This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf repo-rpki.idnic.net/repo/f6b5ae1e-be66-4a30-a948-7d478c22ea2b/0/95E800EBFF64709892CB5741D9EDC75EE74E2A6D.mft File: 95E800EBFF64709892CB5741D9EDC75EE74E2A6D.mft (raw, json) Hash identifier: I0PWDdL4c3jVd+A/pBhQ5aL3HRPZbTWRjhEQaWKL4Ig= Subject key identifier: 8E:3A:70:DD:EC:77:CD:2E:B9:C0:8A:5D:9F:61:B6:28:27:13:4A:5B Authority key identifier: 95:E8:00:EB:FF:64:70:98:92:CB:57:41:D9:ED:C7:5E:E7:4E:2A:6D Certificate issuer: /CN=95E800EBFF64709892CB5741D9EDC75EE74E2A6D Certificate serial: 4FA6DDCFE8823892D3FC07E435F5970DA1A2C583 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/95E800EBFF64709892CB5741D9EDC75EE74E2A6D.cer Subject info access: rsync://repo-rpki.idnic.net/repo/f6b5ae1e-be66-4a30-a948-7d478c22ea2b/0/95E800EBFF64709892CB5741D9EDC75EE74E2A6D.mft Manifest number: 0545 Signing time: Sun 01 Feb 2026 10:31:48 +0000 Manifest this update: Sun 01 Feb 2026 10:26:48 +0000 Manifest next update: Wed 04 Feb 2026 16:58:48 +0000 Files and hashes: 1: 3130332e3133342e3130342e302f32342d3234203d3e203633343937.roa (hash: z8oVsj820WikG58Kg7XuHuFP7zjS3wrrsGJ5kGPWB6k=) 2: 3130332e3133342e3130362e302f32332d3233203d3e203633343937.roa (hash: 6u0QjcaXuZCe/xDwNoPsOwMyKh9MBkPufQ0B3cPlReE=) 3: 3130332e3133342e3130372e302f32342d3234203d3e203633343937.roa (hash: tJ7W+A0ln7oQ2TKBeYCrxZXeI+2+Ch9yjit0aZIq8qs=) 4: 3130332e3133342e3130352e302f32342d3234203d3e203633343937.roa (hash: pnePfPpninK+12GFjtU9XZZuD9qIupgPZ4/SoFot86c=) 5: 3130332e3133342e3130342e302f32332d3233203d3e203633343937.roa (hash: MowxodGXifPkFbwcnbxmYI86u52XQ+RqEsK4tBHU6Kc=) 6: 3130332e3133342e3130362e302f32342d3234203d3e203633343937.roa (hash: fYXLcgnYZQvFF+Sx+nAnnoQPnhu4qBL7MV7MXCijhoM=) 7: 95E800EBFF64709892CB5741D9EDC75EE74E2A6D.crl (hash: htCtWzfDJUcivK4pTWKm8aUarqMYLRXJu7lAGT0uq7M=) 8: 3130332e3133342e3130342e302f32322d3232203d3e203633343937.roa (hash: JYyU73FxSsbah75XLPK5+70mS+1BuWT1qs954OCbSn8=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/f6b5ae1e-be66-4a30-a948-7d478c22ea2b/0/95E800EBFF64709892CB5741D9EDC75EE74E2A6D.crl rsync://repo-rpki.idnic.net/repo/f6b5ae1e-be66-4a30-a948-7d478c22ea2b/0/95E800EBFF64709892CB5741D9EDC75EE74E2A6D.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/95E800EBFF64709892CB5741D9EDC75EE74E2A6D.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 04 Feb 2026 16:58:48 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 4f:a6:dd:cf:e8:82:38:92:d3:fc:07:e4:35:f5:97:0d:a1:a2:c5:83 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=95E800EBFF64709892CB5741D9EDC75EE74E2A6D Validity Not Before: Feb 1 10:26:48 2026 GMT Not After : Feb 4 16:58:48 2026 GMT Subject: CN=8E3A70DDEC77CD2EB9C08A5D9F61B62827134A5B Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a3:59:c9:ab:ef:23:35:86:db:f1:4a:1c:5e:7d: c8:de:5c:6c:22:0a:bd:06:f4:cc:2d:a9:e0:8a:25: 3e:0c:6d:23:f8:a9:a9:ee:86:08:2e:e8:68:0e:23: cc:72:36:e6:18:90:bb:bf:cf:d4:dc:b6:a3:b7:d7: a5:a2:0d:35:4b:c3:89:e2:75:b7:65:b1:3e:76:e2: 42:81:00:c0:d0:3f:b5:51:b6:df:6b:d7:8e:bc:24: ec:78:5f:cd:66:4b:9c:70:6d:22:d4:07:9d:e0:45: cb:e9:1b:d7:a9:33:8c:60:e0:a9:fb:de:55:4d:97: 50:7d:bd:40:75:b6:af:8d:63:fb:ba:b1:c4:35:69: c7:97:27:22:79:4d:e8:38:aa:a3:8a:88:5a:e1:91: 2e:dd:01:5e:cb:ce:23:4a:06:dd:ef:46:12:58:79: 4c:49:62:d2:a8:5d:69:48:ff:c6:ef:1b:30:ff:32: a0:8d:7d:85:69:eb:37:58:c9:ad:a2:75:cf:69:fe: cb:7b:06:5e:b9:fc:8c:5d:ad:2f:e8:84:66:39:97: 0b:11:b3:ba:29:2f:51:27:47:9e:10:ae:55:74:ef: 52:f1:57:3c:50:8b:21:b2:63:24:c4:06:b0:fe:5a: 24:52:bb:4d:96:4b:d1:95:e9:97:5b:39:e8:fa:d9: dd:3f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 8E:3A:70:DD:EC:77:CD:2E:B9:C0:8A:5D:9F:61:B6:28:27:13:4A:5B X509v3 Authority Key Identifier: keyid:95:E8:00:EB:FF:64:70:98:92:CB:57:41:D9:ED:C7:5E:E7:4E:2A:6D X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/f6b5ae1e-be66-4a30-a948-7d478c22ea2b/0/95E800EBFF64709892CB5741D9EDC75EE74E2A6D.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/95E800EBFF64709892CB5741D9EDC75EE74E2A6D.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/f6b5ae1e-be66-4a30-a948-7d478c22ea2b/0/95E800EBFF64709892CB5741D9EDC75EE74E2A6D.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption a2:a7:8e:5c:1e:b4:f2:c8:e0:1e:a9:81:a2:c7:2b:35:e0:98: b1:88:ad:ea:35:fa:b5:9f:a0:23:f8:70:38:b6:29:3f:a4:71: 23:59:8f:2f:2b:b9:9c:48:7d:f9:6c:8c:ed:b1:73:75:a1:0a: bf:ab:43:a0:be:d9:dd:55:3b:44:2a:86:9d:c9:b8:f9:01:bd: bc:08:29:ee:bc:4f:df:de:cc:e1:07:52:6e:f1:15:b8:d2:a8: 62:bd:1e:f7:ae:20:0e:29:27:df:94:07:24:f8:08:55:dc:11: 23:0f:f9:ff:8f:6c:04:70:ac:ae:54:35:10:02:59:5c:33:bc: d4:6d:6c:4a:e7:dd:19:a3:26:cc:9b:84:9b:8d:8e:77:c8:ad: 8b:de:20:14:3e:d9:69:d6:dd:0d:98:9e:7d:f9:61:3e:78:be: fe:0a:f7:70:c7:86:b2:31:a3:5f:d4:ed:40:ee:06:f0:47:0e: 95:89:e7:dd:c0:f3:a8:c6:09:c9:17:c9:82:3f:c7:a1:54:b6: 00:97:16:a9:e5:33:af:f8:25:d7:65:2d:88:76:8c:a4:06:2b: e7:01:57:ab:81:d8:c5:e0:82:d3:09:ef:8f:09:4c:98:ab:12: d2:4d:ce:e7:9e:a6:aa:32:a0:82:9e:9a:f9:39:43:d1:59:2f: fc:3b:64:ab -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUT6bdz+iCOJLT/AfkNfWXDaGixYMwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoOTVFODAwRUJGRjY0NzA5ODkyQ0I1NzQxRDlFREM3NUVF NzRFMkE2RDAeFw0yNjAyMDExMDI2NDhaFw0yNjAyMDQxNjU4NDhaMDMxMTAvBgNV BAMTKDhFM0E3MERERUM3N0NEMkVCOUMwOEE1RDlGNjFCNjI4MjcxMzRBNUIwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCjWcmr7yM1htvxShxefcjeXGwi Cr0G9MwtqeCKJT4MbSP4qanuhggu6GgOI8xyNuYYkLu/z9TctqO316WiDTVLw4ni dbdlsT524kKBAMDQP7VRtt9r1468JOx4X81mS5xwbSLUB53gRcvpG9epM4xg4Kn7 3lVNl1B9vUB1tq+NY/u6scQ1aceXJyJ5Teg4qqOKiFrhkS7dAV7LziNKBt3vRhJY eUxJYtKoXWlI/8bvGzD/MqCNfYVp6zdYya2idc9p/st7Bl65/IxdrS/ohGY5lwsR s7opL1EnR54QrlV071LxVzxQiyGyYyTEBrD+WiRSu02WS9GV6ZdbOej62d0/AgMB AAGjggI8MIICODAdBgNVHQ4EFgQUjjpw3ex3zS65wIpdn2G2KCcTSlswHwYDVR0j BBgwFoAUlegA6/9kcJiSy1dB2e3HXudOKm0wDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby9m NmI1YWUxZS1iZTY2LTRhMzAtYTk0OC03ZDQ3OGMyMmVhMmIvMC85NUU4MDBFQkZG NjQ3MDk4OTJDQjU3NDFEOUVEQzc1RUU3NEUyQTZELmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvOTVFODAwRUJGRjY0NzA5ODkyQ0I1NzQxRDlFREM3NUVFNzRF MkE2RC5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vZjZiNWFlMWUtYmU2Ni00YTMwLWE5 NDgtN2Q0NzhjMjJlYTJiLzAvOTVFODAwRUJGRjY0NzA5ODkyQ0I1NzQxRDlFREM3 NUVFNzRFMkE2RC5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAKKnjlwetPLI4B6pgaLHKzXgmLGIreo1+rWf oCP4cDi2KT+kcSNZjy8ruZxIfflsjO2xc3WhCr+rQ6C+2d1VO0Qqhp3JuPkBvbwI Ke68T9/ezOEHUm7xFbjSqGK9HveuIA4pJ9+UByT4CFXcESMP+f+PbARwrK5UNRAC WVwzvNRtbErn3RmjJsybhJuNjnfIrYveIBQ+2WnW3Q2Ynn35YT54vv4K93DHhrIx o1/U7UDuBvBHDpWJ593A86jGCckXyYI/x6FUtgCXFqnlM6/4JddlLYh2jKQGK+cB V6uB2MXggtMJ748JTJirEtJNzueepqoyoIKemvk5Q9FZL/w7ZKs= -----END CERTIFICATE-----Generated at Mon Feb 2 09:47:19 2026 by rpki-client