This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf repo-rpki.idnic.net/repo/928089a7-0a68-4d67-adab-76d7d9271fde/0/38FCEA2A1C8443E590CF5220E7BDA05D722C294D.mft File: 38FCEA2A1C8443E590CF5220E7BDA05D722C294D.mft (raw, json) Hash identifier: c5jl1kl3KB6mykMLWeBiJzBNaB9I7PyHyTxaMg/w4Ds= Subject key identifier: A4:A9:F3:B2:CA:3B:FA:EF:61:C2:B2:13:99:22:46:3B:65:EC:03:47 Authority key identifier: 38:FC:EA:2A:1C:84:43:E5:90:CF:52:20:E7:BD:A0:5D:72:2C:29:4D Certificate issuer: /CN=38FCEA2A1C8443E590CF5220E7BDA05D722C294D Certificate serial: 1E550883E1062AB723950B2F0DD302C6AFFC6821 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/38FCEA2A1C8443E590CF5220E7BDA05D722C294D.cer Subject info access: rsync://repo-rpki.idnic.net/repo/928089a7-0a68-4d67-adab-76d7d9271fde/0/38FCEA2A1C8443E590CF5220E7BDA05D722C294D.mft Manifest number: 01A5 Signing time: Tue 02 Dec 2025 03:02:37 +0000 Manifest this update: Tue 02 Dec 2025 02:57:37 +0000 Manifest next update: Fri 05 Dec 2025 14:52:37 +0000 Files and hashes: 1: 3130332e3130382e3133312e302f32342d3234203d3e203535363835.roa (hash: ZjcfSae5HFvDvqeideaLIabcOtFfSEUtzUNHxjp54qE=) 2: 3130332e3130382e3132382e302f32342d3234203d3e203535363835.roa (hash: XgIzc0IbUT3BWzqPVrjaBsZEWwMYT+TR7O6PzuuQ5e4=) 3: 3130332e3234372e34312e302f32342d3234203d3e203535363835.roa (hash: kBNBu6yeQhVM/8eFQmRNaz5z+ct6Yh5CCwCxI69k5F4=) 4: 3130332e3234372e34332e302f32342d3234203d3e203535363835.roa (hash: pU683GKaElbx02fGnAze4HxdiyKXbycozWmgiE+EA3I=) 5: 3130332e3130382e3132392e302f32342d3234203d3e203535363835.roa (hash: cC0bspkR4GLKr9LN2JfncBaT2JjHlS3Wp16ygdKgQmU=) 6: 3130332e3234372e34322e302f32342d3234203d3e203535363835.roa (hash: ZVjcgaXDQ3D4zS6Ow7WrzE6JOTbumwvNfFh1MEq4Yks=) 7: 3130332e3130382e3133302e302f32342d3234203d3e203535363835.roa (hash: /15wV8i/i7B6FG9n08XOQypn1bQfdzKavjdkmpF3lT8=) 8: 38FCEA2A1C8443E590CF5220E7BDA05D722C294D.crl (hash: IYIXttKa09svL2G6uoJx4rCbCydOfG3OLyqy/NducfA=) 9: 3130332e3234372e34302e302f32322d3234203d3e203535363835.roa (hash: ANeXRudYRQj4brheIa8AOL0aZoGg1PXmE4qO0owNUkM=) 10: 3130332e3234372e34302e302f32342d3234203d3e203535363835.roa (hash: syH1wAS1MJE37vuCgOfSHfZ8nbZq+QzwV/xWmgvAdI0=) 11: 3130332e3130382e3132382e302f32322d3234203d3e203535363835.roa (hash: hPWPE86ID8N/pDjOig5ZnAROXRyFprGMRItIMoptWSY=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/928089a7-0a68-4d67-adab-76d7d9271fde/0/38FCEA2A1C8443E590CF5220E7BDA05D722C294D.crl rsync://repo-rpki.idnic.net/repo/928089a7-0a68-4d67-adab-76d7d9271fde/0/38FCEA2A1C8443E590CF5220E7BDA05D722C294D.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/38FCEA2A1C8443E590CF5220E7BDA05D722C294D.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 05 Dec 2025 14:52:37 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1e:55:08:83:e1:06:2a:b7:23:95:0b:2f:0d:d3:02:c6:af:fc:68:21 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=38FCEA2A1C8443E590CF5220E7BDA05D722C294D Validity Not Before: Dec 2 02:57:37 2025 GMT Not After : Dec 5 14:52:37 2025 GMT Subject: CN=A4A9F3B2CA3BFAEF61C2B2139922463B65EC0347 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b6:98:f4:19:85:c8:33:01:f2:22:2e:d6:f1:97: 8e:de:2d:70:15:aa:c3:d4:3e:e5:f0:e4:ca:dc:06: 9b:96:f5:b1:50:09:d3:26:09:96:4f:f2:03:9c:fa: 7f:23:49:98:6e:29:21:23:11:e4:97:d6:26:8b:46: ce:79:22:d8:f1:ac:61:8e:99:78:7c:50:c0:3f:99: a2:ab:2b:15:31:a3:a4:67:09:c1:a9:fe:53:1f:c8: b9:33:42:6b:6a:18:fc:df:12:38:6e:07:a7:27:13: 44:76:c8:5b:79:e2:04:b2:aa:0a:8d:fb:17:db:2b: d3:db:c1:10:9c:26:40:11:7f:08:df:ef:0c:df:1d: 2e:d9:19:ac:4a:59:04:5a:15:fa:a1:4b:d9:ab:27: 4f:f1:58:52:7c:55:f5:92:67:9f:0f:d0:a5:98:eb: b7:cd:9f:35:06:da:b0:06:47:84:d2:23:2a:6e:86: be:96:cb:bb:a5:e9:10:5d:d0:98:b6:5a:a3:9f:9b: cb:d2:2e:d2:a0:63:24:aa:b1:ec:75:6c:81:eb:fa: f6:58:a4:cc:6d:68:07:4f:1b:24:28:45:3f:77:08: 58:06:35:60:cd:be:78:a7:2f:34:c7:56:01:5d:3a: 70:12:41:33:fe:9d:b1:c8:0f:a5:2f:82:72:8b:e2: 84:2f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: A4:A9:F3:B2:CA:3B:FA:EF:61:C2:B2:13:99:22:46:3B:65:EC:03:47 X509v3 Authority Key Identifier: keyid:38:FC:EA:2A:1C:84:43:E5:90:CF:52:20:E7:BD:A0:5D:72:2C:29:4D X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/928089a7-0a68-4d67-adab-76d7d9271fde/0/38FCEA2A1C8443E590CF5220E7BDA05D722C294D.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/38FCEA2A1C8443E590CF5220E7BDA05D722C294D.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/928089a7-0a68-4d67-adab-76d7d9271fde/0/38FCEA2A1C8443E590CF5220E7BDA05D722C294D.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 74:9f:da:ac:c0:bf:a8:d6:fa:16:92:b9:c7:1c:06:47:7b:4f: ef:54:e3:a3:71:f5:a4:bc:82:d6:c6:02:c5:49:6c:d3:0e:4d: cb:44:7d:9f:af:8d:9b:5b:f1:fb:1a:60:5f:da:0b:93:7d:03: 71:8d:dc:7f:e1:3c:b9:d7:42:95:37:c0:0d:0f:fa:75:61:66: 2a:f9:b9:20:a3:c9:71:7f:c4:43:32:c7:b1:ad:06:92:a2:c9: b9:66:39:0b:c2:9b:c6:f8:0b:c5:9a:dc:c0:14:02:97:f8:c1: 64:6a:2e:4b:16:6a:0f:35:e7:57:0b:2f:74:8e:0a:ff:77:5d: 7b:a4:db:24:57:89:b3:3a:34:26:60:bc:15:33:3a:b1:64:8c: 09:36:52:b4:5b:97:eb:70:1c:b8:2b:d1:b4:2c:4f:8c:a0:4a: 7d:2e:18:03:5a:19:45:6a:3f:9d:fb:fe:d4:23:4c:2a:6e:6b: c2:db:fe:ac:16:18:db:3c:7f:85:79:af:e1:36:52:69:4d:dc: 21:27:37:8e:7d:b9:c3:11:f3:a7:25:a6:fb:42:af:d9:8e:7d: 7a:45:2d:77:8e:20:d9:43:12:29:ef:fe:ad:14:ef:02:b7:66: 75:2d:ff:13:66:18:46:33:58:c1:2d:37:2d:70:41:0e:c0:54: 18:1b:a6:e7 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUHlUIg+EGKrcjlQsvDdMCxq/8aCEwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMzhGQ0VBMkExQzg0NDNFNTkwQ0Y1MjIwRTdCREEwNUQ3 MjJDMjk0RDAeFw0yNTEyMDIwMjU3MzdaFw0yNTEyMDUxNDUyMzdaMDMxMTAvBgNV BAMTKEE0QTlGM0IyQ0EzQkZBRUY2MUMyQjIxMzk5MjI0NjNCNjVFQzAzNDcwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC2mPQZhcgzAfIiLtbxl47eLXAV qsPUPuXw5MrcBpuW9bFQCdMmCZZP8gOc+n8jSZhuKSEjEeSX1iaLRs55ItjxrGGO mXh8UMA/maKrKxUxo6RnCcGp/lMfyLkzQmtqGPzfEjhuB6cnE0R2yFt54gSyqgqN +xfbK9PbwRCcJkARfwjf7wzfHS7ZGaxKWQRaFfqhS9mrJ0/xWFJ8VfWSZ58P0KWY 67fNnzUG2rAGR4TSIypuhr6Wy7ul6RBd0Ji2WqOfm8vSLtKgYySqsex1bIHr+vZY pMxtaAdPGyQoRT93CFgGNWDNvninLzTHVgFdOnASQTP+nbHID6UvgnKL4oQvAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUpKnzsso7+u9hwrITmSJGO2XsA0cwHwYDVR0j BBgwFoAUOPzqKhyEQ+WQz1Ig572gXXIsKU0wDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby85 MjgwODlhNy0wYTY4LTRkNjctYWRhYi03NmQ3ZDkyNzFmZGUvMC8zOEZDRUEyQTFD ODQ0M0U1OTBDRjUyMjBFN0JEQTA1RDcyMkMyOTRELmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvMzhGQ0VBMkExQzg0NDNFNTkwQ0Y1MjIwRTdCREEwNUQ3MjJD Mjk0RC5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vOTI4MDg5YTctMGE2OC00ZDY3LWFk YWItNzZkN2Q5MjcxZmRlLzAvMzhGQ0VBMkExQzg0NDNFNTkwQ0Y1MjIwRTdCREEw NUQ3MjJDMjk0RC5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAHSf2qzAv6jW+haSucccBkd7T+9U46Nx9aS8 gtbGAsVJbNMOTctEfZ+vjZtb8fsaYF/aC5N9A3GN3H/hPLnXQpU3wA0P+nVhZir5 uSCjyXF/xEMyx7GtBpKiyblmOQvCm8b4C8Wa3MAUApf4wWRqLksWag8151cLL3SO Cv93XXuk2yRXibM6NCZgvBUzOrFkjAk2UrRbl+twHLgr0bQsT4ygSn0uGANaGUVq P537/tQjTCpua8Lb/qwWGNs8f4V5r+E2UmlN3CEnN459ucMR86clpvtCr9mOfXpF LXeOINlDEinv/q0U7wK3ZnUt/xNmGEYzWMEtNy1wQQ7AVBgbpuc= -----END CERTIFICATE-----Generated at Wed Dec 3 14:45:57 2025 by rpki-client