This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

$ rpki-client -vvf repo-rpki.idnic.net/repo/928089a7-0a68-4d67-adab-76d7d9271fde/0/38FCEA2A1C8443E590CF5220E7BDA05D722C294D.mft
File: 38FCEA2A1C8443E590CF5220E7BDA05D722C294D.mft (raw, json)
Hash identifier: LPOvId4mPOif8bXAg6wnWllBPsry7Lj2NGgSTopa0FU=
Subject key identifier: 73:F0:9B:F1:2C:6F:C4:9D:8B:B6:82:38:CD:A8:68:B2:E6:22:28:A4
Authority key identifier: 38:FC:EA:2A:1C:84:43:E5:90:CF:52:20:E7:BD:A0:5D:72:2C:29:4D
Certificate issuer: /CN=38FCEA2A1C8443E590CF5220E7BDA05D722C294D
Certificate serial: 7B885E3137D1940AD3952A261B2D801C1BE2C198
Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/38FCEA2A1C8443E590CF5220E7BDA05D722C294D.cer
Subject info access: rsync://repo-rpki.idnic.net/repo/928089a7-0a68-4d67-adab-76d7d9271fde/0/38FCEA2A1C8443E590CF5220E7BDA05D722C294D.mft
Manifest number: 01BD
Signing time: Sun 25 Jan 2026 06:50:59 +0000
Manifest this update: Sun 25 Jan 2026 06:45:59 +0000
Manifest next update: Wed 28 Jan 2026 11:53:59 +0000
Files and hashes: 1: 3130332e3130382e3132382e302f32322d3234203d3e203535363835.roa (hash: hPWPE86ID8N/pDjOig5ZnAROXRyFprGMRItIMoptWSY=)
2: 3130332e3130382e3133302e302f32342d3234203d3e203535363835.roa (hash: /15wV8i/i7B6FG9n08XOQypn1bQfdzKavjdkmpF3lT8=)
3: 3130332e3234372e34302e302f32342d3234203d3e203535363835.roa (hash: syH1wAS1MJE37vuCgOfSHfZ8nbZq+QzwV/xWmgvAdI0=)
4: 3130332e3130382e3132392e302f32342d3234203d3e203535363835.roa (hash: cC0bspkR4GLKr9LN2JfncBaT2JjHlS3Wp16ygdKgQmU=)
5: 3130332e3130382e3133312e302f32342d3234203d3e203535363835.roa (hash: ZjcfSae5HFvDvqeideaLIabcOtFfSEUtzUNHxjp54qE=)
6: 3130332e3234372e34332e302f32342d3234203d3e203535363835.roa (hash: pU683GKaElbx02fGnAze4HxdiyKXbycozWmgiE+EA3I=)
7: 3130332e3130382e3132382e302f32342d3234203d3e203535363835.roa (hash: XgIzc0IbUT3BWzqPVrjaBsZEWwMYT+TR7O6PzuuQ5e4=)
8: 3130332e3234372e34302e302f32322d3234203d3e203535363835.roa (hash: ANeXRudYRQj4brheIa8AOL0aZoGg1PXmE4qO0owNUkM=)
9: 3130332e3234372e34322e302f32342d3234203d3e203535363835.roa (hash: ZVjcgaXDQ3D4zS6Ow7WrzE6JOTbumwvNfFh1MEq4Yks=)
10: 38FCEA2A1C8443E590CF5220E7BDA05D722C294D.crl (hash: AT2PupY/a6m1BwngkColDXxNORgnnLoHdlVX2pxxPlM=)
11: 3130332e3234372e34312e302f32342d3234203d3e203535363835.roa (hash: kBNBu6yeQhVM/8eFQmRNaz5z+ct6Yh5CCwCxI69k5F4=)
Validation: OK
Signature path: rsync://repo-rpki.idnic.net/repo/928089a7-0a68-4d67-adab-76d7d9271fde/0/38FCEA2A1C8443E590CF5220E7BDA05D722C294D.crl
rsync://repo-rpki.idnic.net/repo/928089a7-0a68-4d67-adab-76d7d9271fde/0/38FCEA2A1C8443E590CF5220E7BDA05D722C294D.mft
rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/38FCEA2A1C8443E590CF5220E7BDA05D722C294D.cer
rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl
rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Wed 28 Jan 2026 11:53:59 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
7b:88:5e:31:37:d1:94:0a:d3:95:2a:26:1b:2d:80:1c:1b:e2:c1:98
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=38FCEA2A1C8443E590CF5220E7BDA05D722C294D
Validity
Not Before: Jan 25 06:45:59 2026 GMT
Not After : Jan 28 11:53:59 2026 GMT
Subject: CN=73F09BF12C6FC49D8BB68238CDA868B2E62228A4
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ab:0a:bc:a5:e3:18:38:bb:2a:ae:ce:21:84:cc:
25:57:f6:82:e7:8a:b3:08:08:48:15:d3:dc:9d:93:
ce:4a:07:88:d6:4f:b3:94:5e:2d:23:98:74:34:d9:
fc:9e:75:1e:b1:6b:38:6e:ce:12:e2:f3:ff:d6:6c:
20:bc:2c:57:95:a9:cc:a2:46:6c:1a:70:f3:37:85:
20:8e:e8:06:66:4d:1f:11:13:6a:9e:d2:fd:d9:48:
64:3a:ae:ca:61:4b:45:5e:60:3f:67:a5:68:1b:a1:
0c:bd:b2:b8:0e:f6:f4:50:2a:24:9c:95:06:ed:54:
d6:b4:28:11:db:ad:fd:79:d9:eb:0c:53:25:30:2b:
dc:25:d8:56:fa:63:71:f9:d6:04:da:1d:eb:74:bb:
90:48:74:6f:f6:1b:09:57:be:3b:35:cc:67:02:d3:
6e:0b:a7:34:10:13:09:56:f6:f1:66:8c:61:f1:e0:
74:bb:83:64:0c:f3:43:60:29:12:d1:b9:f2:33:92:
2a:65:f1:f1:89:8d:7c:b4:53:ed:99:fe:81:79:be:
9d:d8:f6:5d:bd:a8:75:0a:76:fe:ca:95:ea:d8:e2:
5c:0e:e2:e1:48:7d:f4:fc:ae:46:3d:89:f2:e2:d5:
ce:4b:3f:de:23:ed:1f:47:cf:f6:45:c7:77:36:01:
4f:85
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
73:F0:9B:F1:2C:6F:C4:9D:8B:B6:82:38:CD:A8:68:B2:E6:22:28:A4
X509v3 Authority Key Identifier:
keyid:38:FC:EA:2A:1C:84:43:E5:90:CF:52:20:E7:BD:A0:5D:72:2C:29:4D
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://repo-rpki.idnic.net/repo/928089a7-0a68-4d67-adab-76d7d9271fde/0/38FCEA2A1C8443E590CF5220E7BDA05D722C294D.crl
Authority Information Access:
CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/38FCEA2A1C8443E590CF5220E7BDA05D722C294D.cer
Subject Information Access:
Signed Object - URI:rsync://repo-rpki.idnic.net/repo/928089a7-0a68-4d67-adab-76d7d9271fde/0/38FCEA2A1C8443E590CF5220E7BDA05D722C294D.mft
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
7e:6b:a0:22:fc:8c:d1:d5:a4:3d:ef:49:93:1e:27:b7:9d:a0:
21:4e:d4:ea:52:37:3f:78:f9:bc:89:98:bb:a9:ae:2d:a9:ab:
0d:c0:08:1c:ce:0a:5c:44:df:1d:a2:d1:37:91:7d:3f:67:77:
85:86:a9:17:10:10:2e:99:cf:c5:c1:f6:20:23:cf:b1:a2:ce:
1f:f5:2d:96:d4:a8:f4:9d:16:ae:6e:eb:2e:81:47:08:47:2f:
00:1e:02:b6:5e:b2:b8:84:ca:67:00:a8:8a:14:84:cf:69:1a:
ec:9f:70:2e:90:09:81:db:b9:f3:6a:3f:ac:50:2e:a3:33:10:
06:db:82:64:f8:37:75:43:87:4c:68:05:e5:cc:17:94:f2:7f:
d0:3e:e7:41:0a:34:c5:6c:2b:a5:77:6c:67:aa:40:6b:86:5a:
8b:7f:1e:d2:cd:cc:11:2f:03:da:3c:37:ec:02:30:b6:c4:e6:
db:39:4f:1c:5d:7e:0b:e8:81:01:4b:5d:2c:7a:46:d0:2e:05:
fd:b1:c8:c9:c5:39:26:22:d6:f9:c4:dd:49:ff:ed:6d:9c:2d:
65:fa:85:eb:ea:b4:b8:e1:b1:51:85:b9:6c:38:5a:00:32:84:
cd:3e:5a:17:6c:8e:98:47:8e:d6:38:fb:3f:fa:2d:c3:81:4c:
f9:1d:b1:25
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jan 25 18:37:09 2026 by rpki-client