This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf repo-rpki.idnic.net/repo/3340df13-c4e9-4218-b114-dead1648285c/0/038FC8DB9F4F381D614C3CDA944EDBCE2CEBB6F4.mft File: 038FC8DB9F4F381D614C3CDA944EDBCE2CEBB6F4.mft (raw, json) Hash identifier: njoFaaMapB/lUHTBU7emtEFe/bjk4V6IeUXIXy3lF0w= Subject key identifier: FE:1E:7C:0C:B5:C5:89:5A:5A:CD:BC:53:E8:C4:D6:D5:02:F5:75:FC Authority key identifier: 03:8F:C8:DB:9F:4F:38:1D:61:4C:3C:DA:94:4E:DB:CE:2C:EB:B6:F4 Certificate issuer: /CN=038FC8DB9F4F381D614C3CDA944EDBCE2CEBB6F4 Certificate serial: 226B2420A9AD3F8841FD6FF3A63C9494246A0511 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/038FC8DB9F4F381D614C3CDA944EDBCE2CEBB6F4.cer Subject info access: rsync://repo-rpki.idnic.net/repo/3340df13-c4e9-4218-b114-dead1648285c/0/038FC8DB9F4F381D614C3CDA944EDBCE2CEBB6F4.mft Manifest number: 0194 Signing time: Mon 15 Dec 2025 15:20:57 +0000 Manifest this update: Mon 15 Dec 2025 15:15:57 +0000 Manifest next update: Thu 18 Dec 2025 21:11:57 +0000 Files and hashes: 1: 038FC8DB9F4F381D614C3CDA944EDBCE2CEBB6F4.crl (hash: 33eptjUKaKyTif4zvErg73LIleif7eQ5n+lbwjFyiiM=) 2: 3130332e32302e35302e302f32342d3234203d3e20313530323138.roa (hash: PTsTBXGsNz8ocE/IUTQsqbcgk5S4dmL+3UaKaWrcOZo=) 3: 3130332e3231382e3130342e302f32342d3234203d3e20313530323138.roa (hash: iFZpayjOhiD/nihPfQLVc2Bw/muiBocrb9Vl1jBbDNE=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/3340df13-c4e9-4218-b114-dead1648285c/0/038FC8DB9F4F381D614C3CDA944EDBCE2CEBB6F4.crl rsync://repo-rpki.idnic.net/repo/3340df13-c4e9-4218-b114-dead1648285c/0/038FC8DB9F4F381D614C3CDA944EDBCE2CEBB6F4.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/038FC8DB9F4F381D614C3CDA944EDBCE2CEBB6F4.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 18 Dec 2025 21:11:57 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 22:6b:24:20:a9:ad:3f:88:41:fd:6f:f3:a6:3c:94:94:24:6a:05:11 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=038FC8DB9F4F381D614C3CDA944EDBCE2CEBB6F4 Validity Not Before: Dec 15 15:15:57 2025 GMT Not After : Dec 18 21:11:57 2025 GMT Subject: CN=FE1E7C0CB5C5895A5ACDBC53E8C4D6D502F575FC Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:eb:8c:24:c2:68:b7:68:bd:92:1e:bf:b9:20:12: 85:ad:20:58:47:27:b8:6c:cd:4c:0b:b5:31:74:cc: b4:c1:eb:7b:b8:82:85:0c:20:c2:2a:a5:32:6d:4a: 5e:32:68:b2:76:4f:be:65:ab:3f:0b:6b:29:fc:42: af:7a:0c:4b:f5:16:10:a9:89:8a:50:38:05:bd:2a: 10:a7:8d:ed:fd:16:db:89:c2:bc:44:d5:a6:9b:75: 43:89:06:2a:7d:f2:4e:2b:d3:ce:c1:49:31:70:05: ea:be:14:e0:55:00:59:63:c5:c1:8c:76:bf:c4:3a: 0f:ab:cf:bd:85:01:27:be:db:7e:4d:de:30:db:7d: 7a:c9:e1:d8:f2:12:13:8a:86:ec:3f:46:96:cf:2b: db:e0:66:14:0f:ff:e4:f0:7b:48:d9:4e:b0:35:90: 72:9d:25:9f:9b:ab:15:06:4d:56:21:f8:9d:6c:0f: 28:e3:81:0e:4d:d4:3f:24:0d:8a:03:6e:0e:0f:65: a7:bf:70:c4:cb:08:6b:48:a5:62:36:e5:5a:21:e5: 70:b2:50:68:7e:73:d0:31:3d:93:12:fc:62:ab:13: 79:36:e2:f6:dc:65:ba:ec:82:3c:fd:69:91:1d:54: ca:b2:bb:6b:10:aa:f1:bf:eb:2a:ec:04:e7:26:5e: c1:4f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: FE:1E:7C:0C:B5:C5:89:5A:5A:CD:BC:53:E8:C4:D6:D5:02:F5:75:FC X509v3 Authority Key Identifier: keyid:03:8F:C8:DB:9F:4F:38:1D:61:4C:3C:DA:94:4E:DB:CE:2C:EB:B6:F4 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/3340df13-c4e9-4218-b114-dead1648285c/0/038FC8DB9F4F381D614C3CDA944EDBCE2CEBB6F4.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/038FC8DB9F4F381D614C3CDA944EDBCE2CEBB6F4.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/3340df13-c4e9-4218-b114-dead1648285c/0/038FC8DB9F4F381D614C3CDA944EDBCE2CEBB6F4.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 36:c4:57:69:76:42:cc:be:39:c8:99:e4:b0:a1:bf:18:fd:b5: e9:6f:63:2b:74:cb:4c:97:90:f2:2b:5f:a4:29:ff:97:72:51: aa:d0:64:38:55:47:91:c2:91:56:26:d7:25:7b:a2:38:3b:c2: 27:3e:8e:9f:d6:58:01:54:55:3e:65:34:e2:24:13:df:c8:84: 00:74:cd:95:46:e7:1a:c6:62:04:cb:47:b1:94:f4:2f:88:af: 6b:60:fd:16:e9:e7:7b:ef:5c:14:f8:74:ed:cf:03:1b:98:1a: bf:32:0f:5f:8a:4c:b1:3d:45:f4:09:4c:ff:ee:73:6e:c6:98: 4f:ee:26:19:d8:66:cd:c8:e9:74:40:be:14:e7:a4:02:8a:48: 4c:35:e6:f9:79:7e:64:99:77:bd:80:63:9a:ed:0b:55:12:05: 97:8c:34:da:98:a6:b8:96:26:19:92:87:0d:5e:f9:c4:e8:dc: 20:4a:4a:b2:26:73:87:97:33:3c:50:10:1c:4d:4d:60:b1:31: d2:6f:76:86:d0:63:d6:32:23:06:8a:8d:69:ea:fd:7b:a3:21: c9:67:80:b3:30:28:33:11:8e:7b:ec:bf:7e:e7:04:4a:62:b5: ed:cf:43:8a:9d:63:d0:11:e0:fe:b1:fb:18:fb:1b:07:c5:bd: 9d:97:64:0f -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUImskIKmtP4hB/W/zpjyUlCRqBREwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMDM4RkM4REI5RjRGMzgxRDYxNEMzQ0RBOTQ0RURCQ0Uy Q0VCQjZGNDAeFw0yNTEyMTUxNTE1NTdaFw0yNTEyMTgyMTExNTdaMDMxMTAvBgNV BAMTKEZFMUU3QzBDQjVDNTg5NUE1QUNEQkM1M0U4QzRENkQ1MDJGNTc1RkMwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDrjCTCaLdovZIev7kgEoWtIFhH J7hszUwLtTF0zLTB63u4goUMIMIqpTJtSl4yaLJ2T75lqz8Layn8Qq96DEv1FhCp iYpQOAW9KhCnje39FtuJwrxE1aabdUOJBip98k4r087BSTFwBeq+FOBVAFljxcGM dr/EOg+rz72FASe+235N3jDbfXrJ4djyEhOKhuw/RpbPK9vgZhQP/+Twe0jZTrA1 kHKdJZ+bqxUGTVYh+J1sDyjjgQ5N1D8kDYoDbg4PZae/cMTLCGtIpWI25Voh5XCy UGh+c9AxPZMS/GKrE3k24vbcZbrsgjz9aZEdVMqyu2sQqvG/6yrsBOcmXsFPAgMB AAGjggI8MIICODAdBgNVHQ4EFgQU/h58DLXFiVpazbxT6MTW1QL1dfwwHwYDVR0j BBgwFoAUA4/I259POB1hTDzalE7bzizrtvQwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby8z MzQwZGYxMy1jNGU5LTQyMTgtYjExNC1kZWFkMTY0ODI4NWMvMC8wMzhGQzhEQjlG NEYzODFENjE0QzNDREE5NDRFREJDRTJDRUJCNkY0LmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvMDM4RkM4REI5RjRGMzgxRDYxNEMzQ0RBOTQ0RURCQ0UyQ0VC QjZGNC5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vMzM0MGRmMTMtYzRlOS00MjE4LWIx MTQtZGVhZDE2NDgyODVjLzAvMDM4RkM4REI5RjRGMzgxRDYxNEMzQ0RBOTQ0RURC Q0UyQ0VCQjZGNC5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBADbEV2l2Qsy+OciZ5LChvxj9telvYyt0y0yX kPIrX6Qp/5dyUarQZDhVR5HCkVYm1yV7ojg7wic+jp/WWAFUVT5lNOIkE9/IhAB0 zZVG5xrGYgTLR7GU9C+Ir2tg/Rbp53vvXBT4dO3PAxuYGr8yD1+KTLE9RfQJTP/u c27GmE/uJhnYZs3I6XRAvhTnpAKKSEw15vl5fmSZd72AY5rtC1USBZeMNNqYpriW JhmShw1e+cTo3CBKSrImc4eXMzxQEBxNTWCxMdJvdobQY9YyIwaKjWnq/XujIcln gLMwKDMRjnvsv37nBEpite3PQ4qdY9AR4P6x+xj7GwfFvZ2XZA8= -----END CERTIFICATE-----Generated at Wed Dec 17 16:51:29 2025 by rpki-client