This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf repo-rpki.idnic.net/repo/de600486-9780-43ee-bb2d-b811094a1445/0/46A7C8702C547FC42210027DD254571031AE05DC.mft File: 46A7C8702C547FC42210027DD254571031AE05DC.mft (raw, json) Hash identifier: A1y6tjLFicY4eBadW9Ga9q8nPccfNZtzJ2usIJ/PrTw= Subject key identifier: D3:C9:B1:5F:5B:3F:D3:37:0E:A5:0E:23:73:EC:A3:05:59:39:06:10 Authority key identifier: 46:A7:C8:70:2C:54:7F:C4:22:10:02:7D:D2:54:57:10:31:AE:05:DC Certificate issuer: /CN=46A7C8702C547FC42210027DD254571031AE05DC Certificate serial: 319F3FA45B5213A3348A34FEAB578571353E09FF Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/46A7C8702C547FC42210027DD254571031AE05DC.cer Subject info access: rsync://repo-rpki.idnic.net/repo/de600486-9780-43ee-bb2d-b811094a1445/0/46A7C8702C547FC42210027DD254571031AE05DC.mft Manifest number: 0242 Signing time: Thu 18 Dec 2025 13:31:49 +0000 Manifest this update: Thu 18 Dec 2025 13:26:49 +0000 Manifest next update: Sun 21 Dec 2025 23:04:49 +0000 Files and hashes: 1: 3130332e3137322e3132322e302f32342d3234203d3e20313431353935.roa (hash: DLyhX1mkxtUQRH14nsnVNFFV/Lnw+00NFrAkbDg4bb4=) 2: 46A7C8702C547FC42210027DD254571031AE05DC.crl (hash: SfdTECra91DI0mDAsxH8WTsJyxtBsWnitAUFxQhlxog=) 3: 3130332e3136302e3230352e302f32342d3234203d3e20313431353935.roa (hash: kdMYWHxqdB4fcu/Vgc4AfVoBG1lh0SUu+dZG5J22ir0=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/de600486-9780-43ee-bb2d-b811094a1445/0/46A7C8702C547FC42210027DD254571031AE05DC.crl rsync://repo-rpki.idnic.net/repo/de600486-9780-43ee-bb2d-b811094a1445/0/46A7C8702C547FC42210027DD254571031AE05DC.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/46A7C8702C547FC42210027DD254571031AE05DC.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 21 Dec 2025 23:04:49 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 31:9f:3f:a4:5b:52:13:a3:34:8a:34:fe:ab:57:85:71:35:3e:09:ff Signature Algorithm: sha256WithRSAEncryption Issuer: CN=46A7C8702C547FC42210027DD254571031AE05DC Validity Not Before: Dec 18 13:26:49 2025 GMT Not After : Dec 21 23:04:49 2025 GMT Subject: CN=D3C9B15F5B3FD3370EA50E2373ECA30559390610 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c7:b4:de:51:de:4f:6e:36:02:5f:26:99:ce:57: b8:c9:b2:41:c2:5e:76:33:cf:6b:36:fb:d3:49:bf: e5:15:86:ef:9a:24:b7:65:93:69:ff:d2:2f:ae:09: 9f:61:78:8d:c9:1b:61:b4:06:20:c0:1d:b7:64:48: fa:fd:cb:c5:4c:18:89:dc:a9:67:8c:c9:e6:db:69: 11:85:10:73:19:f2:a5:0f:c4:07:33:53:db:51:30: 77:d6:f3:33:97:22:e8:0f:82:0a:75:7c:6a:13:36: 4b:3b:46:21:d0:bb:44:46:ad:03:a8:84:9b:ed:89: fa:f4:19:c7:1c:d4:c0:c4:02:b9:b8:1b:96:93:d1: aa:f0:ce:5d:82:08:44:da:23:de:cc:ad:9c:b1:11: 95:12:5d:9e:05:a5:71:ef:1f:07:16:9b:fe:84:c2: 78:fc:c8:37:b8:4e:5b:94:e3:e5:5a:8f:7e:26:62: 1a:03:e1:2b:4b:c8:44:fe:70:bc:14:63:8e:e2:cb: 56:9f:38:90:dc:26:e0:8e:5f:53:16:0b:d9:b3:fc: 38:8c:6a:16:25:b2:2c:aa:4e:17:a1:ff:cb:a7:a9: 1a:86:5b:a1:0e:a2:c1:c6:ce:6c:f2:9e:ef:8c:50: 34:ad:16:01:40:84:94:fd:1b:8d:29:44:d5:66:75: 83:ab Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D3:C9:B1:5F:5B:3F:D3:37:0E:A5:0E:23:73:EC:A3:05:59:39:06:10 X509v3 Authority Key Identifier: keyid:46:A7:C8:70:2C:54:7F:C4:22:10:02:7D:D2:54:57:10:31:AE:05:DC X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/de600486-9780-43ee-bb2d-b811094a1445/0/46A7C8702C547FC42210027DD254571031AE05DC.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/46A7C8702C547FC42210027DD254571031AE05DC.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/de600486-9780-43ee-bb2d-b811094a1445/0/46A7C8702C547FC42210027DD254571031AE05DC.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 17:0e:8a:a3:4f:52:77:53:06:47:30:bc:95:90:3e:4d:94:a0: cc:77:dc:b2:d9:33:1e:6d:6f:85:bc:8a:d0:da:45:67:04:42: 25:e8:38:be:1e:c8:55:1e:9d:a9:50:fb:f7:d7:a5:eb:7c:9f: 6c:68:09:40:29:0a:fe:a0:de:68:27:41:90:f7:cb:8e:ca:27: 02:b2:5c:94:b9:0b:08:54:19:34:1b:f8:c6:9d:d2:f1:be:97: 1b:bb:1e:bd:56:8e:49:2a:0e:4d:22:5c:c6:7a:05:96:26:74: a8:b9:1f:cf:93:1a:68:fb:49:6a:4e:04:a1:4c:6d:f9:d9:e4: 3f:58:d5:92:16:e6:54:8e:39:25:ba:50:a8:06:f9:be:9d:22: 12:69:1d:45:d6:cb:58:a8:13:32:8a:33:93:77:71:b2:bb:98: 36:6c:18:9a:e4:79:bb:ef:69:aa:de:98:02:f2:9d:ad:08:5f: f6:db:ed:13:64:5e:2f:50:ac:d2:62:b7:ce:aa:d6:3b:e9:a8: 15:68:22:85:18:82:dd:0b:36:e5:11:5c:b9:a7:08:c1:37:b7: e7:bf:4a:7c:d2:af:1d:0b:a8:01:de:bc:4f:34:2f:c3:d2:20: f8:81:4d:4b:8c:bd:c2:6c:61:2a:10:a2:54:c4:57:db:e6:4f: 6d:6e:cb:f8 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUMZ8/pFtSE6M0ijT+q1eFcTU+Cf8wDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoNDZBN0M4NzAyQzU0N0ZDNDIyMTAwMjdERDI1NDU3MTAz MUFFMDVEQzAeFw0yNTEyMTgxMzI2NDlaFw0yNTEyMjEyMzA0NDlaMDMxMTAvBgNV BAMTKEQzQzlCMTVGNUIzRkQzMzcwRUE1MEUyMzczRUNBMzA1NTkzOTA2MTAwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDHtN5R3k9uNgJfJpnOV7jJskHC XnYzz2s2+9NJv+UVhu+aJLdlk2n/0i+uCZ9heI3JG2G0BiDAHbdkSPr9y8VMGInc qWeMyebbaRGFEHMZ8qUPxAczU9tRMHfW8zOXIugPggp1fGoTNks7RiHQu0RGrQOo hJvtifr0Gccc1MDEArm4G5aT0arwzl2CCETaI97MrZyxEZUSXZ4FpXHvHwcWm/6E wnj8yDe4TluU4+Vaj34mYhoD4StLyET+cLwUY47iy1afOJDcJuCOX1MWC9mz/DiM ahYlsiyqTheh/8unqRqGW6EOosHGzmzynu+MUDStFgFAhJT9G40pRNVmdYOrAgMB AAGjggI8MIICODAdBgNVHQ4EFgQU08mxX1s/0zcOpQ4jc+yjBVk5BhAwHwYDVR0j BBgwFoAURqfIcCxUf8QiEAJ90lRXEDGuBdwwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby9k ZTYwMDQ4Ni05NzgwLTQzZWUtYmIyZC1iODExMDk0YTE0NDUvMC80NkE3Qzg3MDJD NTQ3RkM0MjIxMDAyN0REMjU0NTcxMDMxQUUwNURDLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvNDZBN0M4NzAyQzU0N0ZDNDIyMTAwMjdERDI1NDU3MTAzMUFF MDVEQy5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vZGU2MDA0ODYtOTc4MC00M2VlLWJi MmQtYjgxMTA5NGExNDQ1LzAvNDZBN0M4NzAyQzU0N0ZDNDIyMTAwMjdERDI1NDU3 MTAzMUFFMDVEQy5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBABcOiqNPUndTBkcwvJWQPk2UoMx33LLZMx5t b4W8itDaRWcEQiXoOL4eyFUenalQ+/fXpet8n2xoCUApCv6g3mgnQZD3y47KJwKy XJS5CwhUGTQb+Mad0vG+lxu7Hr1WjkkqDk0iXMZ6BZYmdKi5H8+TGmj7SWpOBKFM bfnZ5D9Y1ZIW5lSOOSW6UKgG+b6dIhJpHUXWy1ioEzKKM5N3cbK7mDZsGJrkebvv aaremALyna0IX/bb7RNkXi9QrNJit86q1jvpqBVoIoUYgt0LNuURXLmnCME3t+e/ SnzSrx0LqAHevE80L8PSIPiBTUuMvcJsYSoQolTEV9vmT21uy/g= -----END CERTIFICATE-----Generated at Fri Dec 19 11:21:56 2025 by rpki-client