku8GReET65he/jafc Jq5dU4Uhq7Oe6M6mESAvCvS/yctuHRhqjdNSV8DUoyOrrrkXojGXoqG8OUMlvecJ jdvzqE/2bg0hFYJSbkPoUsRdP8gp75arAiv3Uu3pIz8Cc4mvfyJFHqLq+HYDiauO XgQk5mqg2qSgUcXirGzPU0hfJFa9Hu+WsCJPVADadAK7XSgoaS+phnRPk4yNF3iy pHgZRz0CL9pvAHBS/GrmFJDLU+DuEMEzkbEU24gFGGLsrAnpOH482UNQcgxpAgMB AAGjggI8MIICODAdBgNVHQ4EFgQU5Ip4dZ1ewsGtDYarrUql8t2QYrIwHwYDVR0j BBgwFoAUldkTaEX6+geVc11Kmw/590ZGGrMwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby9i Mzc4NWU2NS01MWUyLTRiMWItODJmOS1lNzUzYWQ0YjI0MGYvMC85NUQ5MTM2ODQ1 RkFGQTA3OTU3MzVENEE5QjBGRjlGNzQ2NDYxQUIzLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvOTVEOTEzNjg0NUZBRkEwNzk1NzM1RDRBOUIwRkY5Rjc0NjQ2 MUFCMy5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vYjM3ODVlNjUtNTFlMi00YjFiLTgy ZjktZTc1M2FkNGIyNDBmLzAvOTVEOTEzNjg0NUZBRkEwNzk1NzM1RDRBOUIwRkY5 Rjc0NjQ2MUFCMy5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAIx5ZMKETpLNevumcmkdFbou0S6sgRGF5nNC MyyCJoxrjKUn2oKZsW9Nzd6ckYea2qHMrgk+zByyVMbU0z2oetUXLLctwqsy2ifk pKVi/FzalG+uGt8qONWAzyDwbDpKpmH8BC3X6jJriaTdgs2kEbaEj/x3vXpNf6zE xslzhRWoCGi8JEH6CjfDqBO1nOyvNmX9XO8rAvk664UIkLlZVaDigw1pYnWXnTyk fLjdqbn/7atL/dI5LlZ87rzsYUb7x2IWvK+fbxNQtF4SPKNP8AYLA0XtISgYruhR J2wyCLuN8dKB0YFV6j9jBLDGKftgwN53ta6qBnRt+UQTXgpGE1o= -----END CERTIFICATE-----Generated at Mon Feb 2 10:02:17 2026 by rpki-client