This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

$ rpki-client -vvf repo-rpki.idnic.net/repo/1dee126f-8192-4d28-b25e-deabdb79eb21/0/146B42876A5C2AB0705F67F1A3918D76984989AF.mft
File: 146B42876A5C2AB0705F67F1A3918D76984989AF.mft (raw, json)
Hash identifier: eaEMJV+kxHIoWGtMlXWm/E2HmaXJGYt+LFXExMMTwl4=
Subject key identifier: ED:B7:3A:91:5C:BB:CE:95:EF:16:55:B0:62:3F:F2:92:BD:05:8A:77
Authority key identifier: 14:6B:42:87:6A:5C:2A:B0:70:5F:67:F1:A3:91:8D:76:98:49:89:AF
Certificate issuer: /CN=146B42876A5C2AB0705F67F1A3918D76984989AF
Certificate serial: 4903B395CE0B3A047DB18BC374E53F0341CFA292
Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/146B42876A5C2AB0705F67F1A3918D76984989AF.cer
Subject info access: rsync://repo-rpki.idnic.net/repo/1dee126f-8192-4d28-b25e-deabdb79eb21/0/146B42876A5C2AB0705F67F1A3918D76984989AF.mft
Manifest number: 0229
Signing time: Wed 24 Dec 2025 19:01:34 +0000
Manifest this update: Wed 24 Dec 2025 18:56:34 +0000
Manifest next update: Sun 28 Dec 2025 00:53:34 +0000
Files and hashes: 1: 3130332e3139302e33312e302f32342d3234203d3e20313439383931.roa (hash: f2ET0xnRE9tVugcZTeUjwdpllzI9UCr68L6pTafrq5U=)
2: 3130332e3139302e33302e302f32342d3234203d3e20313439383931.roa (hash: On7TkaewDfG3q672VhzDkhOW6Lq6Z1WuztT7xPC6+6E=)
3: 146B42876A5C2AB0705F67F1A3918D76984989AF.crl (hash: irxNXnHN/iJLOyq6LWQHEWBY/8pvIKpYwjYR+hVVSlc=)
Validation: OK
Signature path: rsync://repo-rpki.idnic.net/repo/1dee126f-8192-4d28-b25e-deabdb79eb21/0/146B42876A5C2AB0705F67F1A3918D76984989AF.crl
rsync://repo-rpki.idnic.net/repo/1dee126f-8192-4d28-b25e-deabdb79eb21/0/146B42876A5C2AB0705F67F1A3918D76984989AF.mft
rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/146B42876A5C2AB0705F67F1A3918D76984989AF.cer
rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl
rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Sat 27 Dec 2025 17:20:12 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
49:03:b3:95:ce:0b:3a:04:7d:b1:8b:c3:74:e5:3f:03:41:cf:a2:92
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=146B42876A5C2AB0705F67F1A3918D76984989AF
Validity
Not Before: Dec 24 18:56:34 2025 GMT
Not After : Dec 28 00:53:34 2025 GMT
Subject: CN=EDB73A915CBBCE95EF1655B0623FF292BD058A77
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a8:2d:82:ba:09:cd:97:dd:49:23:42:3d:a8:ef:
70:54:4e:4a:b4:2f:93:c3:49:35:80:b6:c4:10:63:
2d:0e:88:a2:5f:92:7a:59:38:f2:a1:45:45:24:f8:
b8:3e:a9:8e:af:0e:66:13:8e:6c:22:62:26:33:eb:
2c:c1:f6:65:94:21:76:be:9c:82:ad:2b:3c:bc:eb:
b0:eb:11:8b:b3:54:5a:76:58:59:18:c4:ba:31:8c:
97:17:f8:69:88:52:a5:8b:69:cc:63:3e:09:c8:f6:
d5:1f:92:a0:1c:37:aa:f1:1e:85:94:04:5e:ec:11:
b5:47:3b:b1:ce:d5:a3:60:9d:03:71:83:a3:98:8f:
4c:fd:59:44:c2:26:d7:1e:ae:67:1f:34:ce:19:4f:
93:e4:7c:69:74:b3:ad:48:10:4a:9b:66:dc:56:97:
4f:0d:8e:12:10:52:fa:4b:9e:df:f3:eb:45:53:ca:
36:5a:1f:e0:b0:21:96:49:e7:f5:a9:f0:45:2c:cb:
ed:89:a1:fc:97:49:d2:e9:1c:c6:93:19:39:dc:e5:
38:89:e2:ed:05:ec:92:fd:48:42:64:36:3d:c6:b5:
27:33:5d:e3:0c:49:01:22:19:07:95:a1:9a:d3:d5:
67:f3:f5:76:33:80:c7:a0:0a:bf:6d:8d:74:d8:a8:
0e:d9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
ED:B7:3A:91:5C:BB:CE:95:EF:16:55:B0:62:3F:F2:92:BD:05:8A:77
X509v3 Authority Key Identifier:
keyid:14:6B:42:87:6A:5C:2A:B0:70:5F:67:F1:A3:91:8D:76:98:49:89:AF
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://repo-rpki.idnic.net/repo/1dee126f-8192-4d28-b25e-deabdb79eb21/0/146B42876A5C2AB0705F67F1A3918D76984989AF.crl
Authority Information Access:
CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/146B42876A5C2AB0705F67F1A3918D76984989AF.cer
Subject Information Access:
Signed Object - URI:rsync://repo-rpki.idnic.net/repo/1dee126f-8192-4d28-b25e-deabdb79eb21/0/146B42876A5C2AB0705F67F1A3918D76984989AF.mft
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
3e:01:0b:02:17:6f:24:14:9d:7a:53:9f:76:aa:60:b9:94:5f:
d6:d1:e5:c5:50:f2:e2:d5:5f:d6:94:dc:c0:44:a4:72:e8:d9:
dd:44:a2:93:89:0c:db:dc:43:ea:ac:f8:d5:b7:a1:bb:43:be:
dc:a2:19:1a:1e:7e:87:32:5c:e0:d6:dd:72:d8:33:6f:4b:53:
40:96:92:11:0d:73:1f:39:b0:02:94:20:40:da:27:94:67:3a:
b7:96:5a:74:8f:bc:26:14:99:a0:4d:b1:84:73:7e:5b:1a:8a:
da:c8:65:cf:95:6a:11:44:66:e3:63:5b:63:5a:80:2a:ca:ba:
a3:a8:89:ed:da:d5:95:89:ec:aa:a6:cc:f4:83:92:94:2a:97:
fc:18:d6:64:61:98:04:49:aa:90:9c:47:70:92:72:7a:b7:c6:
2c:d3:ad:95:83:34:3e:1a:24:38:43:f7:3e:66:e4:36:5d:70:
c0:5c:c9:3e:cc:4c:b4:7c:2c:a8:ff:dc:24:7d:b6:7a:5e:17:
62:1e:ab:10:7b:e6:65:46:26:60:da:ad:4f:05:28:f8:a5:b9:
a8:3b:e8:c7:04:ce:60:5f:be:61:18:0f:39:0e:a3:cf:04:3a:
95:86:f0:a0:ba:8e:35:90:68:93:84:4c:52:9e:f3:94:b2:e1:
5b:74:6b:83
-----BEGIN CERTIFICATE-----
MIIFMjCCBBqgAwIBAgIUSQOzlc4LOgR9sYvDdOU/A0HPopIwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoMTQ2QjQyODc2QTVDMkFCMDcwNUY2N0YxQTM5MThENzY5
ODQ5ODlBRjAeFw0yNTEyMjQxODU2MzRaFw0yNTEyMjgwMDUzMzRaMDMxMTAvBgNV
BAMTKEVEQjczQTkxNUNCQkNFOTVFRjE2NTVCMDYyM0ZGMjkyQkQwNThBNzcwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCoLYK6Cc2X3UkjQj2o73BUTkq0
L5PDSTWAtsQQYy0OiKJfknpZOPKhRUUk+Lg+qY6vDmYTjmwiYiYz6yzB9mWUIXa+
nIKtKzy867DrEYuzVFp2WFkYxLoxjJcX+GmIUqWLacxjPgnI9tUfkqAcN6rxHoWU
BF7sEbVHO7HO1aNgnQNxg6OYj0z9WUTCJtcermcfNM4ZT5PkfGl0s61IEEqbZtxW
l08NjhIQUvpLnt/z60VTyjZaH+CwIZZJ5/Wp8EUsy+2JofyXSdLpHMaTGTnc5TiJ
4u0F7JL9SEJkNj3GtSczXeMMSQEiGQeVoZrT1Wfz9XYzgMegCr9tjXTYqA7ZAgMB
AAGjggI8MIICODAdBgNVHQ4EFgQU7bc6kVy7zpXvFlWwYj/ykr0FincwHwYDVR0j
BBgwFoAUFGtCh2pcKrBwX2fxo5GNdphJia8wDgYDVR0PAQH/BAQDAgeAMIGFBgNV
HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby8x
ZGVlMTI2Zi04MTkyLTRkMjgtYjI1ZS1kZWFiZGI3OWViMjEvMC8xNDZCNDI4NzZB
NUMyQUIwNzA1RjY3RjFBMzkxOEQ3Njk4NDk4OUFGLmNybDB0BggrBgEFBQcBAQRo
MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv
L0lETklDLUlELzIvMTQ2QjQyODc2QTVDMkFCMDcwNUY2N0YxQTM5MThENzY5ODQ5
ODlBRi5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6
Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vMWRlZTEyNmYtODE5Mi00ZDI4LWIy
NWUtZGVhYmRiNzllYjIxLzAvMTQ2QjQyODc2QTVDMkFCMDcwNUY2N0YxQTM5MThE
NzY5ODQ5ODlBRi5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF
BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC
BQAwDQYJKoZIhvcNAQELBQADggEBAD4BCwIXbyQUnXpTn3aqYLmUX9bR5cVQ8uLV
X9aU3MBEpHLo2d1EopOJDNvcQ+qs+NW3obtDvtyiGRoefocyXODW3XLYM29LU0CW
khENcx85sAKUIEDaJ5RnOreWWnSPvCYUmaBNsYRzflsaitrIZc+VahFEZuNjW2Na
gCrKuqOoie3a1ZWJ7KqmzPSDkpQql/wY1mRhmARJqpCcR3CScnq3xizTrZWDND4a
JDhD9z5m5DZdcMBcyT7MTLR8LKj/3CR9tnpeF2IeqxB75mVGJmDarU8FKPiluag7
6McEzmBfvmEYDzkOo88EOpWG8KC6jjWQaJOETFKe85Sy4Vt0a4M=
-----END CERTIFICATE-----
Generated at Wed Dec 24 20:20:46 2025 by rpki-client