This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf repo-rpki.idnic.net/repo/df9bf797-913d-48dd-832c-33b409b5f79b/0/81186C066342A0E66CD1921AEDB58A8CDDEE7E45.mft File: 81186C066342A0E66CD1921AEDB58A8CDDEE7E45.mft (raw, json) Hash identifier: tVoHb+8kA74NU0thu0Thc869ESuzttTZHUzOiYpqjwI= Subject key identifier: F9:CE:13:93:DB:CE:F0:56:74:46:F8:0F:D6:0C:A3:FE:3A:63:C9:F8 Authority key identifier: 81:18:6C:06:63:42:A0:E6:6C:D1:92:1A:ED:B5:8A:8C:DD:EE:7E:45 Certificate issuer: /CN=81186C066342A0E66CD1921AEDB58A8CDDEE7E45 Certificate serial: 43E218191CA78350652EE7D450D36E14C19563C0 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/81186C066342A0E66CD1921AEDB58A8CDDEE7E45.cer Subject info access: rsync://repo-rpki.idnic.net/repo/df9bf797-913d-48dd-832c-33b409b5f79b/0/81186C066342A0E66CD1921AEDB58A8CDDEE7E45.mft Manifest number: 052B Signing time: Mon 01 Dec 2025 18:21:51 +0000 Manifest this update: Mon 01 Dec 2025 18:16:51 +0000 Manifest next update: Thu 04 Dec 2025 21:02:51 +0000 Files and hashes: 1: 3130332e3131362e3131322e302f32322d3232203d3e203234353332.roa (hash: P4tF/toC2yTvcWCVKc3kDK6iTGruhcVaRl9T+qXARgU=) 2: 3130332e3131362e3131322e302f32322d3234203d3e203234353332.roa (hash: RbGIdOLWBU5xVV9K0LoZOkwEhMFKzskG/yrpat5y7rY=) 3: 81186C066342A0E66CD1921AEDB58A8CDDEE7E45.crl (hash: +Fm2bqEIEbdtMdxP7ZAtxKciHfWSeF+efZPNWabM4dA=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/df9bf797-913d-48dd-832c-33b409b5f79b/0/81186C066342A0E66CD1921AEDB58A8CDDEE7E45.crl rsync://repo-rpki.idnic.net/repo/df9bf797-913d-48dd-832c-33b409b5f79b/0/81186C066342A0E66CD1921AEDB58A8CDDEE7E45.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/81186C066342A0E66CD1921AEDB58A8CDDEE7E45.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 04 Dec 2025 21:02:51 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 43:e2:18:19:1c:a7:83:50:65:2e:e7:d4:50:d3:6e:14:c1:95:63:c0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=81186C066342A0E66CD1921AEDB58A8CDDEE7E45 Validity Not Before: Dec 1 18:16:51 2025 GMT Not After : Dec 4 21:02:51 2025 GMT Subject: CN=F9CE1393DBCEF0567446F80FD60CA3FE3A63C9F8 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e4:9b:fa:a0:7f:75:0b:39:67:4e:ec:4a:42:2c: f3:24:bf:70:82:f4:29:08:a5:d6:a8:f5:ce:49:42: 38:ac:41:bc:45:bf:5e:8a:5b:ef:dd:25:fb:45:ed: 12:ac:24:c1:93:51:34:99:55:2e:f6:ed:e3:0e:b6: f2:8e:f6:dc:ce:83:6c:2b:13:db:1a:5c:f9:d5:2c: 08:d7:89:ec:cd:c7:95:70:a2:77:49:4b:6d:76:f7: 1e:e6:3e:97:49:99:61:19:38:e6:44:8e:0c:02:39: 8b:c1:8a:dc:75:37:1a:96:01:84:ab:11:14:92:b1: 1f:0a:a7:5b:5b:2c:07:12:64:cc:df:a9:e4:02:cd: f2:7e:92:55:f7:14:de:1d:16:cc:2f:65:4c:6b:ff: b9:78:94:de:ef:eb:a6:44:c1:a8:f1:0a:ee:42:51: 48:07:f1:36:32:49:4f:63:da:6f:a9:a1:89:c8:11: 94:20:3a:d7:30:9d:36:b2:d3:f4:53:36:17:6e:e2: fc:26:69:67:86:cb:c6:9c:84:84:db:f6:fe:69:c1: 77:ec:75:80:09:ce:17:21:47:9a:69:c2:5d:63:bf: 25:02:d7:cb:69:2b:1a:ad:3c:03:73:4d:14:69:ab: 8e:0c:77:c4:05:7f:0e:10:c5:a6:61:db:34:5b:25: b3:1d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: F9:CE:13:93:DB:CE:F0:56:74:46:F8:0F:D6:0C:A3:FE:3A:63:C9:F8 X509v3 Authority Key Identifier: keyid:81:18:6C:06:63:42:A0:E6:6C:D1:92:1A:ED:B5:8A:8C:DD:EE:7E:45 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/df9bf797-913d-48dd-832c-33b409b5f79b/0/81186C066342A0E66CD1921AEDB58A8CDDEE7E45.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/81186C066342A0E66CD1921AEDB58A8CDDEE7E45.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/df9bf797-913d-48dd-832c-33b409b5f79b/0/81186C066342A0E66CD1921AEDB58A8CDDEE7E45.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption c2:ab:30:4a:0d:29:0b:12:4f:2d:25:fa:ec:29:e4:72:71:ba: e7:43:0d:47:76:44:f4:e6:1f:26:98:c6:8a:1d:38:5e:c5:1e: 18:61:3d:cb:68:8e:cb:6f:eb:ca:dc:26:42:85:50:f2:f1:ab: 5d:bc:a2:ca:30:c4:74:0f:dd:fd:5d:40:7f:2b:76:49:e0:82: 5a:a5:d8:01:a4:e6:ed:e9:65:48:36:c5:f1:18:ac:1c:7c:f7: eb:49:ea:99:3c:7b:d8:af:64:42:22:01:0a:8d:d2:cd:c9:ee: 55:25:3f:8b:63:ef:90:77:ad:39:d5:68:f8:e1:43:9d:9d:9d: 93:68:19:0a:70:07:80:53:46:c2:fe:90:69:09:26:a4:82:b6: 15:6b:07:ce:24:e7:fd:77:9e:88:1f:5e:87:d3:05:dd:bf:73: 16:65:0d:a2:bb:a9:ec:e0:82:79:8f:8b:71:1c:c9:9a:ac:f1: 54:5e:79:dc:ec:82:75:99:91:3a:b0:18:05:2f:5d:f0:fc:86: d6:a6:27:d5:f0:f8:e1:17:47:d8:75:80:92:50:1e:a5:d7:b3: 99:fa:76:ab:54:6e:b6:36:27:d0:9f:63:50:14:7a:b4:c2:fb: 4a:82:47:f9:4e:0f:0e:68:c9:df:f7:d3:d2:62:ec:07:e3:96: db:04:82:fe -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUQ+IYGRyng1BlLufUUNNuFMGVY8AwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoODExODZDMDY2MzQyQTBFNjZDRDE5MjFBRURCNThBOENE REVFN0U0NTAeFw0yNTEyMDExODE2NTFaFw0yNTEyMDQyMTAyNTFaMDMxMTAvBgNV BAMTKEY5Q0UxMzkzREJDRUYwNTY3NDQ2RjgwRkQ2MENBM0ZFM0E2M0M5RjgwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDkm/qgf3ULOWdO7EpCLPMkv3CC 9CkIpdao9c5JQjisQbxFv16KW+/dJftF7RKsJMGTUTSZVS727eMOtvKO9tzOg2wr E9saXPnVLAjXiezNx5VwondJS2129x7mPpdJmWEZOOZEjgwCOYvBitx1NxqWAYSr ERSSsR8Kp1tbLAcSZMzfqeQCzfJ+klX3FN4dFswvZUxr/7l4lN7v66ZEwajxCu5C UUgH8TYySU9j2m+poYnIEZQgOtcwnTay0/RTNhdu4vwmaWeGy8achITb9v5pwXfs dYAJzhchR5ppwl1jvyUC18tpKxqtPANzTRRpq44Md8QFfw4QxaZh2zRbJbMdAgMB AAGjggI8MIICODAdBgNVHQ4EFgQU+c4Tk9vO8FZ0RvgP1gyj/jpjyfgwHwYDVR0j BBgwFoAUgRhsBmNCoOZs0ZIa7bWKjN3ufkUwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby9k ZjliZjc5Ny05MTNkLTQ4ZGQtODMyYy0zM2I0MDliNWY3OWIvMC84MTE4NkMwNjYz NDJBMEU2NkNEMTkyMUFFREI1OEE4Q0RERUU3RTQ1LmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvODExODZDMDY2MzQyQTBFNjZDRDE5MjFBRURCNThBOENEREVF N0U0NS5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vZGY5YmY3OTctOTEzZC00OGRkLTgz MmMtMzNiNDA5YjVmNzliLzAvODExODZDMDY2MzQyQTBFNjZDRDE5MjFBRURCNThB OENEREVFN0U0NS5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAMKrMEoNKQsSTy0l+uwp5HJxuudDDUd2RPTm HyaYxoodOF7FHhhhPctojstv68rcJkKFUPLxq128osowxHQP3f1dQH8rdkngglql 2AGk5u3pZUg2xfEYrBx89+tJ6pk8e9ivZEIiAQqN0s3J7lUlP4tj75B3rTnVaPjh Q52dnZNoGQpwB4BTRsL+kGkJJqSCthVrB84k5/13nogfXofTBd2/cxZlDaK7qezg gnmPi3EcyZqs8VReedzsgnWZkTqwGAUvXfD8htamJ9Xw+OEXR9h1gJJQHqXXs5n6 dqtUbrY2J9CfY1AUerTC+0qCR/lODw5oyd/309Ji7AfjltsEgv4= -----END CERTIFICATE-----Generated at Wed Dec 3 14:41:50 2025 by rpki-client