This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf repo-rpki.idnic.net/repo/928089a7-0a68-4d67-adab-76d7d9271fde/0/38FCEA2A1C8443E590CF5220E7BDA05D722C294D.mft File: 38FCEA2A1C8443E590CF5220E7BDA05D722C294D.mft (raw, json) Hash identifier: 0pysHuNzlJBymzTIM9ztIps0osV8tHsfb+UTPCzxhxI= Subject key identifier: 1F:0E:5B:83:43:A7:04:15:4C:33:A0:4A:F2:07:1C:3B:E9:7F:BD:19 Authority key identifier: 38:FC:EA:2A:1C:84:43:E5:90:CF:52:20:E7:BD:A0:5D:72:2C:29:4D Certificate issuer: /CN=38FCEA2A1C8443E590CF5220E7BDA05D722C294D Certificate serial: 6A3BD07D2AF11EA52A3130F11D4EF0FB525ED34A Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/38FCEA2A1C8443E590CF5220E7BDA05D722C294D.cer Subject info access: rsync://repo-rpki.idnic.net/repo/928089a7-0a68-4d67-adab-76d7d9271fde/0/38FCEA2A1C8443E590CF5220E7BDA05D722C294D.mft Manifest number: 01A7 Signing time: Sun 07 Dec 2025 00:11:00 +0000 Manifest this update: Sun 07 Dec 2025 00:06:00 +0000 Manifest next update: Wed 10 Dec 2025 11:48:00 +0000 Files and hashes: 1: 3130332e3130382e3132392e302f32342d3234203d3e203535363835.roa (hash: cC0bspkR4GLKr9LN2JfncBaT2JjHlS3Wp16ygdKgQmU=) 2: 3130332e3234372e34322e302f32342d3234203d3e203535363835.roa (hash: ZVjcgaXDQ3D4zS6Ow7WrzE6JOTbumwvNfFh1MEq4Yks=) 3: 3130332e3130382e3132382e302f32342d3234203d3e203535363835.roa (hash: XgIzc0IbUT3BWzqPVrjaBsZEWwMYT+TR7O6PzuuQ5e4=) 4: 38FCEA2A1C8443E590CF5220E7BDA05D722C294D.crl (hash: NI1Am0bxg9ERGuhlSYLPd5MtwCllRhsnEjQPnhLs23I=) 5: 3130332e3130382e3132382e302f32322d3234203d3e203535363835.roa (hash: hPWPE86ID8N/pDjOig5ZnAROXRyFprGMRItIMoptWSY=) 6: 3130332e3234372e34312e302f32342d3234203d3e203535363835.roa (hash: kBNBu6yeQhVM/8eFQmRNaz5z+ct6Yh5CCwCxI69k5F4=) 7: 3130332e3130382e3133302e302f32342d3234203d3e203535363835.roa (hash: /15wV8i/i7B6FG9n08XOQypn1bQfdzKavjdkmpF3lT8=) 8: 3130332e3130382e3133312e302f32342d3234203d3e203535363835.roa (hash: ZjcfSae5HFvDvqeideaLIabcOtFfSEUtzUNHxjp54qE=) 9: 3130332e3234372e34302e302f32322d3234203d3e203535363835.roa (hash: ANeXRudYRQj4brheIa8AOL0aZoGg1PXmE4qO0owNUkM=) 10: 3130332e3234372e34302e302f32342d3234203d3e203535363835.roa (hash: syH1wAS1MJE37vuCgOfSHfZ8nbZq+QzwV/xWmgvAdI0=) 11: 3130332e3234372e34332e302f32342d3234203d3e203535363835.roa (hash: pU683GKaElbx02fGnAze4HxdiyKXbycozWmgiE+EA3I=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/928089a7-0a68-4d67-adab-76d7d9271fde/0/38FCEA2A1C8443E590CF5220E7BDA05D722C294D.crl rsync://repo-rpki.idnic.net/repo/928089a7-0a68-4d67-adab-76d7d9271fde/0/38FCEA2A1C8443E590CF5220E7BDA05D722C294D.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/38FCEA2A1C8443E590CF5220E7BDA05D722C294D.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 09 Dec 2025 15:57:52 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 6a:3b:d0:7d:2a:f1:1e:a5:2a:31:30:f1:1d:4e:f0:fb:52:5e:d3:4a Signature Algorithm: sha256WithRSAEncryption Issuer: CN=38FCEA2A1C8443E590CF5220E7BDA05D722C294D Validity Not Before: Dec 7 00:06:00 2025 GMT Not After : Dec 10 11:48:00 2025 GMT Subject: CN=1F0E5B8343A704154C33A04AF2071C3BE97FBD19 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b6:ef:04:c0:38:51:fb:c6:ca:83:5a:28:2a:35: 3b:00:e8:ca:f7:d1:5c:f3:65:5b:d3:e5:c0:29:22: b0:b8:df:95:b3:9b:4c:9f:49:29:91:e6:19:e4:99: 1b:ce:d6:b0:94:88:0a:5b:9a:28:e3:9f:05:fb:e4: 05:91:6d:fc:10:b2:be:c6:28:34:c2:a4:5a:ed:cc: 4d:50:a9:41:2c:68:2c:2f:27:54:3a:0a:e5:ac:e4: 63:6f:08:f3:cb:53:ea:41:9e:2d:4d:ca:6e:b9:2f: 25:3d:4e:86:16:b1:98:8e:1e:da:99:eb:f4:1b:dc: 37:cd:a7:54:53:4c:8f:db:19:27:f2:5d:4b:d2:04: 43:7e:65:69:9c:6f:c8:d4:71:d7:cf:3e:bb:fe:49: 75:49:8e:54:ec:bf:94:33:2d:1b:d9:f2:fe:dc:58: 0f:28:7d:53:aa:6c:d0:59:2a:41:07:bd:c1:f2:50: 53:40:90:ff:eb:35:70:fb:81:be:9d:e9:b8:df:77: 23:5c:92:03:75:0f:30:b9:35:b7:df:f0:59:1a:ab: 75:55:59:c9:ef:07:ea:ac:bc:3c:b7:bf:09:0d:f2: 01:cb:93:22:f8:19:b2:6d:0d:a9:19:59:aa:f9:de: c3:e9:00:6d:d6:fb:e9:2c:83:1b:5e:93:d2:31:1e: 2d:b3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 1F:0E:5B:83:43:A7:04:15:4C:33:A0:4A:F2:07:1C:3B:E9:7F:BD:19 X509v3 Authority Key Identifier: keyid:38:FC:EA:2A:1C:84:43:E5:90:CF:52:20:E7:BD:A0:5D:72:2C:29:4D X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/928089a7-0a68-4d67-adab-76d7d9271fde/0/38FCEA2A1C8443E590CF5220E7BDA05D722C294D.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/38FCEA2A1C8443E590CF5220E7BDA05D722C294D.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/928089a7-0a68-4d67-adab-76d7d9271fde/0/38FCEA2A1C8443E590CF5220E7BDA05D722C294D.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 06:c5:a3:0b:2a:bc:8f:60:18:a9:81:6b:8e:26:e5:5e:63:e8: 6e:93:c9:fa:a0:95:77:77:8a:55:6f:1c:e2:53:28:49:97:3c: 5e:c3:65:b1:fe:cd:b6:4b:02:0b:8b:99:65:d0:e0:50:64:85: 35:ea:20:55:51:98:22:07:f1:63:c6:3a:de:99:76:0a:0f:d8: 02:63:2f:95:0b:76:ae:0c:66:79:4b:39:13:07:53:93:08:8d: 04:70:b3:5d:a0:f6:43:c7:38:8f:87:af:9f:3a:9b:79:14:8f: bb:f1:ae:36:8b:b3:36:bc:b5:16:92:d0:67:52:c9:a8:6f:86: 40:f5:ad:7c:49:dc:42:3f:eb:6e:a1:a6:e0:db:67:10:be:81: 13:c6:a3:46:45:42:3b:82:5a:0c:fc:b9:71:b1:44:e4:7d:16: d1:c2:ef:8f:d0:ea:61:b7:ab:a8:f5:57:6a:00:8b:69:c5:27: 57:73:a8:bc:72:d3:44:43:09:94:50:6d:ac:2e:f5:00:7b:9f: 77:35:be:00:35:bc:a0:9e:35:30:46:a4:93:66:3f:47:31:20: a0:f9:6b:d3:1d:14:c5:dd:15:34:0c:b8:17:ee:62:06:0f:f4: 43:79:b3:c8:6f:dd:04:c6:85:1a:39:05:4f:4c:81:08:32:a4: 6b:17:90:fc -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUajvQfSrxHqUqMTDxHU7w+1Je00owDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMzhGQ0VBMkExQzg0NDNFNTkwQ0Y1MjIwRTdCREEwNUQ3 MjJDMjk0RDAeFw0yNTEyMDcwMDA2MDBaFw0yNTEyMTAxMTQ4MDBaMDMxMTAvBgNV BAMTKDFGMEU1QjgzNDNBNzA0MTU0QzMzQTA0QUYyMDcxQzNCRTk3RkJEMTkwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC27wTAOFH7xsqDWigqNTsA6Mr3 0VzzZVvT5cApIrC435Wzm0yfSSmR5hnkmRvO1rCUiApbmijjnwX75AWRbfwQsr7G KDTCpFrtzE1QqUEsaCwvJ1Q6CuWs5GNvCPPLU+pBni1Nym65LyU9ToYWsZiOHtqZ 6/Qb3DfNp1RTTI/bGSfyXUvSBEN+ZWmcb8jUcdfPPrv+SXVJjlTsv5QzLRvZ8v7c WA8ofVOqbNBZKkEHvcHyUFNAkP/rNXD7gb6d6bjfdyNckgN1DzC5Nbff8Fkaq3VV WcnvB+qsvDy3vwkN8gHLkyL4GbJtDakZWar53sPpAG3W++ksgxtek9IxHi2zAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUHw5bg0OnBBVMM6BK8gccO+l/vRkwHwYDVR0j BBgwFoAUOPzqKhyEQ+WQz1Ig572gXXIsKU0wDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby85 MjgwODlhNy0wYTY4LTRkNjctYWRhYi03NmQ3ZDkyNzFmZGUvMC8zOEZDRUEyQTFD ODQ0M0U1OTBDRjUyMjBFN0JEQTA1RDcyMkMyOTRELmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvMzhGQ0VBMkExQzg0NDNFNTkwQ0Y1MjIwRTdCREEwNUQ3MjJD Mjk0RC5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vOTI4MDg5YTctMGE2OC00ZDY3LWFk YWItNzZkN2Q5MjcxZmRlLzAvMzhGQ0VBMkExQzg0NDNFNTkwQ0Y1MjIwRTdCREEw NUQ3MjJDMjk0RC5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAAbFowsqvI9gGKmBa44m5V5j6G6TyfqglXd3 ilVvHOJTKEmXPF7DZbH+zbZLAguLmWXQ4FBkhTXqIFVRmCIH8WPGOt6ZdgoP2AJj L5ULdq4MZnlLORMHU5MIjQRws12g9kPHOI+Hr586m3kUj7vxrjaLsza8tRaS0GdS yahvhkD1rXxJ3EI/626hpuDbZxC+gRPGo0ZFQjuCWgz8uXGxROR9FtHC74/Q6mG3 q6j1V2oAi2nFJ1dzqLxy00RDCZRQbawu9QB7n3c1vgA1vKCeNTBGpJNmP0cxIKD5 a9MdFMXdFTQMuBfuYgYP9EN5s8hv3QTGhRo5BU9MgQgypGsXkPw= -----END CERTIFICATE-----Generated at Sun Dec 7 01:42:20 2025 by rpki-client