This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf repo-rpki.idnic.net/repo/4e98b3bd-284d-4a7d-9f27-cb587e9dd841/0/38F85F0AA81AE33827BDF573D6A712452180A036.mft File: 38F85F0AA81AE33827BDF573D6A712452180A036.mft (raw, json) Hash identifier: kor+N8S2p7v8o2kJD7/j2WqyUzjoEhce9Qkm34XSEfo= Subject key identifier: 58:F6:EF:C5:C1:CF:FF:D1:1F:D6:09:E2:83:1A:88:DE:80:EA:36:5A Authority key identifier: 38:F8:5F:0A:A8:1A:E3:38:27:BD:F5:73:D6:A7:12:45:21:80:A0:36 Certificate issuer: /CN=38F85F0AA81AE33827BDF573D6A712452180A036 Certificate serial: 27CA087EF810CDF770B03E47EECBFF84CEB4CBE6 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/38F85F0AA81AE33827BDF573D6A712452180A036.cer Subject info access: rsync://repo-rpki.idnic.net/repo/4e98b3bd-284d-4a7d-9f27-cb587e9dd841/0/38F85F0AA81AE33827BDF573D6A712452180A036.mft Manifest number: 0141 Signing time: Wed 03 Dec 2025 09:32:30 +0000 Manifest this update: Wed 03 Dec 2025 09:27:30 +0000 Manifest next update: Sat 06 Dec 2025 10:34:30 +0000 Files and hashes: 1: 38F85F0AA81AE33827BDF573D6A712452180A036.crl (hash: UofizTFEdwCHmr2/Qzb0k2BGJaaDuOCjaxXI6NNwbT4=) 2: 3130332e38332e3131372e302f32342d3234203d3e20313336303634.roa (hash: cUGjLzsP6pQOAx8Ui8zdXgQSGKzMT6l2dfGBPWcFc1E=) 3: 3130332e38332e3131362e302f32342d3234203d3e20313336303634.roa (hash: E1Zc/UwpXG2NEKaf6TijDRvbu7t9U5+UrKGfBCasGq0=) 4: 3130332e38332e3131382e302f32342d3234203d3e20313336303634.roa (hash: mGyvpkS5yb9JoXFyRjdqknvb4h8/sA38z3cphRqQWHs=) 5: 3130332e38332e3131392e302f32342d3234203d3e20313336303634.roa (hash: ga8wH5rsKuQUVujSS3GZnCocjhl1lP+W7D3mjm+PBiM=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/4e98b3bd-284d-4a7d-9f27-cb587e9dd841/0/38F85F0AA81AE33827BDF573D6A712452180A036.crl rsync://repo-rpki.idnic.net/repo/4e98b3bd-284d-4a7d-9f27-cb587e9dd841/0/38F85F0AA81AE33827BDF573D6A712452180A036.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/38F85F0AA81AE33827BDF573D6A712452180A036.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 06 Dec 2025 10:34:30 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 27:ca:08:7e:f8:10:cd:f7:70:b0:3e:47:ee:cb:ff:84:ce:b4:cb:e6 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=38F85F0AA81AE33827BDF573D6A712452180A036 Validity Not Before: Dec 3 09:27:30 2025 GMT Not After : Dec 6 10:34:30 2025 GMT Subject: CN=58F6EFC5C1CFFFD11FD609E2831A88DE80EA365A Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d4:65:35:65:a2:d0:a6:bc:21:dd:93:9f:af:f0: 63:5d:b2:ab:82:58:69:40:24:26:a7:50:f1:09:17: 32:59:f8:45:56:c2:ac:d5:29:57:15:e7:b0:c7:6f: b4:d6:c0:2e:a1:e3:76:d0:97:67:f9:63:de:0b:b7: 3b:5d:4a:5c:eb:43:99:47:be:26:a9:6a:2c:8d:fd: 47:ed:9c:06:dc:04:da:7e:71:57:c0:61:08:2d:74: 3f:ed:cb:08:86:d3:50:57:c8:03:b4:d7:0f:13:db: d9:a3:02:67:7d:bd:ca:d8:32:95:fe:97:76:61:34: a3:06:68:21:d2:71:f9:a6:8a:6c:40:34:d1:84:2d: 21:7e:10:ae:bb:b7:e0:0c:d6:57:96:43:45:fa:ce: d5:95:c8:ee:dd:9d:f6:c7:f5:c4:5d:b7:65:6c:49: 5d:fe:fa:91:ea:c9:ec:4f:52:49:bf:62:10:11:f4: ca:73:d7:00:f5:33:64:d2:e1:db:e5:a2:d9:66:23: 7f:fc:88:b9:67:43:aa:af:fc:c3:62:3c:c5:79:f3: 9d:74:e2:59:a3:65:f6:1e:67:89:27:7a:6c:d5:b9: b7:13:fd:64:dc:6d:ea:ff:7c:58:ee:f2:af:82:22: a6:47:8e:1d:62:45:ab:7f:b2:0d:ec:9e:c8:aa:7f: 48:ed Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 58:F6:EF:C5:C1:CF:FF:D1:1F:D6:09:E2:83:1A:88:DE:80:EA:36:5A X509v3 Authority Key Identifier: keyid:38:F8:5F:0A:A8:1A:E3:38:27:BD:F5:73:D6:A7:12:45:21:80:A0:36 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/4e98b3bd-284d-4a7d-9f27-cb587e9dd841/0/38F85F0AA81AE33827BDF573D6A712452180A036.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/38F85F0AA81AE33827BDF573D6A712452180A036.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/4e98b3bd-284d-4a7d-9f27-cb587e9dd841/0/38F85F0AA81AE33827BDF573D6A712452180A036.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 28:2d:83:47:73:5e:08:38:70:3c:38:62:91:59:1e:8f:ba:11: 15:18:b0:46:43:7d:3e:e3:7f:71:5c:e7:10:05:7a:54:99:ee: 69:fe:53:4b:44:d9:5c:61:03:bd:4b:7f:18:87:4f:c7:dd:41: aa:58:d8:0c:06:d5:80:ce:2b:f7:18:42:17:48:a1:be:7f:e2: 90:87:cc:78:c8:4c:17:7c:29:da:77:15:70:d8:15:c5:84:04: d9:ca:bf:d7:b3:d9:15:9c:7b:38:ea:4c:c1:80:05:76:7e:ee: 25:2e:b3:9c:cd:32:90:25:48:16:79:92:73:34:6f:7d:7d:ee: 2b:01:75:1f:6a:e3:e0:87:91:12:6a:1b:1b:72:06:9b:3c:5a: 7d:78:92:31:df:9b:85:29:8c:79:e5:c2:0b:d3:24:34:7f:2a: de:53:bb:54:ab:0b:35:3f:c2:a3:45:f2:53:12:dd:02:75:e9: 75:16:87:30:8a:3b:2a:98:5f:fd:98:b9:89:01:5b:2c:91:37: 4e:50:e1:47:d0:b3:96:27:43:b2:7e:50:34:6d:a0:4c:35:1d: 5b:c8:ef:ba:ec:1c:1f:5a:49:61:ea:cd:9f:d2:84:86:91:a3: 53:c9:e8:47:03:6f:e7:84:72:a2:1b:f9:b3:e1:e2:96:6c:c5: 80:7a:27:31 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUJ8oIfvgQzfdwsD5H7sv/hM60y+YwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMzhGODVGMEFBODFBRTMzODI3QkRGNTczRDZBNzEyNDUy MTgwQTAzNjAeFw0yNTEyMDMwOTI3MzBaFw0yNTEyMDYxMDM0MzBaMDMxMTAvBgNV BAMTKDU4RjZFRkM1QzFDRkZGRDExRkQ2MDlFMjgzMUE4OERFODBFQTM2NUEwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDUZTVlotCmvCHdk5+v8GNdsquC WGlAJCanUPEJFzJZ+EVWwqzVKVcV57DHb7TWwC6h43bQl2f5Y94LtztdSlzrQ5lH viapaiyN/UftnAbcBNp+cVfAYQgtdD/tywiG01BXyAO01w8T29mjAmd9vcrYMpX+ l3ZhNKMGaCHScfmmimxANNGELSF+EK67t+AM1leWQ0X6ztWVyO7dnfbH9cRdt2Vs SV3++pHqyexPUkm/YhAR9Mpz1wD1M2TS4dvlotlmI3/8iLlnQ6qv/MNiPMV58510 4lmjZfYeZ4knemzVubcT/WTcber/fFju8q+CIqZHjh1iRat/sg3snsiqf0jtAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUWPbvxcHP/9Ef1gnigxqI3oDqNlowHwYDVR0j BBgwFoAUOPhfCqga4zgnvfVz1qcSRSGAoDYwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby80 ZTk4YjNiZC0yODRkLTRhN2QtOWYyNy1jYjU4N2U5ZGQ4NDEvMC8zOEY4NUYwQUE4 MUFFMzM4MjdCREY1NzNENkE3MTI0NTIxODBBMDM2LmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvMzhGODVGMEFBODFBRTMzODI3QkRGNTczRDZBNzEyNDUyMTgw QTAzNi5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vNGU5OGIzYmQtMjg0ZC00YTdkLTlm MjctY2I1ODdlOWRkODQxLzAvMzhGODVGMEFBODFBRTMzODI3QkRGNTczRDZBNzEy NDUyMTgwQTAzNi5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBACgtg0dzXgg4cDw4YpFZHo+6ERUYsEZDfT7j f3Fc5xAFelSZ7mn+U0tE2VxhA71LfxiHT8fdQapY2AwG1YDOK/cYQhdIob5/4pCH zHjITBd8Kdp3FXDYFcWEBNnKv9ez2RWcezjqTMGABXZ+7iUus5zNMpAlSBZ5knM0 b3197isBdR9q4+CHkRJqGxtyBps8Wn14kjHfm4UpjHnlwgvTJDR/Kt5Tu1SrCzU/ wqNF8lMS3QJ16XUWhzCKOyqYX/2YuYkBWyyRN05Q4UfQs5YnQ7J+UDRtoEw1HVvI 77rsHB9aSWHqzZ/ShIaRo1PJ6EcDb+eEcqIb+bPh4pZsxYB6JzE= -----END CERTIFICATE-----Generated at Wed Dec 3 13:56:59 2025 by rpki-client