This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf repo-rpki.idnic.net/repo/bd7fa210-5f25-4f0b-89a5-7d00a354a907/0/846D8A4B978C6F595D44EACDB8259295CD43C499.mft File: 846D8A4B978C6F595D44EACDB8259295CD43C499.mft (raw, json) Hash identifier: mCHKY4I+x813uj6FjZjEra+Z+1TY1hR7HNBAwIyXmd0= Subject key identifier: 29:88:E7:26:5C:BE:4F:C3:50:29:1C:32:43:D8:E2:6B:BF:3F:03:C1 Authority key identifier: 84:6D:8A:4B:97:8C:6F:59:5D:44:EA:CD:B8:25:92:95:CD:43:C4:99 Certificate issuer: /CN=846D8A4B978C6F595D44EACDB8259295CD43C499 Certificate serial: 2DBA25979B095D70965E0D846B3AF257AAE1F70B Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/846D8A4B978C6F595D44EACDB8259295CD43C499.cer Subject info access: rsync://repo-rpki.idnic.net/repo/bd7fa210-5f25-4f0b-89a5-7d00a354a907/0/846D8A4B978C6F595D44EACDB8259295CD43C499.mft Manifest number: 014F Signing time: Wed 17 Dec 2025 14:00:53 +0000 Manifest this update: Wed 17 Dec 2025 13:55:53 +0000 Manifest next update: Sat 20 Dec 2025 23:07:53 +0000 Files and hashes: 1: 3130332e3231332e3233352e302f32342d3234203d3e20313336383733.roa (hash: 1jCIPPNfT/T8k/fJrq5+Jf9eonsynWVEQRnRTw0zmaE=) 2: 846D8A4B978C6F595D44EACDB8259295CD43C499.crl (hash: 3gXImBwHsmmUJ4U539IbrDzMMz9L6hka80WuycPBsw4=) 3: 3130332e3231332e3233342e302f32342d3234203d3e20313336383733.roa (hash: SVn/IknycpzSOwxi7uz3uMCs0oz5ucYpmEXX6TOqW1w=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/bd7fa210-5f25-4f0b-89a5-7d00a354a907/0/846D8A4B978C6F595D44EACDB8259295CD43C499.crl rsync://repo-rpki.idnic.net/repo/bd7fa210-5f25-4f0b-89a5-7d00a354a907/0/846D8A4B978C6F595D44EACDB8259295CD43C499.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/846D8A4B978C6F595D44EACDB8259295CD43C499.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 20 Dec 2025 23:07:53 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2d:ba:25:97:9b:09:5d:70:96:5e:0d:84:6b:3a:f2:57:aa:e1:f7:0b Signature Algorithm: sha256WithRSAEncryption Issuer: CN=846D8A4B978C6F595D44EACDB8259295CD43C499 Validity Not Before: Dec 17 13:55:53 2025 GMT Not After : Dec 20 23:07:53 2025 GMT Subject: CN=2988E7265CBE4FC350291C3243D8E26BBF3F03C1 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b8:ac:7e:93:74:db:e0:6c:cf:62:d0:48:c9:80: f6:93:28:fb:eb:1d:c6:f2:27:c2:d9:3a:e0:fa:4d: 13:6c:a6:1a:40:d4:a3:a0:62:c0:54:03:2e:91:25: 88:7e:f4:9e:b1:70:fa:5a:86:4a:f7:b1:67:72:3e: 61:d7:74:1d:d7:8c:38:11:05:54:22:79:b4:f2:7c: 48:c0:48:d1:4a:6d:b2:8e:bd:d1:9c:1b:e7:c5:a6: ce:12:2f:8e:cb:05:d2:de:68:a9:0a:1f:d3:b3:23: a5:3e:ca:8b:ab:cb:db:a3:9a:ad:cf:6d:4e:e0:12: fd:48:db:cf:24:18:4d:bb:9d:21:86:66:2e:46:f2: db:97:c6:f9:66:f3:86:8d:9e:a1:12:fb:2c:ca:9c: 2f:46:57:ef:53:7f:bd:c8:d0:9e:46:b2:6b:d2:65: 27:86:dd:5e:d8:8f:30:70:de:9b:d7:32:96:3b:be: f5:db:96:84:24:d8:12:8c:8e:14:94:53:14:33:25: a3:85:96:da:53:32:f4:03:26:3e:82:2b:c0:8f:5f: e7:a1:ce:43:49:45:64:6d:81:70:41:44:6e:de:68: 52:46:67:66:96:19:78:32:0a:61:09:9e:77:97:df: 57:18:70:f8:1a:b1:44:cb:59:35:06:f0:21:ee:8f: 88:1f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 29:88:E7:26:5C:BE:4F:C3:50:29:1C:32:43:D8:E2:6B:BF:3F:03:C1 X509v3 Authority Key Identifier: keyid:84:6D:8A:4B:97:8C:6F:59:5D:44:EA:CD:B8:25:92:95:CD:43:C4:99 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/bd7fa210-5f25-4f0b-89a5-7d00a354a907/0/846D8A4B978C6F595D44EACDB8259295CD43C499.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/846D8A4B978C6F595D44EACDB8259295CD43C499.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/bd7fa210-5f25-4f0b-89a5-7d00a354a907/0/846D8A4B978C6F595D44EACDB8259295CD43C499.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 4c:01:e0:05:8b:98:e5:55:02:24:5c:19:36:da:ae:9a:e2:af: 3b:e0:43:16:74:35:b3:63:b9:44:d8:28:19:b7:97:11:81:e2: f0:47:5a:b0:8d:d5:18:29:b4:0d:01:0d:20:f8:21:80:07:ca: f4:35:07:6b:9f:63:be:1c:2e:97:76:9b:ec:b4:af:ee:96:e7: 64:b2:11:e8:19:1e:ad:23:89:63:eb:06:04:c6:b1:3e:40:e1: 31:a3:3f:4b:0f:ef:ad:26:fa:8e:b2:2a:53:83:81:07:45:80: ff:eb:bf:d0:61:34:62:7d:22:c6:31:9c:69:9c:41:45:05:48: 3c:0c:f7:4f:a7:bd:92:13:98:5e:96:7c:9a:0d:b5:7e:b6:d1: 44:e1:56:6a:30:61:e7:31:2f:b8:9a:86:5f:23:28:2b:2e:65: 36:f3:f5:f3:a0:dd:6a:96:dd:32:11:50:6a:ea:97:f8:ab:1a: 53:d6:6a:fa:42:c7:eb:44:ca:5f:2f:5a:19:54:f0:20:7c:0e: 39:76:88:89:c3:9b:45:d7:7b:f7:94:89:42:5b:9f:40:92:b0: e4:11:b5:ac:06:ad:85:83:6b:2c:1e:b7:59:05:4e:0b:f8:03: 2a:ff:e0:7f:b5:64:d8:23:dc:a7:b9:63:2c:90:97:ee:d0:ed: 9c:78:a5:03 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIULboll5sJXXCWXg2EazryV6rh9wswDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoODQ2RDhBNEI5NzhDNkY1OTVENDRFQUNEQjgyNTkyOTVD RDQzQzQ5OTAeFw0yNTEyMTcxMzU1NTNaFw0yNTEyMjAyMzA3NTNaMDMxMTAvBgNV BAMTKDI5ODhFNzI2NUNCRTRGQzM1MDI5MUMzMjQzRDhFMjZCQkYzRjAzQzEwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC4rH6TdNvgbM9i0EjJgPaTKPvr HcbyJ8LZOuD6TRNsphpA1KOgYsBUAy6RJYh+9J6xcPpahkr3sWdyPmHXdB3XjDgR BVQiebTyfEjASNFKbbKOvdGcG+fFps4SL47LBdLeaKkKH9OzI6U+youry9ujmq3P bU7gEv1I288kGE27nSGGZi5G8tuXxvlm84aNnqES+yzKnC9GV+9Tf73I0J5GsmvS ZSeG3V7YjzBw3pvXMpY7vvXbloQk2BKMjhSUUxQzJaOFltpTMvQDJj6CK8CPX+eh zkNJRWRtgXBBRG7eaFJGZ2aWGXgyCmEJnneX31cYcPgasUTLWTUG8CHuj4gfAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUKYjnJly+T8NQKRwyQ9jia78/A8EwHwYDVR0j BBgwFoAUhG2KS5eMb1ldROrNuCWSlc1DxJkwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby9i ZDdmYTIxMC01ZjI1LTRmMGItODlhNS03ZDAwYTM1NGE5MDcvMC84NDZEOEE0Qjk3 OEM2RjU5NUQ0NEVBQ0RCODI1OTI5NUNENDNDNDk5LmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvODQ2RDhBNEI5NzhDNkY1OTVENDRFQUNEQjgyNTkyOTVDRDQz QzQ5OS5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vYmQ3ZmEyMTAtNWYyNS00ZjBiLTg5 YTUtN2QwMGEzNTRhOTA3LzAvODQ2RDhBNEI5NzhDNkY1OTVENDRFQUNEQjgyNTky OTVDRDQzQzQ5OS5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAEwB4AWLmOVVAiRcGTbarprirzvgQxZ0NbNj uUTYKBm3lxGB4vBHWrCN1RgptA0BDSD4IYAHyvQ1B2ufY74cLpd2m+y0r+6W52Sy EegZHq0jiWPrBgTGsT5A4TGjP0sP760m+o6yKlODgQdFgP/rv9BhNGJ9IsYxnGmc QUUFSDwM90+nvZITmF6WfJoNtX620UThVmowYecxL7iahl8jKCsuZTbz9fOg3WqW 3TIRUGrql/irGlPWavpCx+tEyl8vWhlU8CB8Djl2iInDm0XXe/eUiUJbn0CSsOQR tawGrYWDaywet1kFTgv4Ayr/4H+1ZNgj3Ke5YyyQl+7Q7Zx4pQM= -----END CERTIFICATE-----Generated at Fri Dec 19 21:07:11 2025 by rpki-client