This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf repo-rpki.idnic.net/repo/0146632a-b2e1-420a-a895-c4a1e2217da3/0/46BF7D6907C7E35726A4180F0BC5F133F6C5AD93.mft File: 46BF7D6907C7E35726A4180F0BC5F133F6C5AD93.mft (raw, json) Hash identifier: fT3v42N3JYPgU+i+jhRSy+04QCrJvEinbo3RPdN4Ah0= Subject key identifier: FE:5A:95:17:75:35:7C:85:93:44:8E:9B:D9:B0:CA:6A:77:4F:E8:A8 Authority key identifier: 46:BF:7D:69:07:C7:E3:57:26:A4:18:0F:0B:C5:F1:33:F6:C5:AD:93 Certificate issuer: /CN=46BF7D6907C7E35726A4180F0BC5F133F6C5AD93 Certificate serial: 5A4F5EE58256115DA20C00201CCC3438812BC12A Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/46BF7D6907C7E35726A4180F0BC5F133F6C5AD93.cer Subject info access: rsync://repo-rpki.idnic.net/repo/0146632a-b2e1-420a-a895-c4a1e2217da3/0/46BF7D6907C7E35726A4180F0BC5F133F6C5AD93.mft Manifest number: FA Signing time: Sun 21 Dec 2025 18:22:52 +0000 Manifest this update: Sun 21 Dec 2025 18:17:52 +0000 Manifest next update: Thu 25 Dec 2025 03:22:52 +0000 Files and hashes: 1: 46BF7D6907C7E35726A4180F0BC5F133F6C5AD93.crl (hash: lWbK9vlTpoizWa5DhUVYF/8KZYfNHsIb3MQPonZllSw=) 2: 3130332e36302e39302e302f32342d3234203d3e20313531353730.roa (hash: YhTpL/afIyHAI7098wyo60hPl3dD1A2rEVVKj7Elh/k=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/0146632a-b2e1-420a-a895-c4a1e2217da3/0/46BF7D6907C7E35726A4180F0BC5F133F6C5AD93.crl rsync://repo-rpki.idnic.net/repo/0146632a-b2e1-420a-a895-c4a1e2217da3/0/46BF7D6907C7E35726A4180F0BC5F133F6C5AD93.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/46BF7D6907C7E35726A4180F0BC5F133F6C5AD93.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 24 Dec 2025 07:39:25 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 5a:4f:5e:e5:82:56:11:5d:a2:0c:00:20:1c:cc:34:38:81:2b:c1:2a Signature Algorithm: sha256WithRSAEncryption Issuer: CN=46BF7D6907C7E35726A4180F0BC5F133F6C5AD93 Validity Not Before: Dec 21 18:17:52 2025 GMT Not After : Dec 25 03:22:52 2025 GMT Subject: CN=FE5A951775357C8593448E9BD9B0CA6A774FE8A8 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d7:db:5a:81:c2:22:e3:59:92:d2:30:df:29:71: bd:41:0e:a4:8e:4f:32:31:98:9d:60:4b:0a:21:69: 9b:c5:c7:c0:b0:fa:4c:50:1c:0b:08:3d:fa:dd:c0: 0a:5b:f1:49:7c:d4:1e:c2:3b:f8:c6:f2:bb:55:5f: 0e:87:8a:44:4b:cf:88:ff:c7:81:ed:74:41:2a:b0: 6a:d9:30:14:d8:fe:02:f7:c5:8e:6f:58:98:4d:61: 5c:a2:7a:1f:a0:f3:5a:dd:1b:70:85:19:54:d5:5c: d1:51:eb:84:40:99:88:13:61:07:b8:ad:95:fd:33: 2f:73:b8:19:07:9e:e6:c1:fb:57:ea:20:df:2a:7c: 84:36:ba:5f:c5:cc:2d:15:86:7d:13:93:59:dd:29: 89:09:f2:7c:73:31:f1:f9:17:ce:9c:60:6a:48:54: e2:28:c2:15:a5:f4:b8:d8:5a:d1:e8:3f:99:6e:b0: 1b:1f:f6:98:29:64:59:76:61:c5:68:05:e0:01:0a: 1b:f0:bc:ca:54:bd:0f:2a:dc:fc:87:15:18:04:cf: 02:1d:49:fc:d5:8f:ab:55:51:23:17:ac:87:20:4c: fd:7f:ff:ba:29:00:80:5c:3f:9e:24:a5:3d:e5:ae: 4e:3f:13:38:9a:29:b3:58:0f:a9:e0:11:a6:23:6a: 7c:6b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: FE:5A:95:17:75:35:7C:85:93:44:8E:9B:D9:B0:CA:6A:77:4F:E8:A8 X509v3 Authority Key Identifier: keyid:46:BF:7D:69:07:C7:E3:57:26:A4:18:0F:0B:C5:F1:33:F6:C5:AD:93 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/0146632a-b2e1-420a-a895-c4a1e2217da3/0/46BF7D6907C7E35726A4180F0BC5F133F6C5AD93.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/46BF7D6907C7E35726A4180F0BC5F133F6C5AD93.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/0146632a-b2e1-420a-a895-c4a1e2217da3/0/46BF7D6907C7E35726A4180F0BC5F133F6C5AD93.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 16:61:81:f3:fd:c8:82:19:b9:7f:e7:b4:f9:c0:54:e8:c4:4f: 9d:50:c2:1d:67:08:ad:aa:d4:83:04:80:7e:af:ed:a1:3c:bc: c9:0c:7a:ab:56:ad:98:56:38:a7:ed:98:53:51:b5:23:98:dc: a5:ee:5d:27:74:4a:a2:c0:70:20:da:96:fd:de:aa:9b:e3:82: a9:bb:fe:aa:d1:e2:7e:19:21:08:35:02:65:8e:b9:2d:4e:0a: f8:b3:97:8b:01:49:af:25:1f:58:a5:e3:f8:5c:25:86:42:c4: 8e:bd:0f:09:01:71:51:4c:b3:88:cf:f4:bb:3c:71:4a:c7:a6: 2d:64:d9:cf:1a:74:85:8f:93:95:48:89:b2:43:6f:ad:4a:aa: 4c:a3:81:78:c2:e2:b4:05:c9:e7:5c:6a:eb:ad:d9:4e:48:59: b7:b1:43:c8:e3:d1:27:a2:db:9a:6b:32:40:6c:57:db:cd:6e: a3:a2:ea:c6:2e:26:48:5b:94:06:b9:65:b7:b3:7f:05:fa:eb: 44:86:6d:89:39:9c:e6:29:89:62:00:7e:31:e2:7a:64:58:ea: 07:2c:1b:b8:55:a3:b2:8f:24:43:20:77:b1:9c:89:60:dd:e1: cb:4e:eb:b9:41:b2:fa:c1:3b:ea:38:b1:8b:80:c0:81:43:58: bc:8d:a6:78 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUWk9e5YJWEV2iDAAgHMw0OIErwSowDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoNDZCRjdENjkwN0M3RTM1NzI2QTQxODBGMEJDNUYxMzNG NkM1QUQ5MzAeFw0yNTEyMjExODE3NTJaFw0yNTEyMjUwMzIyNTJaMDMxMTAvBgNV BAMTKEZFNUE5NTE3NzUzNTdDODU5MzQ0OEU5QkQ5QjBDQTZBNzc0RkU4QTgwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDX21qBwiLjWZLSMN8pcb1BDqSO TzIxmJ1gSwohaZvFx8Cw+kxQHAsIPfrdwApb8Ul81B7CO/jG8rtVXw6HikRLz4j/ x4HtdEEqsGrZMBTY/gL3xY5vWJhNYVyieh+g81rdG3CFGVTVXNFR64RAmYgTYQe4 rZX9My9zuBkHnubB+1fqIN8qfIQ2ul/FzC0Vhn0Tk1ndKYkJ8nxzMfH5F86cYGpI VOIowhWl9LjYWtHoP5lusBsf9pgpZFl2YcVoBeABChvwvMpUvQ8q3PyHFRgEzwId SfzVj6tVUSMXrIcgTP1//7opAIBcP54kpT3lrk4/EziaKbNYD6ngEaYjanxrAgMB AAGjggI8MIICODAdBgNVHQ4EFgQU/lqVF3U1fIWTRI6b2bDKandP6KgwHwYDVR0j BBgwFoAURr99aQfH41cmpBgPC8XxM/bFrZMwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby8w MTQ2NjMyYS1iMmUxLTQyMGEtYTg5NS1jNGExZTIyMTdkYTMvMC80NkJGN0Q2OTA3 QzdFMzU3MjZBNDE4MEYwQkM1RjEzM0Y2QzVBRDkzLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvNDZCRjdENjkwN0M3RTM1NzI2QTQxODBGMEJDNUYxMzNGNkM1 QUQ5My5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vMDE0NjYzMmEtYjJlMS00MjBhLWE4 OTUtYzRhMWUyMjE3ZGEzLzAvNDZCRjdENjkwN0M3RTM1NzI2QTQxODBGMEJDNUYx MzNGNkM1QUQ5My5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBABZhgfP9yIIZuX/ntPnAVOjET51Qwh1nCK2q 1IMEgH6v7aE8vMkMeqtWrZhWOKftmFNRtSOY3KXuXSd0SqLAcCDalv3eqpvjgqm7 /qrR4n4ZIQg1AmWOuS1OCvizl4sBSa8lH1il4/hcJYZCxI69DwkBcVFMs4jP9Ls8 cUrHpi1k2c8adIWPk5VIibJDb61KqkyjgXjC4rQFyedcauut2U5IWbexQ8jj0Sei 25prMkBsV9vNbqOi6sYuJkhblAa5ZbezfwX660SGbYk5nOYpiWIAfjHiemRY6gcs G7hVo7KPJEMgd7GciWDd4ctO67lBsvrBO+o4sYuAwIFDWLyNpng= -----END CERTIFICATE-----Generated at Mon Dec 22 10:42:38 2025 by rpki-client