This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf repo-rpki.idnic.net/repo/a6dad8cb-a537-4c50-af6a-aaba5f1e7644/0/38A92419EE1289455FCB1B71F9420F05CA334C15.mft File: 38A92419EE1289455FCB1B71F9420F05CA334C15.mft (raw, json) Hash identifier: aGIxdavPoByKX1+lJs6YOETiyznt/o902QRRHUt7xK8= Subject key identifier: C5:6B:26:1A:BE:97:3C:4B:34:82:5D:24:4C:79:D2:D6:83:00:BC:98 Authority key identifier: 38:A9:24:19:EE:12:89:45:5F:CB:1B:71:F9:42:0F:05:CA:33:4C:15 Certificate issuer: /CN=38A92419EE1289455FCB1B71F9420F05CA334C15 Certificate serial: 1605952D25DE74190E426F92C5E6B113A47CBF59 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/38A92419EE1289455FCB1B71F9420F05CA334C15.cer Subject info access: rsync://repo-rpki.idnic.net/repo/a6dad8cb-a537-4c50-af6a-aaba5f1e7644/0/38A92419EE1289455FCB1B71F9420F05CA334C15.mft Manifest number: 0244 Signing time: Sat 24 Jan 2026 09:50:00 +0000 Manifest this update: Sat 24 Jan 2026 09:45:00 +0000 Manifest next update: Tue 27 Jan 2026 16:34:00 +0000 Files and hashes: 1: 38A92419EE1289455FCB1B71F9420F05CA334C15.crl (hash: wZD83dxTG3AteVaCAY2wzG06tW3t2a8/DsXG2as+adM=) 2: 3130332e3139302e302e302f32342d3234203d3e20313439383930.roa (hash: FHb4F7lq3vcwTbWDvi1X4f5+wy1PMf7axFDD1qokmPs=) 3: 3130332e3139302e312e302f32342d3234203d3e20313439383930.roa (hash: /4y0i2UIqC94Q9jjKOVg3BHE03KUaQHXxOynS0oUshc=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/a6dad8cb-a537-4c50-af6a-aaba5f1e7644/0/38A92419EE1289455FCB1B71F9420F05CA334C15.crl rsync://repo-rpki.idnic.net/repo/a6dad8cb-a537-4c50-af6a-aaba5f1e7644/0/38A92419EE1289455FCB1B71F9420F05CA334C15.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/38A92419EE1289455FCB1B71F9420F05CA334C15.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 27 Jan 2026 16:34:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 16:05:95:2d:25:de:74:19:0e:42:6f:92:c5:e6:b1:13:a4:7c:bf:59 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=38A92419EE1289455FCB1B71F9420F05CA334C15 Validity Not Before: Jan 24 09:45:00 2026 GMT Not After : Jan 27 16:34:00 2026 GMT Subject: CN=C56B261ABE973C4B34825D244C79D2D68300BC98 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c9:0e:91:45:90:f2:42:13:51:ce:1b:45:6d:2b: 92:bb:1f:f2:f4:6e:ab:ea:22:78:03:68:80:d5:01: d8:60:3d:50:ce:f6:93:af:83:cb:65:37:3f:a0:b6: 00:8f:44:f6:a9:f2:1c:05:5f:e7:4e:1b:f0:6d:d2: ff:51:6c:fc:4c:69:1b:87:75:89:96:ae:18:a4:04: 77:72:59:6c:2d:27:0e:30:36:a8:30:93:91:a5:91: 73:d8:4d:32:ef:0d:78:2d:90:c6:17:85:af:1b:dc: ab:a6:77:05:5a:1b:c0:ff:5d:06:0a:c2:5c:53:0d: a1:df:f0:65:fa:ed:8c:e1:ba:7c:5e:25:0b:be:76: bc:c2:6d:de:82:30:50:c6:c1:33:23:83:47:20:7c: 9b:40:68:d0:c6:50:1d:be:43:77:06:f9:db:9f:83: 7f:ae:d6:24:09:23:b4:05:5a:6b:e0:9d:37:79:77: 06:ac:4b:43:34:1f:4e:e5:a8:5a:62:16:a8:7b:9a: 8b:78:06:bd:c2:47:37:b9:18:74:38:f6:75:93:a3: f2:30:c0:b5:c5:98:48:48:5c:10:f2:10:8a:0f:ee: a1:ef:cf:51:6b:42:60:7b:d1:b2:55:43:e9:6c:89: 64:71:64:e3:e4:2e:a9:36:f9:76:0f:42:73:d9:1f: 58:31 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: C5:6B:26:1A:BE:97:3C:4B:34:82:5D:24:4C:79:D2:D6:83:00:BC:98 X509v3 Authority Key Identifier: keyid:38:A9:24:19:EE:12:89:45:5F:CB:1B:71:F9:42:0F:05:CA:33:4C:15 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/a6dad8cb-a537-4c50-af6a-aaba5f1e7644/0/38A92419EE1289455FCB1B71F9420F05CA334C15.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/38A92419EE1289455FCB1B71F9420F05CA334C15.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/a6dad8cb-a537-4c50-af6a-aaba5f1e7644/0/38A92419EE1289455FCB1B71F9420F05CA334C15.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 8d:c0:fa:88:85:48:6b:b6:a8:a6:8a:20:94:cc:a0:2c:33:ca: 3c:2b:2b:bb:4a:bc:60:0e:c1:b0:68:b8:ae:63:70:99:8a:31: df:32:8f:5d:9a:8d:ee:23:48:78:93:52:45:75:74:df:59:20: b4:33:c4:52:63:bf:06:90:dc:34:e0:ad:03:e6:87:e3:61:ab: 0b:4f:1d:36:c9:33:56:e2:de:97:2e:d3:df:a2:6d:7c:c5:68: 7a:3e:cf:31:28:a9:43:ae:cf:44:da:d4:3d:ae:95:9d:fe:ae: 7a:b2:22:5f:0a:6f:99:d3:69:94:ab:e1:8d:19:01:93:35:3d: 32:50:60:4f:aa:6f:27:d6:c8:92:b5:b1:4a:7d:88:24:bc:58: 77:14:cf:3e:4a:37:ad:3f:0b:bc:a9:dc:c4:53:c2:13:da:b8: 1c:8e:b4:49:ad:3b:e1:8a:2d:34:19:23:34:63:2e:a3:b8:ef: 06:73:aa:6f:67:81:05:df:da:14:a5:c6:61:f6:c2:65:81:f8: 05:9a:0c:a9:2c:21:af:89:cb:7f:d8:19:8f:50:8d:17:31:4a: a3:37:1d:8b:fb:1c:e2:1c:de:8f:3c:f3:6a:cf:2d:e3:60:78: 23:04:a2:45:cb:46:4c:13:18:fd:db:99:cd:34:71:ab:1f:11: b2:1e:59:41 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUFgWVLSXedBkOQm+SxeaxE6R8v1kwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMzhBOTI0MTlFRTEyODk0NTVGQ0IxQjcxRjk0MjBGMDVD QTMzNEMxNTAeFw0yNjAxMjQwOTQ1MDBaFw0yNjAxMjcxNjM0MDBaMDMxMTAvBgNV BAMTKEM1NkIyNjFBQkU5NzNDNEIzNDgyNUQyNDRDNzlEMkQ2ODMwMEJDOTgwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDJDpFFkPJCE1HOG0VtK5K7H/L0 bqvqIngDaIDVAdhgPVDO9pOvg8tlNz+gtgCPRPap8hwFX+dOG/Bt0v9RbPxMaRuH dYmWrhikBHdyWWwtJw4wNqgwk5GlkXPYTTLvDXgtkMYXha8b3KumdwVaG8D/XQYK wlxTDaHf8GX67YzhunxeJQu+drzCbd6CMFDGwTMjg0cgfJtAaNDGUB2+Q3cG+duf g3+u1iQJI7QFWmvgnTd5dwasS0M0H07lqFpiFqh7mot4Br3CRze5GHQ49nWTo/Iw wLXFmEhIXBDyEIoP7qHvz1FrQmB70bJVQ+lsiWRxZOPkLqk2+XYPQnPZH1gxAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUxWsmGr6XPEs0gl0kTHnS1oMAvJgwHwYDVR0j BBgwFoAUOKkkGe4SiUVfyxtx+UIPBcozTBUwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby9h NmRhZDhjYi1hNTM3LTRjNTAtYWY2YS1hYWJhNWYxZTc2NDQvMC8zOEE5MjQxOUVF MTI4OTQ1NUZDQjFCNzFGOTQyMEYwNUNBMzM0QzE1LmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvMzhBOTI0MTlFRTEyODk0NTVGQ0IxQjcxRjk0MjBGMDVDQTMz NEMxNS5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vYTZkYWQ4Y2ItYTUzNy00YzUwLWFm NmEtYWFiYTVmMWU3NjQ0LzAvMzhBOTI0MTlFRTEyODk0NTVGQ0IxQjcxRjk0MjBG MDVDQTMzNEMxNS5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAI3A+oiFSGu2qKaKIJTMoCwzyjwrK7tKvGAO wbBouK5jcJmKMd8yj12aje4jSHiTUkV1dN9ZILQzxFJjvwaQ3DTgrQPmh+NhqwtP HTbJM1bi3pcu09+ibXzFaHo+zzEoqUOuz0Ta1D2ulZ3+rnqyIl8Kb5nTaZSr4Y0Z AZM1PTJQYE+qbyfWyJK1sUp9iCS8WHcUzz5KN60/C7yp3MRTwhPauByOtEmtO+GK LTQZIzRjLqO47wZzqm9ngQXf2hSlxmH2wmWB+AWaDKksIa+Jy3/YGY9QjRcxSqM3 HYv7HOIc3o8882rPLeNgeCMEokXLRkwTGP3bmc00casfEbIeWUE= -----END CERTIFICATE-----Generated at Sun Jan 25 18:48:22 2026 by rpki-client