This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf repo-rpki.idnic.net/repo/4a48b222-6ded-428a-888f-10454b0880c2/0/81498B85C0E2937290B9B2119B132DEADBB24A5C.mft File: 81498B85C0E2937290B9B2119B132DEADBB24A5C.mft (raw, json) Hash identifier: +4MQJ/aw1sgW3gN/pDdZxaho+3eT2i74mki1zA/UqGQ= Subject key identifier: B6:08:E4:BC:9C:C6:D4:54:C5:A4:CF:D9:AB:10:44:4C:2E:34:07:C2 Authority key identifier: 81:49:8B:85:C0:E2:93:72:90:B9:B2:11:9B:13:2D:EA:DB:B2:4A:5C Certificate issuer: /CN=81498B85C0E2937290B9B2119B132DEADBB24A5C Certificate serial: 21447B02050D0098AD88E71EA1A4EBE79BFFE347 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/81498B85C0E2937290B9B2119B132DEADBB24A5C.cer Subject info access: rsync://repo-rpki.idnic.net/repo/4a48b222-6ded-428a-888f-10454b0880c2/0/81498B85C0E2937290B9B2119B132DEADBB24A5C.mft Manifest number: 0221 Signing time: Tue 23 Dec 2025 01:31:02 +0000 Manifest this update: Tue 23 Dec 2025 01:26:02 +0000 Manifest next update: Fri 26 Dec 2025 12:07:02 +0000 Files and hashes: 1: 81498B85C0E2937290B9B2119B132DEADBB24A5C.crl (hash: Fqwq5OdJHipmZmEdug2x95KqCy/31Gp6a3wC2c2H4xU=) 2: 3130332e3135392e3232342e302f32332d3234203d3e20313431313437.roa (hash: 49uJeHF+k8HvLvLuvnXcFDfrAZMvN78Q5XdfyLfe2TU=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/4a48b222-6ded-428a-888f-10454b0880c2/0/81498B85C0E2937290B9B2119B132DEADBB24A5C.crl rsync://repo-rpki.idnic.net/repo/4a48b222-6ded-428a-888f-10454b0880c2/0/81498B85C0E2937290B9B2119B132DEADBB24A5C.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/81498B85C0E2937290B9B2119B132DEADBB24A5C.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 26 Dec 2025 12:07:02 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 21:44:7b:02:05:0d:00:98:ad:88:e7:1e:a1:a4:eb:e7:9b:ff:e3:47 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=81498B85C0E2937290B9B2119B132DEADBB24A5C Validity Not Before: Dec 23 01:26:02 2025 GMT Not After : Dec 26 12:07:02 2025 GMT Subject: CN=B608E4BC9CC6D454C5A4CFD9AB10444C2E3407C2 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:af:59:6b:19:4c:66:61:25:4d:e2:c7:83:b6:ba: 87:70:bc:8d:19:74:21:8f:38:c5:4d:af:2c:7e:27: 23:bf:81:1c:74:2e:ed:b3:c0:01:5f:6a:d0:1d:d1: d7:73:b1:5a:f4:fa:be:80:98:b8:45:79:a9:5a:8a: a2:35:aa:01:ae:e7:47:64:8f:fc:1f:27:a8:52:90: 92:1a:34:50:74:e8:e7:f4:a1:62:0a:34:63:f9:d4: 97:81:c0:51:c1:cb:c6:21:14:94:cc:ee:90:b8:be: bf:ef:f3:43:1f:07:94:3f:2e:d1:cd:62:c5:4f:fb: 96:be:5c:10:99:56:f7:76:1d:3e:e3:ad:80:35:c5: 85:c0:d3:eb:b0:02:f2:43:2b:53:d7:e0:8b:c8:da: 2a:f2:5d:95:19:49:4c:fe:93:3d:78:64:b7:00:95: 4d:ac:83:3f:b9:a1:5c:74:dc:b0:bb:16:3e:03:45: ea:65:06:fa:85:4c:a1:79:38:15:5b:79:cb:60:b1: 99:15:93:a3:cb:91:18:f3:ed:25:b2:fb:f7:6e:41: 20:22:a9:52:2a:dc:45:4b:87:50:b6:e0:5c:89:a9: 3c:7d:9f:d0:9b:ea:e3:4f:92:ab:26:f4:1b:e7:74: 50:0b:c7:ff:ee:2a:58:4c:da:84:53:33:f1:41:e0: a0:9f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: B6:08:E4:BC:9C:C6:D4:54:C5:A4:CF:D9:AB:10:44:4C:2E:34:07:C2 X509v3 Authority Key Identifier: keyid:81:49:8B:85:C0:E2:93:72:90:B9:B2:11:9B:13:2D:EA:DB:B2:4A:5C X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/4a48b222-6ded-428a-888f-10454b0880c2/0/81498B85C0E2937290B9B2119B132DEADBB24A5C.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/81498B85C0E2937290B9B2119B132DEADBB24A5C.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/4a48b222-6ded-428a-888f-10454b0880c2/0/81498B85C0E2937290B9B2119B132DEADBB24A5C.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 30:92:f4:fd:67:fc:b7:ba:be:c6:93:6d:d5:7e:9b:85:fc:29: 23:3b:aa:1f:74:6a:3a:5d:40:0c:76:95:b6:1f:5d:35:b0:21: e5:5f:f1:cc:76:9f:64:b0:e4:9c:6c:98:40:b7:ff:14:70:ce: 77:58:07:a1:26:d7:20:80:9e:1f:a9:36:4a:6e:a6:40:f3:6f: 76:12:04:4e:88:d7:7e:70:70:9a:1c:23:b4:6c:b1:49:c2:2d: 00:ab:d1:a8:2d:d6:c3:e7:99:cd:14:95:84:0e:78:16:0e:3a: 1d:38:d0:4c:6f:35:2e:4d:82:8f:98:ea:2c:4f:45:dd:8f:1d: 07:93:42:84:b5:25:f4:be:4f:ca:fc:90:91:cd:ff:38:d2:78: 44:06:99:8b:22:68:6f:bc:84:f3:70:45:cf:ed:38:85:b7:b6: 57:4a:b7:6e:2c:dd:93:4d:5f:8f:8b:6e:25:e9:4c:e8:1a:6c: 76:d2:9d:1d:3c:ce:88:04:7e:86:07:0e:cb:16:82:24:61:0f: 14:d7:5c:da:09:c1:bd:1d:ff:e8:46:1e:c0:39:81:6a:34:9d: 2d:7e:0b:9a:1e:52:bf:65:26:68:29:cc:e5:96:5f:78:12:79: 7a:32:32:b6:8e:ec:fb:e3:67:49:20:63:fa:f5:5c:e3:f4:eb: 5d:48:fd:23 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUIUR7AgUNAJitiOceoaTr55v/40cwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoODE0OThCODVDMEUyOTM3MjkwQjlCMjExOUIxMzJERUFE QkIyNEE1QzAeFw0yNTEyMjMwMTI2MDJaFw0yNTEyMjYxMjA3MDJaMDMxMTAvBgNV BAMTKEI2MDhFNEJDOUNDNkQ0NTRDNUE0Q0ZEOUFCMTA0NDRDMkUzNDA3QzIwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCvWWsZTGZhJU3ix4O2uodwvI0Z dCGPOMVNryx+JyO/gRx0Lu2zwAFfatAd0ddzsVr0+r6AmLhFealaiqI1qgGu50dk j/wfJ6hSkJIaNFB06Of0oWIKNGP51JeBwFHBy8YhFJTM7pC4vr/v80MfB5Q/LtHN YsVP+5a+XBCZVvd2HT7jrYA1xYXA0+uwAvJDK1PX4IvI2iryXZUZSUz+kz14ZLcA lU2sgz+5oVx03LC7Fj4DReplBvqFTKF5OBVbectgsZkVk6PLkRjz7SWy+/duQSAi qVIq3EVLh1C24FyJqTx9n9Cb6uNPkqsm9BvndFALx//uKlhM2oRTM/FB4KCfAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUtgjkvJzG1FTFpM/ZqxBETC40B8IwHwYDVR0j BBgwFoAUgUmLhcDik3KQubIRmxMt6tuySlwwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby80 YTQ4YjIyMi02ZGVkLTQyOGEtODg4Zi0xMDQ1NGIwODgwYzIvMC84MTQ5OEI4NUMw RTI5MzcyOTBCOUIyMTE5QjEzMkRFQURCQjI0QTVDLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvODE0OThCODVDMEUyOTM3MjkwQjlCMjExOUIxMzJERUFEQkIy NEE1Qy5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vNGE0OGIyMjItNmRlZC00MjhhLTg4 OGYtMTA0NTRiMDg4MGMyLzAvODE0OThCODVDMEUyOTM3MjkwQjlCMjExOUIxMzJE RUFEQkIyNEE1Qy5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBADCS9P1n/Le6vsaTbdV+m4X8KSM7qh90ajpd QAx2lbYfXTWwIeVf8cx2n2Sw5JxsmEC3/xRwzndYB6Em1yCAnh+pNkpupkDzb3YS BE6I135wcJocI7RssUnCLQCr0agt1sPnmc0UlYQOeBYOOh040ExvNS5Ngo+Y6ixP Rd2PHQeTQoS1JfS+T8r8kJHN/zjSeEQGmYsiaG+8hPNwRc/tOIW3tldKt24s3ZNN X4+LbiXpTOgabHbSnR08zogEfoYHDssWgiRhDxTXXNoJwb0d/+hGHsA5gWo0nS1+ C5oeUr9lJmgpzOWWX3gSeXoyMraO7PvjZ0kgY/r1XOP0611I/SM= -----END CERTIFICATE-----Generated at Wed Dec 24 20:25:13 2025 by rpki-client