This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf repo-rpki.idnic.net/repo/e6929901-a137-4a35-8134-1804f94792df/0/38992A0A64D724D15761F2F9410D85186E2311FE.mft File: 38992A0A64D724D15761F2F9410D85186E2311FE.mft (raw, json) Hash identifier: ycs45T16gztgk2AwF4q6qCOFD8NOi8Gv/U0T6aDy3tI= Subject key identifier: 75:DA:5C:D5:23:26:D1:33:8E:6E:06:D4:9D:33:79:29:1B:36:10:01 Authority key identifier: 38:99:2A:0A:64:D7:24:D1:57:61:F2:F9:41:0D:85:18:6E:23:11:FE Certificate issuer: /CN=38992A0A64D724D15761F2F9410D85186E2311FE Certificate serial: 21C40BBCBB40B92AB1B4C5A138A27AFCA572BF10 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/38992A0A64D724D15761F2F9410D85186E2311FE.cer Subject info access: rsync://repo-rpki.idnic.net/repo/e6929901-a137-4a35-8134-1804f94792df/0/38992A0A64D724D15761F2F9410D85186E2311FE.mft Manifest number: 01F0 Signing time: Sat 24 Jan 2026 15:40:45 +0000 Manifest this update: Sat 24 Jan 2026 15:35:45 +0000 Manifest next update: Tue 27 Jan 2026 18:03:45 +0000 Files and hashes: 1: 38992A0A64D724D15761F2F9410D85186E2311FE.crl (hash: t+nb+ijZyPERVY6gLlA/FtmtwCvLgW8JnWPilclTIOc=) 2: 3130332e3134332e39352e302f32342d3234203d3e20313339333932.roa (hash: kHcd0PiR+avo06lt/QU/A5Sa1D2RSw2rXV6RMIKGIO8=) 3: 3130332e3135332e3138342e302f32342d3234203d3e20313339333932.roa (hash: d6Adr6ZZkYn4Jq27NkWDxIH+Fg4wpxOILm0JtNJ0Cfc=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/e6929901-a137-4a35-8134-1804f94792df/0/38992A0A64D724D15761F2F9410D85186E2311FE.crl rsync://repo-rpki.idnic.net/repo/e6929901-a137-4a35-8134-1804f94792df/0/38992A0A64D724D15761F2F9410D85186E2311FE.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/38992A0A64D724D15761F2F9410D85186E2311FE.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 27 Jan 2026 18:03:45 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 21:c4:0b:bc:bb:40:b9:2a:b1:b4:c5:a1:38:a2:7a:fc:a5:72:bf:10 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=38992A0A64D724D15761F2F9410D85186E2311FE Validity Not Before: Jan 24 15:35:45 2026 GMT Not After : Jan 27 18:03:45 2026 GMT Subject: CN=75DA5CD52326D1338E6E06D49D3379291B361001 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a6:75:ff:ec:94:0e:61:7b:de:00:82:5e:6a:24: 27:ac:16:ce:d3:aa:0c:55:48:1d:7f:cc:2f:44:74: 1b:2b:c8:5a:b1:c3:26:19:55:df:3a:de:a6:72:fa: 3b:2e:b2:e8:20:e2:7d:60:3f:62:23:ed:15:e7:a9: 5b:31:b1:e6:d4:8d:dc:54:b7:b0:ab:3d:10:94:41: 83:45:81:c1:fd:d1:85:ed:65:d0:8c:32:45:c9:97: a0:b6:7c:ea:0d:9e:4a:09:2f:92:69:9b:6b:dd:be: db:91:62:e1:04:6a:a9:04:c2:e3:25:c6:da:09:e2: b5:e2:ac:c1:c1:d2:62:65:de:f6:a2:86:3b:de:20: 61:a8:cf:e0:66:57:b7:c3:f1:31:e4:48:d5:2a:d6: f9:b5:05:9a:64:4f:f4:24:cc:49:58:86:54:65:d1: ac:29:14:3c:3e:52:5d:b0:30:57:90:49:7b:6a:da: b2:43:96:ba:ea:1d:51:59:66:97:53:68:9c:5e:74: 2b:ea:03:c4:77:e7:84:8a:b3:db:4c:a9:52:d3:f9: 20:47:16:c5:21:90:e6:e6:54:c1:c7:53:5a:57:88: 12:13:8a:91:cf:50:c5:9b:9a:04:50:3a:15:4d:96: 41:16:f5:8d:24:b3:b2:dd:3d:95:c9:8a:e5:a1:be: 9b:93 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 75:DA:5C:D5:23:26:D1:33:8E:6E:06:D4:9D:33:79:29:1B:36:10:01 X509v3 Authority Key Identifier: keyid:38:99:2A:0A:64:D7:24:D1:57:61:F2:F9:41:0D:85:18:6E:23:11:FE X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/e6929901-a137-4a35-8134-1804f94792df/0/38992A0A64D724D15761F2F9410D85186E2311FE.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/38992A0A64D724D15761F2F9410D85186E2311FE.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/e6929901-a137-4a35-8134-1804f94792df/0/38992A0A64D724D15761F2F9410D85186E2311FE.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption b0:63:53:7b:48:38:fd:30:9b:ae:c0:78:63:38:10:38:c1:fa: e6:87:b1:79:81:20:d0:be:08:11:b8:8a:b8:20:34:35:68:f6: af:43:7f:7f:b8:5a:08:b0:31:62:22:ff:be:99:8c:88:c2:72: 22:65:66:3b:7d:a8:20:dc:c8:7e:5f:a9:06:01:59:69:cf:56: 3a:55:10:62:1d:1c:87:a5:9e:8d:59:8c:24:59:19:ee:a9:76: 41:65:41:17:3c:61:09:d2:c4:55:df:fc:98:55:09:70:43:dc: 0d:7f:40:f6:84:2c:e1:a7:33:cd:b3:ac:9c:fb:77:92:a1:47: 92:23:f0:89:fb:64:43:84:43:b3:42:2e:4f:ff:0d:51:cd:b0: d0:52:38:01:04:0d:3b:a3:d1:4d:9b:66:18:af:64:8a:30:24: 2d:40:0f:7b:31:4f:37:e8:bd:94:bc:94:39:7a:25:76:b6:a0: 92:31:1f:ec:b3:ba:8e:1e:d8:cd:56:77:df:f5:c0:6c:cc:43: 73:63:ed:35:3a:02:c5:55:ed:c9:fa:0b:6c:45:96:77:64:74: a9:f4:a4:2f:be:0e:87:45:48:65:50:22:26:21:3f:a0:74:28: cc:65:fa:02:a3:82:c7:98:84:28:a1:27:66:48:2b:cd:68:04: 2f:e4:6a:9a -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUIcQLvLtAuSqxtMWhOKJ6/KVyvxAwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMzg5OTJBMEE2NEQ3MjREMTU3NjFGMkY5NDEwRDg1MTg2 RTIzMTFGRTAeFw0yNjAxMjQxNTM1NDVaFw0yNjAxMjcxODAzNDVaMDMxMTAvBgNV BAMTKDc1REE1Q0Q1MjMyNkQxMzM4RTZFMDZENDlEMzM3OTI5MUIzNjEwMDEwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCmdf/slA5he94Agl5qJCesFs7T qgxVSB1/zC9EdBsryFqxwyYZVd863qZy+jsusugg4n1gP2Ij7RXnqVsxsebUjdxU t7CrPRCUQYNFgcH90YXtZdCMMkXJl6C2fOoNnkoJL5Jpm2vdvtuRYuEEaqkEwuMl xtoJ4rXirMHB0mJl3vaihjveIGGoz+BmV7fD8THkSNUq1vm1BZpkT/QkzElYhlRl 0awpFDw+Ul2wMFeQSXtq2rJDlrrqHVFZZpdTaJxedCvqA8R354SKs9tMqVLT+SBH FsUhkObmVMHHU1pXiBITipHPUMWbmgRQOhVNlkEW9Y0ks7LdPZXJiuWhvpuTAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUddpc1SMm0TOObgbUnTN5KRs2EAEwHwYDVR0j BBgwFoAUOJkqCmTXJNFXYfL5QQ2FGG4jEf4wDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby9l NjkyOTkwMS1hMTM3LTRhMzUtODEzNC0xODA0Zjk0NzkyZGYvMC8zODk5MkEwQTY0 RDcyNEQxNTc2MUYyRjk0MTBEODUxODZFMjMxMUZFLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvMzg5OTJBMEE2NEQ3MjREMTU3NjFGMkY5NDEwRDg1MTg2RTIz MTFGRS5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vZTY5Mjk5MDEtYTEzNy00YTM1LTgx MzQtMTgwNGY5NDc5MmRmLzAvMzg5OTJBMEE2NEQ3MjREMTU3NjFGMkY5NDEwRDg1 MTg2RTIzMTFGRS5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBALBjU3tIOP0wm67AeGM4EDjB+uaHsXmBINC+ CBG4irggNDVo9q9Df3+4WgiwMWIi/76ZjIjCciJlZjt9qCDcyH5fqQYBWWnPVjpV EGIdHIelno1ZjCRZGe6pdkFlQRc8YQnSxFXf/JhVCXBD3A1/QPaELOGnM82zrJz7 d5KhR5Ij8In7ZEOEQ7NCLk//DVHNsNBSOAEEDTuj0U2bZhivZIowJC1AD3sxTzfo vZS8lDl6JXa2oJIxH+yzuo4e2M1Wd9/1wGzMQ3Nj7TU6AsVV7cn6C2xFlndkdKn0 pC++DodFSGVQIiYhP6B0KMxl+gKjgseYhCihJ2ZIK81oBC/kapo= -----END CERTIFICATE-----Generated at Sun Jan 25 18:48:21 2026 by rpki-client