This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf repo-rpki.idnic.net/repo/a6dad8cb-a537-4c50-af6a-aaba5f1e7644/0/38A92419EE1289455FCB1B71F9420F05CA334C15.mft File: 38A92419EE1289455FCB1B71F9420F05CA334C15.mft (raw, json) Hash identifier: TbKfu3+npO81iH4on9FO2PbdGal9QzGix2Tt3Y4WKSY= Subject key identifier: 87:71:27:9B:EA:FF:20:C8:7E:53:7B:38:AD:88:8E:AA:52:E5:E3:CC Authority key identifier: 38:A9:24:19:EE:12:89:45:5F:CB:1B:71:F9:42:0F:05:CA:33:4C:15 Certificate issuer: /CN=38A92419EE1289455FCB1B71F9420F05CA334C15 Certificate serial: 49983DFF80D2D66552ED02607255A84AC219AF24 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/38A92419EE1289455FCB1B71F9420F05CA334C15.cer Subject info access: rsync://repo-rpki.idnic.net/repo/a6dad8cb-a537-4c50-af6a-aaba5f1e7644/0/38A92419EE1289455FCB1B71F9420F05CA334C15.mft Manifest number: 0234 Signing time: Thu 18 Dec 2025 21:50:01 +0000 Manifest this update: Thu 18 Dec 2025 21:45:01 +0000 Manifest next update: Mon 22 Dec 2025 05:15:01 +0000 Files and hashes: 1: 3130332e3139302e312e302f32342d3234203d3e20313439383930.roa (hash: /4y0i2UIqC94Q9jjKOVg3BHE03KUaQHXxOynS0oUshc=) 2: 38A92419EE1289455FCB1B71F9420F05CA334C15.crl (hash: daqBpRnFuV5Tt+iOAvIFfVlj9QnXEnkInGwqvaMsAa8=) 3: 3130332e3139302e302e302f32342d3234203d3e20313439383930.roa (hash: FHb4F7lq3vcwTbWDvi1X4f5+wy1PMf7axFDD1qokmPs=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/a6dad8cb-a537-4c50-af6a-aaba5f1e7644/0/38A92419EE1289455FCB1B71F9420F05CA334C15.crl rsync://repo-rpki.idnic.net/repo/a6dad8cb-a537-4c50-af6a-aaba5f1e7644/0/38A92419EE1289455FCB1B71F9420F05CA334C15.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/38A92419EE1289455FCB1B71F9420F05CA334C15.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 22 Dec 2025 03:43:10 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 49:98:3d:ff:80:d2:d6:65:52:ed:02:60:72:55:a8:4a:c2:19:af:24 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=38A92419EE1289455FCB1B71F9420F05CA334C15 Validity Not Before: Dec 18 21:45:01 2025 GMT Not After : Dec 22 05:15:01 2025 GMT Subject: CN=8771279BEAFF20C87E537B38AD888EAA52E5E3CC Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ba:ae:0e:14:15:e9:58:72:44:d4:95:1b:12:72: 50:99:f7:09:5e:5c:b9:79:0b:91:9a:70:15:aa:c7: ee:fb:f9:d4:1d:d8:47:16:71:47:33:f0:d8:53:2d: bb:27:c9:2e:e0:af:bf:9f:3e:1b:ed:9b:2d:88:02: 1c:0a:f8:bd:ed:25:02:6c:ad:83:51:22:e5:b8:7f: 01:33:c7:4b:3a:49:88:04:b3:d6:81:cb:97:87:0a: a4:a9:50:93:3d:f9:6c:46:e7:a8:74:45:ee:9c:ee: b7:7b:31:26:1c:74:b9:41:1a:d8:07:06:01:09:d8: 38:fe:db:dd:9a:80:9a:7c:ea:67:96:b8:13:53:65: c3:02:ac:ed:2d:f4:7b:6e:3e:e7:a6:3a:8d:ca:85: a1:d2:0c:8c:b4:cb:a2:be:89:db:36:b3:e4:89:0d: 31:e7:96:2b:f8:4f:9a:ff:64:ac:ff:a1:5d:5d:2d: 8b:4a:2f:78:00:17:7a:c2:4c:5f:07:18:1b:17:7b: 0f:4c:e9:90:be:01:6f:26:d7:2c:6c:e2:06:cc:70: 5a:e8:6c:b4:25:86:8e:df:38:8b:54:ca:4a:da:50: f0:ab:2c:e2:67:19:40:7f:07:8b:69:6f:da:af:bf: 6b:cc:67:bb:74:71:80:b7:57:38:a4:cb:a3:3d:65: fc:5d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 87:71:27:9B:EA:FF:20:C8:7E:53:7B:38:AD:88:8E:AA:52:E5:E3:CC X509v3 Authority Key Identifier: keyid:38:A9:24:19:EE:12:89:45:5F:CB:1B:71:F9:42:0F:05:CA:33:4C:15 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/a6dad8cb-a537-4c50-af6a-aaba5f1e7644/0/38A92419EE1289455FCB1B71F9420F05CA334C15.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/38A92419EE1289455FCB1B71F9420F05CA334C15.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/a6dad8cb-a537-4c50-af6a-aaba5f1e7644/0/38A92419EE1289455FCB1B71F9420F05CA334C15.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption a4:fe:e5:6c:fa:46:0c:23:bb:ea:e1:b4:46:3e:c3:87:af:dc: 77:4c:79:3d:f1:bc:81:a7:2d:04:fc:56:a4:48:e2:2d:9b:7f: af:ed:1e:db:87:30:9f:20:16:42:0a:60:09:2b:fb:ce:f7:32: c5:d8:a6:91:f7:09:b3:ac:39:4a:d7:59:64:66:a9:2b:9f:1b: 19:12:a3:2e:a3:40:d0:b5:6e:cc:85:b2:10:aa:41:36:81:4a: 29:7b:10:c4:59:64:98:8f:e0:d9:8c:d0:a2:da:5e:8a:61:e6: 43:d1:d5:14:e8:fd:7d:16:5d:b7:df:c6:f3:77:e7:24:9c:06: 59:f2:74:19:ac:81:cb:76:7f:ab:f4:54:f8:77:12:fe:21:fd: 08:a6:00:21:a4:4e:96:25:de:e5:b3:ec:fd:87:fb:31:42:e9: 20:19:2b:ec:da:79:84:b0:cb:bd:e3:58:e8:aa:e0:2a:9c:34: f9:51:dc:04:db:23:b8:d5:bc:07:d1:3b:a2:d5:82:bf:fc:9a: c6:9b:b1:d2:05:7d:73:80:b8:95:ef:66:1e:91:01:7a:75:a2: c8:6b:cf:4e:1a:69:a1:45:fe:f4:52:80:02:6b:6b:b7:32:d4: 02:02:f7:b2:87:49:50:3c:5e:ad:51:63:a9:b8:6a:19:6d:43: a5:15:0e:b3 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUSZg9/4DS1mVS7QJgclWoSsIZryQwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMzhBOTI0MTlFRTEyODk0NTVGQ0IxQjcxRjk0MjBGMDVD QTMzNEMxNTAeFw0yNTEyMTgyMTQ1MDFaFw0yNTEyMjIwNTE1MDFaMDMxMTAvBgNV BAMTKDg3NzEyNzlCRUFGRjIwQzg3RTUzN0IzOEFEODg4RUFBNTJFNUUzQ0MwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC6rg4UFelYckTUlRsSclCZ9wle XLl5C5GacBWqx+77+dQd2EcWcUcz8NhTLbsnyS7gr7+fPhvtmy2IAhwK+L3tJQJs rYNRIuW4fwEzx0s6SYgEs9aBy5eHCqSpUJM9+WxG56h0Re6c7rd7MSYcdLlBGtgH BgEJ2Dj+292agJp86meWuBNTZcMCrO0t9HtuPuemOo3KhaHSDIy0y6K+ids2s+SJ DTHnliv4T5r/ZKz/oV1dLYtKL3gAF3rCTF8HGBsXew9M6ZC+AW8m1yxs4gbMcFro bLQlho7fOItUykraUPCrLOJnGUB/B4tpb9qvv2vMZ7t0cYC3Vziky6M9ZfxdAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUh3Enm+r/IMh+U3s4rYiOqlLl48wwHwYDVR0j BBgwFoAUOKkkGe4SiUVfyxtx+UIPBcozTBUwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby9h NmRhZDhjYi1hNTM3LTRjNTAtYWY2YS1hYWJhNWYxZTc2NDQvMC8zOEE5MjQxOUVF MTI4OTQ1NUZDQjFCNzFGOTQyMEYwNUNBMzM0QzE1LmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvMzhBOTI0MTlFRTEyODk0NTVGQ0IxQjcxRjk0MjBGMDVDQTMz NEMxNS5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vYTZkYWQ4Y2ItYTUzNy00YzUwLWFm NmEtYWFiYTVmMWU3NjQ0LzAvMzhBOTI0MTlFRTEyODk0NTVGQ0IxQjcxRjk0MjBG MDVDQTMzNEMxNS5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAKT+5Wz6Rgwju+rhtEY+w4ev3HdMeT3xvIGn LQT8VqRI4i2bf6/tHtuHMJ8gFkIKYAkr+873MsXYppH3CbOsOUrXWWRmqSufGxkS oy6jQNC1bsyFshCqQTaBSil7EMRZZJiP4NmM0KLaXoph5kPR1RTo/X0WXbffxvN3 5yScBlnydBmsgct2f6v0VPh3Ev4h/QimACGkTpYl3uWz7P2H+zFC6SAZK+zaeYSw y73jWOiq4CqcNPlR3ATbI7jVvAfRO6LVgr/8msabsdIFfXOAuJXvZh6RAXp1oshr z04aaaFF/vRSgAJra7cy1AIC97KHSVA8Xq1RY6m4ahltQ6UVDrM= -----END CERTIFICATE-----Generated at Fri Dec 19 12:56:35 2025 by rpki-client