This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf repo-rpki.idnic.net/repo/9dfb3992-1d2f-46ce-886a-8e22a32611f8/0/0246DD14AF68F5E5512ABD88D1DB7507E6913C96.mft File: 0246DD14AF68F5E5512ABD88D1DB7507E6913C96.mft (raw, json) Hash identifier: /FBOdvMXGPahup7aKyuIogRvvnzdrb58vxrf3iz7Ybw= Subject key identifier: 76:3F:77:32:EC:52:2D:4E:4A:07:5D:22:56:D3:92:3B:D9:02:D3:0E Authority key identifier: 02:46:DD:14:AF:68:F5:E5:51:2A:BD:88:D1:DB:75:07:E6:91:3C:96 Certificate issuer: /CN=0246DD14AF68F5E5512ABD88D1DB7507E6913C96 Certificate serial: 79318D0A79F2542525716C689E4C3BD2569AEEEC Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/0246DD14AF68F5E5512ABD88D1DB7507E6913C96.cer Subject info access: rsync://repo-rpki.idnic.net/repo/9dfb3992-1d2f-46ce-886a-8e22a32611f8/0/0246DD14AF68F5E5512ABD88D1DB7507E6913C96.mft Manifest number: 01BB Signing time: Sat 20 Dec 2025 03:41:06 +0000 Manifest this update: Sat 20 Dec 2025 03:36:06 +0000 Manifest next update: Tue 23 Dec 2025 08:10:06 +0000 Files and hashes: 1: 323430373a366434303a3a2f33322d3438203d3e203538383230.roa (hash: 36JNQoWoEcG0XddMVhG6Y5xuDi4KHB52Q2RH2cUrQzc=) 2: 0246DD14AF68F5E5512ABD88D1DB7507E6913C96.crl (hash: tgjGov88mzPXz0RB5C+sxvPlE2l30T+UX80a2SCaTTU=) 3: 323430373a366434303a3a2f33322d3332203d3e203538383230.roa (hash: xAh6iVTptzdWaiN0lzQItEzdBxkBB7Jmc75/4/WIUXc=) 4: 3130332e3136372e3133362e302f32332d3234203d3e20313339343536.roa (hash: obYtUl2lQpNdpgObPXIZcvY8GGanlMGkMuiOZqIlQPc=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/9dfb3992-1d2f-46ce-886a-8e22a32611f8/0/0246DD14AF68F5E5512ABD88D1DB7507E6913C96.crl rsync://repo-rpki.idnic.net/repo/9dfb3992-1d2f-46ce-886a-8e22a32611f8/0/0246DD14AF68F5E5512ABD88D1DB7507E6913C96.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/0246DD14AF68F5E5512ABD88D1DB7507E6913C96.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 23 Dec 2025 08:10:06 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 79:31:8d:0a:79:f2:54:25:25:71:6c:68:9e:4c:3b:d2:56:9a:ee:ec Signature Algorithm: sha256WithRSAEncryption Issuer: CN=0246DD14AF68F5E5512ABD88D1DB7507E6913C96 Validity Not Before: Dec 20 03:36:06 2025 GMT Not After : Dec 23 08:10:06 2025 GMT Subject: CN=763F7732EC522D4E4A075D2256D3923BD902D30E Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c2:a0:c8:d7:97:14:a0:ff:aa:a3:77:3d:48:01: 6f:62:09:b9:fb:c9:43:4a:b9:46:95:76:66:aa:28: f0:29:8e:0c:fd:cc:ff:d3:18:34:44:ae:97:7a:78: 15:d4:bf:27:3b:1a:80:2e:06:e2:c6:4a:db:a7:6e: 56:8e:19:c6:3d:07:1c:ab:0c:42:5b:cf:8e:44:5f: 35:62:96:78:d8:a7:60:58:46:13:ae:67:a5:02:46: 81:ca:99:9c:4d:86:92:17:9d:3d:65:44:64:1a:8b: e0:9b:22:fc:d8:ac:ab:da:f0:33:3d:5e:f0:30:83: 06:9a:21:4b:3b:a7:9e:93:ff:97:d5:4d:a5:50:96: b9:e3:1b:6f:15:d3:30:ba:a5:4f:7c:97:21:30:cc: fb:21:33:16:5d:b3:63:97:d3:3b:5d:87:53:1e:4d: b6:bc:70:6f:0a:d9:3d:66:22:33:85:ac:1f:54:d4: c1:f3:36:0d:23:09:5f:8c:5a:9c:01:6e:e0:55:34: 0f:e4:b1:79:76:6c:ca:15:39:3f:11:90:86:0c:62: 8c:fd:9b:39:e6:8f:56:f1:db:99:81:aa:7c:d4:b3: 86:c4:e7:04:21:91:80:e9:3b:80:82:8b:58:88:48: 77:e6:77:23:95:35:b9:af:f3:97:f3:cd:5a:eb:ce: 55:a5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 76:3F:77:32:EC:52:2D:4E:4A:07:5D:22:56:D3:92:3B:D9:02:D3:0E X509v3 Authority Key Identifier: keyid:02:46:DD:14:AF:68:F5:E5:51:2A:BD:88:D1:DB:75:07:E6:91:3C:96 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/9dfb3992-1d2f-46ce-886a-8e22a32611f8/0/0246DD14AF68F5E5512ABD88D1DB7507E6913C96.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/0246DD14AF68F5E5512ABD88D1DB7507E6913C96.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/9dfb3992-1d2f-46ce-886a-8e22a32611f8/0/0246DD14AF68F5E5512ABD88D1DB7507E6913C96.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 83:ea:19:50:f6:c6:38:ef:1c:11:de:7e:5b:54:37:99:4d:d5: a3:21:13:48:df:71:85:3f:c8:f7:e3:cb:f3:36:79:aa:6a:a4: b7:91:9f:19:35:2d:d8:4c:74:ad:fa:e4:8f:e0:08:bf:e7:cd: 38:a2:9a:13:8f:d8:4a:01:f2:42:09:5f:fd:7b:a7:81:b8:04: 02:e2:be:19:6b:ae:38:d4:09:35:da:a7:42:a4:58:5b:48:b1: d6:56:2b:6b:fa:fb:3c:fd:da:cb:2b:85:82:00:c4:d7:fa:68: 70:4d:d7:87:04:c3:98:dd:3c:e7:91:db:5f:35:54:eb:d3:5c: 95:05:2e:47:83:35:e0:80:c0:33:06:cd:ae:12:c4:9b:69:e3: 8a:42:e1:ef:f4:46:33:7e:5f:84:9e:7f:6b:6b:14:c5:cb:f9: 0e:fe:ab:eb:a0:6b:a4:b2:4a:56:d1:2d:54:e4:fd:a6:42:0f: 47:7c:01:69:f6:7e:88:ac:64:c0:08:21:29:09:82:52:ee:96: 76:7b:2c:6b:a4:d2:6b:d8:7f:2b:26:5f:7e:6d:21:6a:f9:73: 20:73:b2:a6:7b:a3:41:17:70:93:78:9d:f9:9d:98:ea:3a:7e: c1:bc:84:f6:b7:bb:a0:37:5e:c0:84:02:6d:b7:f4:27:f7:56: cd:d4:0d:ff -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUeTGNCnnyVCUlcWxonkw70laa7uwwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMDI0NkREMTRBRjY4RjVFNTUxMkFCRDg4RDFEQjc1MDdF NjkxM0M5NjAeFw0yNTEyMjAwMzM2MDZaFw0yNTEyMjMwODEwMDZaMDMxMTAvBgNV BAMTKDc2M0Y3NzMyRUM1MjJENEU0QTA3NUQyMjU2RDM5MjNCRDkwMkQzMEUwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDCoMjXlxSg/6qjdz1IAW9iCbn7 yUNKuUaVdmaqKPApjgz9zP/TGDRErpd6eBXUvyc7GoAuBuLGStunblaOGcY9Bxyr DEJbz45EXzVilnjYp2BYRhOuZ6UCRoHKmZxNhpIXnT1lRGQai+CbIvzYrKva8DM9 XvAwgwaaIUs7p56T/5fVTaVQlrnjG28V0zC6pU98lyEwzPshMxZds2OX0ztdh1Me Tba8cG8K2T1mIjOFrB9U1MHzNg0jCV+MWpwBbuBVNA/ksXl2bMoVOT8RkIYMYoz9 mznmj1bx25mBqnzUs4bE5wQhkYDpO4CCi1iISHfmdyOVNbmv85fzzVrrzlWlAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUdj93MuxSLU5KB10iVtOSO9kC0w4wHwYDVR0j BBgwFoAUAkbdFK9o9eVRKr2I0dt1B+aRPJYwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby85 ZGZiMzk5Mi0xZDJmLTQ2Y2UtODg2YS04ZTIyYTMyNjExZjgvMC8wMjQ2REQxNEFG NjhGNUU1NTEyQUJEODhEMURCNzUwN0U2OTEzQzk2LmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvMDI0NkREMTRBRjY4RjVFNTUxMkFCRDg4RDFEQjc1MDdFNjkx M0M5Ni5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vOWRmYjM5OTItMWQyZi00NmNlLTg4 NmEtOGUyMmEzMjYxMWY4LzAvMDI0NkREMTRBRjY4RjVFNTUxMkFCRDg4RDFEQjc1 MDdFNjkxM0M5Ni5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAIPqGVD2xjjvHBHefltUN5lN1aMhE0jfcYU/ yPfjy/M2eapqpLeRnxk1LdhMdK365I/gCL/nzTiimhOP2EoB8kIJX/17p4G4BALi vhlrrjjUCTXap0KkWFtIsdZWK2v6+zz92ssrhYIAxNf6aHBN14cEw5jdPOeR2181 VOvTXJUFLkeDNeCAwDMGza4SxJtp44pC4e/0RjN+X4Sef2trFMXL+Q7+q+uga6Sy SlbRLVTk/aZCD0d8AWn2foisZMAIISkJglLulnZ7LGuk0mvYfysmX35tIWr5cyBz sqZ7o0EXcJN4nfmdmOo6fsG8hPa3u6A3XsCEAm239Cf3Vs3UDf8= -----END CERTIFICATE-----Generated at Sun Dec 21 10:16:13 2025 by rpki-client