This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf repo-rpki.idnic.net/repo/d05409ed-9f40-4f5a-b5ee-a088da2f5978/0/46A0859F8C7CC2C2E7D5CBC8E43634F8A3DDAAF5.mft File: 46A0859F8C7CC2C2E7D5CBC8E43634F8A3DDAAF5.mft (raw, json) Hash identifier: yRjTMhWoh/YO7LIXBA/A61w9TtniVPNVfezJ0aReubM= Subject key identifier: E7:E8:BE:9D:7E:42:3E:C2:63:94:FA:0C:01:D8:4E:FB:29:17:B0:F4 Authority key identifier: 46:A0:85:9F:8C:7C:C2:C2:E7:D5:CB:C8:E4:36:34:F8:A3:DD:AA:F5 Certificate issuer: /CN=46A0859F8C7CC2C2E7D5CBC8E43634F8A3DDAAF5 Certificate serial: 571C4686989F421CB6862A14E766EF925C78AE79 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/46A0859F8C7CC2C2E7D5CBC8E43634F8A3DDAAF5.cer Subject info access: rsync://repo-rpki.idnic.net/repo/d05409ed-9f40-4f5a-b5ee-a088da2f5978/0/46A0859F8C7CC2C2E7D5CBC8E43634F8A3DDAAF5.mft Manifest number: 0157 Signing time: Thu 18 Dec 2025 18:53:01 +0000 Manifest this update: Thu 18 Dec 2025 18:48:01 +0000 Manifest next update: Sun 21 Dec 2025 23:59:01 +0000 Files and hashes: 1: 3131352e3138372e33312e302f32342d3234203d3e203538333639.roa (hash: VGNvRMTdXm3gJaSYZh5jyTa+JqewLa+S1Pa1sFR/Vfk=) 2: 3131352e3138372e33302e302f32342d3234203d3e203538333639.roa (hash: veTZsRvM1tQPZT/BfON0VJRneiBr6fgc60m5/I3a2Zc=) 3: 46A0859F8C7CC2C2E7D5CBC8E43634F8A3DDAAF5.crl (hash: UteP8Azxj3CwgUARZ8x1r1UhWq5E8BrRfiJXCdMG0hw=) 4: 3131352e3138372e33302e302f32332d3233203d3e203538333639.roa (hash: l/6nAOjqjGZrtcrrhw7ZuCSQaMYlD7Yflxw07XBPvJ0=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/d05409ed-9f40-4f5a-b5ee-a088da2f5978/0/46A0859F8C7CC2C2E7D5CBC8E43634F8A3DDAAF5.crl rsync://repo-rpki.idnic.net/repo/d05409ed-9f40-4f5a-b5ee-a088da2f5978/0/46A0859F8C7CC2C2E7D5CBC8E43634F8A3DDAAF5.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/46A0859F8C7CC2C2E7D5CBC8E43634F8A3DDAAF5.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 21 Dec 2025 23:59:01 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 57:1c:46:86:98:9f:42:1c:b6:86:2a:14:e7:66:ef:92:5c:78:ae:79 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=46A0859F8C7CC2C2E7D5CBC8E43634F8A3DDAAF5 Validity Not Before: Dec 18 18:48:01 2025 GMT Not After : Dec 21 23:59:01 2025 GMT Subject: CN=E7E8BE9D7E423EC26394FA0C01D84EFB2917B0F4 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cb:6d:c0:9d:83:21:85:3d:5a:ab:5e:7a:4e:fd: 0c:38:3a:47:53:90:4c:4d:c4:d1:12:80:4a:b9:18: 3f:48:7b:79:ec:84:f1:ba:3a:2f:6e:a6:1a:ca:c4: 55:cf:e3:d4:f7:87:ad:f1:15:ef:64:bd:63:7d:97: ce:21:db:57:12:de:34:53:f0:49:74:c9:eb:4b:38: 4a:57:76:e2:be:50:bf:4d:65:8a:b1:6e:ce:7c:d0: 75:2f:df:c6:b3:ef:72:47:45:11:01:7a:bf:f5:ed: 94:fb:1e:7c:91:b8:ab:35:10:63:d7:cf:0c:37:e9: c7:87:2c:60:80:9b:51:ef:24:7a:87:91:5d:e5:86: b3:b5:3d:f1:85:5c:f6:ac:b3:4a:6e:33:aa:2d:be: 55:d3:c2:f1:6f:80:55:94:e3:1e:9d:b2:2e:99:4f: 4e:80:a4:10:74:bd:f9:4c:43:fc:37:d2:7b:58:61: b7:d0:de:f8:ee:db:83:fd:fd:26:a8:f5:a4:ee:fd: b5:89:71:20:67:dd:c7:45:b8:3a:42:ed:01:5d:c7: 1b:cc:e7:db:9a:ed:5e:81:21:d9:f1:51:e9:31:0b: 47:4d:8e:0b:45:14:fa:16:58:ac:c0:64:4b:66:cd: bd:7b:87:74:08:c8:04:b6:be:d8:a9:36:08:da:4c: a1:85 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: E7:E8:BE:9D:7E:42:3E:C2:63:94:FA:0C:01:D8:4E:FB:29:17:B0:F4 X509v3 Authority Key Identifier: keyid:46:A0:85:9F:8C:7C:C2:C2:E7:D5:CB:C8:E4:36:34:F8:A3:DD:AA:F5 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/d05409ed-9f40-4f5a-b5ee-a088da2f5978/0/46A0859F8C7CC2C2E7D5CBC8E43634F8A3DDAAF5.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/46A0859F8C7CC2C2E7D5CBC8E43634F8A3DDAAF5.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/d05409ed-9f40-4f5a-b5ee-a088da2f5978/0/46A0859F8C7CC2C2E7D5CBC8E43634F8A3DDAAF5.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 12:09:fc:9a:21:72:a0:fc:d0:76:7c:1f:a2:e3:3d:8c:bb:a4: 12:a0:59:18:dd:94:47:ec:55:09:87:0a:3a:b9:a0:b6:85:e4: 63:f3:b9:ec:86:a7:39:e6:c0:d8:e6:56:fa:56:1c:99:e5:89: 43:41:47:32:a6:d8:12:f5:de:d6:cb:d1:ea:2b:6a:1c:bd:d3: 4e:bb:b5:50:e2:f0:d5:14:72:bc:93:0c:ba:32:76:0c:59:dd: 48:34:a8:b3:51:19:a3:51:08:ae:c9:e6:dc:d6:bd:3c:6e:ae: f5:e7:d2:ff:a8:cf:10:67:dc:71:31:84:4e:1e:05:65:a8:76: 43:37:f3:1a:df:f6:ef:14:3b:29:64:2f:a1:58:60:c6:33:66: eb:f6:0f:07:65:d9:29:c0:68:5c:00:ed:b2:c8:ac:3c:ea:7c: 77:7c:89:a8:46:46:41:8d:64:3c:56:51:86:d5:68:8f:d8:a9: 02:84:7e:c0:8e:1a:70:5e:94:20:83:c5:bd:51:cb:6e:d1:50: ef:02:6f:57:a1:b9:1a:4c:4a:4c:3b:a2:8c:d5:2a:26:ae:f3: d8:ab:c0:b4:5e:a1:73:c0:82:84:05:0a:86:9e:f9:96:92:f3: 63:7c:89:cd:38:b1:c6:7d:a9:05:91:98:d6:ac:b3:99:6e:3c: 32:56:b3:a3 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUVxxGhpifQhy2hioU52bvklx4rnkwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoNDZBMDg1OUY4QzdDQzJDMkU3RDVDQkM4RTQzNjM0RjhB M0REQUFGNTAeFw0yNTEyMTgxODQ4MDFaFw0yNTEyMjEyMzU5MDFaMDMxMTAvBgNV BAMTKEU3RThCRTlEN0U0MjNFQzI2Mzk0RkEwQzAxRDg0RUZCMjkxN0IwRjQwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDLbcCdgyGFPVqrXnpO/Qw4OkdT kExNxNESgEq5GD9Ie3nshPG6Oi9uphrKxFXP49T3h63xFe9kvWN9l84h21cS3jRT 8El0yetLOEpXduK+UL9NZYqxbs580HUv38az73JHRREBer/17ZT7HnyRuKs1EGPX zww36ceHLGCAm1HvJHqHkV3lhrO1PfGFXPass0puM6otvlXTwvFvgFWU4x6dsi6Z T06ApBB0vflMQ/w30ntYYbfQ3vju24P9/Sao9aTu/bWJcSBn3cdFuDpC7QFdxxvM 59ua7V6BIdnxUekxC0dNjgtFFPoWWKzAZEtmzb17h3QIyAS2vtipNgjaTKGFAgMB AAGjggI8MIICODAdBgNVHQ4EFgQU5+i+nX5CPsJjlPoMAdhO+ykXsPQwHwYDVR0j BBgwFoAURqCFn4x8wsLn1cvI5DY0+KPdqvUwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby9k MDU0MDllZC05ZjQwLTRmNWEtYjVlZS1hMDg4ZGEyZjU5NzgvMC80NkEwODU5RjhD N0NDMkMyRTdENUNCQzhFNDM2MzRGOEEzRERBQUY1LmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvNDZBMDg1OUY4QzdDQzJDMkU3RDVDQkM4RTQzNjM0RjhBM0RE QUFGNS5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vZDA1NDA5ZWQtOWY0MC00ZjVhLWI1 ZWUtYTA4OGRhMmY1OTc4LzAvNDZBMDg1OUY4QzdDQzJDMkU3RDVDQkM4RTQzNjM0 RjhBM0REQUFGNS5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBABIJ/JohcqD80HZ8H6LjPYy7pBKgWRjdlEfs VQmHCjq5oLaF5GPzueyGpznmwNjmVvpWHJnliUNBRzKm2BL13tbL0eorahy90067 tVDi8NUUcryTDLoydgxZ3Ug0qLNRGaNRCK7J5tzWvTxurvXn0v+ozxBn3HExhE4e BWWodkM38xrf9u8UOylkL6FYYMYzZuv2Dwdl2SnAaFwA7bLIrDzqfHd8iahGRkGN ZDxWUYbVaI/YqQKEfsCOGnBelCCDxb1Ry27RUO8Cb1ehuRpMSkw7oozVKiau89ir wLReoXPAgoQFCoae+ZaS82N8ic04scZ9qQWRmNass5luPDJWs6M= -----END CERTIFICATE-----Generated at Sat Dec 20 18:44:16 2025 by rpki-client