This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf repo-rpki.idnic.net/repo/a6dad8cb-a537-4c50-af6a-aaba5f1e7644/0/38A92419EE1289455FCB1B71F9420F05CA334C15.mft File: 38A92419EE1289455FCB1B71F9420F05CA334C15.mft (raw, json) Hash identifier: lN86ktHUCOlMhYvRZwNNRQI6z9kVRMAz6+q/j/VxfaE= Subject key identifier: DE:8F:13:1A:4B:F1:21:BD:A6:C9:73:39:38:2D:32:1A:09:A4:73:05 Authority key identifier: 38:A9:24:19:EE:12:89:45:5F:CB:1B:71:F9:42:0F:05:CA:33:4C:15 Certificate issuer: /CN=38A92419EE1289455FCB1B71F9420F05CA334C15 Certificate serial: 7D2CD7C870FE97726309B8A0A7F74AF501A8C15F Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/38A92419EE1289455FCB1B71F9420F05CA334C15.cer Subject info access: rsync://repo-rpki.idnic.net/repo/a6dad8cb-a537-4c50-af6a-aaba5f1e7644/0/38A92419EE1289455FCB1B71F9420F05CA334C15.mft Manifest number: 022E Signing time: Fri 05 Dec 2025 16:10:00 +0000 Manifest this update: Fri 05 Dec 2025 16:05:00 +0000 Manifest next update: Tue 09 Dec 2025 02:05:00 +0000 Files and hashes: 1: 3130332e3139302e302e302f32342d3234203d3e20313439383930.roa (hash: FHb4F7lq3vcwTbWDvi1X4f5+wy1PMf7axFDD1qokmPs=) 2: 3130332e3139302e312e302f32342d3234203d3e20313439383930.roa (hash: /4y0i2UIqC94Q9jjKOVg3BHE03KUaQHXxOynS0oUshc=) 3: 38A92419EE1289455FCB1B71F9420F05CA334C15.crl (hash: GMVnudgH7W7QMilHCXvDsqiQ4QWmS68B/aTc7/dmtl8=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/a6dad8cb-a537-4c50-af6a-aaba5f1e7644/0/38A92419EE1289455FCB1B71F9420F05CA334C15.crl rsync://repo-rpki.idnic.net/repo/a6dad8cb-a537-4c50-af6a-aaba5f1e7644/0/38A92419EE1289455FCB1B71F9420F05CA334C15.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/38A92419EE1289455FCB1B71F9420F05CA334C15.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 09 Dec 2025 02:05:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 7d:2c:d7:c8:70:fe:97:72:63:09:b8:a0:a7:f7:4a:f5:01:a8:c1:5f Signature Algorithm: sha256WithRSAEncryption Issuer: CN=38A92419EE1289455FCB1B71F9420F05CA334C15 Validity Not Before: Dec 5 16:05:00 2025 GMT Not After : Dec 9 02:05:00 2025 GMT Subject: CN=DE8F131A4BF121BDA6C97339382D321A09A47305 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a8:b5:49:ad:82:61:c3:19:1b:fc:a7:1d:a8:f1: 4a:95:44:af:51:9c:7a:d0:0d:df:96:3b:02:b9:64: c2:49:5b:d4:79:21:40:a4:8a:28:57:ab:f6:96:79: c3:80:22:3d:d6:0e:86:f5:bb:fb:b0:7e:30:86:c1: c4:a3:2d:30:21:f1:77:e1:67:d5:e8:7f:f4:bb:81: 5e:0f:f7:ce:ad:d7:90:f5:0d:ad:70:7d:87:c3:49: 45:f8:dd:23:5d:e3:e8:dd:64:e5:3f:78:15:dc:fe: 33:aa:65:23:23:78:01:29:ef:ee:83:9d:a4:69:d2: c6:89:d7:32:da:e9:ea:fd:0d:2d:69:08:6d:64:61: 9e:cd:77:72:55:57:51:95:00:8d:dc:6f:24:3c:04: 86:8f:ad:d7:6e:cb:f1:5a:7b:cf:bc:17:37:cc:5a: aa:d8:42:b7:35:59:a6:88:0d:2b:bf:0d:04:e1:64: 80:71:0f:7d:74:a0:03:8c:e9:4a:b6:91:4f:e7:e5: 39:fb:c0:49:4c:12:bd:30:ed:ee:29:93:de:06:64: 3e:15:33:75:2e:34:16:dc:c4:55:b2:84:97:22:6a: f9:64:63:b6:0f:d4:30:52:96:d7:f2:30:71:97:91: c6:0b:b4:a9:cc:ea:e1:dd:c4:c5:02:b5:eb:89:e1: 6c:25 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: DE:8F:13:1A:4B:F1:21:BD:A6:C9:73:39:38:2D:32:1A:09:A4:73:05 X509v3 Authority Key Identifier: keyid:38:A9:24:19:EE:12:89:45:5F:CB:1B:71:F9:42:0F:05:CA:33:4C:15 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/a6dad8cb-a537-4c50-af6a-aaba5f1e7644/0/38A92419EE1289455FCB1B71F9420F05CA334C15.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/38A92419EE1289455FCB1B71F9420F05CA334C15.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/a6dad8cb-a537-4c50-af6a-aaba5f1e7644/0/38A92419EE1289455FCB1B71F9420F05CA334C15.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 11:0f:7e:2b:37:01:08:b2:39:38:5d:c5:cd:01:46:15:1f:f0: f1:e1:92:c8:c1:0b:18:74:88:fb:02:1c:7f:9f:6f:ed:62:3f: 44:50:2a:4f:f8:ee:ca:ec:9d:4a:1e:42:d8:30:a6:83:5e:d4: 00:51:3e:99:ff:24:c1:51:6f:8b:42:bc:37:80:84:a6:c7:5f: 3f:59:c1:f1:8b:72:ab:d3:85:5a:a1:52:47:e5:51:fc:d2:d5: 5a:7e:24:b2:ca:23:e9:3d:62:b4:da:85:dc:5d:e8:71:21:f0: 77:57:12:f5:c3:1a:7e:c4:10:39:26:aa:08:41:73:d8:c0:bb: d0:68:8b:b4:aa:c8:f1:4a:ad:0a:de:91:1e:32:fb:f0:6f:2b: 5c:bb:d4:e1:45:70:3b:b3:7c:01:b4:49:59:20:36:ed:8d:62: 90:19:96:38:a6:bb:e3:2c:14:a6:a8:5c:59:da:f3:87:cb:3b: a4:4c:a4:a5:8b:ba:4e:a9:f6:26:49:9f:9a:9c:11:87:ea:29: 14:51:f0:7d:4b:11:73:8b:b2:a8:c5:49:cc:bb:a6:90:58:0f: 1b:0d:c8:f7:24:84:46:02:cd:e9:73:6f:0e:11:eb:8e:06:38: af:3d:1c:d9:33:af:f2:f0:b1:a6:1d:d4:b0:03:99:26:b9:84: 9d:00:55:a3 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUfSzXyHD+l3JjCbigp/dK9QGowV8wDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMzhBOTI0MTlFRTEyODk0NTVGQ0IxQjcxRjk0MjBGMDVD QTMzNEMxNTAeFw0yNTEyMDUxNjA1MDBaFw0yNTEyMDkwMjA1MDBaMDMxMTAvBgNV BAMTKERFOEYxMzFBNEJGMTIxQkRBNkM5NzMzOTM4MkQzMjFBMDlBNDczMDUwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCotUmtgmHDGRv8px2o8UqVRK9R nHrQDd+WOwK5ZMJJW9R5IUCkiihXq/aWecOAIj3WDob1u/uwfjCGwcSjLTAh8Xfh Z9Xof/S7gV4P986t15D1Da1wfYfDSUX43SNd4+jdZOU/eBXc/jOqZSMjeAEp7+6D naRp0saJ1zLa6er9DS1pCG1kYZ7Nd3JVV1GVAI3cbyQ8BIaPrdduy/Fae8+8FzfM WqrYQrc1WaaIDSu/DQThZIBxD310oAOM6Uq2kU/n5Tn7wElMEr0w7e4pk94GZD4V M3UuNBbcxFWyhJciavlkY7YP1DBSltfyMHGXkcYLtKnM6uHdxMUCteuJ4WwlAgMB AAGjggI8MIICODAdBgNVHQ4EFgQU3o8TGkvxIb2myXM5OC0yGgmkcwUwHwYDVR0j BBgwFoAUOKkkGe4SiUVfyxtx+UIPBcozTBUwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby9h NmRhZDhjYi1hNTM3LTRjNTAtYWY2YS1hYWJhNWYxZTc2NDQvMC8zOEE5MjQxOUVF MTI4OTQ1NUZDQjFCNzFGOTQyMEYwNUNBMzM0QzE1LmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvMzhBOTI0MTlFRTEyODk0NTVGQ0IxQjcxRjk0MjBGMDVDQTMz NEMxNS5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vYTZkYWQ4Y2ItYTUzNy00YzUwLWFm NmEtYWFiYTVmMWU3NjQ0LzAvMzhBOTI0MTlFRTEyODk0NTVGQ0IxQjcxRjk0MjBG MDVDQTMzNEMxNS5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBABEPfis3AQiyOThdxc0BRhUf8PHhksjBCxh0 iPsCHH+fb+1iP0RQKk/47srsnUoeQtgwpoNe1ABRPpn/JMFRb4tCvDeAhKbHXz9Z wfGLcqvThVqhUkflUfzS1Vp+JLLKI+k9YrTahdxd6HEh8HdXEvXDGn7EEDkmqghB c9jAu9Boi7SqyPFKrQrekR4y+/BvK1y71OFFcDuzfAG0SVkgNu2NYpAZljimu+Ms FKaoXFna84fLO6RMpKWLuk6p9iZJn5qcEYfqKRRR8H1LEXOLsqjFScy7ppBYDxsN yPckhEYCzelzbw4R644GOK89HNkzr/LwsaYd1LADmSa5hJ0AVaM= -----END CERTIFICATE-----Generated at Sun Dec 7 04:57:25 2025 by rpki-client