This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf repo-rpki.idnic.net/repo/da4746b7-5ff2-4556-8a3e-5a86cbcc8598/0/81C203CF458E48A8FF345FB4A5DD84C6FA2DCD0A.mft File: 81C203CF458E48A8FF345FB4A5DD84C6FA2DCD0A.mft (raw, json) Hash identifier: CKVfKyGcGiZhsj3mUe/7mqrvzKrcD3QbEWkjRNnuMsQ= Subject key identifier: AC:23:9C:D0:81:B8:0B:01:E0:9B:F7:E5:60:DF:71:E6:D9:49:87:A8 Authority key identifier: 81:C2:03:CF:45:8E:48:A8:FF:34:5F:B4:A5:DD:84:C6:FA:2D:CD:0A Certificate issuer: /CN=81C203CF458E48A8FF345FB4A5DD84C6FA2DCD0A Certificate serial: 6722093576A8ED3738D12F1784B15046EC435258 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/81C203CF458E48A8FF345FB4A5DD84C6FA2DCD0A.cer Subject info access: rsync://repo-rpki.idnic.net/repo/da4746b7-5ff2-4556-8a3e-5a86cbcc8598/0/81C203CF458E48A8FF345FB4A5DD84C6FA2DCD0A.mft Manifest number: 0157 Signing time: Fri 05 Dec 2025 14:51:27 +0000 Manifest this update: Fri 05 Dec 2025 14:46:27 +0000 Manifest next update: Mon 08 Dec 2025 21:40:27 +0000 Files and hashes: 1: 81C203CF458E48A8FF345FB4A5DD84C6FA2DCD0A.crl (hash: yvlDfFD2S6B+42dHWLerPG/CBcLyAMTwmNCtQt2Wukg=) 2: 3130332e39362e3134362e302f32342d3234203d3e20313430343536.roa (hash: 5U1TPFLrHbgyHMQ/fhpf0UIVuTfu8KAoi8W0QJ1AERI=) 3: 3130332e39362e3134372e302f32342d3234203d3e20313430343536.roa (hash: JE5sa6AJ1Mld5tF+2Ipz0AdqItfZzJvAXpbXLSMBkkY=) 4: 3130332e39362e3134362e302f32332d3233203d3e20313430343536.roa (hash: soTFrYPYqOT0wkrn6Py3xPs0fFiW/5/f4549L3r+Igg=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/da4746b7-5ff2-4556-8a3e-5a86cbcc8598/0/81C203CF458E48A8FF345FB4A5DD84C6FA2DCD0A.crl rsync://repo-rpki.idnic.net/repo/da4746b7-5ff2-4556-8a3e-5a86cbcc8598/0/81C203CF458E48A8FF345FB4A5DD84C6FA2DCD0A.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/81C203CF458E48A8FF345FB4A5DD84C6FA2DCD0A.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 08 Dec 2025 21:40:27 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 67:22:09:35:76:a8:ed:37:38:d1:2f:17:84:b1:50:46:ec:43:52:58 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=81C203CF458E48A8FF345FB4A5DD84C6FA2DCD0A Validity Not Before: Dec 5 14:46:27 2025 GMT Not After : Dec 8 21:40:27 2025 GMT Subject: CN=AC239CD081B80B01E09BF7E560DF71E6D94987A8 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c4:19:a3:89:c9:3f:5e:2c:51:3a:f7:56:e3:2f: 32:79:95:ca:93:54:63:fb:f8:f8:4f:03:0d:1c:d4: 51:d0:c3:e0:06:56:b7:91:8d:53:ec:ed:cf:6a:94: e6:be:55:57:41:5c:9f:c4:e7:44:c3:ad:2d:70:4c: ce:76:df:7b:d6:75:16:0d:a6:2e:85:34:67:79:e8: bc:25:08:b0:1d:1a:6a:68:7f:37:52:83:ea:76:0a: 4c:dd:e5:fa:9e:42:5f:33:c7:81:93:a7:ba:dd:ea: 0b:ed:22:18:ce:e7:20:54:e9:97:6a:5c:ca:f7:c8: 6b:2a:fa:a7:52:09:65:94:63:b9:86:ef:ca:13:9c: b5:3e:c7:1b:ee:67:99:7d:4b:ca:a9:25:01:04:22: 3f:58:c6:40:2d:e6:8b:63:f1:63:f8:69:fa:73:44: 33:f9:e1:b0:b5:7f:f1:51:79:32:37:6e:74:27:56: 1c:34:a5:de:58:6e:17:11:7e:26:f6:ca:15:e5:de: 39:56:a8:48:83:44:7d:61:e8:f6:63:5f:a8:ed:0b: 0f:38:f4:21:38:d0:5b:09:0e:d7:e5:d3:7e:a2:85: ab:36:82:c8:de:5e:5b:85:30:82:0d:dc:05:73:db: f7:d2:08:af:ac:9e:c6:84:64:c1:9a:d8:1e:19:18: 09:23 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: AC:23:9C:D0:81:B8:0B:01:E0:9B:F7:E5:60:DF:71:E6:D9:49:87:A8 X509v3 Authority Key Identifier: keyid:81:C2:03:CF:45:8E:48:A8:FF:34:5F:B4:A5:DD:84:C6:FA:2D:CD:0A X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/da4746b7-5ff2-4556-8a3e-5a86cbcc8598/0/81C203CF458E48A8FF345FB4A5DD84C6FA2DCD0A.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/81C203CF458E48A8FF345FB4A5DD84C6FA2DCD0A.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/da4746b7-5ff2-4556-8a3e-5a86cbcc8598/0/81C203CF458E48A8FF345FB4A5DD84C6FA2DCD0A.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 16:fb:4c:4c:0c:9b:01:dc:4f:de:09:7b:ec:fe:13:e8:fc:36: 96:0e:96:07:8c:7b:7d:45:01:50:c7:1d:b2:e2:a5:7d:78:ee: bd:5e:b3:00:a7:e6:df:12:d5:c9:15:ae:25:b6:a6:bf:45:43: 22:15:5f:cc:db:d7:7f:56:99:2f:c7:9a:35:7c:6a:c9:38:e0: 99:c3:8c:08:6c:00:8d:19:99:5e:b3:b5:34:ed:21:b2:6b:b5: d3:be:ce:34:7d:5b:f5:e4:ac:1f:51:57:c7:1d:60:e7:0f:99: d5:68:8a:11:30:0d:97:0d:27:d1:30:b4:a3:8a:8b:4a:fd:41: 7e:a4:9c:77:c1:7c:45:69:fd:f5:07:df:b3:ec:cd:21:eb:28: a0:cc:d9:64:1d:69:67:38:d8:af:a5:5b:42:b1:45:31:89:ab: 25:e5:4e:13:57:39:06:20:0e:a2:16:5e:0e:2a:b7:37:10:56: 79:5c:91:4b:20:0b:96:9e:8b:f5:a3:93:fe:de:26:a4:dc:76: 39:a9:d6:63:f5:35:63:46:12:de:52:99:18:b5:92:59:40:1c: 28:94:c3:ba:e2:af:9d:ac:ea:0f:cb:66:91:78:3f:14:0e:56: d8:ad:94:c0:29:f7:94:e6:5e:b3:ed:ac:1b:fa:55:62:07:63: 1c:70:f5:89 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUZyIJNXao7Tc40S8XhLFQRuxDUlgwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoODFDMjAzQ0Y0NThFNDhBOEZGMzQ1RkI0QTVERDg0QzZG QTJEQ0QwQTAeFw0yNTEyMDUxNDQ2MjdaFw0yNTEyMDgyMTQwMjdaMDMxMTAvBgNV BAMTKEFDMjM5Q0QwODFCODBCMDFFMDlCRjdFNTYwREY3MUU2RDk0OTg3QTgwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDEGaOJyT9eLFE691bjLzJ5lcqT VGP7+PhPAw0c1FHQw+AGVreRjVPs7c9qlOa+VVdBXJ/E50TDrS1wTM5233vWdRYN pi6FNGd56LwlCLAdGmpofzdSg+p2Ckzd5fqeQl8zx4GTp7rd6gvtIhjO5yBU6Zdq XMr3yGsq+qdSCWWUY7mG78oTnLU+xxvuZ5l9S8qpJQEEIj9YxkAt5otj8WP4afpz RDP54bC1f/FReTI3bnQnVhw0pd5YbhcRfib2yhXl3jlWqEiDRH1h6PZjX6jtCw84 9CE40FsJDtfl036ihas2gsjeXluFMIIN3AVz2/fSCK+snsaEZMGa2B4ZGAkjAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUrCOc0IG4CwHgm/flYN9x5tlJh6gwHwYDVR0j BBgwFoAUgcIDz0WOSKj/NF+0pd2ExvotzQowDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby9k YTQ3NDZiNy01ZmYyLTQ1NTYtOGEzZS01YTg2Y2JjYzg1OTgvMC84MUMyMDNDRjQ1 OEU0OEE4RkYzNDVGQjRBNUREODRDNkZBMkRDRDBBLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvODFDMjAzQ0Y0NThFNDhBOEZGMzQ1RkI0QTVERDg0QzZGQTJE Q0QwQS5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vZGE0NzQ2YjctNWZmMi00NTU2LThh M2UtNWE4NmNiY2M4NTk4LzAvODFDMjAzQ0Y0NThFNDhBOEZGMzQ1RkI0QTVERDg0 QzZGQTJEQ0QwQS5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBABb7TEwMmwHcT94Je+z+E+j8NpYOlgeMe31F AVDHHbLipX147r1eswCn5t8S1ckVriW2pr9FQyIVX8zb139WmS/HmjV8ask44JnD jAhsAI0ZmV6ztTTtIbJrtdO+zjR9W/XkrB9RV8cdYOcPmdVoihEwDZcNJ9EwtKOK i0r9QX6knHfBfEVp/fUH37PszSHrKKDM2WQdaWc42K+lW0KxRTGJqyXlThNXOQYg DqIWXg4qtzcQVnlckUsgC5aei/Wjk/7eJqTcdjmp1mP1NWNGEt5SmRi1kllAHCiU w7rir52s6g/LZpF4PxQOVtitlMAp95TmXrPtrBv6VWIHYxxw9Yk= -----END CERTIFICATE-----Generated at Sun Dec 7 01:01:39 2025 by rpki-client