This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf repo-rpki.idnic.net/repo/da4746b7-5ff2-4556-8a3e-5a86cbcc8598/0/81C203CF458E48A8FF345FB4A5DD84C6FA2DCD0A.mft File: 81C203CF458E48A8FF345FB4A5DD84C6FA2DCD0A.mft (raw, json) Hash identifier: uhNMdAE1KfgLysPzw3MvdqkhSIm9XIJUTvPmg/EoRd8= Subject key identifier: D8:37:82:60:6F:FD:37:72:4E:4C:B0:42:D8:DC:75:32:5D:04:FD:02 Authority key identifier: 81:C2:03:CF:45:8E:48:A8:FF:34:5F:B4:A5:DD:84:C6:FA:2D:CD:0A Certificate issuer: /CN=81C203CF458E48A8FF345FB4A5DD84C6FA2DCD0A Certificate serial: 4266641A8463EEC88CD201BBA6591FAA3930D5EA Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/81C203CF458E48A8FF345FB4A5DD84C6FA2DCD0A.cer Subject info access: rsync://repo-rpki.idnic.net/repo/da4746b7-5ff2-4556-8a3e-5a86cbcc8598/0/81C203CF458E48A8FF345FB4A5DD84C6FA2DCD0A.mft Manifest number: 0156 Signing time: Wed 03 Dec 2025 09:21:25 +0000 Manifest this update: Wed 03 Dec 2025 09:16:25 +0000 Manifest next update: Sat 06 Dec 2025 14:50:25 +0000 Files and hashes: 1: 3130332e39362e3134362e302f32342d3234203d3e20313430343536.roa (hash: 5U1TPFLrHbgyHMQ/fhpf0UIVuTfu8KAoi8W0QJ1AERI=) 2: 3130332e39362e3134372e302f32342d3234203d3e20313430343536.roa (hash: JE5sa6AJ1Mld5tF+2Ipz0AdqItfZzJvAXpbXLSMBkkY=) 3: 81C203CF458E48A8FF345FB4A5DD84C6FA2DCD0A.crl (hash: 9aRd5JvAGTg2p0NuQ0x7omC3G3PeKpcPrQLPmNJ4mrk=) 4: 3130332e39362e3134362e302f32332d3233203d3e20313430343536.roa (hash: soTFrYPYqOT0wkrn6Py3xPs0fFiW/5/f4549L3r+Igg=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/da4746b7-5ff2-4556-8a3e-5a86cbcc8598/0/81C203CF458E48A8FF345FB4A5DD84C6FA2DCD0A.crl rsync://repo-rpki.idnic.net/repo/da4746b7-5ff2-4556-8a3e-5a86cbcc8598/0/81C203CF458E48A8FF345FB4A5DD84C6FA2DCD0A.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/81C203CF458E48A8FF345FB4A5DD84C6FA2DCD0A.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 06 Dec 2025 14:50:25 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 42:66:64:1a:84:63:ee:c8:8c:d2:01:bb:a6:59:1f:aa:39:30:d5:ea Signature Algorithm: sha256WithRSAEncryption Issuer: CN=81C203CF458E48A8FF345FB4A5DD84C6FA2DCD0A Validity Not Before: Dec 3 09:16:25 2025 GMT Not After : Dec 6 14:50:25 2025 GMT Subject: CN=D83782606FFD37724E4CB042D8DC75325D04FD02 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:be:ee:e3:b4:16:19:0d:8c:6e:5d:6e:58:65:57: 6d:77:d5:2a:17:5a:0c:11:80:67:5d:ba:aa:42:dd: 4f:24:50:e3:b7:23:26:93:50:98:47:66:f4:41:7f: 04:f9:1b:b0:c5:ef:f6:44:7d:6d:67:43:85:2f:2e: 8f:b5:4d:93:27:a2:fe:57:c0:de:ad:24:b5:65:9a: a3:52:45:f1:de:7b:bd:b9:31:ee:bf:27:40:aa:25: 4a:a6:67:9a:48:a6:7f:37:8b:02:0e:88:e9:ac:b0: ba:2e:5d:6c:83:68:32:c5:d9:3d:8b:fd:6d:ce:0b: 28:ef:7d:e0:bf:86:17:7e:3c:c2:00:25:9b:01:17: 11:0c:55:9b:ae:98:16:46:2b:f5:01:41:5e:af:a5: 17:5d:09:26:a4:26:1d:d3:38:18:da:20:e7:d4:75: 61:ec:43:ef:c9:ac:dc:f5:86:43:ad:90:25:c2:9a: fe:9a:66:f7:52:dc:5b:50:dc:00:39:bc:7d:70:bb: a6:c5:2e:c9:57:11:23:32:60:a4:f2:a8:09:eb:f0: 41:44:55:fc:d5:c1:6f:e4:d0:3d:d5:4a:dc:00:34: 20:19:5d:0f:e0:dd:8a:44:22:97:e0:c7:dc:9f:82: 6a:19:df:c5:f3:a7:c4:21:de:bd:c1:ef:ec:ee:c2: e2:fd Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D8:37:82:60:6F:FD:37:72:4E:4C:B0:42:D8:DC:75:32:5D:04:FD:02 X509v3 Authority Key Identifier: keyid:81:C2:03:CF:45:8E:48:A8:FF:34:5F:B4:A5:DD:84:C6:FA:2D:CD:0A X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/da4746b7-5ff2-4556-8a3e-5a86cbcc8598/0/81C203CF458E48A8FF345FB4A5DD84C6FA2DCD0A.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/81C203CF458E48A8FF345FB4A5DD84C6FA2DCD0A.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/da4746b7-5ff2-4556-8a3e-5a86cbcc8598/0/81C203CF458E48A8FF345FB4A5DD84C6FA2DCD0A.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 0d:95:ab:d8:9b:b9:28:42:17:f2:31:d1:d8:8a:43:46:b1:17: 14:4c:d8:10:fe:0a:3a:c2:bc:13:56:53:eb:8a:7a:5c:c2:21: 13:f5:c3:6f:44:94:e2:33:58:87:42:be:f4:8f:ea:ee:8e:a5: 55:5b:ef:62:f2:9b:2e:be:4c:f0:75:92:43:4d:84:bb:91:02: b0:88:5a:f1:ec:44:78:db:c1:1d:d9:12:a1:49:3b:cd:b4:01: d6:c5:17:03:34:ba:22:fd:78:36:35:fe:27:70:79:cf:bb:ab: 82:61:69:ca:74:4d:79:3f:e0:f5:b9:0d:bc:a7:b7:9b:6f:12: 19:de:78:e9:c2:94:4f:b2:02:3f:c1:e9:ba:ec:ee:e4:73:11: d0:70:8f:c6:17:72:38:e6:34:77:c3:e4:4c:94:6f:87:13:1d: 09:a4:3c:0b:de:64:f1:d2:d6:47:03:9c:47:b8:c1:5f:5d:a6: 0f:0b:f7:1a:cc:6b:4a:fa:bf:1e:f5:64:ab:15:64:1b:4b:75: ee:60:1f:d5:4c:7b:02:1e:9f:cd:9b:ba:97:dd:19:14:04:23: 59:19:e3:7e:6f:64:11:d9:0c:51:46:08:1a:1c:e7:ba:ce:05: 3f:1e:b7:51:95:68:05:85:f5:9c:73:7f:78:b4:c5:91:bc:c6: 7f:c2:19:5f -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUQmZkGoRj7siM0gG7plkfqjkw1eowDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoODFDMjAzQ0Y0NThFNDhBOEZGMzQ1RkI0QTVERDg0QzZG QTJEQ0QwQTAeFw0yNTEyMDMwOTE2MjVaFw0yNTEyMDYxNDUwMjVaMDMxMTAvBgNV BAMTKEQ4Mzc4MjYwNkZGRDM3NzI0RTRDQjA0MkQ4REM3NTMyNUQwNEZEMDIwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC+7uO0FhkNjG5dblhlV2131SoX WgwRgGdduqpC3U8kUOO3IyaTUJhHZvRBfwT5G7DF7/ZEfW1nQ4UvLo+1TZMnov5X wN6tJLVlmqNSRfHee725Me6/J0CqJUqmZ5pIpn83iwIOiOmssLouXWyDaDLF2T2L /W3OCyjvfeC/hhd+PMIAJZsBFxEMVZuumBZGK/UBQV6vpRddCSakJh3TOBjaIOfU dWHsQ+/JrNz1hkOtkCXCmv6aZvdS3FtQ3AA5vH1wu6bFLslXESMyYKTyqAnr8EFE VfzVwW/k0D3VStwANCAZXQ/g3YpEIpfgx9yfgmoZ38Xzp8Qh3r3B7+zuwuL9AgMB AAGjggI8MIICODAdBgNVHQ4EFgQU2DeCYG/9N3JOTLBC2Nx1Ml0E/QIwHwYDVR0j BBgwFoAUgcIDz0WOSKj/NF+0pd2ExvotzQowDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby9k YTQ3NDZiNy01ZmYyLTQ1NTYtOGEzZS01YTg2Y2JjYzg1OTgvMC84MUMyMDNDRjQ1 OEU0OEE4RkYzNDVGQjRBNUREODRDNkZBMkRDRDBBLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvODFDMjAzQ0Y0NThFNDhBOEZGMzQ1RkI0QTVERDg0QzZGQTJE Q0QwQS5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vZGE0NzQ2YjctNWZmMi00NTU2LThh M2UtNWE4NmNiY2M4NTk4LzAvODFDMjAzQ0Y0NThFNDhBOEZGMzQ1RkI0QTVERDg0 QzZGQTJEQ0QwQS5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAA2Vq9ibuShCF/Ix0diKQ0axFxRM2BD+CjrC vBNWU+uKelzCIRP1w29ElOIzWIdCvvSP6u6OpVVb72Lymy6+TPB1kkNNhLuRArCI WvHsRHjbwR3ZEqFJO820AdbFFwM0uiL9eDY1/idwec+7q4Jhacp0TXk/4PW5Dbyn t5tvEhneeOnClE+yAj/B6brs7uRzEdBwj8YXcjjmNHfD5EyUb4cTHQmkPAveZPHS 1kcDnEe4wV9dpg8L9xrMa0r6vx71ZKsVZBtLde5gH9VMewIen82bupfdGRQEI1kZ 435vZBHZDFFGCBoc57rOBT8et1GVaAWF9Zxzf3i0xZG8xn/CGV8= -----END CERTIFICATE-----Generated at Wed Dec 3 16:36:19 2025 by rpki-client