This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf repo-rpki.idnic.net/repo/e6929901-a137-4a35-8134-1804f94792df/0/38992A0A64D724D15761F2F9410D85186E2311FE.mft File: 38992A0A64D724D15761F2F9410D85186E2311FE.mft (raw, json) Hash identifier: fHl7VtxpbwryXHQUMRT5YLUZ1lLTWBbO9HQKv9Zq83I= Subject key identifier: C3:C5:7B:20:43:4D:E9:2D:29:97:B5:A5:21:EB:9B:8F:7F:82:2D:B1 Authority key identifier: 38:99:2A:0A:64:D7:24:D1:57:61:F2:F9:41:0D:85:18:6E:23:11:FE Certificate issuer: /CN=38992A0A64D724D15761F2F9410D85186E2311FE Certificate serial: 57E6E734EF81DAB1DE3FB227370FEA738CCC20F0 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/38992A0A64D724D15761F2F9410D85186E2311FE.cer Subject info access: rsync://repo-rpki.idnic.net/repo/e6929901-a137-4a35-8134-1804f94792df/0/38992A0A64D724D15761F2F9410D85186E2311FE.mft Manifest number: 01E0 Signing time: Thu 18 Dec 2025 20:01:18 +0000 Manifest this update: Thu 18 Dec 2025 19:56:18 +0000 Manifest next update: Mon 22 Dec 2025 07:38:18 +0000 Files and hashes: 1: 38992A0A64D724D15761F2F9410D85186E2311FE.crl (hash: OxmzNE84PuE+jd+Xo4FjR6Bgfq1+5WtfkfN1K8QC2aA=) 2: 3130332e3135332e3138342e302f32342d3234203d3e20313339333932.roa (hash: d6Adr6ZZkYn4Jq27NkWDxIH+Fg4wpxOILm0JtNJ0Cfc=) 3: 3130332e3134332e39352e302f32342d3234203d3e20313339333932.roa (hash: kHcd0PiR+avo06lt/QU/A5Sa1D2RSw2rXV6RMIKGIO8=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/e6929901-a137-4a35-8134-1804f94792df/0/38992A0A64D724D15761F2F9410D85186E2311FE.crl rsync://repo-rpki.idnic.net/repo/e6929901-a137-4a35-8134-1804f94792df/0/38992A0A64D724D15761F2F9410D85186E2311FE.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/38992A0A64D724D15761F2F9410D85186E2311FE.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 22 Dec 2025 03:43:10 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 57:e6:e7:34:ef:81:da:b1:de:3f:b2:27:37:0f:ea:73:8c:cc:20:f0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=38992A0A64D724D15761F2F9410D85186E2311FE Validity Not Before: Dec 18 19:56:18 2025 GMT Not After : Dec 22 07:38:18 2025 GMT Subject: CN=C3C57B20434DE92D2997B5A521EB9B8F7F822DB1 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:df:03:49:6e:1c:db:c4:c4:52:a2:2d:ad:4b:d8: 94:3a:8d:db:7b:b1:98:3c:98:81:c6:a2:f0:2b:09: 40:50:d3:ab:91:2d:39:d7:b6:cf:55:a2:3b:49:63: 16:59:e5:62:5a:9c:f9:51:1c:ea:f4:71:0f:cd:8c: de:9a:8c:c6:4c:dd:95:0c:31:81:3c:86:40:bd:ca: b3:3f:a5:49:c1:a8:ca:1c:df:14:33:c0:0e:5d:6a: 46:f6:e4:c1:99:b2:01:a4:7a:6c:eb:28:52:9a:95: af:81:7a:f0:5b:24:01:0e:34:f8:5e:cf:ed:22:5a: bc:9c:fa:c3:38:dc:d0:94:aa:5c:15:bf:61:58:dd: 0c:c7:50:52:1d:ca:ed:a2:df:3d:ff:29:89:2c:d0: 88:85:b3:d2:41:79:ae:1e:bd:9b:33:17:fc:df:48: 19:12:3c:90:a9:0d:bd:6b:08:74:4f:3b:8f:cb:2d: e7:5f:2d:5e:19:03:22:0b:26:c6:00:af:53:72:9c: 66:14:74:1e:2e:d4:0d:ca:98:ba:8b:bd:e4:fb:91: 9d:30:4a:4a:88:62:26:de:fc:7f:89:ac:26:80:4e: 68:ea:6c:74:2d:77:69:81:b0:9a:1d:3e:62:02:97: 90:4c:e3:64:6c:4d:1c:54:51:b5:7f:bc:1a:58:b7: 47:3f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: C3:C5:7B:20:43:4D:E9:2D:29:97:B5:A5:21:EB:9B:8F:7F:82:2D:B1 X509v3 Authority Key Identifier: keyid:38:99:2A:0A:64:D7:24:D1:57:61:F2:F9:41:0D:85:18:6E:23:11:FE X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/e6929901-a137-4a35-8134-1804f94792df/0/38992A0A64D724D15761F2F9410D85186E2311FE.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/38992A0A64D724D15761F2F9410D85186E2311FE.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/e6929901-a137-4a35-8134-1804f94792df/0/38992A0A64D724D15761F2F9410D85186E2311FE.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 65:8d:01:37:34:78:40:87:6c:f4:e7:03:a0:c4:9b:66:df:51: 53:e2:52:1d:8b:ec:44:44:fe:84:24:e1:04:1c:15:0a:c9:cb: cb:71:8b:f2:d9:42:d5:4d:af:41:4d:36:5c:54:c3:42:9b:88: 21:f4:56:a3:90:4e:f7:77:9f:08:70:df:a7:97:b5:70:ad:03: ef:6d:4a:ee:e8:d8:7e:33:15:64:c3:3f:d0:67:b3:61:60:e2: 67:88:5a:34:41:c8:a3:03:44:ee:45:10:36:50:87:1f:2d:99: aa:2e:98:6d:d9:3f:11:db:2a:5a:38:0e:5f:37:31:f8:b5:00: 07:16:30:e4:d0:a8:e2:1b:16:f2:28:f8:57:ac:44:1d:5a:f8: c0:6d:f9:41:36:8f:27:fe:31:c9:bb:2f:a5:2d:08:23:92:57: ba:e5:4d:a8:16:85:c7:cf:9c:47:2d:74:95:f4:bf:f9:6b:c4: 53:75:60:46:ca:6e:4a:74:24:3e:69:10:d4:6d:76:15:db:99: a8:78:5d:3c:03:b4:a1:9b:46:a8:e9:9a:ca:e7:8d:43:9f:b3: 32:76:3c:6b:3c:18:4f:14:da:5c:51:09:36:f9:5d:76:0a:03: e8:df:2e:21:1f:35:9f:24:fa:e7:fd:3e:ce:c6:b0:57:c0:f8: 0d:1b:8f:6d -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUV+bnNO+B2rHeP7InNw/qc4zMIPAwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMzg5OTJBMEE2NEQ3MjREMTU3NjFGMkY5NDEwRDg1MTg2 RTIzMTFGRTAeFw0yNTEyMTgxOTU2MThaFw0yNTEyMjIwNzM4MThaMDMxMTAvBgNV BAMTKEMzQzU3QjIwNDM0REU5MkQyOTk3QjVBNTIxRUI5QjhGN0Y4MjJEQjEwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDfA0luHNvExFKiLa1L2JQ6jdt7 sZg8mIHGovArCUBQ06uRLTnXts9VojtJYxZZ5WJanPlRHOr0cQ/NjN6ajMZM3ZUM MYE8hkC9yrM/pUnBqMoc3xQzwA5dakb25MGZsgGkemzrKFKala+BevBbJAEONPhe z+0iWryc+sM43NCUqlwVv2FY3QzHUFIdyu2i3z3/KYks0IiFs9JBea4evZszF/zf SBkSPJCpDb1rCHRPO4/LLedfLV4ZAyILJsYAr1NynGYUdB4u1A3KmLqLveT7kZ0w SkqIYibe/H+JrCaATmjqbHQtd2mBsJodPmICl5BM42RsTRxUUbV/vBpYt0c/AgMB AAGjggI8MIICODAdBgNVHQ4EFgQUw8V7IENN6S0pl7WlIeubj3+CLbEwHwYDVR0j BBgwFoAUOJkqCmTXJNFXYfL5QQ2FGG4jEf4wDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby9l NjkyOTkwMS1hMTM3LTRhMzUtODEzNC0xODA0Zjk0NzkyZGYvMC8zODk5MkEwQTY0 RDcyNEQxNTc2MUYyRjk0MTBEODUxODZFMjMxMUZFLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvMzg5OTJBMEE2NEQ3MjREMTU3NjFGMkY5NDEwRDg1MTg2RTIz MTFGRS5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vZTY5Mjk5MDEtYTEzNy00YTM1LTgx MzQtMTgwNGY5NDc5MmRmLzAvMzg5OTJBMEE2NEQ3MjREMTU3NjFGMkY5NDEwRDg1 MTg2RTIzMTFGRS5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAGWNATc0eECHbPTnA6DEm2bfUVPiUh2L7ERE /oQk4QQcFQrJy8txi/LZQtVNr0FNNlxUw0KbiCH0VqOQTvd3nwhw36eXtXCtA+9t Su7o2H4zFWTDP9Bns2Fg4meIWjRByKMDRO5FEDZQhx8tmaoumG3ZPxHbKlo4Dl83 Mfi1AAcWMOTQqOIbFvIo+FesRB1a+MBt+UE2jyf+Mcm7L6UtCCOSV7rlTagWhcfP nEctdJX0v/lrxFN1YEbKbkp0JD5pENRtdhXbmah4XTwDtKGbRqjpmsrnjUOfszJ2 PGs8GE8U2lxRCTb5XXYKA+jfLiEfNZ8k+uf9Ps7GsFfA+A0bj20= -----END CERTIFICATE-----Generated at Fri Dec 19 11:21:55 2025 by rpki-client