This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf repo-rpki.idnic.net/repo/3931fae9-627a-4a08-be5c-44a0c1571487/0/4846B9B0D6B1DEDADE4A9C1BB6F913695D261585.mft File: 4846B9B0D6B1DEDADE4A9C1BB6F913695D261585.mft (raw, json) Hash identifier: VSiYdTpNp2OnSLb0VAVmDL/HqoeRopEfYLhvfqGx5vQ= Subject key identifier: 60:5B:35:8D:BE:94:BF:C6:4A:B9:4B:C7:2E:77:E0:4E:C9:C5:DC:8C Authority key identifier: 48:46:B9:B0:D6:B1:DE:DA:DE:4A:9C:1B:B6:F9:13:69:5D:26:15:85 Certificate issuer: /CN=4846B9B0D6B1DEDADE4A9C1BB6F913695D261585 Certificate serial: 6B2143D19D5824543836C325C4D73B3112AFAABF Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/4846B9B0D6B1DEDADE4A9C1BB6F913695D261585.cer Subject info access: rsync://repo-rpki.idnic.net/repo/3931fae9-627a-4a08-be5c-44a0c1571487/0/4846B9B0D6B1DEDADE4A9C1BB6F913695D261585.mft Manifest number: 01F4 Signing time: Tue 23 Dec 2025 06:12:17 +0000 Manifest this update: Tue 23 Dec 2025 06:07:17 +0000 Manifest next update: Fri 26 Dec 2025 11:03:17 +0000 Files and hashes: 1: 4846B9B0D6B1DEDADE4A9C1BB6F913695D261585.crl (hash: EsKPOIX41n2XfzVsDBXEtBB9DFNTTxC6svGi3/Dw28U=) 2: 3130332e3134372e3134382e302f32332d3234203d3e203137373639.roa (hash: n1vxqT01MHNJQCue1F/8LHi9S+iotjvGE4Enfb7Gpo0=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/3931fae9-627a-4a08-be5c-44a0c1571487/0/4846B9B0D6B1DEDADE4A9C1BB6F913695D261585.crl rsync://repo-rpki.idnic.net/repo/3931fae9-627a-4a08-be5c-44a0c1571487/0/4846B9B0D6B1DEDADE4A9C1BB6F913695D261585.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/4846B9B0D6B1DEDADE4A9C1BB6F913695D261585.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 26 Dec 2025 11:03:17 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 6b:21:43:d1:9d:58:24:54:38:36:c3:25:c4:d7:3b:31:12:af:aa:bf Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4846B9B0D6B1DEDADE4A9C1BB6F913695D261585 Validity Not Before: Dec 23 06:07:17 2025 GMT Not After : Dec 26 11:03:17 2025 GMT Subject: CN=605B358DBE94BFC64AB94BC72E77E04EC9C5DC8C Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bd:4c:59:fd:60:62:07:71:d3:8f:2e:de:12:2b: 0f:92:6c:aa:22:69:ba:fa:bf:4f:57:eb:13:f6:82: 39:80:3a:f9:5d:49:1e:f8:c0:8f:81:d2:db:a5:87: d2:e0:2b:ba:ba:f7:06:02:56:8b:d1:a0:c5:c5:11: b8:7d:36:ba:4f:d1:2c:f3:3d:cc:ea:fb:1e:72:e5: 6b:1a:87:82:72:48:59:77:b1:fa:fc:b2:83:9a:61: 9f:30:0b:16:9a:58:c2:4b:6a:bb:e4:66:50:0a:3a: d8:22:0a:c7:85:8f:3e:54:1c:06:a9:a7:6c:65:b9: 94:e9:02:75:8b:e9:dc:55:92:8b:c2:19:a8:d0:73: 4f:08:b6:fb:a1:be:71:a5:e1:66:e1:0b:f7:f5:01: e7:22:e7:9e:6d:40:53:00:c0:2d:6e:7c:2a:93:95: 22:6f:c8:46:95:a8:53:7c:89:0b:20:bd:3a:23:74: e4:9e:e5:fe:17:01:fe:9d:34:ed:a3:ba:e6:ba:22: 08:62:06:35:b6:20:c7:eb:35:72:b5:91:79:36:4a: e0:43:4f:e7:85:3c:99:3e:8e:40:f2:56:55:5a:4f: 74:87:67:ce:65:a1:79:1c:4a:5c:44:33:ff:04:a0: 5b:9c:48:b2:61:47:3c:5f:f0:f7:08:3f:19:cf:3b: 27:1f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 60:5B:35:8D:BE:94:BF:C6:4A:B9:4B:C7:2E:77:E0:4E:C9:C5:DC:8C X509v3 Authority Key Identifier: keyid:48:46:B9:B0:D6:B1:DE:DA:DE:4A:9C:1B:B6:F9:13:69:5D:26:15:85 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/3931fae9-627a-4a08-be5c-44a0c1571487/0/4846B9B0D6B1DEDADE4A9C1BB6F913695D261585.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/4846B9B0D6B1DEDADE4A9C1BB6F913695D261585.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/3931fae9-627a-4a08-be5c-44a0c1571487/0/4846B9B0D6B1DEDADE4A9C1BB6F913695D261585.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption b1:26:ba:fb:ac:eb:ec:b7:e6:8a:c2:4e:08:a4:c0:b4:45:0d: 9f:d5:5c:4a:34:09:15:ea:e9:8c:64:28:44:9e:4e:77:6b:ae: 08:5a:df:b6:8f:28:c7:69:21:28:b8:c7:96:9c:5c:47:99:b2: 20:31:e7:ab:dc:2c:f5:99:bf:16:76:50:de:ce:c5:38:37:d9: b1:72:0e:6f:76:14:1d:72:fd:bf:e8:aa:4e:c6:79:b7:4a:b7: 0d:e1:10:37:8b:5c:e9:c5:8c:45:e2:8d:9f:4b:45:dd:2a:a6: 0b:84:9c:97:9f:8d:1e:a3:6a:43:18:fb:c3:d8:57:78:f6:ba: 06:0e:4f:35:0a:c4:83:55:e1:62:e6:3f:f4:70:d9:45:f1:b1: c4:22:b4:e0:da:ff:0d:85:f0:ca:fc:4c:18:1f:e5:81:7e:eb: 70:f5:c0:84:39:95:60:24:e3:e6:66:b1:2a:b6:d5:37:45:3c: 2c:ab:d8:be:7d:48:20:6a:a7:fa:c4:bb:d6:1e:6d:2c:f2:bf: 07:49:22:e0:75:5b:d6:b6:99:cf:08:60:09:56:82:ae:79:c5: 6a:4f:a3:a8:10:d5:8c:97:d6:48:d7:52:e1:8d:a1:f4:c0:35: 81:39:3a:31:a8:d6:37:63:5b:b5:2e:55:e0:97:28:61:32:d3: 13:f7:0c:77 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUayFD0Z1YJFQ4NsMlxNc7MRKvqr8wDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoNDg0NkI5QjBENkIxREVEQURFNEE5QzFCQjZGOTEzNjk1 RDI2MTU4NTAeFw0yNTEyMjMwNjA3MTdaFw0yNTEyMjYxMTAzMTdaMDMxMTAvBgNV BAMTKDYwNUIzNThEQkU5NEJGQzY0QUI5NEJDNzJFNzdFMDRFQzlDNURDOEMwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC9TFn9YGIHcdOPLt4SKw+SbKoi abr6v09X6xP2gjmAOvldSR74wI+B0tulh9LgK7q69wYCVovRoMXFEbh9NrpP0Szz Pczq+x5y5Wsah4JySFl3sfr8soOaYZ8wCxaaWMJLarvkZlAKOtgiCseFjz5UHAap p2xluZTpAnWL6dxVkovCGajQc08ItvuhvnGl4WbhC/f1Aeci555tQFMAwC1ufCqT lSJvyEaVqFN8iQsgvTojdOSe5f4XAf6dNO2juua6IghiBjW2IMfrNXK1kXk2SuBD T+eFPJk+jkDyVlVaT3SHZ85loXkcSlxEM/8EoFucSLJhRzxf8PcIPxnPOycfAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUYFs1jb6Uv8ZKuUvHLnfgTsnF3IwwHwYDVR0j BBgwFoAUSEa5sNax3treSpwbtvkTaV0mFYUwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby8z OTMxZmFlOS02MjdhLTRhMDgtYmU1Yy00NGEwYzE1NzE0ODcvMC80ODQ2QjlCMEQ2 QjFERURBREU0QTlDMUJCNkY5MTM2OTVEMjYxNTg1LmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvNDg0NkI5QjBENkIxREVEQURFNEE5QzFCQjZGOTEzNjk1RDI2 MTU4NS5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vMzkzMWZhZTktNjI3YS00YTA4LWJl NWMtNDRhMGMxNTcxNDg3LzAvNDg0NkI5QjBENkIxREVEQURFNEE5QzFCQjZGOTEz Njk1RDI2MTU4NS5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBALEmuvus6+y35orCTgikwLRFDZ/VXEo0CRXq 6YxkKESeTndrrgha37aPKMdpISi4x5acXEeZsiAx56vcLPWZvxZ2UN7OxTg32bFy Dm92FB1y/b/oqk7GebdKtw3hEDeLXOnFjEXijZ9LRd0qpguEnJefjR6jakMY+8PY V3j2ugYOTzUKxINV4WLmP/Rw2UXxscQitODa/w2F8Mr8TBgf5YF+63D1wIQ5lWAk 4+ZmsSq21TdFPCyr2L59SCBqp/rEu9YebSzyvwdJIuB1W9a2mc8IYAlWgq55xWpP o6gQ1YyX1kjXUuGNofTANYE5OjGo1jdjW7UuVeCXKGEy0xP3DHc= -----END CERTIFICATE-----Generated at Wed Dec 24 22:07:22 2025 by rpki-client