This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

$ rpki-client -vvf repo-rpki.idnic.net/repo/205af822-bea9-48f3-aa12-b2737162fc42/0/38E19BA955DC939F0FD5EB77C83043AEABB72335.mft
File: 38E19BA955DC939F0FD5EB77C83043AEABB72335.mft (raw, json)
Hash identifier: CsFgEg2y70dpWQxhD3vOmzibipLoYiJ4NfEf0vxKK7A=
Subject key identifier: 01:40:17:34:ED:A9:A1:92:82:EA:8A:E2:F8:72:B2:12:10:DE:C2:95
Authority key identifier: 38:E1:9B:A9:55:DC:93:9F:0F:D5:EB:77:C8:30:43:AE:AB:B7:23:35
Certificate issuer: /CN=38E19BA955DC939F0FD5EB77C83043AEABB72335
Certificate serial: 185E8C369306111C4FB7191C70C45C93DB89ED60
Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/38E19BA955DC939F0FD5EB77C83043AEABB72335.cer
Subject info access: rsync://repo-rpki.idnic.net/repo/205af822-bea9-48f3-aa12-b2737162fc42/0/38E19BA955DC939F0FD5EB77C83043AEABB72335.mft
Manifest number: 0199
Signing time: Sat 24 Jan 2026 10:21:09 +0000
Manifest this update: Sat 24 Jan 2026 10:16:09 +0000
Manifest next update: Tue 27 Jan 2026 12:14:09 +0000
Files and hashes: 1: 3130332e3233362e3134302e302f32342d3234203d3e20313531353138.roa (hash: /7IuJZAwwBq7SuIrNQW6iaVueky5hyLhQUZ7/ozbnk8=)
2: 38E19BA955DC939F0FD5EB77C83043AEABB72335.crl (hash: 1ZXYdEW7dLxbUPWN7qfYtTZKW5g+5rCB1vXYnZLR3bc=)
Validation: OK
Signature path: rsync://repo-rpki.idnic.net/repo/205af822-bea9-48f3-aa12-b2737162fc42/0/38E19BA955DC939F0FD5EB77C83043AEABB72335.crl
rsync://repo-rpki.idnic.net/repo/205af822-bea9-48f3-aa12-b2737162fc42/0/38E19BA955DC939F0FD5EB77C83043AEABB72335.mft
rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/38E19BA955DC939F0FD5EB77C83043AEABB72335.cer
rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl
rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Tue 27 Jan 2026 12:14:09 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
18:5e:8c:36:93:06:11:1c:4f:b7:19:1c:70:c4:5c:93:db:89:ed:60
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=38E19BA955DC939F0FD5EB77C83043AEABB72335
Validity
Not Before: Jan 24 10:16:09 2026 GMT
Not After : Jan 27 12:14:09 2026 GMT
Subject: CN=01401734EDA9A19282EA8AE2F872B21210DEC295
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b7:7a:44:06:89:76:1f:1d:60:85:7b:fd:c6:30:
17:a0:8e:4e:f7:d6:b1:91:cd:f2:e7:70:bd:bd:00:
19:40:3c:84:d8:47:47:95:9f:9c:ee:a4:07:20:b9:
9f:79:a1:6e:21:b7:b0:ff:e5:4e:2e:07:b2:f4:be:
68:df:89:c3:53:94:08:49:ce:d1:b3:60:fb:43:7f:
ed:04:0e:63:d6:3e:79:1f:62:0c:03:59:33:ef:51:
4d:58:9c:7a:a8:b2:72:21:72:47:85:36:7d:7e:05:
4d:3a:e9:b1:6b:80:2a:66:b4:1d:de:70:3c:c4:2c:
f7:b9:42:8b:33:cc:12:2c:59:ab:1f:87:e5:55:ba:
15:0d:b4:87:f3:9d:82:df:c1:7e:38:64:f4:36:b8:
69:de:75:cf:eb:f8:7b:9a:1d:54:02:06:60:d7:94:
8f:dc:c8:98:10:a7:f8:c1:cc:00:93:ca:b0:27:aa:
79:67:36:9d:f1:c5:3d:8f:1b:52:67:00:ab:84:c3:
68:8b:50:b1:f6:74:44:b5:b3:19:b0:63:3e:13:82:
f3:7b:df:8f:12:35:e8:ff:3d:80:d4:e7:27:74:fa:
c9:fa:7b:e7:6f:e1:e6:6a:24:ed:2b:9d:89:0e:f5:
01:09:08:42:96:2d:c0:fc:79:b0:71:85:a4:1e:c7:
a7:7b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
01:40:17:34:ED:A9:A1:92:82:EA:8A:E2:F8:72:B2:12:10:DE:C2:95
X509v3 Authority Key Identifier:
keyid:38:E1:9B:A9:55:DC:93:9F:0F:D5:EB:77:C8:30:43:AE:AB:B7:23:35
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://repo-rpki.idnic.net/repo/205af822-bea9-48f3-aa12-b2737162fc42/0/38E19BA955DC939F0FD5EB77C83043AEABB72335.crl
Authority Information Access:
CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/38E19BA955DC939F0FD5EB77C83043AEABB72335.cer
Subject Information Access:
Signed Object - URI:rsync://repo-rpki.idnic.net/repo/205af822-bea9-48f3-aa12-b2737162fc42/0/38E19BA955DC939F0FD5EB77C83043AEABB72335.mft
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
16:d9:13:00:16:44:14:3b:6b:4e:a1:ef:56:ef:bc:d0:f0:5f:
12:4d:2c:4d:93:6c:0c:c0:81:09:51:78:c2:aa:9f:de:21:41:
ea:0f:0c:5b:c5:0a:c1:dd:52:0e:c5:a4:15:43:f3:28:a8:de:
a2:62:58:79:df:6a:8e:cd:02:65:ba:c2:56:0b:85:76:b5:13:
6a:35:97:5f:ab:f9:9c:96:61:15:c1:d6:1e:5c:65:78:8d:24:
ac:21:3e:f2:f3:8a:3e:81:92:bb:49:bb:47:88:22:50:58:74:
9e:ef:f5:f1:db:ea:5d:8e:98:87:d5:12:85:1e:0a:4f:aa:c8:
13:ef:23:9e:db:f4:40:52:e3:99:9a:7a:d2:00:e5:9c:c4:cc:
78:f1:59:93:d1:45:74:d8:42:10:24:16:0f:fe:30:dc:03:2e:
73:e7:43:fc:f8:a9:31:9b:b3:75:c0:62:d9:40:4e:b9:d7:8b:
5d:e6:57:50:62:5e:17:3e:d5:2d:c2:d5:c0:8d:be:1f:56:dc:
fd:7a:4b:0f:1f:9e:c8:36:b1:a1:9e:6c:28:61:fd:85:25:41:
8b:f6:35:8b:81:bb:44:8d:78:b4:a1:7f:7f:7b:a4:f4:b7:59:
13:c4:e1:19:f2:7d:39:2c:32:04:ca:4d:14:48:a5:9f:5a:1c:
c1:6d:b4:43
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jan 26 01:14:20 2026 by rpki-client