This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf repo-rpki.idnic.net/repo/e6929901-a137-4a35-8134-1804f94792df/0/38992A0A64D724D15761F2F9410D85186E2311FE.mft File: 38992A0A64D724D15761F2F9410D85186E2311FE.mft (raw, json) Hash identifier: pVoAD2yxWkKhYK4xBVLa++Xb7njXu/z/Wz/JtG/zjYw= Subject key identifier: 19:CA:1B:B4:FA:EE:75:C5:A6:69:C5:9E:56:F0:A0:21:DC:F5:59:41 Authority key identifier: 38:99:2A:0A:64:D7:24:D1:57:61:F2:F9:41:0D:85:18:6E:23:11:FE Certificate issuer: /CN=38992A0A64D724D15761F2F9410D85186E2311FE Certificate serial: 0936A615F5DA78FACE8936A512C9BB8315CDBA09 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/38992A0A64D724D15761F2F9410D85186E2311FE.cer Subject info access: rsync://repo-rpki.idnic.net/repo/e6929901-a137-4a35-8134-1804f94792df/0/38992A0A64D724D15761F2F9410D85186E2311FE.mft Manifest number: 01DA Signing time: Fri 05 Dec 2025 06:40:44 +0000 Manifest this update: Fri 05 Dec 2025 06:35:44 +0000 Manifest next update: Mon 08 Dec 2025 11:48:44 +0000 Files and hashes: 1: 3130332e3134332e39352e302f32342d3234203d3e20313339333932.roa (hash: kHcd0PiR+avo06lt/QU/A5Sa1D2RSw2rXV6RMIKGIO8=) 2: 3130332e3135332e3138342e302f32342d3234203d3e20313339333932.roa (hash: d6Adr6ZZkYn4Jq27NkWDxIH+Fg4wpxOILm0JtNJ0Cfc=) 3: 38992A0A64D724D15761F2F9410D85186E2311FE.crl (hash: Q05889js9U1ARVOCCzycmL8xC8kOOh0XhrZPwnlHv48=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/e6929901-a137-4a35-8134-1804f94792df/0/38992A0A64D724D15761F2F9410D85186E2311FE.crl rsync://repo-rpki.idnic.net/repo/e6929901-a137-4a35-8134-1804f94792df/0/38992A0A64D724D15761F2F9410D85186E2311FE.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/38992A0A64D724D15761F2F9410D85186E2311FE.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 08 Dec 2025 11:48:44 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 09:36:a6:15:f5:da:78:fa:ce:89:36:a5:12:c9:bb:83:15:cd:ba:09 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=38992A0A64D724D15761F2F9410D85186E2311FE Validity Not Before: Dec 5 06:35:44 2025 GMT Not After : Dec 8 11:48:44 2025 GMT Subject: CN=19CA1BB4FAEE75C5A669C59E56F0A021DCF55941 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bb:de:b0:5b:f9:05:32:33:4e:fd:3b:b4:f3:32: 51:2b:c7:1e:78:86:b4:44:26:01:67:a6:44:21:cd: aa:12:f4:b9:c5:61:02:86:7e:5a:b6:3d:29:85:3c: 0e:b1:25:29:3f:0b:73:a1:07:02:c2:e7:fb:76:75: d2:48:a3:6f:e2:41:fc:33:d8:70:34:73:c3:3d:d1: 90:0b:75:43:75:26:45:41:86:bb:64:f2:2d:e1:08: 70:c9:29:c7:93:8f:0c:2f:d6:17:62:7b:16:bb:17: 40:67:cd:d8:66:5b:73:bc:38:59:9f:e1:aa:60:6a: 30:e9:de:21:02:ba:ac:b5:3a:da:3c:ed:eb:c1:fd: 2f:62:ee:d0:81:e6:91:32:f9:21:91:37:3c:3e:eb: a4:a1:b2:fc:6c:b4:93:72:4b:27:47:3d:f7:6a:da: 28:48:ea:fa:82:1f:7f:8b:fd:99:76:43:26:ff:1d: 81:cc:d0:e8:82:de:d3:30:78:48:98:7d:f2:89:4d: 20:38:5f:7e:5a:6f:6b:d4:43:7d:4e:ec:3f:ae:55: a9:4d:78:00:4c:2c:b1:64:81:9c:bf:2d:ec:58:3b: c8:57:b0:40:52:16:a1:3b:10:0d:c9:78:94:1c:e8: 10:6a:36:83:bd:0a:4e:04:b0:84:4e:0b:98:0f:49: bf:b7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 19:CA:1B:B4:FA:EE:75:C5:A6:69:C5:9E:56:F0:A0:21:DC:F5:59:41 X509v3 Authority Key Identifier: keyid:38:99:2A:0A:64:D7:24:D1:57:61:F2:F9:41:0D:85:18:6E:23:11:FE X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/e6929901-a137-4a35-8134-1804f94792df/0/38992A0A64D724D15761F2F9410D85186E2311FE.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/38992A0A64D724D15761F2F9410D85186E2311FE.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/e6929901-a137-4a35-8134-1804f94792df/0/38992A0A64D724D15761F2F9410D85186E2311FE.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 92:e1:14:d1:48:47:be:85:65:8e:5b:74:a3:0a:dc:32:cf:f5: d0:9e:0d:12:e3:88:22:d4:0d:c5:19:c7:e9:a8:6b:e4:5e:41: 3b:29:eb:2f:a4:f6:87:e7:ff:94:84:44:c8:c5:11:38:f0:4e: ae:e9:90:85:bf:45:08:af:5f:ea:60:20:b2:ef:c4:d5:c1:49: fb:8a:5a:f5:39:ae:d4:ee:41:95:b2:bd:d6:ce:47:ca:0e:dd: 90:3a:67:3d:ce:ef:3e:0e:19:a6:ec:4b:ef:9d:8d:77:2a:d5: 30:c7:72:f1:cd:0f:12:31:97:76:63:83:89:45:50:54:dd:5d: e3:12:f0:c8:93:3a:c4:ac:25:32:b4:ab:6c:3a:f5:cb:cb:06: bd:00:ea:d7:65:9f:46:15:8c:9e:0d:61:ae:85:ab:04:8e:e1: 33:5d:98:e2:16:8f:53:ee:7c:1b:a9:85:fc:7b:5b:b9:15:53: 70:16:a3:6f:57:d6:82:4a:88:b2:d8:d1:13:cb:69:56:a0:2c: 30:ac:3f:97:6e:bf:e2:e4:57:c6:70:97:f4:29:15:01:a0:c3: 78:b1:13:8d:6a:ee:3b:d2:42:94:c5:88:7b:6f:b2:3c:05:2a: ee:e5:13:c7:6f:d7:d0:58:9e:67:29:61:e8:ff:ec:73:ed:e3: 84:44:df:d6 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUCTamFfXaePrOiTalEsm7gxXNugkwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMzg5OTJBMEE2NEQ3MjREMTU3NjFGMkY5NDEwRDg1MTg2 RTIzMTFGRTAeFw0yNTEyMDUwNjM1NDRaFw0yNTEyMDgxMTQ4NDRaMDMxMTAvBgNV BAMTKDE5Q0ExQkI0RkFFRTc1QzVBNjY5QzU5RTU2RjBBMDIxRENGNTU5NDEwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC73rBb+QUyM079O7TzMlErxx54 hrREJgFnpkQhzaoS9LnFYQKGflq2PSmFPA6xJSk/C3OhBwLC5/t2ddJIo2/iQfwz 2HA0c8M90ZALdUN1JkVBhrtk8i3hCHDJKceTjwwv1hdiexa7F0BnzdhmW3O8OFmf 4apgajDp3iECuqy1Oto87evB/S9i7tCB5pEy+SGRNzw+66ShsvxstJNySydHPfdq 2ihI6vqCH3+L/Zl2Qyb/HYHM0OiC3tMweEiYffKJTSA4X35ab2vUQ31O7D+uValN eABMLLFkgZy/LexYO8hXsEBSFqE7EA3JeJQc6BBqNoO9Ck4EsIROC5gPSb+3AgMB AAGjggI8MIICODAdBgNVHQ4EFgQUGcobtPrudcWmacWeVvCgIdz1WUEwHwYDVR0j BBgwFoAUOJkqCmTXJNFXYfL5QQ2FGG4jEf4wDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby9l NjkyOTkwMS1hMTM3LTRhMzUtODEzNC0xODA0Zjk0NzkyZGYvMC8zODk5MkEwQTY0 RDcyNEQxNTc2MUYyRjk0MTBEODUxODZFMjMxMUZFLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvMzg5OTJBMEE2NEQ3MjREMTU3NjFGMkY5NDEwRDg1MTg2RTIz MTFGRS5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vZTY5Mjk5MDEtYTEzNy00YTM1LTgx MzQtMTgwNGY5NDc5MmRmLzAvMzg5OTJBMEE2NEQ3MjREMTU3NjFGMkY5NDEwRDg1 MTg2RTIzMTFGRS5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAJLhFNFIR76FZY5bdKMK3DLP9dCeDRLjiCLU DcUZx+moa+ReQTsp6y+k9ofn/5SERMjFETjwTq7pkIW/RQivX+pgILLvxNXBSfuK WvU5rtTuQZWyvdbOR8oO3ZA6Zz3O7z4OGabsS++djXcq1TDHcvHNDxIxl3Zjg4lF UFTdXeMS8MiTOsSsJTK0q2w69cvLBr0A6tdln0YVjJ4NYa6FqwSO4TNdmOIWj1Pu fBuphfx7W7kVU3AWo29X1oJKiLLY0RPLaVagLDCsP5duv+LkV8Zwl/QpFQGgw3ix E41q7jvSQpTFiHtvsjwFKu7lE8dv19BYnmcpYej/7HPt44RE39Y= -----END CERTIFICATE-----Generated at Sun Dec 7 06:17:57 2025 by rpki-client