This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf repo-rpki.idnic.net/repo/205af822-bea9-48f3-aa12-b2737162fc42/0/38E19BA955DC939F0FD5EB77C83043AEABB72335.mft File: 38E19BA955DC939F0FD5EB77C83043AEABB72335.mft (raw, json) Hash identifier: 9U5dnB1oJnW5ptd8s1W6GQDR+djXupSS3S2rfkzvWn8= Subject key identifier: E4:8C:B9:F2:0C:A2:72:8E:CF:CC:74:99:A7:F4:97:4C:10:24:33:D3 Authority key identifier: 38:E1:9B:A9:55:DC:93:9F:0F:D5:EB:77:C8:30:43:AE:AB:B7:23:35 Certificate issuer: /CN=38E19BA955DC939F0FD5EB77C83043AEABB72335 Certificate serial: 4956530C92E7727DFCB368745E9E90976381C0A3 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/38E19BA955DC939F0FD5EB77C83043AEABB72335.cer Subject info access: rsync://repo-rpki.idnic.net/repo/205af822-bea9-48f3-aa12-b2737162fc42/0/38E19BA955DC939F0FD5EB77C83043AEABB72335.mft Manifest number: 0184 Signing time: Sat 06 Dec 2025 23:01:09 +0000 Manifest this update: Sat 06 Dec 2025 22:56:09 +0000 Manifest next update: Wed 10 Dec 2025 02:33:09 +0000 Files and hashes: 1: 3130332e3233362e3134302e302f32342d3234203d3e20313531353138.roa (hash: /7IuJZAwwBq7SuIrNQW6iaVueky5hyLhQUZ7/ozbnk8=) 2: 38E19BA955DC939F0FD5EB77C83043AEABB72335.crl (hash: BhOO+fWeVbfnH2ArWtkce1vxnqL6EPrkO0Je+uI4cv0=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/205af822-bea9-48f3-aa12-b2737162fc42/0/38E19BA955DC939F0FD5EB77C83043AEABB72335.crl rsync://repo-rpki.idnic.net/repo/205af822-bea9-48f3-aa12-b2737162fc42/0/38E19BA955DC939F0FD5EB77C83043AEABB72335.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/38E19BA955DC939F0FD5EB77C83043AEABB72335.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 09 Dec 2025 15:57:52 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 49:56:53:0c:92:e7:72:7d:fc:b3:68:74:5e:9e:90:97:63:81:c0:a3 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=38E19BA955DC939F0FD5EB77C83043AEABB72335 Validity Not Before: Dec 6 22:56:09 2025 GMT Not After : Dec 10 02:33:09 2025 GMT Subject: CN=E48CB9F20CA2728ECFCC7499A7F4974C102433D3 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:f6:e8:12:ee:76:65:2d:ad:d3:56:29:41:bf:34: 99:fa:d2:1d:a1:21:d7:17:34:61:99:3b:ee:ac:cb: 15:84:9c:8d:8e:18:93:3d:33:e7:90:74:f8:11:2a: 84:b3:6f:db:f1:7a:00:1f:67:e9:ca:50:e6:89:9b: b7:3c:9e:1c:32:02:2d:c6:4d:6d:61:8d:12:1f:b7: 17:b9:7c:98:46:00:1a:dc:ec:1d:75:c2:75:39:9d: 76:06:70:d4:26:b4:9d:54:eb:b9:cb:25:16:ff:12: 60:53:23:56:7c:0c:55:1f:c0:76:e1:50:5f:a6:68: f2:82:5f:29:4d:6f:30:7f:98:46:ea:bd:71:0b:62: 40:95:ad:6f:4a:b4:9f:6c:8d:47:af:b0:58:1e:77: dc:97:21:ca:d0:f2:11:3c:b0:5b:c4:f4:c3:0a:bd: 8e:64:e4:d6:04:4c:1b:ca:c6:d0:3e:83:21:04:57: 14:75:79:da:4f:fb:bf:28:d5:6c:75:bd:19:5b:e2: 5f:ca:21:c4:00:96:42:ed:27:8e:35:68:0c:25:8b: da:11:3f:6a:06:d6:cd:ce:f2:8b:84:8c:d7:ae:0e: 6a:b0:5a:8f:02:aa:8a:66:58:0f:52:f8:19:ce:64: a0:50:46:a2:8d:a5:67:d6:33:91:b1:80:2e:ad:af: 62:6f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: E4:8C:B9:F2:0C:A2:72:8E:CF:CC:74:99:A7:F4:97:4C:10:24:33:D3 X509v3 Authority Key Identifier: keyid:38:E1:9B:A9:55:DC:93:9F:0F:D5:EB:77:C8:30:43:AE:AB:B7:23:35 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/205af822-bea9-48f3-aa12-b2737162fc42/0/38E19BA955DC939F0FD5EB77C83043AEABB72335.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/38E19BA955DC939F0FD5EB77C83043AEABB72335.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/205af822-bea9-48f3-aa12-b2737162fc42/0/38E19BA955DC939F0FD5EB77C83043AEABB72335.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption af:6e:83:a6:83:86:45:1c:cc:50:c1:30:65:f6:d1:07:aa:f0: ec:0e:a2:88:0e:40:19:07:da:77:8a:8b:bb:c7:b3:47:7b:13: 4f:98:9a:31:a3:1c:0e:4e:ca:ae:76:e0:e8:46:a9:f0:10:1b: 60:83:03:63:33:98:c3:84:19:ec:69:e3:d7:97:69:fb:30:ec: 72:2d:98:1a:b4:56:ea:a8:48:58:9d:71:e8:d2:96:af:c2:10: 8d:65:b1:83:f3:88:93:fa:4f:62:ed:dd:53:b6:a2:5d:51:41: 57:44:92:77:8e:75:a5:6c:77:2f:22:6b:56:4d:b6:60:b0:42: a0:07:52:63:b3:eb:23:65:a6:e6:c5:1c:5c:29:49:85:0a:92: b4:9f:30:80:37:7f:b0:ce:51:a8:e2:6e:97:5a:5d:b9:e2:f9: 94:28:32:72:b2:c6:a8:1b:d0:35:8b:52:cd:aa:ce:55:b9:e2: 1e:22:95:f9:a5:7f:b4:8a:4d:76:10:79:06:19:b9:63:e2:a5: ab:19:3c:19:58:3e:bd:9d:ec:4e:c4:ff:01:b4:8f:b8:74:1f: 2c:47:5e:31:1f:67:c9:26:f6:30:8e:f6:07:dc:0a:42:e7:d5: fa:61:0a:17:bc:25:2a:82:68:13:c9:ad:3c:35:9e:17:b6:0e: 5b:c6:b0:8a -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUSVZTDJLncn38s2h0Xp6Ql2OBwKMwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMzhFMTlCQTk1NURDOTM5RjBGRDVFQjc3QzgzMDQzQUVB QkI3MjMzNTAeFw0yNTEyMDYyMjU2MDlaFw0yNTEyMTAwMjMzMDlaMDMxMTAvBgNV BAMTKEU0OENCOUYyMENBMjcyOEVDRkNDNzQ5OUE3RjQ5NzRDMTAyNDMzRDMwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQD26BLudmUtrdNWKUG/NJn60h2h IdcXNGGZO+6syxWEnI2OGJM9M+eQdPgRKoSzb9vxegAfZ+nKUOaJm7c8nhwyAi3G TW1hjRIftxe5fJhGABrc7B11wnU5nXYGcNQmtJ1U67nLJRb/EmBTI1Z8DFUfwHbh UF+maPKCXylNbzB/mEbqvXELYkCVrW9KtJ9sjUevsFged9yXIcrQ8hE8sFvE9MMK vY5k5NYETBvKxtA+gyEEVxR1edpP+78o1Wx1vRlb4l/KIcQAlkLtJ441aAwli9oR P2oG1s3O8ouEjNeuDmqwWo8CqopmWA9S+BnOZKBQRqKNpWfWM5GxgC6tr2JvAgMB AAGjggI8MIICODAdBgNVHQ4EFgQU5Iy58gyico7PzHSZp/SXTBAkM9MwHwYDVR0j BBgwFoAUOOGbqVXck58P1et3yDBDrqu3IzUwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby8y MDVhZjgyMi1iZWE5LTQ4ZjMtYWExMi1iMjczNzE2MmZjNDIvMC8zOEUxOUJBOTU1 REM5MzlGMEZENUVCNzdDODMwNDNBRUFCQjcyMzM1LmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvMzhFMTlCQTk1NURDOTM5RjBGRDVFQjc3QzgzMDQzQUVBQkI3 MjMzNS5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vMjA1YWY4MjItYmVhOS00OGYzLWFh MTItYjI3MzcxNjJmYzQyLzAvMzhFMTlCQTk1NURDOTM5RjBGRDVFQjc3QzgzMDQz QUVBQkI3MjMzNS5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAK9ug6aDhkUczFDBMGX20Qeq8OwOoogOQBkH 2neKi7vHs0d7E0+YmjGjHA5Oyq524OhGqfAQG2CDA2MzmMOEGexp49eXafsw7HIt mBq0VuqoSFidcejSlq/CEI1lsYPziJP6T2Lt3VO2ol1RQVdEkneOdaVsdy8ia1ZN tmCwQqAHUmOz6yNlpubFHFwpSYUKkrSfMIA3f7DOUajibpdaXbni+ZQoMnKyxqgb 0DWLUs2qzlW54h4ilfmlf7SKTXYQeQYZuWPipasZPBlYPr2d7E7E/wG0j7h0HyxH XjEfZ8km9jCO9gfcCkLn1fphChe8JSqCaBPJrTw1nhe2DlvGsIo= -----END CERTIFICATE-----Generated at Sun Dec 7 00:50:00 2025 by rpki-client