This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf repo-rpki.idnic.net/repo/205af822-bea9-48f3-aa12-b2737162fc42/0/38E19BA955DC939F0FD5EB77C83043AEABB72335.mft File: 38E19BA955DC939F0FD5EB77C83043AEABB72335.mft (raw, json) Hash identifier: pM2QmAB56sGlwQpDsK5WbiKvFOwmTEUECfjBQEIm0Mg= Subject key identifier: A9:27:9C:03:56:A4:E9:40:C8:7C:77:F9:BD:CA:5F:6A:21:99:64:95 Authority key identifier: 38:E1:9B:A9:55:DC:93:9F:0F:D5:EB:77:C8:30:43:AE:AB:B7:23:35 Certificate issuer: /CN=38E19BA955DC939F0FD5EB77C83043AEABB72335 Certificate serial: 18B43AD0AB30568B881B367C073260042CF7C0CF Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/38E19BA955DC939F0FD5EB77C83043AEABB72335.cer Subject info access: rsync://repo-rpki.idnic.net/repo/205af822-bea9-48f3-aa12-b2737162fc42/0/38E19BA955DC939F0FD5EB77C83043AEABB72335.mft Manifest number: 0182 Signing time: Tue 02 Dec 2025 09:11:10 +0000 Manifest this update: Tue 02 Dec 2025 09:06:10 +0000 Manifest next update: Fri 05 Dec 2025 19:47:10 +0000 Files and hashes: 1: 38E19BA955DC939F0FD5EB77C83043AEABB72335.crl (hash: W8BoemTGfwvi1AaUcw1teAMj67qA8gk6R5RaK3OLrVs=) 2: 3130332e3233362e3134302e302f32342d3234203d3e20313531353138.roa (hash: /7IuJZAwwBq7SuIrNQW6iaVueky5hyLhQUZ7/ozbnk8=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/205af822-bea9-48f3-aa12-b2737162fc42/0/38E19BA955DC939F0FD5EB77C83043AEABB72335.crl rsync://repo-rpki.idnic.net/repo/205af822-bea9-48f3-aa12-b2737162fc42/0/38E19BA955DC939F0FD5EB77C83043AEABB72335.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/38E19BA955DC939F0FD5EB77C83043AEABB72335.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 05 Dec 2025 19:47:10 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 18:b4:3a:d0:ab:30:56:8b:88:1b:36:7c:07:32:60:04:2c:f7:c0:cf Signature Algorithm: sha256WithRSAEncryption Issuer: CN=38E19BA955DC939F0FD5EB77C83043AEABB72335 Validity Not Before: Dec 2 09:06:10 2025 GMT Not After : Dec 5 19:47:10 2025 GMT Subject: CN=A9279C0356A4E940C87C77F9BDCA5F6A21996495 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:98:a7:71:7f:0e:7d:a7:46:32:cc:03:72:c3:93: 54:df:14:c2:b9:b0:52:41:32:b7:a2:a3:ac:13:68: d2:74:84:d7:57:16:48:b1:d9:a6:eb:67:a9:22:cd: a7:63:8c:7f:d5:90:19:24:26:82:bb:7a:a2:d9:3d: 3f:23:8d:35:3c:da:b3:f6:6c:e3:5a:b7:5f:5a:25: 7b:64:13:5f:9a:27:85:2e:e6:06:76:1e:52:cd:e7: 9c:9e:56:8c:46:8e:7a:67:39:85:72:1e:e7:d2:65: eb:dd:41:54:69:a7:14:a5:46:50:3c:ee:c9:b7:bf: 91:89:9a:e5:78:c8:db:fe:ad:67:0e:ce:21:e1:64: 73:ff:b5:a6:e0:1b:43:57:48:cd:c7:69:63:7c:c1: b4:f3:7f:63:60:c3:ba:bc:a7:48:5b:7e:33:87:0a: 1d:db:dd:67:c8:5b:8f:37:ed:fe:b8:ad:0c:9b:f8: d6:af:33:31:cc:c4:a9:dd:a5:b1:49:c8:7f:6d:5c: a2:0a:50:50:84:4f:d1:c1:3f:cd:f0:f3:d2:b1:aa: fe:53:4c:d5:e0:36:d7:0c:66:ab:ec:13:b4:02:d2: 22:a3:1c:ff:ee:cc:56:2d:ce:dc:8c:a9:fc:23:d8: 9d:68:3e:ab:05:d0:e5:12:19:8c:3b:9c:84:11:a0: c9:67 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: A9:27:9C:03:56:A4:E9:40:C8:7C:77:F9:BD:CA:5F:6A:21:99:64:95 X509v3 Authority Key Identifier: keyid:38:E1:9B:A9:55:DC:93:9F:0F:D5:EB:77:C8:30:43:AE:AB:B7:23:35 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/205af822-bea9-48f3-aa12-b2737162fc42/0/38E19BA955DC939F0FD5EB77C83043AEABB72335.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/38E19BA955DC939F0FD5EB77C83043AEABB72335.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/205af822-bea9-48f3-aa12-b2737162fc42/0/38E19BA955DC939F0FD5EB77C83043AEABB72335.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 72:69:6e:fe:f1:5e:2c:34:83:f1:86:79:42:70:32:f8:94:02: 05:56:b1:e7:ea:8b:b8:a8:5d:7f:ba:84:29:fa:41:cf:7c:24: fb:67:01:3c:35:a9:7e:f3:6d:2f:00:51:a6:64:06:f8:d4:d5: 04:c1:f5:a0:ae:0c:f1:12:cd:42:78:9c:09:d0:d7:db:f4:8a: 44:fd:f7:2c:66:1c:da:fa:74:c2:08:f9:8a:33:e5:e3:20:d5: b4:72:28:0e:36:9b:ad:58:b8:55:e4:71:98:bf:48:01:e2:62: 70:82:e7:cf:4b:50:5b:a2:b0:8b:8d:db:69:5a:04:e9:69:62: d6:72:6f:a8:98:f7:05:84:46:d2:aa:f5:cd:17:87:5d:1f:68: 88:d5:bc:b4:95:c4:73:9c:b9:cb:3e:b6:7d:80:4f:de:08:65: d1:93:9d:85:62:8b:27:42:7f:88:a6:36:da:3f:35:a9:c3:36: ca:b2:cb:5c:ef:5d:06:a8:0b:8e:36:1f:54:9a:22:96:28:89: a3:4d:6e:c2:cb:3d:27:46:3d:9b:ec:c5:25:31:11:91:b0:0d: 96:3a:2d:be:14:17:a2:66:65:f3:a9:78:c0:9a:f4:10:d7:67: 0f:a8:bc:5a:b4:d0:d5:6e:b8:1e:69:b2:b1:70:94:c3:9a:c8: b7:71:d2:3f -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUGLQ60KswVouIGzZ8BzJgBCz3wM8wDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMzhFMTlCQTk1NURDOTM5RjBGRDVFQjc3QzgzMDQzQUVB QkI3MjMzNTAeFw0yNTEyMDIwOTA2MTBaFw0yNTEyMDUxOTQ3MTBaMDMxMTAvBgNV BAMTKEE5Mjc5QzAzNTZBNEU5NDBDODdDNzdGOUJEQ0E1RjZBMjE5OTY0OTUwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCYp3F/Dn2nRjLMA3LDk1TfFMK5 sFJBMreio6wTaNJ0hNdXFkix2abrZ6kizadjjH/VkBkkJoK7eqLZPT8jjTU82rP2 bONat19aJXtkE1+aJ4Uu5gZ2HlLN55yeVoxGjnpnOYVyHufSZevdQVRppxSlRlA8 7sm3v5GJmuV4yNv+rWcOziHhZHP/tabgG0NXSM3HaWN8wbTzf2Ngw7q8p0hbfjOH Ch3b3WfIW4837f64rQyb+NavMzHMxKndpbFJyH9tXKIKUFCET9HBP83w89Kxqv5T TNXgNtcMZqvsE7QC0iKjHP/uzFYtztyMqfwj2J1oPqsF0OUSGYw7nIQRoMlnAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUqSecA1ak6UDIfHf5vcpfaiGZZJUwHwYDVR0j BBgwFoAUOOGbqVXck58P1et3yDBDrqu3IzUwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby8y MDVhZjgyMi1iZWE5LTQ4ZjMtYWExMi1iMjczNzE2MmZjNDIvMC8zOEUxOUJBOTU1 REM5MzlGMEZENUVCNzdDODMwNDNBRUFCQjcyMzM1LmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvMzhFMTlCQTk1NURDOTM5RjBGRDVFQjc3QzgzMDQzQUVBQkI3 MjMzNS5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vMjA1YWY4MjItYmVhOS00OGYzLWFh MTItYjI3MzcxNjJmYzQyLzAvMzhFMTlCQTk1NURDOTM5RjBGRDVFQjc3QzgzMDQz QUVBQkI3MjMzNS5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAHJpbv7xXiw0g/GGeUJwMviUAgVWsefqi7io XX+6hCn6Qc98JPtnATw1qX7zbS8AUaZkBvjU1QTB9aCuDPESzUJ4nAnQ19v0ikT9 9yxmHNr6dMII+Yoz5eMg1bRyKA42m61YuFXkcZi/SAHiYnCC589LUFuisIuN22la BOlpYtZyb6iY9wWERtKq9c0Xh10faIjVvLSVxHOcucs+tn2AT94IZdGTnYViiydC f4imNto/NanDNsqyy1zvXQaoC442H1SaIpYoiaNNbsLLPSdGPZvsxSUxEZGwDZY6 Lb4UF6JmZfOpeMCa9BDXZw+ovFq00NVuuB5psrFwlMOayLdx0j8= -----END CERTIFICATE-----Generated at Wed Dec 3 13:56:26 2025 by rpki-client