This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf repo-rpki.idnic.net/repo/4e98b3bd-284d-4a7d-9f27-cb587e9dd841/0/38F85F0AA81AE33827BDF573D6A712452180A036.mft File: 38F85F0AA81AE33827BDF573D6A712452180A036.mft (raw, json) Hash identifier: svnA5PYd2FUAfFtbt3QQo74rPmOn4+bvMNJfG7XVyiI= Subject key identifier: 65:F6:04:2B:55:BB:E9:67:4E:93:24:86:F4:C0:BF:DB:05:C4:5F:CC Authority key identifier: 38:F8:5F:0A:A8:1A:E3:38:27:BD:F5:73:D6:A7:12:45:21:80:A0:36 Certificate issuer: /CN=38F85F0AA81AE33827BDF573D6A712452180A036 Certificate serial: 23ACDE13B32081C16B4A7DF4A68FA9575778B483 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/38F85F0AA81AE33827BDF573D6A712452180A036.cer Subject info access: rsync://repo-rpki.idnic.net/repo/4e98b3bd-284d-4a7d-9f27-cb587e9dd841/0/38F85F0AA81AE33827BDF573D6A712452180A036.mft Manifest number: 0158 Signing time: Sat 24 Jan 2026 01:42:33 +0000 Manifest this update: Sat 24 Jan 2026 01:37:33 +0000 Manifest next update: Tue 27 Jan 2026 12:33:33 +0000 Files and hashes: 1: 38F85F0AA81AE33827BDF573D6A712452180A036.crl (hash: CSqb8fEOFtUUQ+MlNGWtcPeJbQPXUsllhcsYLSfe0vM=) 2: 3130332e38332e3131382e302f32342d3234203d3e20313336303634.roa (hash: mGyvpkS5yb9JoXFyRjdqknvb4h8/sA38z3cphRqQWHs=) 3: 3130332e38332e3131362e302f32342d3234203d3e20313336303634.roa (hash: E1Zc/UwpXG2NEKaf6TijDRvbu7t9U5+UrKGfBCasGq0=) 4: 3130332e38332e3131392e302f32342d3234203d3e20313336303634.roa (hash: ga8wH5rsKuQUVujSS3GZnCocjhl1lP+W7D3mjm+PBiM=) 5: 3130332e38332e3131372e302f32342d3234203d3e20313336303634.roa (hash: cUGjLzsP6pQOAx8Ui8zdXgQSGKzMT6l2dfGBPWcFc1E=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/4e98b3bd-284d-4a7d-9f27-cb587e9dd841/0/38F85F0AA81AE33827BDF573D6A712452180A036.crl rsync://repo-rpki.idnic.net/repo/4e98b3bd-284d-4a7d-9f27-cb587e9dd841/0/38F85F0AA81AE33827BDF573D6A712452180A036.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/38F85F0AA81AE33827BDF573D6A712452180A036.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 27 Jan 2026 12:33:33 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 23:ac:de:13:b3:20:81:c1:6b:4a:7d:f4:a6:8f:a9:57:57:78:b4:83 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=38F85F0AA81AE33827BDF573D6A712452180A036 Validity Not Before: Jan 24 01:37:33 2026 GMT Not After : Jan 27 12:33:33 2026 GMT Subject: CN=65F6042B55BBE9674E932486F4C0BFDB05C45FCC Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ab:7d:3a:4c:2f:dc:5b:5a:b9:b9:44:d2:55:da: 69:6e:ef:1d:7e:c6:8f:cf:c0:64:84:88:a6:b0:ed: 86:ed:52:ab:0a:1d:df:b2:ef:2f:87:97:1d:26:26: b9:ed:c2:08:98:45:67:75:8d:bf:cf:b3:1a:c2:17: 8b:90:76:37:cb:6b:99:56:ea:62:2e:58:03:78:8a: fe:5b:0f:88:cf:b0:00:85:59:0c:e0:af:09:4f:f6: 62:ce:eb:a7:51:b4:59:a4:c9:55:f3:04:c8:a3:2d: 73:9b:04:5a:d7:29:a5:7a:eb:62:7e:86:2a:f9:fb: 5e:78:92:56:5f:ee:74:e1:8f:a1:e6:ef:ea:6e:e6: 23:ea:d4:e2:16:8f:81:2d:b0:4c:f6:0f:c1:8d:5b: 70:48:1a:67:ae:f4:3d:be:ea:48:7d:e7:d9:7c:d0: d1:cf:c6:7d:5f:17:37:a4:3f:43:43:be:87:36:ee: 64:9e:90:d2:74:52:3b:db:77:a6:32:7b:29:41:94: a7:21:8a:69:b7:c7:7b:e6:56:53:b7:69:5c:c9:7e: 73:de:fa:1a:7a:ec:2e:ca:98:b4:cd:22:5e:81:73: 89:a6:45:85:d2:f5:a3:67:01:96:96:db:91:77:51: bb:d6:71:99:a0:28:11:5e:cb:ed:3a:e9:af:db:64: 9e:7f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 65:F6:04:2B:55:BB:E9:67:4E:93:24:86:F4:C0:BF:DB:05:C4:5F:CC X509v3 Authority Key Identifier: keyid:38:F8:5F:0A:A8:1A:E3:38:27:BD:F5:73:D6:A7:12:45:21:80:A0:36 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/4e98b3bd-284d-4a7d-9f27-cb587e9dd841/0/38F85F0AA81AE33827BDF573D6A712452180A036.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/38F85F0AA81AE33827BDF573D6A712452180A036.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/4e98b3bd-284d-4a7d-9f27-cb587e9dd841/0/38F85F0AA81AE33827BDF573D6A712452180A036.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 32:97:99:f0:1f:fc:7a:6a:f4:30:c6:55:49:de:4a:74:cb:9d: 3a:65:55:d5:ac:15:ba:5b:05:b4:ce:18:5b:44:99:a3:e4:12: 24:29:e9:6b:9e:14:bf:61:4e:c7:3c:11:fd:9e:fa:d0:f5:7d: 0c:21:f2:24:4b:01:45:bc:c1:a4:cb:b1:85:2a:32:d9:8c:bb: af:2e:8b:8d:b2:fd:4d:49:98:99:fa:ac:86:54:04:fc:88:5d: ac:ab:56:72:5c:cf:22:31:e3:64:4d:a7:bc:d9:b5:09:7e:94: bd:ab:d1:ac:48:65:c3:62:10:17:e4:6b:da:c8:38:e8:ac:f4: 53:a9:b5:36:0f:7b:40:b2:7d:ae:0c:1b:d0:13:ae:a7:10:ae: 39:3b:02:47:bd:c6:57:23:06:b2:25:ce:c4:5d:f9:4f:0f:7d: f8:06:c4:61:b9:13:90:59:10:e2:b6:28:74:01:42:bf:4d:15: 5e:17:6f:cf:38:5d:ce:ec:ee:8d:86:40:33:e3:68:62:ef:5c: 56:fe:66:ce:b3:4f:47:d6:24:10:c5:b1:dc:8e:76:5b:77:80: 0b:8c:d7:33:29:ce:9d:be:97:0c:64:44:32:e3:0a:33:3e:61: 0e:4c:4a:89:93:7a:43:2c:01:6a:42:7f:6f:c6:44:70:f4:d9: fd:35:89:29 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUI6zeE7MggcFrSn30po+pV1d4tIMwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMzhGODVGMEFBODFBRTMzODI3QkRGNTczRDZBNzEyNDUy MTgwQTAzNjAeFw0yNjAxMjQwMTM3MzNaFw0yNjAxMjcxMjMzMzNaMDMxMTAvBgNV BAMTKDY1RjYwNDJCNTVCQkU5Njc0RTkzMjQ4NkY0QzBCRkRCMDVDNDVGQ0MwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCrfTpML9xbWrm5RNJV2mlu7x1+ xo/PwGSEiKaw7YbtUqsKHd+y7y+Hlx0mJrntwgiYRWd1jb/PsxrCF4uQdjfLa5lW 6mIuWAN4iv5bD4jPsACFWQzgrwlP9mLO66dRtFmkyVXzBMijLXObBFrXKaV662J+ hir5+154klZf7nThj6Hm7+pu5iPq1OIWj4EtsEz2D8GNW3BIGmeu9D2+6kh959l8 0NHPxn1fFzekP0NDvoc27mSekNJ0Ujvbd6YyeylBlKchimm3x3vmVlO3aVzJfnPe +hp67C7KmLTNIl6Bc4mmRYXS9aNnAZaW25F3UbvWcZmgKBFey+066a/bZJ5/AgMB AAGjggI8MIICODAdBgNVHQ4EFgQUZfYEK1W76WdOkySG9MC/2wXEX8wwHwYDVR0j BBgwFoAUOPhfCqga4zgnvfVz1qcSRSGAoDYwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby80 ZTk4YjNiZC0yODRkLTRhN2QtOWYyNy1jYjU4N2U5ZGQ4NDEvMC8zOEY4NUYwQUE4 MUFFMzM4MjdCREY1NzNENkE3MTI0NTIxODBBMDM2LmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvMzhGODVGMEFBODFBRTMzODI3QkRGNTczRDZBNzEyNDUyMTgw QTAzNi5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vNGU5OGIzYmQtMjg0ZC00YTdkLTlm MjctY2I1ODdlOWRkODQxLzAvMzhGODVGMEFBODFBRTMzODI3QkRGNTczRDZBNzEy NDUyMTgwQTAzNi5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBADKXmfAf/Hpq9DDGVUneSnTLnTplVdWsFbpb BbTOGFtEmaPkEiQp6WueFL9hTsc8Ef2e+tD1fQwh8iRLAUW8waTLsYUqMtmMu68u i42y/U1JmJn6rIZUBPyIXayrVnJczyIx42RNp7zZtQl+lL2r0axIZcNiEBfka9rI OOis9FOptTYPe0Cyfa4MG9ATrqcQrjk7Ake9xlcjBrIlzsRd+U8PffgGxGG5E5BZ EOK2KHQBQr9NFV4Xb884Xc7s7o2GQDPjaGLvXFb+Zs6zT0fWJBDFsdyOdlt3gAuM 1zMpzp2+lwxkRDLjCjM+YQ5MSomTekMsAWpCf2/GRHD02f01iSk= -----END CERTIFICATE-----Generated at Sun Jan 25 20:33:24 2026 by rpki-client