This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf repo-rpki.idnic.net/repo/d2f1417a-5718-4071-9f35-c122555dac7a/0/95966A8DB250307CF9852483F96922EE520F6E2A.mft File: 95966A8DB250307CF9852483F96922EE520F6E2A.mft (raw, json) Hash identifier: yHAGak0/aL5hX1DPdSaar8dij+RX172khY+oZmtRvq4= Subject key identifier: C8:51:D0:25:05:BB:53:D3:DE:DE:92:8E:5E:28:22:E2:27:9F:2F:7B Authority key identifier: 95:96:6A:8D:B2:50:30:7C:F9:85:24:83:F9:69:22:EE:52:0F:6E:2A Certificate issuer: /CN=95966A8DB250307CF9852483F96922EE520F6E2A Certificate serial: 69D148F75EAE8DD6C5544DF72180024835299BB4 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/95966A8DB250307CF9852483F96922EE520F6E2A.cer Subject info access: rsync://repo-rpki.idnic.net/repo/d2f1417a-5718-4071-9f35-c122555dac7a/0/95966A8DB250307CF9852483F96922EE520F6E2A.mft Manifest number: 0334 Signing time: Sat 31 Jan 2026 17:00:00 +0000 Manifest this update: Sat 31 Jan 2026 16:55:00 +0000 Manifest next update: Tue 03 Feb 2026 20:00:00 +0000 Files and hashes: 1: 3130332e31392e3233302e302f32342d3234203d3e20313332363638.roa (hash: QAndsMLECtqgWCCHyuYe9oOyMMkwnZ8QhtRk2OHf9FQ=) 2: 3130332e31392e3233312e302f32342d3234203d3e20313332363638.roa (hash: xt2DiIsS1Hm+P8ldmkaqq+Mf+LiIX+U17UKLw/Y34Uk=) 3: 3130332e31392e3232382e302f32342d3234203d3e20313332363638.roa (hash: MitWmX3yxsYyPd+sKi7YcLOVm2fefPu2Qs/7NDCXxb8=) 4: 3130332e31392e3232392e302f32342d3234203d3e20313332363638.roa (hash: lJA11B888lTAIORO0k9rdft4p7t0vrr4FyWBG++arwA=) 5: 95966A8DB250307CF9852483F96922EE520F6E2A.crl (hash: PXkjxvYiiZjoWWTYnm+hW+LzTFb+EA7r1TFcseqhhS8=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/d2f1417a-5718-4071-9f35-c122555dac7a/0/95966A8DB250307CF9852483F96922EE520F6E2A.crl rsync://repo-rpki.idnic.net/repo/d2f1417a-5718-4071-9f35-c122555dac7a/0/95966A8DB250307CF9852483F96922EE520F6E2A.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/95966A8DB250307CF9852483F96922EE520F6E2A.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 03 Feb 2026 20:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 69:d1:48:f7:5e:ae:8d:d6:c5:54:4d:f7:21:80:02:48:35:29:9b:b4 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=95966A8DB250307CF9852483F96922EE520F6E2A Validity Not Before: Jan 31 16:55:00 2026 GMT Not After : Feb 3 20:00:00 2026 GMT Subject: CN=C851D02505BB53D3DEDE928E5E2822E2279F2F7B Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b6:ba:f3:d9:6f:3a:4c:f5:e1:c2:cc:75:1c:11: 2a:d3:cd:75:90:b9:4a:4c:99:f3:bd:93:6b:38:ea: 60:29:e4:fa:8f:00:42:56:98:82:95:b7:5d:3e:bd: 9f:b6:1f:65:69:da:7d:9d:f8:c0:52:8e:aa:b3:71: c6:1e:91:87:ca:2f:51:e6:3d:66:80:fe:43:9a:cf: b7:41:c2:da:d8:62:b2:48:3c:a2:8b:f1:8f:01:fd: f2:93:65:55:90:6b:70:70:69:54:0e:9f:b9:9b:c1: 67:97:2f:a2:b7:40:08:65:c9:7e:94:87:0c:05:24: 28:42:b1:c3:69:d0:6c:41:75:f1:31:09:b0:b6:59: c3:19:16:fd:ca:38:c8:62:77:9d:de:b9:6c:d5:1d: 70:f6:e6:d8:98:27:18:30:42:7c:4f:35:bb:2a:91: 37:c4:0d:e5:a6:b2:7f:7c:2e:5e:44:76:34:c4:14: 2a:d9:43:21:ce:5e:18:4a:e9:d5:07:dc:df:96:4a: 40:ca:51:43:3a:b9:14:e6:a1:05:aa:ea:5e:54:31: c4:94:81:9f:93:27:15:27:16:44:c4:1d:e8:dd:6d: 25:66:fd:96:29:65:6e:20:c8:45:3d:fe:e2:a0:19: 24:50:ed:ba:5d:bb:9a:de:c5:3b:e5:4d:50:b1:47: 07:5f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: C8:51:D0:25:05:BB:53:D3:DE:DE:92:8E:5E:28:22:E2:27:9F:2F:7B X509v3 Authority Key Identifier: keyid:95:96:6A:8D:B2:50:30:7C:F9:85:24:83:F9:69:22:EE:52:0F:6E:2A X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/d2f1417a-5718-4071-9f35-c122555dac7a/0/95966A8DB250307CF9852483F96922EE520F6E2A.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/95966A8DB250307CF9852483F96922EE520F6E2A.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/d2f1417a-5718-4071-9f35-c122555dac7a/0/95966A8DB250307CF9852483F96922EE520F6E2A.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption ca:75:cb:07:d6:dc:63:e6:c2:b7:d7:bc:62:a6:49:26:ea:b2: 81:86:33:42:67:aa:04:5f:fe:1d:7e:d8:89:d1:72:13:8d:ac: a0:7f:5e:db:a9:72:d3:5e:64:0c:0e:82:66:76:55:13:2f:fb: c3:db:91:c7:5f:10:bd:31:1d:e5:60:a4:77:8b:67:45:15:a1: ee:27:55:50:21:b2:40:8e:4e:49:a9:3d:9d:74:b5:f6:26:e8: be:3f:31:50:57:59:0e:15:ec:31:fd:e8:41:38:01:af:c5:4a: e5:8a:3e:5d:a1:0c:27:49:b7:d2:30:2c:62:20:ad:a9:0d:c9: ce:45:b0:37:4f:a9:0e:63:20:fd:d3:96:e3:f0:28:29:e1:56: 18:77:dc:21:5f:4c:ce:fd:15:e7:01:c3:5e:79:f5:e8:11:fe: 2e:7c:3e:93:f2:4e:49:5c:79:73:e2:97:4e:48:9e:15:8c:99: ea:58:11:e0:9b:eb:c6:32:28:26:ad:9e:f6:18:58:0c:5e:f0: 34:14:de:c9:21:d8:d2:57:6d:66:55:d2:e1:b6:af:08:60:84: 23:bf:91:22:ca:b0:3f:d0:f3:c6:55:fa:9e:ec:1d:27:8b:40: fe:c0:6d:c7:fa:d1:ed:26:14:40:f8:8b:17:ed:5d:1e:7c:0d: 43:05:95:d3 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUadFI916ujdbFVE33IYACSDUpm7QwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoOTU5NjZBOERCMjUwMzA3Q0Y5ODUyNDgzRjk2OTIyRUU1 MjBGNkUyQTAeFw0yNjAxMzExNjU1MDBaFw0yNjAyMDMyMDAwMDBaMDMxMTAvBgNV BAMTKEM4NTFEMDI1MDVCQjUzRDNERURFOTI4RTVFMjgyMkUyMjc5RjJGN0IwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC2uvPZbzpM9eHCzHUcESrTzXWQ uUpMmfO9k2s46mAp5PqPAEJWmIKVt10+vZ+2H2Vp2n2d+MBSjqqzccYekYfKL1Hm PWaA/kOaz7dBwtrYYrJIPKKL8Y8B/fKTZVWQa3BwaVQOn7mbwWeXL6K3QAhlyX6U hwwFJChCscNp0GxBdfExCbC2WcMZFv3KOMhid53euWzVHXD25tiYJxgwQnxPNbsq kTfEDeWmsn98Ll5EdjTEFCrZQyHOXhhK6dUH3N+WSkDKUUM6uRTmoQWq6l5UMcSU gZ+TJxUnFkTEHejdbSVm/ZYpZW4gyEU9/uKgGSRQ7bpdu5rexTvlTVCxRwdfAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUyFHQJQW7U9Pe3pKOXigi4iefL3swHwYDVR0j BBgwFoAUlZZqjbJQMHz5hSSD+Wki7lIPbiowDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby9k MmYxNDE3YS01NzE4LTQwNzEtOWYzNS1jMTIyNTU1ZGFjN2EvMC85NTk2NkE4REIy NTAzMDdDRjk4NTI0ODNGOTY5MjJFRTUyMEY2RTJBLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvOTU5NjZBOERCMjUwMzA3Q0Y5ODUyNDgzRjk2OTIyRUU1MjBG NkUyQS5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vZDJmMTQxN2EtNTcxOC00MDcxLTlm MzUtYzEyMjU1NWRhYzdhLzAvOTU5NjZBOERCMjUwMzA3Q0Y5ODUyNDgzRjk2OTIy RUU1MjBGNkUyQS5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAMp1ywfW3GPmwrfXvGKmSSbqsoGGM0JnqgRf /h1+2InRchONrKB/XtupctNeZAwOgmZ2VRMv+8PbkcdfEL0xHeVgpHeLZ0UVoe4n VVAhskCOTkmpPZ10tfYm6L4/MVBXWQ4V7DH96EE4Aa/FSuWKPl2hDCdJt9IwLGIg rakNyc5FsDdPqQ5jIP3TluPwKCnhVhh33CFfTM79FecBw1559egR/i58PpPyTklc eXPil05InhWMmepYEeCb68YyKCatnvYYWAxe8DQU3skh2NJXbWZV0uG2rwhghCO/ kSLKsD/Q88ZV+p7sHSeLQP7Abcf60e0mFED4ixftXR58DUMFldM= -----END CERTIFICATE-----Generated at Mon Feb 2 09:45:08 2026 by rpki-client