This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf repo-rpki.idnic.net/repo/4a48b222-6ded-428a-888f-10454b0880c2/0/81498B85C0E2937290B9B2119B132DEADBB24A5C.mft File: 81498B85C0E2937290B9B2119B132DEADBB24A5C.mft (raw, json) Hash identifier: 3ApUSdkONl4yKzSmeWqbBbTt4ELbi8/LiTdIbZeksoc= Subject key identifier: 25:AB:7B:FD:01:DB:20:AE:75:FD:6D:44:12:B8:0D:2E:57:61:6A:40 Authority key identifier: 81:49:8B:85:C0:E2:93:72:90:B9:B2:11:9B:13:2D:EA:DB:B2:4A:5C Certificate issuer: /CN=81498B85C0E2937290B9B2119B132DEADBB24A5C Certificate serial: 76DFAB9D7666DFFEB64FAFA96ED0E852988CD0ED Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/81498B85C0E2937290B9B2119B132DEADBB24A5C.cer Subject info access: rsync://repo-rpki.idnic.net/repo/4a48b222-6ded-428a-888f-10454b0880c2/0/81498B85C0E2937290B9B2119B132DEADBB24A5C.mft Manifest number: 021F Signing time: Thu 18 Dec 2025 16:40:59 +0000 Manifest this update: Thu 18 Dec 2025 16:35:59 +0000 Manifest next update: Mon 22 Dec 2025 00:10:59 +0000 Files and hashes: 1: 81498B85C0E2937290B9B2119B132DEADBB24A5C.crl (hash: nQT57Bi3eA6db+Z5huEQcngWxiUaZJAmIT/lkilF1oY=) 2: 3130332e3135392e3232342e302f32332d3234203d3e20313431313437.roa (hash: 49uJeHF+k8HvLvLuvnXcFDfrAZMvN78Q5XdfyLfe2TU=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/4a48b222-6ded-428a-888f-10454b0880c2/0/81498B85C0E2937290B9B2119B132DEADBB24A5C.crl rsync://repo-rpki.idnic.net/repo/4a48b222-6ded-428a-888f-10454b0880c2/0/81498B85C0E2937290B9B2119B132DEADBB24A5C.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/81498B85C0E2937290B9B2119B132DEADBB24A5C.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 22 Dec 2025 00:10:59 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 76:df:ab:9d:76:66:df:fe:b6:4f:af:a9:6e:d0:e8:52:98:8c:d0:ed Signature Algorithm: sha256WithRSAEncryption Issuer: CN=81498B85C0E2937290B9B2119B132DEADBB24A5C Validity Not Before: Dec 18 16:35:59 2025 GMT Not After : Dec 22 00:10:59 2025 GMT Subject: CN=25AB7BFD01DB20AE75FD6D4412B80D2E57616A40 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9d:81:bd:41:3b:a2:0f:91:2e:21:f2:f8:1e:54: 2a:66:aa:b9:e9:5d:6e:b9:28:da:a7:23:f4:9b:0c: 21:f5:f4:52:a5:6f:e4:b8:5e:7e:58:b9:c2:82:f9: 45:63:29:8d:56:c2:34:7d:44:3b:5c:2a:df:28:df: bf:17:05:6a:d3:d5:b0:ba:96:a1:4b:09:84:2f:c6: 73:65:a5:1e:27:8d:b3:ab:b3:35:ca:06:a6:c8:82: 7b:26:8d:1e:86:b3:8b:60:60:68:cb:0a:db:cb:37: 1a:8e:3b:f2:e3:a4:17:f1:71:51:14:49:05:84:05: 30:19:59:34:cd:0c:a1:95:c2:73:91:de:7b:93:4d: 5d:41:6b:38:ed:82:f5:49:61:cd:31:9d:5f:91:a0: 83:af:43:e5:5d:29:be:a8:ad:e8:4d:da:cb:3d:2a: 38:ec:f4:65:72:60:f8:8a:e7:77:83:d9:40:17:48: 5e:62:eb:67:3b:65:f3:f7:a7:3f:d4:c7:b6:29:de: 51:ea:e7:41:18:65:74:13:80:6b:98:6a:f1:90:c4: ac:33:10:8c:16:08:ef:8b:a4:d6:cd:0b:2e:92:c7: aa:eb:9c:92:14:c1:47:9e:aa:60:e6:0e:c9:dc:03: eb:4f:0d:b4:86:80:ef:96:3e:93:2b:2c:79:ec:ab: 1e:21 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 25:AB:7B:FD:01:DB:20:AE:75:FD:6D:44:12:B8:0D:2E:57:61:6A:40 X509v3 Authority Key Identifier: keyid:81:49:8B:85:C0:E2:93:72:90:B9:B2:11:9B:13:2D:EA:DB:B2:4A:5C X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/4a48b222-6ded-428a-888f-10454b0880c2/0/81498B85C0E2937290B9B2119B132DEADBB24A5C.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/81498B85C0E2937290B9B2119B132DEADBB24A5C.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/4a48b222-6ded-428a-888f-10454b0880c2/0/81498B85C0E2937290B9B2119B132DEADBB24A5C.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 81:7f:1c:2e:24:f2:61:23:21:51:b8:e3:48:b4:bb:c2:9e:87: 78:29:36:ae:6d:38:e3:e0:81:a8:40:cf:81:78:89:e7:bf:53: 27:59:c8:c8:97:86:a4:9b:85:dc:a2:5a:0d:2e:0d:e9:5a:c4: 46:7c:91:d5:88:04:04:bd:0b:84:e1:7c:bd:ed:7c:b1:86:43: e0:79:1d:da:98:ee:b9:01:95:a8:e9:20:bb:8c:f1:52:9c:ad: 49:60:b6:06:ed:62:71:de:00:ab:9c:d3:de:89:fe:6e:6f:aa: c0:c9:7d:44:55:db:48:84:8b:f7:72:c0:8b:7c:c6:e2:bc:43: df:7f:47:42:cd:76:b3:d9:5f:f9:d0:92:8d:68:b6:3a:86:b5: 1e:35:83:0c:ce:f0:68:8c:11:bc:36:fd:3b:1d:a9:77:43:8e: 14:a4:63:51:24:5b:90:26:35:c3:de:3a:6b:17:b5:23:da:a4: c1:c2:1f:64:95:56:f3:c6:83:a3:af:89:00:58:2d:b7:56:3e: 1d:51:a4:03:3e:f7:db:97:a7:d0:18:c9:6d:89:7a:38:a5:1f: 4f:37:e2:69:3b:8d:85:23:b9:10:35:95:b2:66:24:33:ed:1a: cb:39:0c:3c:be:bb:c2:45:97:46:92:d6:14:06:88:0d:63:d7: 8b:86:46:8e -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUdt+rnXZm3/62T6+pbtDoUpiM0O0wDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoODE0OThCODVDMEUyOTM3MjkwQjlCMjExOUIxMzJERUFE QkIyNEE1QzAeFw0yNTEyMTgxNjM1NTlaFw0yNTEyMjIwMDEwNTlaMDMxMTAvBgNV BAMTKDI1QUI3QkZEMDFEQjIwQUU3NUZENkQ0NDEyQjgwRDJFNTc2MTZBNDAwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCdgb1BO6IPkS4h8vgeVCpmqrnp XW65KNqnI/SbDCH19FKlb+S4Xn5YucKC+UVjKY1WwjR9RDtcKt8o378XBWrT1bC6 lqFLCYQvxnNlpR4njbOrszXKBqbIgnsmjR6Gs4tgYGjLCtvLNxqOO/LjpBfxcVEU SQWEBTAZWTTNDKGVwnOR3nuTTV1BazjtgvVJYc0xnV+RoIOvQ+VdKb6orehN2ss9 Kjjs9GVyYPiK53eD2UAXSF5i62c7ZfP3pz/Ux7Yp3lHq50EYZXQTgGuYavGQxKwz EIwWCO+LpNbNCy6Sx6rrnJIUwUeeqmDmDsncA+tPDbSGgO+WPpMrLHnsqx4hAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUJat7/QHbIK51/W1EErgNLldhakAwHwYDVR0j BBgwFoAUgUmLhcDik3KQubIRmxMt6tuySlwwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby80 YTQ4YjIyMi02ZGVkLTQyOGEtODg4Zi0xMDQ1NGIwODgwYzIvMC84MTQ5OEI4NUMw RTI5MzcyOTBCOUIyMTE5QjEzMkRFQURCQjI0QTVDLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvODE0OThCODVDMEUyOTM3MjkwQjlCMjExOUIxMzJERUFEQkIy NEE1Qy5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vNGE0OGIyMjItNmRlZC00MjhhLTg4 OGYtMTA0NTRiMDg4MGMyLzAvODE0OThCODVDMEUyOTM3MjkwQjlCMjExOUIxMzJE RUFEQkIyNEE1Qy5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAIF/HC4k8mEjIVG440i0u8Keh3gpNq5tOOPg gahAz4F4iee/UydZyMiXhqSbhdyiWg0uDelaxEZ8kdWIBAS9C4ThfL3tfLGGQ+B5 HdqY7rkBlajpILuM8VKcrUlgtgbtYnHeAKuc096J/m5vqsDJfURV20iEi/dywIt8 xuK8Q99/R0LNdrPZX/nQko1otjqGtR41gwzO8GiMEbw2/TsdqXdDjhSkY1EkW5Am NcPeOmsXtSPapMHCH2SVVvPGg6OviQBYLbdWPh1RpAM+99uXp9AYyW2JejilH083 4mk7jYUjuRA1lbJmJDPtGss5DDy+u8JFl0aS1hQGiA1j14uGRo4= -----END CERTIFICATE-----Generated at Fri Dec 19 09:49:04 2025 by rpki-client