This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf repo-rpki.idnic.net/repo/0146632a-b2e1-420a-a895-c4a1e2217da3/0/46BF7D6907C7E35726A4180F0BC5F133F6C5AD93.mft
File:                     46BF7D6907C7E35726A4180F0BC5F133F6C5AD93.mft (raw, json)
Hash identifier:          u8z5ynkMYtGg895pXUDSzJGW6fQf6ulaPJFN4C1RdmQ=
Subject key identifier:   08:8D:CE:C6:2B:7D:ED:B7:AC:B2:A1:19:70:5E:7D:CA:CB:D3:66:12
Authority key identifier: 46:BF:7D:69:07:C7:E3:57:26:A4:18:0F:0B:C5:F1:33:F6:C5:AD:93
Certificate issuer:       /CN=46BF7D6907C7E35726A4180F0BC5F133F6C5AD93
Certificate serial:       33877496B651ED0A04907F848A128FB33C68A192
Authority info access:    rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/46BF7D6907C7E35726A4180F0BC5F133F6C5AD93.cer
Subject info access:      rsync://repo-rpki.idnic.net/repo/0146632a-b2e1-420a-a895-c4a1e2217da3/0/46BF7D6907C7E35726A4180F0BC5F133F6C5AD93.mft
Manifest number:          F8
Signing time:             Wed 17 Dec 2025 09:52:15 +0000
Manifest this update:     Wed 17 Dec 2025 09:47:15 +0000
Manifest next update:     Sat 20 Dec 2025 16:02:15 +0000
Files and hashes:         1: 3130332e36302e39302e302f32342d3234203d3e20313531353730.roa (hash: YhTpL/afIyHAI7098wyo60hPl3dD1A2rEVVKj7Elh/k=)
                          2: 46BF7D6907C7E35726A4180F0BC5F133F6C5AD93.crl (hash: ZdLv5QZbT1e5ZRM/O1FY8DXkHcWNVzfBJ82Ru+y1Dbk=)
Validation:               OK
Signature path:           rsync://repo-rpki.idnic.net/repo/0146632a-b2e1-420a-a895-c4a1e2217da3/0/46BF7D6907C7E35726A4180F0BC5F133F6C5AD93.crl
                          rsync://repo-rpki.idnic.net/repo/0146632a-b2e1-420a-a895-c4a1e2217da3/0/46BF7D6907C7E35726A4180F0BC5F133F6C5AD93.mft
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/46BF7D6907C7E35726A4180F0BC5F133F6C5AD93.cer
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sat 20 Dec 2025 16:02:15 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            33:87:74:96:b6:51:ed:0a:04:90:7f:84:8a:12:8f:b3:3c:68:a1:92
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=46BF7D6907C7E35726A4180F0BC5F133F6C5AD93
        Validity
            Not Before: Dec 17 09:47:15 2025 GMT
            Not After : Dec 20 16:02:15 2025 GMT
        Subject: CN=088DCEC62B7DEDB7ACB2A119705E7DCACBD36612
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e1:8e:02:dc:bc:5f:18:84:a6:c5:31:64:61:af:
                    0a:4a:41:11:e1:9a:f3:8e:c9:3f:9d:dd:4d:4a:4a:
                    f5:77:4c:4a:aa:db:2e:fa:c0:9a:bb:96:83:32:02:
                    dc:a4:72:81:c7:78:b5:46:11:64:9d:55:0c:05:47:
                    67:33:31:51:c1:88:54:a9:12:68:67:8b:99:b8:a1:
                    cb:aa:e2:b6:9b:9f:20:cd:f8:9b:14:47:5e:19:24:
                    56:5c:22:79:74:a5:1d:2c:97:5a:c9:0a:c0:44:71:
                    a8:9e:d6:b5:80:2d:e2:94:24:14:93:f0:73:a7:01:
                    21:c5:62:c2:54:c9:3f:26:e6:63:fc:7a:7d:60:74:
                    f6:d2:91:6e:74:07:d8:d2:e2:c0:7e:67:fb:0e:c1:
                    39:ba:fe:d2:c3:d6:47:b6:27:92:d9:89:11:9d:09:
                    25:7d:18:40:c7:c3:c9:6c:cd:37:f4:eb:2e:bd:f0:
                    0f:96:8e:48:eb:87:3c:4d:b5:95:12:28:64:b9:4b:
                    ba:38:88:e5:8f:a9:d1:3c:aa:a3:50:e7:af:d2:8c:
                    7f:7f:5a:c5:34:5b:54:e8:1c:07:ad:70:da:82:f3:
                    11:60:e8:b6:5f:1a:0f:83:bd:2d:d4:52:c8:35:22:
                    1e:e9:c0:38:82:08:36:0f:44:76:6b:e3:64:3b:91:
                    d9:3f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                08:8D:CE:C6:2B:7D:ED:B7:AC:B2:A1:19:70:5E:7D:CA:CB:D3:66:12
            X509v3 Authority Key Identifier:
                keyid:46:BF:7D:69:07:C7:E3:57:26:A4:18:0F:0B:C5:F1:33:F6:C5:AD:93

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repo-rpki.idnic.net/repo/0146632a-b2e1-420a-a895-c4a1e2217da3/0/46BF7D6907C7E35726A4180F0BC5F133F6C5AD93.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/46BF7D6907C7E35726A4180F0BC5F133F6C5AD93.cer

            Subject Information Access:
                Signed Object - URI:rsync://repo-rpki.idnic.net/repo/0146632a-b2e1-420a-a895-c4a1e2217da3/0/46BF7D6907C7E35726A4180F0BC5F133F6C5AD93.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         2f:71:cb:00:29:b5:7b:5b:26:ac:9d:f7:af:67:26:57:7c:ea:
         b7:6a:18:1d:75:d6:03:26:e9:71:0d:2c:02:94:d5:90:1a:f9:
         87:7d:9d:79:28:f0:34:29:93:f8:bc:f6:7e:4f:9c:8a:78:cb:
         a7:3e:0d:51:90:25:c7:95:21:2a:d2:15:1e:32:e7:d6:30:43:
         fe:89:13:3b:66:18:78:be:8c:81:c8:eb:40:81:c4:a8:27:ab:
         c9:cb:96:78:fd:60:87:81:ce:ff:8d:50:da:c9:0f:fe:4c:c0:
         13:38:fd:27:f3:cb:1b:8c:46:73:09:13:c5:dc:8f:c7:c2:16:
         28:79:0c:69:60:b3:3e:e7:0e:76:10:4a:b9:b5:22:99:dc:14:
         df:c6:7a:22:3f:47:bc:ad:ed:96:a3:10:ad:7b:2c:ca:23:a4:
         b1:06:88:db:be:29:65:b4:48:6c:a6:98:f8:f2:4b:4b:14:da:
         4b:a6:ca:b1:04:3b:ef:94:16:01:a7:ca:6a:26:27:4a:26:d3:
         70:da:37:fb:b8:71:16:2b:13:d3:8e:1f:bc:c5:72:ef:6a:fe:
         c8:02:04:f2:a6:aa:b3:ec:11:c8:5f:1d:2a:b9:66:22:23:97:
         a5:7c:87:da:42:f1:39:7f:3e:26:e1:91:a4:ba:38:ca:16:4a:
         79:31:67:58
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Dec 19 11:19:41 2025 by rpki-client