This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf repo-rpki.idnic.net/repo/3340df13-c4e9-4218-b114-dead1648285c/0/038FC8DB9F4F381D614C3CDA944EDBCE2CEBB6F4.mft File: 038FC8DB9F4F381D614C3CDA944EDBCE2CEBB6F4.mft (raw, json) Hash identifier: WH0JvfHNuHAR9eKaBjZ/TqY5UujkieJzJ/WqhYH4suM= Subject key identifier: 64:F6:52:09:E8:F7:24:15:A8:B0:DB:58:C9:8A:A9:03:B8:EC:2B:9D Authority key identifier: 03:8F:C8:DB:9F:4F:38:1D:61:4C:3C:DA:94:4E:DB:CE:2C:EB:B6:F4 Certificate issuer: /CN=038FC8DB9F4F381D614C3CDA944EDBCE2CEBB6F4 Certificate serial: 21AFFB1DEEDF6A95422B23885095B8C70881DDDD Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/038FC8DB9F4F381D614C3CDA944EDBCE2CEBB6F4.cer Subject info access: rsync://repo-rpki.idnic.net/repo/3340df13-c4e9-4218-b114-dead1648285c/0/038FC8DB9F4F381D614C3CDA944EDBCE2CEBB6F4.mft Manifest number: 0195 Signing time: Wed 17 Dec 2025 21:20:58 +0000 Manifest this update: Wed 17 Dec 2025 21:15:58 +0000 Manifest next update: Sun 21 Dec 2025 06:14:58 +0000 Files and hashes: 1: 038FC8DB9F4F381D614C3CDA944EDBCE2CEBB6F4.crl (hash: eU0vJ/+ZCXmxZeu9GdpcFy+HlPu+m96pmrBd7YrAX+U=) 2: 3130332e3231382e3130342e302f32342d3234203d3e20313530323138.roa (hash: iFZpayjOhiD/nihPfQLVc2Bw/muiBocrb9Vl1jBbDNE=) 3: 3130332e32302e35302e302f32342d3234203d3e20313530323138.roa (hash: PTsTBXGsNz8ocE/IUTQsqbcgk5S4dmL+3UaKaWrcOZo=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/3340df13-c4e9-4218-b114-dead1648285c/0/038FC8DB9F4F381D614C3CDA944EDBCE2CEBB6F4.crl rsync://repo-rpki.idnic.net/repo/3340df13-c4e9-4218-b114-dead1648285c/0/038FC8DB9F4F381D614C3CDA944EDBCE2CEBB6F4.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/038FC8DB9F4F381D614C3CDA944EDBCE2CEBB6F4.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 21 Dec 2025 06:14:58 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 21:af:fb:1d:ee:df:6a:95:42:2b:23:88:50:95:b8:c7:08:81:dd:dd Signature Algorithm: sha256WithRSAEncryption Issuer: CN=038FC8DB9F4F381D614C3CDA944EDBCE2CEBB6F4 Validity Not Before: Dec 17 21:15:58 2025 GMT Not After : Dec 21 06:14:58 2025 GMT Subject: CN=64F65209E8F72415A8B0DB58C98AA903B8EC2B9D Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c2:4a:3b:9b:a8:3b:bb:7f:96:18:64:1d:63:6e: fd:de:54:39:9e:56:68:a9:92:b2:c5:0e:e4:df:b7: 41:a9:bb:09:98:f7:f8:f8:31:90:dc:f6:22:bf:aa: fe:81:88:d3:b3:53:9d:00:da:ba:8b:6b:4a:13:13: 1e:03:a2:4e:60:7e:0d:3b:38:2e:b7:70:7b:cd:f9: d7:8f:66:eb:83:ce:94:2b:66:e6:34:0f:20:67:15: 84:09:62:cc:f7:55:a1:b5:81:b5:46:6f:8d:41:c8: 48:d4:b4:e0:93:dc:3c:6a:16:ec:37:b8:ee:e3:dc: 45:b1:6c:99:9e:5c:02:d7:2e:86:80:de:cc:66:8c: 28:8e:16:79:c1:fb:6e:7e:07:fa:23:52:47:a9:36: 44:0e:fd:20:d1:07:19:f5:c4:20:20:cc:a8:9f:c8: 3a:b4:c8:9f:79:72:d4:9e:90:93:c3:d8:ac:71:4e: 18:54:06:21:d6:55:fb:1a:e2:b3:dd:b1:52:87:00: 80:c6:c2:3b:d4:9d:b7:40:97:88:43:98:0b:1d:0e: f8:15:e6:db:86:d5:77:6c:d0:78:7b:bb:b7:11:c3: 77:f3:9c:86:50:17:06:ae:8d:12:af:aa:44:52:d7: 15:55:b5:b6:25:3a:02:16:c9:d3:d2:4c:fb:32:16: 6e:85 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 64:F6:52:09:E8:F7:24:15:A8:B0:DB:58:C9:8A:A9:03:B8:EC:2B:9D X509v3 Authority Key Identifier: keyid:03:8F:C8:DB:9F:4F:38:1D:61:4C:3C:DA:94:4E:DB:CE:2C:EB:B6:F4 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/3340df13-c4e9-4218-b114-dead1648285c/0/038FC8DB9F4F381D614C3CDA944EDBCE2CEBB6F4.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/038FC8DB9F4F381D614C3CDA944EDBCE2CEBB6F4.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/3340df13-c4e9-4218-b114-dead1648285c/0/038FC8DB9F4F381D614C3CDA944EDBCE2CEBB6F4.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 1e:55:fb:56:f6:2d:dc:1a:12:da:60:1f:80:d7:8f:09:f2:43: 97:e3:8d:bc:4f:c4:9a:14:51:57:ec:ea:44:56:8e:22:7f:82: 5d:d4:86:76:02:ce:70:bf:ca:ee:71:b5:f3:8c:0a:03:86:bb: cb:5b:70:87:1a:51:1c:84:86:83:04:c9:81:10:1e:b4:78:9b: c5:64:11:7a:51:b2:8d:29:82:f1:2c:2c:17:e8:58:07:da:19: 8c:d5:ab:fa:a6:4c:84:3d:41:95:c2:fc:8a:64:e1:69:13:d5: ad:78:74:c7:b3:55:29:26:f6:e9:3e:f7:cc:b9:ef:e2:d0:95: 36:67:7f:a3:da:d0:d6:97:b7:ff:29:57:ff:47:50:02:fb:e8: ac:86:10:ee:d7:ff:82:30:66:18:a3:33:57:fa:72:b2:99:8c: 0a:5d:57:ab:dc:2b:cf:dc:78:e5:99:3b:88:15:f6:6b:93:12: 9d:76:75:e9:45:06:23:01:ab:e6:e2:6a:75:31:a2:f0:83:21: d3:aa:c0:7c:29:15:ef:1f:2f:22:d8:0c:87:e7:17:55:51:fc: 4f:dd:fd:e6:ac:7f:bf:9c:ae:6d:4f:72:c2:f7:1d:7b:71:53: b4:18:bd:91:83:46:51:94:42:63:d8:ef:c0:4a:3b:d6:36:9f: 1a:30:81:ff -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUIa/7He7fapVCKyOIUJW4xwiB3d0wDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMDM4RkM4REI5RjRGMzgxRDYxNEMzQ0RBOTQ0RURCQ0Uy Q0VCQjZGNDAeFw0yNTEyMTcyMTE1NThaFw0yNTEyMjEwNjE0NThaMDMxMTAvBgNV BAMTKDY0RjY1MjA5RThGNzI0MTVBOEIwREI1OEM5OEFBOTAzQjhFQzJCOUQwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDCSjubqDu7f5YYZB1jbv3eVDme VmipkrLFDuTft0GpuwmY9/j4MZDc9iK/qv6BiNOzU50A2rqLa0oTEx4Dok5gfg07 OC63cHvN+dePZuuDzpQrZuY0DyBnFYQJYsz3VaG1gbVGb41ByEjUtOCT3DxqFuw3 uO7j3EWxbJmeXALXLoaA3sxmjCiOFnnB+25+B/ojUkepNkQO/SDRBxn1xCAgzKif yDq0yJ95ctSekJPD2KxxThhUBiHWVfsa4rPdsVKHAIDGwjvUnbdAl4hDmAsdDvgV 5tuG1Xds0Hh7u7cRw3fznIZQFwaujRKvqkRS1xVVtbYlOgIWydPSTPsyFm6FAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUZPZSCej3JBWosNtYyYqpA7jsK50wHwYDVR0j BBgwFoAUA4/I259POB1hTDzalE7bzizrtvQwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby8z MzQwZGYxMy1jNGU5LTQyMTgtYjExNC1kZWFkMTY0ODI4NWMvMC8wMzhGQzhEQjlG NEYzODFENjE0QzNDREE5NDRFREJDRTJDRUJCNkY0LmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvMDM4RkM4REI5RjRGMzgxRDYxNEMzQ0RBOTQ0RURCQ0UyQ0VC QjZGNC5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vMzM0MGRmMTMtYzRlOS00MjE4LWIx MTQtZGVhZDE2NDgyODVjLzAvMDM4RkM4REI5RjRGMzgxRDYxNEMzQ0RBOTQ0RURC Q0UyQ0VCQjZGNC5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAB5V+1b2LdwaEtpgH4DXjwnyQ5fjjbxPxJoU UVfs6kRWjiJ/gl3UhnYCznC/yu5xtfOMCgOGu8tbcIcaURyEhoMEyYEQHrR4m8Vk EXpRso0pgvEsLBfoWAfaGYzVq/qmTIQ9QZXC/Ipk4WkT1a14dMezVSkm9uk+98y5 7+LQlTZnf6Pa0NaXt/8pV/9HUAL76KyGEO7X/4IwZhijM1f6crKZjApdV6vcK8/c eOWZO4gV9muTEp12delFBiMBq+bianUxovCDIdOqwHwpFe8fLyLYDIfnF1VR/E/d /easf7+crm1PcsL3HXtxU7QYvZGDRlGUQmPY78BKO9Y2nxowgf8= -----END CERTIFICATE-----Generated at Sat Dec 20 20:46:07 2025 by rpki-client