This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf repo-rpki.idnic.net/repo/3340df13-c4e9-4218-b114-dead1648285c/0/038FC8DB9F4F381D614C3CDA944EDBCE2CEBB6F4.mft File: 038FC8DB9F4F381D614C3CDA944EDBCE2CEBB6F4.mft (raw, json) Hash identifier: 2BHyMYhEnMJ0bARvNpBbvQVi+jl5EEqFTNoNl5qULvg= Subject key identifier: 30:6E:11:EA:1F:FB:02:08:79:D8:BB:B5:5E:D1:14:2A:E0:CC:39:C7 Authority key identifier: 03:8F:C8:DB:9F:4F:38:1D:61:4C:3C:DA:94:4E:DB:CE:2C:EB:B6:F4 Certificate issuer: /CN=038FC8DB9F4F381D614C3CDA944EDBCE2CEBB6F4 Certificate serial: 0BDA256AEFF11FC085EE21BAAE3F0D1B62B3E524 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/038FC8DB9F4F381D614C3CDA944EDBCE2CEBB6F4.cer Subject info access: rsync://repo-rpki.idnic.net/repo/3340df13-c4e9-4218-b114-dead1648285c/0/038FC8DB9F4F381D614C3CDA944EDBCE2CEBB6F4.mft Manifest number: 01A6 Signing time: Sun 25 Jan 2026 09:30:57 +0000 Manifest this update: Sun 25 Jan 2026 09:25:57 +0000 Manifest next update: Wed 28 Jan 2026 20:34:57 +0000 Files and hashes: 1: 3130332e3231382e3130342e302f32342d3234203d3e20313530323138.roa (hash: iFZpayjOhiD/nihPfQLVc2Bw/muiBocrb9Vl1jBbDNE=) 2: 038FC8DB9F4F381D614C3CDA944EDBCE2CEBB6F4.crl (hash: W/X0kQ5f5BqRYtZL4L2mmVyrUug0l+ceIKNWYXzhUYs=) 3: 3130332e32302e35302e302f32342d3234203d3e20313530323138.roa (hash: PTsTBXGsNz8ocE/IUTQsqbcgk5S4dmL+3UaKaWrcOZo=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/3340df13-c4e9-4218-b114-dead1648285c/0/038FC8DB9F4F381D614C3CDA944EDBCE2CEBB6F4.crl rsync://repo-rpki.idnic.net/repo/3340df13-c4e9-4218-b114-dead1648285c/0/038FC8DB9F4F381D614C3CDA944EDBCE2CEBB6F4.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/038FC8DB9F4F381D614C3CDA944EDBCE2CEBB6F4.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 28 Jan 2026 14:00:57 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 0b:da:25:6a:ef:f1:1f:c0:85:ee:21:ba:ae:3f:0d:1b:62:b3:e5:24 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=038FC8DB9F4F381D614C3CDA944EDBCE2CEBB6F4 Validity Not Before: Jan 25 09:25:57 2026 GMT Not After : Jan 28 20:34:57 2026 GMT Subject: CN=306E11EA1FFB020879D8BBB55ED1142AE0CC39C7 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ed:9c:63:83:76:37:02:37:26:c8:3d:44:8e:be: 50:f3:d6:d3:ec:e4:3c:4e:a5:7e:61:3c:5a:ae:7a: 46:ba:b3:c3:30:ec:de:86:5b:5e:bc:8f:1e:79:d5: 33:8f:98:35:c1:64:ef:ab:bb:8e:3d:f9:28:ee:1a: c7:c6:28:c1:00:1d:bb:49:38:b2:e0:c2:e4:bf:86: 16:1d:85:e4:fd:54:9b:bf:63:e5:e7:16:59:04:cd: d7:67:da:68:00:39:09:a9:6c:1c:d0:c8:97:00:65: 1c:07:7d:b7:ae:6a:3b:25:cd:1f:5c:12:e1:08:33: 00:23:1f:1e:8f:ca:18:47:e8:62:6a:4f:3a:14:53: b9:d9:7c:cd:ff:3e:18:55:25:cb:fb:aa:f5:27:cb: a7:ac:28:ca:cc:d5:e1:0c:2b:55:cf:a8:00:0f:e2: 02:8a:1e:9d:63:f3:5a:83:e9:dc:1b:8e:c8:90:b2: c9:64:1f:9e:98:a6:49:6c:5f:b8:d5:28:e1:e4:be: 4d:c3:d9:eb:3d:3d:87:63:b0:ee:64:81:13:f9:63: 18:f8:03:f8:45:bb:07:5e:e5:ca:01:51:6d:1f:5a: 0e:83:61:8c:6e:83:3e:9d:48:b6:e7:9d:b2:8f:a3: 49:28:4f:5d:c2:b7:53:1b:73:fc:98:19:7c:2e:41: 36:3f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 30:6E:11:EA:1F:FB:02:08:79:D8:BB:B5:5E:D1:14:2A:E0:CC:39:C7 X509v3 Authority Key Identifier: keyid:03:8F:C8:DB:9F:4F:38:1D:61:4C:3C:DA:94:4E:DB:CE:2C:EB:B6:F4 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/3340df13-c4e9-4218-b114-dead1648285c/0/038FC8DB9F4F381D614C3CDA944EDBCE2CEBB6F4.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/038FC8DB9F4F381D614C3CDA944EDBCE2CEBB6F4.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/3340df13-c4e9-4218-b114-dead1648285c/0/038FC8DB9F4F381D614C3CDA944EDBCE2CEBB6F4.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption bb:fb:c0:60:2f:c5:69:01:2d:af:da:f3:dc:80:72:bc:11:82: 13:83:05:df:2b:5f:f4:0f:6e:b4:0c:15:e1:ce:04:ad:ee:6d: 39:74:06:2d:4b:9d:32:ed:29:9a:18:f7:1d:b6:68:2c:ae:75: 7e:a3:9f:f7:1d:0e:e6:5d:a8:ea:c8:f8:02:52:25:10:44:7e: a1:13:89:73:71:95:8b:0b:61:1f:3b:46:fb:b3:ba:1d:30:86: 1d:eb:d9:94:f7:81:f8:f9:1e:8e:66:91:22:c7:d9:71:80:37: f0:d5:24:92:92:8a:07:ab:21:1f:58:8f:1d:b2:a9:45:e1:48: 40:b6:ad:fc:f2:7b:f8:30:bf:78:42:e8:2e:50:76:8b:c6:9b: e1:66:fd:13:8e:52:db:a2:9b:d9:63:b4:f4:8d:a8:d1:34:b2: 7e:55:03:d7:06:5d:cc:a0:52:8c:95:d5:5c:2a:22:63:3b:1e: b1:32:0c:78:52:42:d5:48:f1:d2:cc:03:1f:2f:19:03:b8:48: 81:a5:0b:ee:1e:e6:32:5b:53:ca:a3:40:a8:bb:ed:66:7c:a2: 16:79:47:db:15:d0:b1:6a:ad:fb:0d:71:a0:9b:88:a4:38:56: 2b:91:f4:a5:33:ca:38:65:e6:9a:a8:fb:90:09:68:2a:88:34: 18:50:29:15 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUC9olau/xH8CF7iG6rj8NG2Kz5SQwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMDM4RkM4REI5RjRGMzgxRDYxNEMzQ0RBOTQ0RURCQ0Uy Q0VCQjZGNDAeFw0yNjAxMjUwOTI1NTdaFw0yNjAxMjgyMDM0NTdaMDMxMTAvBgNV BAMTKDMwNkUxMUVBMUZGQjAyMDg3OUQ4QkJCNTVFRDExNDJBRTBDQzM5QzcwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDtnGODdjcCNybIPUSOvlDz1tPs 5DxOpX5hPFqueka6s8Mw7N6GW168jx551TOPmDXBZO+ru449+SjuGsfGKMEAHbtJ OLLgwuS/hhYdheT9VJu/Y+XnFlkEzddn2mgAOQmpbBzQyJcAZRwHfbeuajslzR9c EuEIMwAjHx6PyhhH6GJqTzoUU7nZfM3/PhhVJcv7qvUny6esKMrM1eEMK1XPqAAP 4gKKHp1j81qD6dwbjsiQsslkH56YpklsX7jVKOHkvk3D2es9PYdjsO5kgRP5Yxj4 A/hFuwde5coBUW0fWg6DYYxugz6dSLbnnbKPo0koT13Ct1Mbc/yYGXwuQTY/AgMB AAGjggI8MIICODAdBgNVHQ4EFgQUMG4R6h/7Agh52Lu1XtEUKuDMOccwHwYDVR0j BBgwFoAUA4/I259POB1hTDzalE7bzizrtvQwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby8z MzQwZGYxMy1jNGU5LTQyMTgtYjExNC1kZWFkMTY0ODI4NWMvMC8wMzhGQzhEQjlG NEYzODFENjE0QzNDREE5NDRFREJDRTJDRUJCNkY0LmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvMDM4RkM4REI5RjRGMzgxRDYxNEMzQ0RBOTQ0RURCQ0UyQ0VC QjZGNC5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vMzM0MGRmMTMtYzRlOS00MjE4LWIx MTQtZGVhZDE2NDgyODVjLzAvMDM4RkM4REI5RjRGMzgxRDYxNEMzQ0RBOTQ0RURC Q0UyQ0VCQjZGNC5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBALv7wGAvxWkBLa/a89yAcrwRghODBd8rX/QP brQMFeHOBK3ubTl0Bi1LnTLtKZoY9x22aCyudX6jn/cdDuZdqOrI+AJSJRBEfqET iXNxlYsLYR87Rvuzuh0whh3r2ZT3gfj5Ho5mkSLH2XGAN/DVJJKSigerIR9Yjx2y qUXhSEC2rfzye/gwv3hC6C5QdovGm+Fm/ROOUtuim9ljtPSNqNE0sn5VA9cGXcyg UoyV1VwqImM7HrEyDHhSQtVI8dLMAx8vGQO4SIGlC+4e5jJbU8qjQKi77WZ8ohZ5 R9sV0LFqrfsNcaCbiKQ4ViuR9KUzyjhl5pqo+5AJaCqINBhQKRU= -----END CERTIFICATE-----Generated at Sun Jan 25 18:52:38 2026 by rpki-client