This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf repo-rpki.idnic.net/repo/928089a7-0a68-4d67-adab-76d7d9271fde/0/38FCEA2A1C8443E590CF5220E7BDA05D722C294D.mft File: 38FCEA2A1C8443E590CF5220E7BDA05D722C294D.mft (raw, json) Hash identifier: ievdeHq+x/DRhIYJ0m7G751g6LOHhIkvcMY8q48dpbg= Subject key identifier: 1F:B8:23:BA:63:D1:1B:A3:4C:C8:07:DA:78:5B:57:D6:70:04:19:FC Authority key identifier: 38:FC:EA:2A:1C:84:43:E5:90:CF:52:20:E7:BD:A0:5D:72:2C:29:4D Certificate issuer: /CN=38FCEA2A1C8443E590CF5220E7BDA05D722C294D Certificate serial: 1F2160E8A3A0D987300BFA22EBDDF52024BDF0E3 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/38FCEA2A1C8443E590CF5220E7BDA05D722C294D.cer Subject info access: rsync://repo-rpki.idnic.net/repo/928089a7-0a68-4d67-adab-76d7d9271fde/0/38FCEA2A1C8443E590CF5220E7BDA05D722C294D.mft Manifest number: 01AD Signing time: Sat 20 Dec 2025 21:11:31 +0000 Manifest this update: Sat 20 Dec 2025 21:06:31 +0000 Manifest next update: Wed 24 Dec 2025 08:56:31 +0000 Files and hashes: 1: 38FCEA2A1C8443E590CF5220E7BDA05D722C294D.crl (hash: XgEFoOGRAMTlCX4NpVDg+fk+Ee30PYPAi+RsxLR3qFA=) 2: 3130332e3234372e34312e302f32342d3234203d3e203535363835.roa (hash: kBNBu6yeQhVM/8eFQmRNaz5z+ct6Yh5CCwCxI69k5F4=) 3: 3130332e3130382e3133302e302f32342d3234203d3e203535363835.roa (hash: /15wV8i/i7B6FG9n08XOQypn1bQfdzKavjdkmpF3lT8=) 4: 3130332e3234372e34332e302f32342d3234203d3e203535363835.roa (hash: pU683GKaElbx02fGnAze4HxdiyKXbycozWmgiE+EA3I=) 5: 3130332e3234372e34302e302f32342d3234203d3e203535363835.roa (hash: syH1wAS1MJE37vuCgOfSHfZ8nbZq+QzwV/xWmgvAdI0=) 6: 3130332e3234372e34302e302f32322d3234203d3e203535363835.roa (hash: ANeXRudYRQj4brheIa8AOL0aZoGg1PXmE4qO0owNUkM=) 7: 3130332e3130382e3132382e302f32342d3234203d3e203535363835.roa (hash: XgIzc0IbUT3BWzqPVrjaBsZEWwMYT+TR7O6PzuuQ5e4=) 8: 3130332e3130382e3132392e302f32342d3234203d3e203535363835.roa (hash: cC0bspkR4GLKr9LN2JfncBaT2JjHlS3Wp16ygdKgQmU=) 9: 3130332e3130382e3133312e302f32342d3234203d3e203535363835.roa (hash: ZjcfSae5HFvDvqeideaLIabcOtFfSEUtzUNHxjp54qE=) 10: 3130332e3234372e34322e302f32342d3234203d3e203535363835.roa (hash: ZVjcgaXDQ3D4zS6Ow7WrzE6JOTbumwvNfFh1MEq4Yks=) 11: 3130332e3130382e3132382e302f32322d3234203d3e203535363835.roa (hash: hPWPE86ID8N/pDjOig5ZnAROXRyFprGMRItIMoptWSY=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/928089a7-0a68-4d67-adab-76d7d9271fde/0/38FCEA2A1C8443E590CF5220E7BDA05D722C294D.crl rsync://repo-rpki.idnic.net/repo/928089a7-0a68-4d67-adab-76d7d9271fde/0/38FCEA2A1C8443E590CF5220E7BDA05D722C294D.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/38FCEA2A1C8443E590CF5220E7BDA05D722C294D.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 24 Dec 2025 01:24:51 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1f:21:60:e8:a3:a0:d9:87:30:0b:fa:22:eb:dd:f5:20:24:bd:f0:e3 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=38FCEA2A1C8443E590CF5220E7BDA05D722C294D Validity Not Before: Dec 20 21:06:31 2025 GMT Not After : Dec 24 08:56:31 2025 GMT Subject: CN=1FB823BA63D11BA34CC807DA785B57D6700419FC Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b3:f0:ad:44:8a:6c:40:9c:43:48:bc:cd:73:c5: 4d:af:05:75:8c:0f:0c:05:e1:14:f1:59:66:08:00: 7d:a5:ea:3f:9e:36:4f:fa:3d:b4:29:54:15:87:bc: 73:4c:51:c7:8b:66:c2:96:66:c1:60:60:00:40:f6: 29:11:c2:e0:6a:54:25:c4:0e:d1:91:a2:3a:97:86: 5d:8a:5d:23:28:89:2b:1e:14:3a:a4:b7:7b:53:dd: 37:df:12:67:33:78:6e:3f:aa:3e:5b:5f:53:0f:b9: da:b1:1c:d3:e5:66:c0:a8:c6:0b:d9:53:4a:91:6b: 36:fc:d5:4b:07:17:16:44:2a:d7:be:8a:67:29:07: 42:f5:f2:21:91:28:d5:bf:aa:be:97:b6:02:8c:34: fc:a2:f7:83:dc:ce:ae:9e:5d:8c:01:38:86:7d:13: 56:ed:79:36:43:fe:53:4c:59:f6:28:4f:62:56:4a: 39:de:13:f1:bf:d0:cb:08:2f:c9:30:c5:12:d6:59: 1c:ad:d9:17:73:48:0a:37:77:c5:0f:c9:a5:70:ab: ac:50:9b:c1:42:c8:d3:4f:0c:6d:64:fe:a3:f9:33: 39:41:2e:ac:06:c2:82:6a:64:9b:18:22:56:4f:db: 92:dc:39:e1:09:04:4c:5e:48:2b:03:29:89:34:7a: 3d:0f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 1F:B8:23:BA:63:D1:1B:A3:4C:C8:07:DA:78:5B:57:D6:70:04:19:FC X509v3 Authority Key Identifier: keyid:38:FC:EA:2A:1C:84:43:E5:90:CF:52:20:E7:BD:A0:5D:72:2C:29:4D X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/928089a7-0a68-4d67-adab-76d7d9271fde/0/38FCEA2A1C8443E590CF5220E7BDA05D722C294D.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/38FCEA2A1C8443E590CF5220E7BDA05D722C294D.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/928089a7-0a68-4d67-adab-76d7d9271fde/0/38FCEA2A1C8443E590CF5220E7BDA05D722C294D.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 62:27:53:d6:03:88:13:e6:e4:64:72:36:ac:22:5b:ce:3b:3a: 4f:20:2e:b5:25:3c:f6:4c:fa:1c:f5:6c:f8:8f:5c:44:26:27: 6f:4b:b7:0b:64:fd:e4:7a:c1:8f:28:8f:e7:f0:28:6f:a4:72: 6b:78:ce:3a:8d:01:f5:25:06:46:4d:87:55:ba:eb:72:f7:21: 68:fb:32:31:02:64:54:98:52:98:b3:7c:e7:f4:f6:e3:70:ce: 0d:32:1d:c7:22:ab:b2:f2:04:f1:c5:ad:02:ba:a8:a1:06:ab: f5:49:0f:1e:0b:78:c9:29:29:43:09:30:0e:83:e3:a6:c8:9d: 29:95:ae:1a:66:af:2d:88:93:bd:0a:6c:ee:c1:7b:a0:e6:39: 11:b6:23:de:dd:61:a2:6a:71:a0:8a:7c:47:b8:16:4f:9c:fe: fb:d6:80:6c:41:72:cb:ed:af:34:db:01:30:68:85:a6:2d:6d: 98:f8:b2:e4:44:84:78:03:f9:ed:7a:20:fb:a1:81:64:e2:5c: 5b:60:99:69:b0:2c:a3:67:cb:eb:b6:e5:01:5c:10:05:d7:26: b7:fd:d6:f1:35:52:81:44:8f:3c:7a:06:e0:47:22:96:db:89: ea:e1:7a:f2:17:c3:d1:76:1e:97:60:70:f5:db:16:ec:d8:27: a8:7d:b7:d7 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUHyFg6KOg2YcwC/oi6931ICS98OMwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMzhGQ0VBMkExQzg0NDNFNTkwQ0Y1MjIwRTdCREEwNUQ3 MjJDMjk0RDAeFw0yNTEyMjAyMTA2MzFaFw0yNTEyMjQwODU2MzFaMDMxMTAvBgNV BAMTKDFGQjgyM0JBNjNEMTFCQTM0Q0M4MDdEQTc4NUI1N0Q2NzAwNDE5RkMwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCz8K1EimxAnENIvM1zxU2vBXWM DwwF4RTxWWYIAH2l6j+eNk/6PbQpVBWHvHNMUceLZsKWZsFgYABA9ikRwuBqVCXE DtGRojqXhl2KXSMoiSseFDqkt3tT3TffEmczeG4/qj5bX1MPudqxHNPlZsCoxgvZ U0qRazb81UsHFxZEKte+imcpB0L18iGRKNW/qr6XtgKMNPyi94Pczq6eXYwBOIZ9 E1bteTZD/lNMWfYoT2JWSjneE/G/0MsIL8kwxRLWWRyt2RdzSAo3d8UPyaVwq6xQ m8FCyNNPDG1k/qP5MzlBLqwGwoJqZJsYIlZP25LcOeEJBExeSCsDKYk0ej0PAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUH7gjumPRG6NMyAfaeFtX1nAEGfwwHwYDVR0j BBgwFoAUOPzqKhyEQ+WQz1Ig572gXXIsKU0wDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby85 MjgwODlhNy0wYTY4LTRkNjctYWRhYi03NmQ3ZDkyNzFmZGUvMC8zOEZDRUEyQTFD ODQ0M0U1OTBDRjUyMjBFN0JEQTA1RDcyMkMyOTRELmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvMzhGQ0VBMkExQzg0NDNFNTkwQ0Y1MjIwRTdCREEwNUQ3MjJD Mjk0RC5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vOTI4MDg5YTctMGE2OC00ZDY3LWFk YWItNzZkN2Q5MjcxZmRlLzAvMzhGQ0VBMkExQzg0NDNFNTkwQ0Y1MjIwRTdCREEw NUQ3MjJDMjk0RC5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAGInU9YDiBPm5GRyNqwiW847Ok8gLrUlPPZM +hz1bPiPXEQmJ29Ltwtk/eR6wY8oj+fwKG+kcmt4zjqNAfUlBkZNh1W663L3IWj7 MjECZFSYUpizfOf09uNwzg0yHcciq7LyBPHFrQK6qKEGq/VJDx4LeMkpKUMJMA6D 46bInSmVrhpmry2Ik70KbO7Be6DmORG2I97dYaJqcaCKfEe4Fk+c/vvWgGxBcsvt rzTbATBohaYtbZj4suREhHgD+e16IPuhgWTiXFtgmWmwLKNny+u25QFcEAXXJrf9 1vE1UoFEjzx6BuBHIpbbierhevIXw9F2HpdgcPXbFuzYJ6h9t9c= -----END CERTIFICATE-----Generated at Sun Dec 21 03:24:29 2025 by rpki-client