This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf repo-rpki.idnic.net/repo/d2f1417a-5718-4071-9f35-c122555dac7a/0/95966A8DB250307CF9852483F96922EE520F6E2A.mft File: 95966A8DB250307CF9852483F96922EE520F6E2A.mft (raw, json) Hash identifier: V79rJslEDpsI/H8eNH78XaMd7cIu2qR7vefzppKHFvw= Subject key identifier: C6:74:12:C3:B8:97:0E:AC:C4:FB:1B:9A:C0:AD:73:99:95:A5:9C:C3 Authority key identifier: 95:96:6A:8D:B2:50:30:7C:F9:85:24:83:F9:69:22:EE:52:0F:6E:2A Certificate issuer: /CN=95966A8DB250307CF9852483F96922EE520F6E2A Certificate serial: 57D2346E6CB142EC77087A59FA84FDC932068AA7 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/95966A8DB250307CF9852483F96922EE520F6E2A.cer Subject info access: rsync://repo-rpki.idnic.net/repo/d2f1417a-5718-4071-9f35-c122555dac7a/0/95966A8DB250307CF9852483F96922EE520F6E2A.mft Manifest number: 0319 Signing time: Tue 02 Dec 2025 07:40:00 +0000 Manifest this update: Tue 02 Dec 2025 07:35:00 +0000 Manifest next update: Fri 05 Dec 2025 10:36:00 +0000 Files and hashes: 1: 3130332e31392e3232392e302f32342d3234203d3e20313332363638.roa (hash: lJA11B888lTAIORO0k9rdft4p7t0vrr4FyWBG++arwA=) 2: 3130332e31392e3233312e302f32342d3234203d3e20313332363638.roa (hash: xt2DiIsS1Hm+P8ldmkaqq+Mf+LiIX+U17UKLw/Y34Uk=) 3: 3130332e31392e3233302e302f32342d3234203d3e20313332363638.roa (hash: QAndsMLECtqgWCCHyuYe9oOyMMkwnZ8QhtRk2OHf9FQ=) 4: 3130332e31392e3232382e302f32342d3234203d3e20313332363638.roa (hash: MitWmX3yxsYyPd+sKi7YcLOVm2fefPu2Qs/7NDCXxb8=) 5: 95966A8DB250307CF9852483F96922EE520F6E2A.crl (hash: tX0JzaDx3Gaom09lMs0wqHVB9gVe1T+t9lp8aSxKJCk=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/d2f1417a-5718-4071-9f35-c122555dac7a/0/95966A8DB250307CF9852483F96922EE520F6E2A.crl rsync://repo-rpki.idnic.net/repo/d2f1417a-5718-4071-9f35-c122555dac7a/0/95966A8DB250307CF9852483F96922EE520F6E2A.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/95966A8DB250307CF9852483F96922EE520F6E2A.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 05 Dec 2025 10:36:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 57:d2:34:6e:6c:b1:42:ec:77:08:7a:59:fa:84:fd:c9:32:06:8a:a7 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=95966A8DB250307CF9852483F96922EE520F6E2A Validity Not Before: Dec 2 07:35:00 2025 GMT Not After : Dec 5 10:36:00 2025 GMT Subject: CN=C67412C3B8970EACC4FB1B9AC0AD739995A59CC3 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a4:7e:0f:6e:93:f3:25:91:a7:f7:5d:7c:d3:08: 0a:2d:b5:65:d5:72:0e:59:06:05:c0:cc:27:85:34: 0b:e7:66:53:73:05:4d:3f:de:b5:99:be:fd:93:db: 04:b4:35:07:4f:4f:17:0b:bc:b0:cf:28:e4:da:84: 58:31:aa:63:1d:b7:2c:eb:a1:c7:19:cf:79:d7:a3: ac:9e:f3:ee:db:c1:65:7c:65:6f:8f:49:06:b3:5a: 4d:e7:71:fb:01:e8:45:cc:58:de:e0:d2:c9:43:ef: dc:43:27:2c:2b:64:61:c6:32:ce:40:5b:2b:43:54: 6a:3b:74:2c:7f:a0:2b:07:74:ba:f1:02:a8:e9:bb: f3:b9:30:23:3a:02:57:fd:04:f9:65:32:c3:d2:11: c2:9c:a6:cd:1d:0e:f0:6c:71:32:da:de:4b:a3:22: a1:3d:50:88:3d:04:21:09:8d:f9:74:f5:1e:b1:6b: 02:79:2e:f8:cf:bf:76:8c:58:9f:7b:fe:45:0c:5f: 04:a4:e2:55:bf:8d:e0:0a:ca:10:6c:4f:43:59:62: eb:c7:66:ad:5f:36:51:92:aa:e3:c4:3a:f1:89:74: 93:4d:2e:f1:5b:69:03:40:0a:58:56:d0:95:f8:3c: df:00:90:62:92:6d:31:f7:58:11:a8:86:df:1e:a0: 36:63 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: C6:74:12:C3:B8:97:0E:AC:C4:FB:1B:9A:C0:AD:73:99:95:A5:9C:C3 X509v3 Authority Key Identifier: keyid:95:96:6A:8D:B2:50:30:7C:F9:85:24:83:F9:69:22:EE:52:0F:6E:2A X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/d2f1417a-5718-4071-9f35-c122555dac7a/0/95966A8DB250307CF9852483F96922EE520F6E2A.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/95966A8DB250307CF9852483F96922EE520F6E2A.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/d2f1417a-5718-4071-9f35-c122555dac7a/0/95966A8DB250307CF9852483F96922EE520F6E2A.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 27:a1:7e:85:6b:1a:bb:61:8d:6e:9c:ee:7e:7c:9f:ed:94:b0: 1a:9a:33:05:cf:73:29:21:83:09:8c:07:c5:37:ff:c1:cf:e1: ef:c4:92:36:07:ad:20:d8:ac:83:56:e6:34:a2:49:24:5c:db: c1:b2:d7:f0:e4:5d:ab:95:75:3a:3a:fb:38:c1:7a:db:bc:da: 8e:5e:bd:7e:e3:75:a1:12:95:d3:66:b8:b6:5f:41:05:2f:b0: a2:11:6e:21:e6:e6:72:32:db:3d:5e:16:21:a5:e6:97:07:d0: 50:9e:56:dd:05:39:51:b8:9b:59:e3:ee:78:bd:20:ba:b0:89: fc:7c:09:17:35:c6:56:6c:d7:6b:b2:d5:ca:2d:b2:ca:aa:13: d1:37:e1:fe:b4:eb:8d:7d:95:31:be:de:10:d5:e3:f7:01:e1: 6e:20:4c:98:58:bb:3d:0a:73:a3:22:46:c8:b2:13:98:03:9e: 80:2d:fc:f7:00:c7:38:83:20:7e:ac:82:14:69:19:d1:8c:86: ae:ef:0a:83:01:79:b8:a7:83:87:22:e0:4c:eb:85:e3:f0:e2: 2f:cb:f0:91:be:39:bd:fb:a0:90:56:83:85:98:ef:44:88:c4: 8f:91:07:cb:14:48:43:0a:0c:b9:13:24:93:1f:41:e9:30:a1: 6c:e3:2d:7f -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUV9I0bmyxQux3CHpZ+oT9yTIGiqcwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoOTU5NjZBOERCMjUwMzA3Q0Y5ODUyNDgzRjk2OTIyRUU1 MjBGNkUyQTAeFw0yNTEyMDIwNzM1MDBaFw0yNTEyMDUxMDM2MDBaMDMxMTAvBgNV BAMTKEM2NzQxMkMzQjg5NzBFQUNDNEZCMUI5QUMwQUQ3Mzk5OTVBNTlDQzMwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCkfg9uk/Mlkaf3XXzTCAottWXV cg5ZBgXAzCeFNAvnZlNzBU0/3rWZvv2T2wS0NQdPTxcLvLDPKOTahFgxqmMdtyzr occZz3nXo6ye8+7bwWV8ZW+PSQazWk3ncfsB6EXMWN7g0slD79xDJywrZGHGMs5A WytDVGo7dCx/oCsHdLrxAqjpu/O5MCM6Alf9BPllMsPSEcKcps0dDvBscTLa3kuj IqE9UIg9BCEJjfl09R6xawJ5LvjPv3aMWJ97/kUMXwSk4lW/jeAKyhBsT0NZYuvH Zq1fNlGSquPEOvGJdJNNLvFbaQNAClhW0JX4PN8AkGKSbTH3WBGoht8eoDZjAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUxnQSw7iXDqzE+xuawK1zmZWlnMMwHwYDVR0j BBgwFoAUlZZqjbJQMHz5hSSD+Wki7lIPbiowDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby9k MmYxNDE3YS01NzE4LTQwNzEtOWYzNS1jMTIyNTU1ZGFjN2EvMC85NTk2NkE4REIy NTAzMDdDRjk4NTI0ODNGOTY5MjJFRTUyMEY2RTJBLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvOTU5NjZBOERCMjUwMzA3Q0Y5ODUyNDgzRjk2OTIyRUU1MjBG NkUyQS5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vZDJmMTQxN2EtNTcxOC00MDcxLTlm MzUtYzEyMjU1NWRhYzdhLzAvOTU5NjZBOERCMjUwMzA3Q0Y5ODUyNDgzRjk2OTIy RUU1MjBGNkUyQS5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBACehfoVrGrthjW6c7n58n+2UsBqaMwXPcykh gwmMB8U3/8HP4e/EkjYHrSDYrINW5jSiSSRc28Gy1/DkXauVdTo6+zjBetu82o5e vX7jdaESldNmuLZfQQUvsKIRbiHm5nIy2z1eFiGl5pcH0FCeVt0FOVG4m1nj7ni9 ILqwifx8CRc1xlZs12uy1cotssqqE9E34f606419lTG+3hDV4/cB4W4gTJhYuz0K c6MiRsiyE5gDnoAt/PcAxziDIH6sghRpGdGMhq7vCoMBebing4ci4EzrhePw4i/L 8JG+Ob37oJBWg4WY70SIxI+RB8sUSEMKDLkTJJMfQekwoWzjLX8= -----END CERTIFICATE-----Generated at Wed Dec 3 13:57:28 2025 by rpki-client