This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf repo-rpki.idnic.net/repo/3340df13-c4e9-4218-b114-dead1648285c/0/038FC8DB9F4F381D614C3CDA944EDBCE2CEBB6F4.mft File: 038FC8DB9F4F381D614C3CDA944EDBCE2CEBB6F4.mft (raw, json) Hash identifier: M9Zu2ai2cQ4lhiAVnLtkgtj8E+d1jX3Smry+IPW7qEI= Subject key identifier: 0C:F7:1E:BD:28:98:18:DF:74:99:91:BF:F6:BE:AB:89:06:62:95:02 Authority key identifier: 03:8F:C8:DB:9F:4F:38:1D:61:4C:3C:DA:94:4E:DB:CE:2C:EB:B6:F4 Certificate issuer: /CN=038FC8DB9F4F381D614C3CDA944EDBCE2CEBB6F4 Certificate serial: 791481DD00DE4B2B830E46A0112FF65A27BE63B5 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/038FC8DB9F4F381D614C3CDA944EDBCE2CEBB6F4.cer Subject info access: rsync://repo-rpki.idnic.net/repo/3340df13-c4e9-4218-b114-dead1648285c/0/038FC8DB9F4F381D614C3CDA944EDBCE2CEBB6F4.mft Manifest number: 018E Signing time: Mon 01 Dec 2025 16:20:56 +0000 Manifest this update: Mon 01 Dec 2025 16:15:56 +0000 Manifest next update: Thu 04 Dec 2025 22:39:56 +0000 Files and hashes: 1: 3130332e3231382e3130342e302f32342d3234203d3e20313530323138.roa (hash: iFZpayjOhiD/nihPfQLVc2Bw/muiBocrb9Vl1jBbDNE=) 2: 3130332e32302e35302e302f32342d3234203d3e20313530323138.roa (hash: PTsTBXGsNz8ocE/IUTQsqbcgk5S4dmL+3UaKaWrcOZo=) 3: 038FC8DB9F4F381D614C3CDA944EDBCE2CEBB6F4.crl (hash: an4uJmiOQIQcpKMDC89a8qKc9exWDz8V6HA360uarlE=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/3340df13-c4e9-4218-b114-dead1648285c/0/038FC8DB9F4F381D614C3CDA944EDBCE2CEBB6F4.crl rsync://repo-rpki.idnic.net/repo/3340df13-c4e9-4218-b114-dead1648285c/0/038FC8DB9F4F381D614C3CDA944EDBCE2CEBB6F4.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/038FC8DB9F4F381D614C3CDA944EDBCE2CEBB6F4.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 04 Dec 2025 22:39:56 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 79:14:81:dd:00:de:4b:2b:83:0e:46:a0:11:2f:f6:5a:27:be:63:b5 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=038FC8DB9F4F381D614C3CDA944EDBCE2CEBB6F4 Validity Not Before: Dec 1 16:15:56 2025 GMT Not After : Dec 4 22:39:56 2025 GMT Subject: CN=0CF71EBD289818DF749991BFF6BEAB8906629502 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e3:07:d0:32:12:41:75:94:26:31:43:52:73:13: 6c:34:60:23:de:11:57:1b:44:0f:05:2e:47:29:f8: 60:f9:53:1a:f8:53:1f:a0:3c:57:62:dd:c8:00:df: c0:cd:1a:14:e6:88:14:15:6e:f2:e9:16:3b:13:68: 07:1e:28:36:5c:24:bf:fd:7e:f0:24:37:57:81:26: e9:4a:c2:40:38:09:c8:8a:14:a6:ad:b5:87:a4:fd: 97:7b:39:42:7b:f9:98:3d:b5:fa:2f:7d:ec:b3:61: 2e:cf:83:09:5b:61:d7:8c:29:a7:71:40:dd:af:49: 56:98:80:4a:0a:ad:1a:66:93:4a:78:e7:76:5b:28: 40:41:2c:08:e0:8b:1f:c3:83:ba:ed:d9:fb:b9:f2: 3f:f2:4c:20:8b:91:61:73:0d:ca:52:1a:89:69:36: 87:59:b8:3c:3d:70:b5:ab:f5:59:c4:ab:d9:79:17: dc:82:23:02:79:93:b6:06:96:bb:9a:68:88:16:c6: 0b:c9:b6:69:1d:f9:4f:0e:c8:7f:0b:14:df:fc:2b: ff:f2:62:83:86:93:51:cd:b3:b0:c0:dd:bf:31:1b: 6c:4f:d9:ea:53:0f:7f:0b:0f:fa:c7:44:44:c5:99: 50:62:05:27:4d:36:98:b7:81:dc:d8:69:32:f8:cd: 91:49 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 0C:F7:1E:BD:28:98:18:DF:74:99:91:BF:F6:BE:AB:89:06:62:95:02 X509v3 Authority Key Identifier: keyid:03:8F:C8:DB:9F:4F:38:1D:61:4C:3C:DA:94:4E:DB:CE:2C:EB:B6:F4 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/3340df13-c4e9-4218-b114-dead1648285c/0/038FC8DB9F4F381D614C3CDA944EDBCE2CEBB6F4.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/038FC8DB9F4F381D614C3CDA944EDBCE2CEBB6F4.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/3340df13-c4e9-4218-b114-dead1648285c/0/038FC8DB9F4F381D614C3CDA944EDBCE2CEBB6F4.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 0b:86:d6:80:8c:7b:b6:c3:1b:73:f7:d5:1c:b1:cb:b2:4d:27: df:4a:f0:80:67:bf:7c:a2:02:9c:09:73:10:4c:48:a2:b0:d7: 83:21:1a:94:0c:23:82:34:98:03:4f:df:e6:95:8d:a4:f3:9e: 11:03:7c:41:5a:0b:d7:31:77:56:f0:8f:ea:22:ff:28:39:97: 04:64:be:80:a5:5b:99:5b:c9:b1:2b:24:08:c5:80:ff:4a:56: f2:f3:2e:a4:16:6a:90:d3:db:f4:db:6f:cb:f8:8e:46:b3:16: 10:5f:3b:55:76:a0:ec:79:d1:80:4e:90:8f:da:53:a2:1c:61: 01:f3:75:5d:01:72:6e:a7:a1:3b:cb:d3:24:1f:c2:31:f1:ce: 01:63:2d:4d:91:0b:c5:43:71:2d:0c:66:1b:10:7a:0d:0d:90: 2c:18:e8:9e:b7:01:0c:7f:a1:20:58:35:14:5a:09:41:6b:01: 63:5b:a9:81:8d:70:f6:1f:2a:7b:39:c6:90:29:4e:e1:70:61: 53:b1:09:1c:b6:f0:be:fe:47:cb:c4:84:f7:ab:d0:ee:61:52: 8a:7b:ca:81:6e:1c:af:be:cc:85:92:01:f1:7b:ae:da:39:53: 04:55:0b:49:41:3a:59:25:5e:b4:d3:c9:91:fa:8f:d5:25:88: 41:f9:9a:14 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUeRSB3QDeSyuDDkagES/2Wie+Y7UwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMDM4RkM4REI5RjRGMzgxRDYxNEMzQ0RBOTQ0RURCQ0Uy Q0VCQjZGNDAeFw0yNTEyMDExNjE1NTZaFw0yNTEyMDQyMjM5NTZaMDMxMTAvBgNV BAMTKDBDRjcxRUJEMjg5ODE4REY3NDk5OTFCRkY2QkVBQjg5MDY2Mjk1MDIwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDjB9AyEkF1lCYxQ1JzE2w0YCPe EVcbRA8FLkcp+GD5Uxr4Ux+gPFdi3cgA38DNGhTmiBQVbvLpFjsTaAceKDZcJL/9 fvAkN1eBJulKwkA4CciKFKattYek/Zd7OUJ7+Zg9tfovfeyzYS7PgwlbYdeMKadx QN2vSVaYgEoKrRpmk0p453ZbKEBBLAjgix/Dg7rt2fu58j/yTCCLkWFzDcpSGolp NodZuDw9cLWr9VnEq9l5F9yCIwJ5k7YGlruaaIgWxgvJtmkd+U8OyH8LFN/8K//y YoOGk1HNs7DA3b8xG2xP2epTD38LD/rHRETFmVBiBSdNNpi3gdzYaTL4zZFJAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUDPcevSiYGN90mZG/9r6riQZilQIwHwYDVR0j BBgwFoAUA4/I259POB1hTDzalE7bzizrtvQwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby8z MzQwZGYxMy1jNGU5LTQyMTgtYjExNC1kZWFkMTY0ODI4NWMvMC8wMzhGQzhEQjlG NEYzODFENjE0QzNDREE5NDRFREJDRTJDRUJCNkY0LmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvMDM4RkM4REI5RjRGMzgxRDYxNEMzQ0RBOTQ0RURCQ0UyQ0VC QjZGNC5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vMzM0MGRmMTMtYzRlOS00MjE4LWIx MTQtZGVhZDE2NDgyODVjLzAvMDM4RkM4REI5RjRGMzgxRDYxNEMzQ0RBOTQ0RURC Q0UyQ0VCQjZGNC5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAAuG1oCMe7bDG3P31Ryxy7JNJ99K8IBnv3yi ApwJcxBMSKKw14MhGpQMI4I0mANP3+aVjaTznhEDfEFaC9cxd1bwj+oi/yg5lwRk voClW5lbybErJAjFgP9KVvLzLqQWapDT2/Tbb8v4jkazFhBfO1V2oOx50YBOkI/a U6IcYQHzdV0Bcm6noTvL0yQfwjHxzgFjLU2RC8VDcS0MZhsQeg0NkCwY6J63AQx/ oSBYNRRaCUFrAWNbqYGNcPYfKns5xpApTuFwYVOxCRy28L7+R8vEhPer0O5hUop7 yoFuHK++zIWSAfF7rto5UwRVC0lBOlklXrTTyZH6j9UliEH5mhQ= -----END CERTIFICATE-----Generated at Wed Dec 3 14:44:30 2025 by rpki-client