This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf repo-rpki.idnic.net/repo/4e98b3bd-284d-4a7d-9f27-cb587e9dd841/0/38F85F0AA81AE33827BDF573D6A712452180A036.mft File: 38F85F0AA81AE33827BDF573D6A712452180A036.mft (raw, json) Hash identifier: aqfHljMpxjDhzl7YuH5e3mjYF5E+UVV6b6c2T8Ec7Dg= Subject key identifier: 7A:88:9A:C6:71:07:BA:77:81:0F:AF:56:E3:FF:1E:FF:8C:6A:7E:F3 Authority key identifier: 38:F8:5F:0A:A8:1A:E3:38:27:BD:F5:73:D6:A7:12:45:21:80:A0:36 Certificate issuer: /CN=38F85F0AA81AE33827BDF573D6A712452180A036 Certificate serial: 5A8890294A2FBA89C100908A417092CDA3DC4B82 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/38F85F0AA81AE33827BDF573D6A712452180A036.cer Subject info access: rsync://repo-rpki.idnic.net/repo/4e98b3bd-284d-4a7d-9f27-cb587e9dd841/0/38F85F0AA81AE33827BDF573D6A712452180A036.mft Manifest number: 0142 Signing time: Fri 05 Dec 2025 10:42:29 +0000 Manifest this update: Fri 05 Dec 2025 10:37:29 +0000 Manifest next update: Mon 08 Dec 2025 13:12:29 +0000 Files and hashes: 1: 3130332e38332e3131382e302f32342d3234203d3e20313336303634.roa (hash: mGyvpkS5yb9JoXFyRjdqknvb4h8/sA38z3cphRqQWHs=) 2: 3130332e38332e3131372e302f32342d3234203d3e20313336303634.roa (hash: cUGjLzsP6pQOAx8Ui8zdXgQSGKzMT6l2dfGBPWcFc1E=) 3: 38F85F0AA81AE33827BDF573D6A712452180A036.crl (hash: eTwStSlG5u0MX5AtyilEyunlQTgDje6yG/nTFpCx1l4=) 4: 3130332e38332e3131362e302f32342d3234203d3e20313336303634.roa (hash: E1Zc/UwpXG2NEKaf6TijDRvbu7t9U5+UrKGfBCasGq0=) 5: 3130332e38332e3131392e302f32342d3234203d3e20313336303634.roa (hash: ga8wH5rsKuQUVujSS3GZnCocjhl1lP+W7D3mjm+PBiM=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/4e98b3bd-284d-4a7d-9f27-cb587e9dd841/0/38F85F0AA81AE33827BDF573D6A712452180A036.crl rsync://repo-rpki.idnic.net/repo/4e98b3bd-284d-4a7d-9f27-cb587e9dd841/0/38F85F0AA81AE33827BDF573D6A712452180A036.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/38F85F0AA81AE33827BDF573D6A712452180A036.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 08 Dec 2025 13:12:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 5a:88:90:29:4a:2f:ba:89:c1:00:90:8a:41:70:92:cd:a3:dc:4b:82 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=38F85F0AA81AE33827BDF573D6A712452180A036 Validity Not Before: Dec 5 10:37:29 2025 GMT Not After : Dec 8 13:12:29 2025 GMT Subject: CN=7A889AC67107BA77810FAF56E3FF1EFF8C6A7EF3 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c1:13:c9:99:d0:51:f5:96:31:21:63:77:e4:2f: a9:de:97:fb:f5:f9:ad:29:3c:7f:64:19:99:3b:64: aa:97:72:5d:3f:7e:eb:dc:09:49:e0:b5:eb:b6:c3: 1c:68:5e:2e:a0:8e:3e:9f:99:9e:97:e3:33:bc:2a: 58:bf:c9:8c:82:7c:55:20:65:e1:78:06:92:69:fd: 97:54:0c:57:11:62:a1:eb:eb:f2:ce:f3:93:1d:e1: d6:e9:4a:d2:56:0c:6f:1e:8b:d4:e4:8d:4a:5c:5c: 64:92:9f:04:67:54:fe:6d:26:6f:c5:64:b4:42:c6: ab:ce:a2:96:f4:9e:6f:e1:c8:6e:6b:45:9e:2a:55: c6:6f:83:4b:ed:f2:70:0b:2d:58:40:5a:91:4a:ce: 58:95:51:02:84:54:a4:d3:d4:6b:b1:07:3a:7e:be: 80:59:dd:94:42:1b:05:52:bc:5c:ce:41:85:5c:2e: 24:f7:84:87:0f:19:3c:3b:8a:52:42:1b:13:1b:41: 54:85:dd:56:4b:d8:aa:f9:b7:7c:7c:57:65:b7:96: 02:a5:19:a1:bd:5d:6d:7a:0b:47:bc:8c:2f:a3:1f: b5:a7:84:57:fc:69:52:9c:1f:0e:c6:cf:68:09:a0: 96:77:fd:55:9f:e9:a1:96:e3:e1:a4:1a:e5:7d:c5: 17:89 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 7A:88:9A:C6:71:07:BA:77:81:0F:AF:56:E3:FF:1E:FF:8C:6A:7E:F3 X509v3 Authority Key Identifier: keyid:38:F8:5F:0A:A8:1A:E3:38:27:BD:F5:73:D6:A7:12:45:21:80:A0:36 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/4e98b3bd-284d-4a7d-9f27-cb587e9dd841/0/38F85F0AA81AE33827BDF573D6A712452180A036.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/38F85F0AA81AE33827BDF573D6A712452180A036.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/4e98b3bd-284d-4a7d-9f27-cb587e9dd841/0/38F85F0AA81AE33827BDF573D6A712452180A036.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 8b:2c:1b:60:e7:6e:71:71:87:d6:49:6e:e0:3c:c3:09:33:df: 84:9a:28:ba:53:9a:93:d0:1f:e6:03:82:cf:b6:70:94:ab:6d: 25:68:4e:64:5d:88:69:10:7f:b4:58:1f:9a:61:0c:4a:d1:20: 82:9b:97:a6:b1:11:94:fd:32:61:11:5e:3b:52:a8:7d:b3:3e: fc:50:e4:b9:cb:5e:8f:02:6a:5d:75:71:b5:b5:b8:13:d0:e4: 86:9a:a6:3a:52:bc:d6:8d:c7:d5:03:09:55:81:d2:65:62:78: a0:54:70:e6:83:ce:78:9b:c6:8a:bc:17:ed:ed:ad:3b:06:b3: 9e:4f:d8:72:ee:10:37:8d:67:73:3a:e6:af:35:78:9c:1a:6d: 74:d0:cf:54:10:b1:00:90:74:5c:e9:42:2e:ee:dc:06:a3:fa: 99:ba:b9:11:8f:a3:71:ce:9f:fc:d0:f0:4c:ce:f4:b5:3a:3a: 5d:cf:c9:9a:08:77:ff:5e:af:de:17:fa:b6:35:35:1f:c9:95: 5d:60:e5:45:c8:bc:b0:e1:6a:a7:d7:ac:f8:9b:30:13:0a:6d: 76:23:4d:bf:87:ce:3a:e4:20:90:20:49:98:93:38:47:f5:43: 4d:1f:a8:97:cb:51:b1:06:84:b5:3a:a9:88:3e:5a:18:15:72: 23:91:4d:8c -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUWoiQKUovuonBAJCKQXCSzaPcS4IwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMzhGODVGMEFBODFBRTMzODI3QkRGNTczRDZBNzEyNDUy MTgwQTAzNjAeFw0yNTEyMDUxMDM3MjlaFw0yNTEyMDgxMzEyMjlaMDMxMTAvBgNV BAMTKDdBODg5QUM2NzEwN0JBNzc4MTBGQUY1NkUzRkYxRUZGOEM2QTdFRjMwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDBE8mZ0FH1ljEhY3fkL6nel/v1 +a0pPH9kGZk7ZKqXcl0/fuvcCUngteu2wxxoXi6gjj6fmZ6X4zO8Kli/yYyCfFUg ZeF4BpJp/ZdUDFcRYqHr6/LO85Md4dbpStJWDG8ei9TkjUpcXGSSnwRnVP5tJm/F ZLRCxqvOopb0nm/hyG5rRZ4qVcZvg0vt8nALLVhAWpFKzliVUQKEVKTT1GuxBzp+ voBZ3ZRCGwVSvFzOQYVcLiT3hIcPGTw7ilJCGxMbQVSF3VZL2Kr5t3x8V2W3lgKl GaG9XW16C0e8jC+jH7WnhFf8aVKcHw7Gz2gJoJZ3/VWf6aGW4+GkGuV9xReJAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUeoiaxnEHuneBD69W4/8e/4xqfvMwHwYDVR0j BBgwFoAUOPhfCqga4zgnvfVz1qcSRSGAoDYwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby80 ZTk4YjNiZC0yODRkLTRhN2QtOWYyNy1jYjU4N2U5ZGQ4NDEvMC8zOEY4NUYwQUE4 MUFFMzM4MjdCREY1NzNENkE3MTI0NTIxODBBMDM2LmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvMzhGODVGMEFBODFBRTMzODI3QkRGNTczRDZBNzEyNDUyMTgw QTAzNi5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vNGU5OGIzYmQtMjg0ZC00YTdkLTlm MjctY2I1ODdlOWRkODQxLzAvMzhGODVGMEFBODFBRTMzODI3QkRGNTczRDZBNzEy NDUyMTgwQTAzNi5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAIssG2DnbnFxh9ZJbuA8wwkz34SaKLpTmpPQ H+YDgs+2cJSrbSVoTmRdiGkQf7RYH5phDErRIIKbl6axEZT9MmERXjtSqH2zPvxQ 5LnLXo8Cal11cbW1uBPQ5IaapjpSvNaNx9UDCVWB0mVieKBUcOaDznibxoq8F+3t rTsGs55P2HLuEDeNZ3M65q81eJwabXTQz1QQsQCQdFzpQi7u3Aaj+pm6uRGPo3HO n/zQ8EzO9LU6Ol3PyZoId/9er94X+rY1NR/JlV1g5UXIvLDhaqfXrPibMBMKbXYj Tb+HzjrkIJAgSZiTOEf1Q00fqJfLUbEGhLU6qYg+WhgVciORTYw= -----END CERTIFICATE-----Generated at Sun Dec 7 12:41:19 2025 by rpki-client