This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf repo-rpki.idnic.net/repo/205af822-bea9-48f3-aa12-b2737162fc42/0/38E19BA955DC939F0FD5EB77C83043AEABB72335.mft File: 38E19BA955DC939F0FD5EB77C83043AEABB72335.mft (raw, json) Hash identifier: pznL4MuAV6WjjJky42YddfSoBKWNjYpkmoT3cx30eAg= Subject key identifier: 45:15:C1:53:2C:96:42:AF:6F:A2:DD:53:F6:DB:19:9D:A4:53:F0:39 Authority key identifier: 38:E1:9B:A9:55:DC:93:9F:0F:D5:EB:77:C8:30:43:AE:AB:B7:23:35 Certificate issuer: /CN=38E19BA955DC939F0FD5EB77C83043AEABB72335 Certificate serial: 3AB4D71035CBD1F8FC9711F5C885B8648BD98FF8 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/38E19BA955DC939F0FD5EB77C83043AEABB72335.cer Subject info access: rsync://repo-rpki.idnic.net/repo/205af822-bea9-48f3-aa12-b2737162fc42/0/38E19BA955DC939F0FD5EB77C83043AEABB72335.mft Manifest number: 0189 Signing time: Thu 18 Dec 2025 18:41:10 +0000 Manifest this update: Thu 18 Dec 2025 18:36:10 +0000 Manifest next update: Mon 22 Dec 2025 03:32:10 +0000 Files and hashes: 1: 3130332e3233362e3134302e302f32342d3234203d3e20313531353138.roa (hash: /7IuJZAwwBq7SuIrNQW6iaVueky5hyLhQUZ7/ozbnk8=) 2: 38E19BA955DC939F0FD5EB77C83043AEABB72335.crl (hash: 6wEfJ8xJ426hlAXw6hHcA0SwASDzcWFPXNInhjnhkR0=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/205af822-bea9-48f3-aa12-b2737162fc42/0/38E19BA955DC939F0FD5EB77C83043AEABB72335.crl rsync://repo-rpki.idnic.net/repo/205af822-bea9-48f3-aa12-b2737162fc42/0/38E19BA955DC939F0FD5EB77C83043AEABB72335.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/38E19BA955DC939F0FD5EB77C83043AEABB72335.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 21 Dec 2025 13:29:31 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 3a:b4:d7:10:35:cb:d1:f8:fc:97:11:f5:c8:85:b8:64:8b:d9:8f:f8 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=38E19BA955DC939F0FD5EB77C83043AEABB72335 Validity Not Before: Dec 18 18:36:10 2025 GMT Not After : Dec 22 03:32:10 2025 GMT Subject: CN=4515C1532C9642AF6FA2DD53F6DB199DA453F039 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bf:e8:a5:e2:a8:5a:1d:6d:81:e7:7f:93:c2:97: 4a:41:b3:09:cd:c7:36:8f:5d:66:52:d8:cb:d2:dd: d9:d4:28:7c:82:7d:03:44:d8:16:71:56:43:bb:0f: 14:8c:02:7e:f2:77:8b:c8:7d:0c:89:e8:c9:0a:c8: 87:2d:8d:23:00:81:92:bd:d2:58:78:a5:84:4f:72: 98:aa:47:2c:31:38:44:9e:83:80:fa:75:0f:29:17: 50:d5:69:2b:6e:e1:8f:d9:a0:e4:4e:97:75:79:3e: b3:1e:3c:70:22:41:a9:3f:49:3b:17:ef:bd:e5:4e: ea:ab:0d:7d:c8:48:eb:61:47:63:97:97:ab:fd:d5: 0f:94:c3:42:ea:37:d1:f9:a0:58:1f:aa:4b:83:ee: 2b:25:10:b5:df:fe:99:0b:43:10:2d:ee:e4:58:5b: d5:62:0e:db:4c:d8:d1:aa:d0:1d:d4:85:52:10:79: 95:bf:5c:ac:bd:db:d6:f7:fe:a5:92:4a:b6:47:51: a1:f1:d5:29:cc:28:db:bd:d0:4b:2a:e2:82:93:4c: b6:0c:70:3e:da:03:79:50:9d:f8:d9:bf:dc:e4:78: 32:b6:5f:e3:c5:ba:9a:8c:84:56:56:7a:41:4c:19: 13:51:8f:88:5e:97:74:64:38:3c:38:00:a1:af:79: b5:9f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 45:15:C1:53:2C:96:42:AF:6F:A2:DD:53:F6:DB:19:9D:A4:53:F0:39 X509v3 Authority Key Identifier: keyid:38:E1:9B:A9:55:DC:93:9F:0F:D5:EB:77:C8:30:43:AE:AB:B7:23:35 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/205af822-bea9-48f3-aa12-b2737162fc42/0/38E19BA955DC939F0FD5EB77C83043AEABB72335.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/38E19BA955DC939F0FD5EB77C83043AEABB72335.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/205af822-bea9-48f3-aa12-b2737162fc42/0/38E19BA955DC939F0FD5EB77C83043AEABB72335.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 22:a4:08:30:be:0d:5f:11:52:82:e6:13:10:19:3f:59:56:55: d7:97:88:d1:8f:09:b1:1e:d0:cc:19:3c:c1:b6:d7:75:35:82: ae:40:23:55:89:f0:5a:c8:be:9f:b1:f6:85:0f:8a:10:95:19: 04:69:0e:70:c6:0e:56:06:54:21:22:3e:4c:b5:96:b1:b9:9e: a3:70:70:44:b2:1d:55:66:4c:c1:44:1d:56:7c:7f:da:37:3a: 11:ba:c0:13:df:1c:cd:05:14:3c:38:fb:03:33:e0:e1:73:e0: 47:95:e1:e9:00:98:3d:4e:42:87:46:9f:79:18:38:e8:9f:2f: df:8a:df:42:02:d1:6d:ad:00:eb:f8:c1:76:d4:3a:df:46:74: fd:10:86:0a:41:f1:0f:9f:31:74:4e:bb:7f:1f:85:69:ca:0f: c9:73:10:e7:27:5b:e8:b8:b1:d0:32:f9:38:41:9b:1c:6e:51: f8:3c:97:b4:c9:dd:af:d0:d5:04:e5:6a:98:0c:02:6a:5c:f2: 71:d5:98:a1:30:70:bd:a3:56:20:e2:2e:05:be:11:1b:b6:23: 4f:dd:fd:2f:7b:3a:78:75:d9:4c:c1:ea:fd:fc:a5:3d:a7:f9: 75:cf:8e:fc:e0:ef:83:64:f2:eb:87:ab:37:ea:f6:bb:ea:9a: 26:7d:d2:6e -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUOrTXEDXL0fj8lxH1yIW4ZIvZj/gwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMzhFMTlCQTk1NURDOTM5RjBGRDVFQjc3QzgzMDQzQUVB QkI3MjMzNTAeFw0yNTEyMTgxODM2MTBaFw0yNTEyMjIwMzMyMTBaMDMxMTAvBgNV BAMTKDQ1MTVDMTUzMkM5NjQyQUY2RkEyREQ1M0Y2REIxOTlEQTQ1M0YwMzkwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC/6KXiqFodbYHnf5PCl0pBswnN xzaPXWZS2MvS3dnUKHyCfQNE2BZxVkO7DxSMAn7yd4vIfQyJ6MkKyIctjSMAgZK9 0lh4pYRPcpiqRywxOESeg4D6dQ8pF1DVaStu4Y/ZoOROl3V5PrMePHAiQak/STsX 773lTuqrDX3ISOthR2OXl6v91Q+Uw0LqN9H5oFgfqkuD7islELXf/pkLQxAt7uRY W9ViDttM2NGq0B3UhVIQeZW/XKy929b3/qWSSrZHUaHx1SnMKNu90Esq4oKTTLYM cD7aA3lQnfjZv9zkeDK2X+PFupqMhFZWekFMGRNRj4hel3RkODw4AKGvebWfAgMB AAGjggI8MIICODAdBgNVHQ4EFgQURRXBUyyWQq9vot1T9tsZnaRT8DkwHwYDVR0j BBgwFoAUOOGbqVXck58P1et3yDBDrqu3IzUwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby8y MDVhZjgyMi1iZWE5LTQ4ZjMtYWExMi1iMjczNzE2MmZjNDIvMC8zOEUxOUJBOTU1 REM5MzlGMEZENUVCNzdDODMwNDNBRUFCQjcyMzM1LmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvMzhFMTlCQTk1NURDOTM5RjBGRDVFQjc3QzgzMDQzQUVBQkI3 MjMzNS5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vMjA1YWY4MjItYmVhOS00OGYzLWFh MTItYjI3MzcxNjJmYzQyLzAvMzhFMTlCQTk1NURDOTM5RjBGRDVFQjc3QzgzMDQz QUVBQkI3MjMzNS5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBACKkCDC+DV8RUoLmExAZP1lWVdeXiNGPCbEe 0MwZPMG213U1gq5AI1WJ8FrIvp+x9oUPihCVGQRpDnDGDlYGVCEiPky1lrG5nqNw cESyHVVmTMFEHVZ8f9o3OhG6wBPfHM0FFDw4+wMz4OFz4EeV4ekAmD1OQodGn3kY OOifL9+K30IC0W2tAOv4wXbUOt9GdP0QhgpB8Q+fMXROu38fhWnKD8lzEOcnW+i4 sdAy+ThBmxxuUfg8l7TJ3a/Q1QTlapgMAmpc8nHVmKEwcL2jViDiLgW+ERu2I0/d /S97Onh12UzB6v38pT2n+XXPjvzg74Nk8uuHqzfq9rvqmiZ90m4= -----END CERTIFICATE-----Generated at Fri Dec 19 00:49:29 2025 by rpki-client