This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf repo-rpki.idnic.net/repo/3340df13-c4e9-4218-b114-dead1648285c/0/038FC8DB9F4F381D614C3CDA944EDBCE2CEBB6F4.mft File: 038FC8DB9F4F381D614C3CDA944EDBCE2CEBB6F4.mft (raw, json) Hash identifier: T8tDOwi9KjqTVaGS9+H7rmCycQdZFwxtGKGLgx3O7Rs= Subject key identifier: BE:14:65:60:36:FE:C1:22:3F:2F:7C:DB:07:39:C0:15:B1:9C:E9:CC Authority key identifier: 03:8F:C8:DB:9F:4F:38:1D:61:4C:3C:DA:94:4E:DB:CE:2C:EB:B6:F4 Certificate issuer: /CN=038FC8DB9F4F381D614C3CDA944EDBCE2CEBB6F4 Certificate serial: 57C78FD5A1556FE850551F550A481F1AE3F029BF Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/038FC8DB9F4F381D614C3CDA944EDBCE2CEBB6F4.cer Subject info access: rsync://repo-rpki.idnic.net/repo/3340df13-c4e9-4218-b114-dead1648285c/0/038FC8DB9F4F381D614C3CDA944EDBCE2CEBB6F4.mft Manifest number: 01A9 Signing time: Sun 01 Feb 2026 02:10:57 +0000 Manifest this update: Sun 01 Feb 2026 02:05:57 +0000 Manifest next update: Wed 04 Feb 2026 11:23:57 +0000 Files and hashes: 1: 3130332e32302e35302e302f32342d3234203d3e20313530323138.roa (hash: PTsTBXGsNz8ocE/IUTQsqbcgk5S4dmL+3UaKaWrcOZo=) 2: 038FC8DB9F4F381D614C3CDA944EDBCE2CEBB6F4.crl (hash: FVIG+EURv5/0txoV6IJLYzhirv4+QadXbeEmvYXCsVg=) 3: 3130332e3231382e3130342e302f32342d3234203d3e20313530323138.roa (hash: iFZpayjOhiD/nihPfQLVc2Bw/muiBocrb9Vl1jBbDNE=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/3340df13-c4e9-4218-b114-dead1648285c/0/038FC8DB9F4F381D614C3CDA944EDBCE2CEBB6F4.crl rsync://repo-rpki.idnic.net/repo/3340df13-c4e9-4218-b114-dead1648285c/0/038FC8DB9F4F381D614C3CDA944EDBCE2CEBB6F4.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/038FC8DB9F4F381D614C3CDA944EDBCE2CEBB6F4.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 04 Feb 2026 11:23:57 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 57:c7:8f:d5:a1:55:6f:e8:50:55:1f:55:0a:48:1f:1a:e3:f0:29:bf Signature Algorithm: sha256WithRSAEncryption Issuer: CN=038FC8DB9F4F381D614C3CDA944EDBCE2CEBB6F4 Validity Not Before: Feb 1 02:05:57 2026 GMT Not After : Feb 4 11:23:57 2026 GMT Subject: CN=BE14656036FEC1223F2F7CDB0739C015B19CE9CC Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bd:da:0e:1b:cf:08:24:19:5c:98:b1:e2:aa:fa: 68:4e:c9:18:b7:f7:43:e5:7c:47:34:59:b5:42:de: 21:c4:cd:89:24:bf:2f:61:20:58:45:0d:ab:a3:0a: 62:13:0a:2e:21:fb:54:83:d7:dd:99:5f:af:58:d1: 28:fc:88:d5:45:ad:fe:6f:57:06:c8:16:9f:ae:e0: f6:9c:45:d6:62:46:c0:3d:b3:b2:b1:0c:5f:db:58: c5:c6:30:60:3f:6c:e0:d8:1d:42:a2:31:20:dd:fa: c4:34:5a:a8:14:01:9e:87:0c:62:be:78:20:a6:4f: dd:64:ed:01:5a:64:ae:fb:f4:11:f5:82:66:1d:52: 85:68:f1:28:61:45:27:b6:a6:93:21:3d:ac:38:00: f8:f8:6d:9c:d4:89:3f:94:c0:d9:62:60:d5:a5:c5: 1b:2f:b2:50:f3:16:91:f5:16:f1:21:a0:aa:4d:8a: a8:4c:2d:49:ed:24:4b:39:c6:56:04:89:4e:90:25: 76:6d:0f:c5:22:c5:5c:9e:a6:47:fc:a6:4c:bf:f5: 28:63:0d:33:9f:83:d9:29:d1:ef:57:77:ba:65:68: e2:55:65:f4:bf:7e:ac:9c:e1:f5:11:c5:79:d9:5f: 00:a6:3a:b9:c4:66:b6:95:8c:63:80:23:30:ce:a7: 1b:83 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: BE:14:65:60:36:FE:C1:22:3F:2F:7C:DB:07:39:C0:15:B1:9C:E9:CC X509v3 Authority Key Identifier: keyid:03:8F:C8:DB:9F:4F:38:1D:61:4C:3C:DA:94:4E:DB:CE:2C:EB:B6:F4 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/3340df13-c4e9-4218-b114-dead1648285c/0/038FC8DB9F4F381D614C3CDA944EDBCE2CEBB6F4.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/038FC8DB9F4F381D614C3CDA944EDBCE2CEBB6F4.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/3340df13-c4e9-4218-b114-dead1648285c/0/038FC8DB9F4F381D614C3CDA944EDBCE2CEBB6F4.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 4c:a4:53:ab:8a:6a:7d:38:16:58:6c:4c:82:b1:06:e0:6a:33: ee:bc:de:83:ae:e0:0b:b2:6b:a7:5f:c4:28:ff:bd:d2:4d:d0: 1d:27:86:f1:d4:29:00:ee:b5:6c:c0:f6:62:d5:05:23:e6:7f: 72:db:53:37:db:45:3e:9b:a5:f3:09:8f:dd:f6:2a:05:9a:a1: 51:99:90:f8:16:ee:29:73:50:06:00:04:f4:bc:36:b8:c5:3e: a7:77:2f:46:93:ba:2f:07:5a:ff:c8:87:57:c7:07:23:c2:c1: 18:ca:05:ed:5f:ee:74:8d:68:77:b8:b4:b2:47:54:56:8e:1f: 81:eb:9e:50:a5:c3:03:19:43:aa:0d:1f:ba:5f:82:00:75:59: 33:22:77:99:66:a5:9e:78:0a:a9:0a:b6:6c:2b:6c:0d:92:37: a8:bd:44:7b:8b:85:5f:19:ff:f7:e1:3a:49:af:d3:6b:a9:95: 9e:84:2b:1c:81:bd:b1:2c:d2:a8:e4:24:16:ff:9e:f2:f4:b4: 61:26:e8:ae:a4:94:d8:f1:ed:99:90:84:ed:d9:84:34:0b:82: ca:04:2d:83:72:46:ae:4d:44:a9:e5:43:fb:83:f0:3c:b0:2c: ce:75:c1:b1:fd:ba:1c:4d:93:e3:cf:30:57:36:3d:c5:7b:f4: 26:68:ce:a0 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUV8eP1aFVb+hQVR9VCkgfGuPwKb8wDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMDM4RkM4REI5RjRGMzgxRDYxNEMzQ0RBOTQ0RURCQ0Uy Q0VCQjZGNDAeFw0yNjAyMDEwMjA1NTdaFw0yNjAyMDQxMTIzNTdaMDMxMTAvBgNV BAMTKEJFMTQ2NTYwMzZGRUMxMjIzRjJGN0NEQjA3MzlDMDE1QjE5Q0U5Q0MwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC92g4bzwgkGVyYseKq+mhOyRi3 90PlfEc0WbVC3iHEzYkkvy9hIFhFDaujCmITCi4h+1SD192ZX69Y0Sj8iNVFrf5v VwbIFp+u4PacRdZiRsA9s7KxDF/bWMXGMGA/bODYHUKiMSDd+sQ0WqgUAZ6HDGK+ eCCmT91k7QFaZK779BH1gmYdUoVo8ShhRSe2ppMhPaw4APj4bZzUiT+UwNliYNWl xRsvslDzFpH1FvEhoKpNiqhMLUntJEs5xlYEiU6QJXZtD8UixVyepkf8pky/9Shj DTOfg9kp0e9Xd7plaOJVZfS/fqyc4fURxXnZXwCmOrnEZraVjGOAIzDOpxuDAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUvhRlYDb+wSI/L3zbBznAFbGc6cwwHwYDVR0j BBgwFoAUA4/I259POB1hTDzalE7bzizrtvQwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby8z MzQwZGYxMy1jNGU5LTQyMTgtYjExNC1kZWFkMTY0ODI4NWMvMC8wMzhGQzhEQjlG NEYzODFENjE0QzNDREE5NDRFREJDRTJDRUJCNkY0LmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvMDM4RkM4REI5RjRGMzgxRDYxNEMzQ0RBOTQ0RURCQ0UyQ0VC QjZGNC5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vMzM0MGRmMTMtYzRlOS00MjE4LWIx MTQtZGVhZDE2NDgyODVjLzAvMDM4RkM4REI5RjRGMzgxRDYxNEMzQ0RBOTQ0RURC Q0UyQ0VCQjZGNC5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAEykU6uKan04FlhsTIKxBuBqM+683oOu4Auy a6dfxCj/vdJN0B0nhvHUKQDutWzA9mLVBSPmf3LbUzfbRT6bpfMJj932KgWaoVGZ kPgW7ilzUAYABPS8NrjFPqd3L0aTui8HWv/Ih1fHByPCwRjKBe1f7nSNaHe4tLJH VFaOH4HrnlClwwMZQ6oNH7pfggB1WTMid5lmpZ54CqkKtmwrbA2SN6i9RHuLhV8Z //fhOkmv02uplZ6EKxyBvbEs0qjkJBb/nvL0tGEm6K6klNjx7ZmQhO3ZhDQLgsoE LYNyRq5NRKnlQ/uD8DywLM51wbH9uhxNk+PPMFc2PcV79CZozqA= -----END CERTIFICATE-----Generated at Mon Feb 2 09:42:10 2026 by rpki-client