This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf repo-rpki.idnic.net/repo/9d4cffe0-1f94-43d2-81ee-80030b5c3746/0/146D9338596ECF1F976FB37F330D8C0CD48414C9.mft File: 146D9338596ECF1F976FB37F330D8C0CD48414C9.mft (raw, json) Hash identifier: fS3dhZbChZSBaVSm3fAoiAo8eXF4VC6Y5N/0MbidAMQ= Subject key identifier: AC:CC:07:39:41:C8:72:D7:62:F0:29:AF:3B:B9:CB:D2:95:A3:E0:CA Authority key identifier: 14:6D:93:38:59:6E:CF:1F:97:6F:B3:7F:33:0D:8C:0C:D4:84:14:C9 Certificate issuer: /CN=146D9338596ECF1F976FB37F330D8C0CD48414C9 Certificate serial: 3B9D6C096E1CD02E46D558CD39BD988C39B5B26C Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/146D9338596ECF1F976FB37F330D8C0CD48414C9.cer Subject info access: rsync://repo-rpki.idnic.net/repo/9d4cffe0-1f94-43d2-81ee-80030b5c3746/0/146D9338596ECF1F976FB37F330D8C0CD48414C9.mft Manifest number: 0263 Signing time: Mon 22 Dec 2025 19:02:48 +0000 Manifest this update: Mon 22 Dec 2025 18:57:48 +0000 Manifest next update: Fri 26 Dec 2025 00:48:48 +0000 Files and hashes: 1: 3130332e3135312e37322e302f32332d3234203d3e20313430343039.roa (hash: d+kI3rz6/1ncnjpxf/67wx7VsG4KrN+uZWF3vlmupvY=) 2: 146D9338596ECF1F976FB37F330D8C0CD48414C9.crl (hash: tKz0fLwaguwhJnVB9KoJdQJwNeE399JuXvJ36NzS0Zw=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/9d4cffe0-1f94-43d2-81ee-80030b5c3746/0/146D9338596ECF1F976FB37F330D8C0CD48414C9.crl rsync://repo-rpki.idnic.net/repo/9d4cffe0-1f94-43d2-81ee-80030b5c3746/0/146D9338596ECF1F976FB37F330D8C0CD48414C9.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/146D9338596ECF1F976FB37F330D8C0CD48414C9.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 26 Dec 2025 00:48:48 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 3b:9d:6c:09:6e:1c:d0:2e:46:d5:58:cd:39:bd:98:8c:39:b5:b2:6c Signature Algorithm: sha256WithRSAEncryption Issuer: CN=146D9338596ECF1F976FB37F330D8C0CD48414C9 Validity Not Before: Dec 22 18:57:48 2025 GMT Not After : Dec 26 00:48:48 2025 GMT Subject: CN=ACCC073941C872D762F029AF3BB9CBD295A3E0CA Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:df:85:f1:1f:13:f6:09:96:14:ea:8c:6e:07:7e: f0:e3:07:e9:16:0a:88:9f:2f:1c:16:57:e2:9f:71: 24:4f:72:3c:c6:a3:f4:b9:6f:ba:54:18:3b:f4:9c: 74:1a:02:7e:52:12:41:87:a6:d7:4a:d8:5d:c0:07: 1c:61:98:db:7a:36:39:fb:bc:ae:48:a2:3e:10:57: 90:e0:9b:71:c6:37:71:18:04:ad:71:3e:85:08:6f: 9b:83:5b:09:78:19:c3:31:18:32:6a:6a:b7:72:3b: 38:7a:ee:af:01:b0:37:43:f9:b6:d9:2d:25:35:9b: f1:e1:64:84:4a:53:e4:c9:b6:b7:79:7b:d0:0b:e3: da:c7:e0:af:00:02:be:a7:a3:0c:ba:14:14:43:a1: 51:38:ce:63:fa:e4:6b:62:f5:05:6e:3c:f7:51:ac: cf:5e:b2:16:15:48:37:a7:cb:fe:6e:70:d3:d8:18: 8f:fd:a9:d7:5d:5c:63:d6:40:9f:3c:0d:9a:0f:af: 3a:a7:d4:43:9c:9e:8a:23:48:46:8d:05:88:6c:a6: f8:e1:a7:4a:86:95:90:08:d3:5c:06:66:76:cf:62: 01:08:78:04:e0:92:5d:60:7a:83:a1:f4:15:0d:01: d3:61:08:5e:01:7f:ce:45:09:9d:49:59:8b:2f:6d: 26:17 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: AC:CC:07:39:41:C8:72:D7:62:F0:29:AF:3B:B9:CB:D2:95:A3:E0:CA X509v3 Authority Key Identifier: keyid:14:6D:93:38:59:6E:CF:1F:97:6F:B3:7F:33:0D:8C:0C:D4:84:14:C9 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/9d4cffe0-1f94-43d2-81ee-80030b5c3746/0/146D9338596ECF1F976FB37F330D8C0CD48414C9.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/146D9338596ECF1F976FB37F330D8C0CD48414C9.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/9d4cffe0-1f94-43d2-81ee-80030b5c3746/0/146D9338596ECF1F976FB37F330D8C0CD48414C9.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption ba:c7:e1:c2:b1:7b:b8:88:c2:3e:5c:d0:57:55:a4:6c:06:3f: 2a:15:ac:1a:8b:0d:32:82:9d:fd:ae:e5:79:fe:c6:9d:af:f4: a9:de:8c:e8:4e:ec:7c:69:ea:ac:f5:80:c1:37:2a:07:cc:0c: ca:e2:b4:3c:ff:1e:94:f4:b4:64:a8:29:19:5d:cf:21:56:49: d8:11:c7:63:bf:39:03:36:5e:2c:a7:02:34:14:37:d4:2d:b3: 52:6b:fc:5a:6b:02:7f:4e:92:93:22:13:3b:95:d6:34:ca:76: 5f:2c:d5:f1:c8:0c:d7:7f:96:51:59:a9:77:1b:23:ce:60:a1: c8:83:ac:0e:4b:a8:1b:0f:0f:66:c5:7b:7f:91:80:fb:4a:cb: 93:89:bd:30:e7:8e:67:cc:85:d8:8b:cb:53:e2:dd:aa:85:f1: d3:2d:ea:02:c3:68:75:b9:a7:31:21:24:52:f3:05:4c:75:08: 8d:8f:69:75:15:42:7a:df:7b:25:9e:85:49:00:26:83:77:9a: 7f:2a:c1:30:20:c9:7d:9c:15:55:86:34:f9:1a:99:e6:46:8a: fc:4b:a2:d5:f4:9e:a3:d8:e2:01:1e:0b:7a:e4:9f:ad:ea:7e: f7:00:7c:ec:fb:c4:de:97:99:c2:87:f6:77:e0:06:17:22:f5: 53:89:ff:e9 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUO51sCW4c0C5G1VjNOb2YjDm1smwwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMTQ2RDkzMzg1OTZFQ0YxRjk3NkZCMzdGMzMwRDhDMENE NDg0MTRDOTAeFw0yNTEyMjIxODU3NDhaFw0yNTEyMjYwMDQ4NDhaMDMxMTAvBgNV BAMTKEFDQ0MwNzM5NDFDODcyRDc2MkYwMjlBRjNCQjlDQkQyOTVBM0UwQ0EwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDfhfEfE/YJlhTqjG4HfvDjB+kW CoifLxwWV+KfcSRPcjzGo/S5b7pUGDv0nHQaAn5SEkGHptdK2F3ABxxhmNt6Njn7 vK5Ioj4QV5Dgm3HGN3EYBK1xPoUIb5uDWwl4GcMxGDJqardyOzh67q8BsDdD+bbZ LSU1m/HhZIRKU+TJtrd5e9AL49rH4K8AAr6nowy6FBRDoVE4zmP65Gti9QVuPPdR rM9eshYVSDeny/5ucNPYGI/9qdddXGPWQJ88DZoPrzqn1EOcnoojSEaNBYhspvjh p0qGlZAI01wGZnbPYgEIeATgkl1geoOh9BUNAdNhCF4Bf85FCZ1JWYsvbSYXAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUrMwHOUHIctdi8CmvO7nL0pWj4MowHwYDVR0j BBgwFoAUFG2TOFluzx+Xb7N/Mw2MDNSEFMkwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby85 ZDRjZmZlMC0xZjk0LTQzZDItODFlZS04MDAzMGI1YzM3NDYvMC8xNDZEOTMzODU5 NkVDRjFGOTc2RkIzN0YzMzBEOEMwQ0Q0ODQxNEM5LmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvMTQ2RDkzMzg1OTZFQ0YxRjk3NkZCMzdGMzMwRDhDMENENDg0 MTRDOS5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vOWQ0Y2ZmZTAtMWY5NC00M2QyLTgx ZWUtODAwMzBiNWMzNzQ2LzAvMTQ2RDkzMzg1OTZFQ0YxRjk3NkZCMzdGMzMwRDhD MENENDg0MTRDOS5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBALrH4cKxe7iIwj5c0FdVpGwGPyoVrBqLDTKC nf2u5Xn+xp2v9KnejOhO7Hxp6qz1gME3KgfMDMritDz/HpT0tGSoKRldzyFWSdgR x2O/OQM2XiynAjQUN9Qts1Jr/FprAn9OkpMiEzuV1jTKdl8s1fHIDNd/llFZqXcb I85gociDrA5LqBsPD2bFe3+RgPtKy5OJvTDnjmfMhdiLy1Pi3aqF8dMt6gLDaHW5 pzEhJFLzBUx1CI2PaXUVQnrfeyWehUkAJoN3mn8qwTAgyX2cFVWGNPkameZGivxL otX0nqPY4gEeC3rkn63qfvcAfOz7xN6XmcKH9nfgBhci9VOJ/+k= -----END CERTIFICATE-----Generated at Wed Dec 24 20:22:00 2025 by rpki-client