This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf repo-rpki.idnic.net/repo/e6929901-a137-4a35-8134-1804f94792df/0/38992A0A64D724D15761F2F9410D85186E2311FE.mft File: 38992A0A64D724D15761F2F9410D85186E2311FE.mft (raw, json) Hash identifier: SQCllIv+DSR36J66TOROI0l6qMh6eZAlENHItH0x8cI= Subject key identifier: EA:21:52:96:63:19:F5:C8:3B:84:E1:0A:29:47:E8:91:7C:77:AA:1A Authority key identifier: 38:99:2A:0A:64:D7:24:D1:57:61:F2:F9:41:0D:85:18:6E:23:11:FE Certificate issuer: /CN=38992A0A64D724D15761F2F9410D85186E2311FE Certificate serial: 4AAD49C88D354ADC24A97838082D4AD175AF0744 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/38992A0A64D724D15761F2F9410D85186E2311FE.cer Subject info access: rsync://repo-rpki.idnic.net/repo/e6929901-a137-4a35-8134-1804f94792df/0/38992A0A64D724D15761F2F9410D85186E2311FE.mft Manifest number: 01D9 Signing time: Wed 03 Dec 2025 02:20:44 +0000 Manifest this update: Wed 03 Dec 2025 02:15:44 +0000 Manifest next update: Sat 06 Dec 2025 06:37:44 +0000 Files and hashes: 1: 3130332e3135332e3138342e302f32342d3234203d3e20313339333932.roa (hash: d6Adr6ZZkYn4Jq27NkWDxIH+Fg4wpxOILm0JtNJ0Cfc=) 2: 38992A0A64D724D15761F2F9410D85186E2311FE.crl (hash: rKG61gey3dC5a4ZFnRaqsGeEqVRUKQSW5gOJR7DH31g=) 3: 3130332e3134332e39352e302f32342d3234203d3e20313339333932.roa (hash: kHcd0PiR+avo06lt/QU/A5Sa1D2RSw2rXV6RMIKGIO8=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/e6929901-a137-4a35-8134-1804f94792df/0/38992A0A64D724D15761F2F9410D85186E2311FE.crl rsync://repo-rpki.idnic.net/repo/e6929901-a137-4a35-8134-1804f94792df/0/38992A0A64D724D15761F2F9410D85186E2311FE.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/38992A0A64D724D15761F2F9410D85186E2311FE.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 06 Dec 2025 06:37:44 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 4a:ad:49:c8:8d:35:4a:dc:24:a9:78:38:08:2d:4a:d1:75:af:07:44 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=38992A0A64D724D15761F2F9410D85186E2311FE Validity Not Before: Dec 3 02:15:44 2025 GMT Not After : Dec 6 06:37:44 2025 GMT Subject: CN=EA2152966319F5C83B84E10A2947E8917C77AA1A Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a0:04:99:21:e8:5f:97:55:4a:0a:bc:11:aa:33: 98:bf:a2:de:0c:50:6f:6f:66:1c:1c:b7:8c:99:d6: 28:40:22:93:75:bd:99:ec:44:a8:b0:53:e2:e2:e4: 8c:b0:97:5e:78:7a:ea:93:91:0c:47:b0:df:51:1e: 7c:17:6b:3a:46:fc:32:b8:08:33:42:f9:9e:66:69: c8:2b:6e:db:35:18:6a:99:86:dd:37:bd:0d:c0:05: a9:2f:cb:8e:1c:8b:39:fe:5d:82:e0:e2:95:74:44: b7:88:d3:5e:f2:ff:5c:24:5b:92:58:a7:68:93:98: 30:f2:19:4c:7c:25:55:8e:72:3e:6d:2b:d9:7b:81: 87:5c:ca:f9:05:54:67:3a:17:81:46:6e:8e:8d:0d: 13:35:e7:ae:d9:a5:37:6f:ec:1a:77:2a:bc:cd:59: 4f:20:66:3e:d5:4c:66:da:f2:34:cf:d3:b0:cc:ef: 95:c9:be:07:34:cf:06:c6:17:76:92:df:63:96:dc: b7:fe:71:46:86:2d:fe:85:b2:fc:82:cd:c3:78:36: 77:d8:aa:fb:95:00:d0:0f:ac:9b:05:03:f6:05:3f: ca:35:27:79:4e:c8:0d:90:76:7e:36:1c:32:a7:36: 14:de:f9:40:8e:7d:4f:19:57:35:a2:2f:37:e9:d9: 0f:4b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: EA:21:52:96:63:19:F5:C8:3B:84:E1:0A:29:47:E8:91:7C:77:AA:1A X509v3 Authority Key Identifier: keyid:38:99:2A:0A:64:D7:24:D1:57:61:F2:F9:41:0D:85:18:6E:23:11:FE X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/e6929901-a137-4a35-8134-1804f94792df/0/38992A0A64D724D15761F2F9410D85186E2311FE.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/38992A0A64D724D15761F2F9410D85186E2311FE.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/e6929901-a137-4a35-8134-1804f94792df/0/38992A0A64D724D15761F2F9410D85186E2311FE.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 4b:56:c6:8c:b7:60:05:28:28:f7:6c:b7:90:8c:62:a7:6f:3c: c4:f8:31:a4:17:c4:08:e8:c6:b5:f5:c1:ed:cf:40:2b:94:41: 7f:14:e3:fd:0e:d2:be:c4:91:a6:2d:43:fe:a5:4f:29:ad:fb: c3:48:83:b5:bb:07:7f:a3:35:83:2e:fd:41:eb:4f:ac:6d:ce: e9:e2:67:7d:e5:11:e2:54:5a:ef:f1:dd:08:5f:7d:b1:10:43: 95:11:e9:a7:90:26:82:c6:25:bb:c3:02:1e:c0:32:47:7c:93: e2:1b:ec:50:9f:17:f0:ca:8a:da:15:52:44:6f:b1:d0:9c:e3: bb:1b:ba:04:7f:01:f5:d0:f8:bc:71:3a:b9:d1:b2:68:a5:57: ac:16:25:81:d2:4d:7e:19:5a:78:e2:50:c4:d2:96:4d:47:21: 76:05:3f:9d:be:8c:e3:ff:15:fd:85:2b:79:f0:cf:14:a7:75: cd:d2:df:26:68:23:f6:f9:c4:f3:af:39:39:fd:4a:34:02:ee: 86:bd:67:90:43:0b:4b:aa:96:cb:6b:9f:7f:6d:69:51:2f:f9: 58:12:26:7b:04:53:59:ec:e5:2f:c2:cf:c1:2b:d7:c7:e1:da: 15:fd:f1:ab:70:6c:3e:a9:d0:ce:cd:5b:27:67:e9:89:0e:36: 64:74:71:71 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUSq1JyI01StwkqXg4CC1K0XWvB0QwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMzg5OTJBMEE2NEQ3MjREMTU3NjFGMkY5NDEwRDg1MTg2 RTIzMTFGRTAeFw0yNTEyMDMwMjE1NDRaFw0yNTEyMDYwNjM3NDRaMDMxMTAvBgNV BAMTKEVBMjE1Mjk2NjMxOUY1QzgzQjg0RTEwQTI5NDdFODkxN0M3N0FBMUEwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCgBJkh6F+XVUoKvBGqM5i/ot4M UG9vZhwct4yZ1ihAIpN1vZnsRKiwU+Li5Iywl154euqTkQxHsN9RHnwXazpG/DK4 CDNC+Z5macgrbts1GGqZht03vQ3ABakvy44cizn+XYLg4pV0RLeI017y/1wkW5JY p2iTmDDyGUx8JVWOcj5tK9l7gYdcyvkFVGc6F4FGbo6NDRM1567ZpTdv7Bp3KrzN WU8gZj7VTGba8jTP07DM75XJvgc0zwbGF3aS32OW3Lf+cUaGLf6FsvyCzcN4NnfY qvuVANAPrJsFA/YFP8o1J3lOyA2Qdn42HDKnNhTe+UCOfU8ZVzWiLzfp2Q9LAgMB AAGjggI8MIICODAdBgNVHQ4EFgQU6iFSlmMZ9cg7hOEKKUfokXx3qhowHwYDVR0j BBgwFoAUOJkqCmTXJNFXYfL5QQ2FGG4jEf4wDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby9l NjkyOTkwMS1hMTM3LTRhMzUtODEzNC0xODA0Zjk0NzkyZGYvMC8zODk5MkEwQTY0 RDcyNEQxNTc2MUYyRjk0MTBEODUxODZFMjMxMUZFLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvMzg5OTJBMEE2NEQ3MjREMTU3NjFGMkY5NDEwRDg1MTg2RTIz MTFGRS5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vZTY5Mjk5MDEtYTEzNy00YTM1LTgx MzQtMTgwNGY5NDc5MmRmLzAvMzg5OTJBMEE2NEQ3MjREMTU3NjFGMkY5NDEwRDg1 MTg2RTIzMTFGRS5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAEtWxoy3YAUoKPdst5CMYqdvPMT4MaQXxAjo xrX1we3PQCuUQX8U4/0O0r7EkaYtQ/6lTymt+8NIg7W7B3+jNYMu/UHrT6xtzuni Z33lEeJUWu/x3QhffbEQQ5UR6aeQJoLGJbvDAh7AMkd8k+Ib7FCfF/DKitoVUkRv sdCc47sbugR/AfXQ+LxxOrnRsmilV6wWJYHSTX4ZWnjiUMTSlk1HIXYFP52+jOP/ Ff2FK3nwzxSndc3S3yZoI/b5xPOvOTn9SjQC7oa9Z5BDC0uqlstrn39taVEv+VgS JnsEU1ns5S/Cz8Er18fh2hX98atwbD6p0M7NWydn6YkONmR0cXE= -----END CERTIFICATE-----Generated at Wed Dec 3 14:14:38 2025 by rpki-client