This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf repo-rpki.idnic.net/repo/de600486-9780-43ee-bb2d-b811094a1445/0/46A7C8702C547FC42210027DD254571031AE05DC.mft File: 46A7C8702C547FC42210027DD254571031AE05DC.mft (raw, json) Hash identifier: mJM/RBlGt27OQ7785R/UhL3h4dbcOaa2C0r3vkmo2CI= Subject key identifier: CD:2B:23:26:87:45:A5:71:BE:EE:DC:7E:02:8C:D1:68:FF:F5:2D:F8 Authority key identifier: 46:A7:C8:70:2C:54:7F:C4:22:10:02:7D:D2:54:57:10:31:AE:05:DC Certificate issuer: /CN=46A7C8702C547FC42210027DD254571031AE05DC Certificate serial: 1DD1E16CFA249B875CA3C3CB6887B92EB2FD23D3 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/46A7C8702C547FC42210027DD254571031AE05DC.cer Subject info access: rsync://repo-rpki.idnic.net/repo/de600486-9780-43ee-bb2d-b811094a1445/0/46A7C8702C547FC42210027DD254571031AE05DC.mft Manifest number: 0248 Signing time: Thu 01 Jan 2026 04:21:52 +0000 Manifest this update: Thu 01 Jan 2026 04:16:52 +0000 Manifest next update: Sun 04 Jan 2026 05:57:52 +0000 Files and hashes: 1: 46A7C8702C547FC42210027DD254571031AE05DC.crl (hash: B+asEq5kMWA9JLoGkoYp/9djW7LKfDJR7Zc0Ji7qV7s=) 2: 3130332e3136302e3230352e302f32342d3234203d3e20313431353935.roa (hash: kdMYWHxqdB4fcu/Vgc4AfVoBG1lh0SUu+dZG5J22ir0=) 3: 3130332e3137322e3132322e302f32342d3234203d3e20313431353935.roa (hash: DLyhX1mkxtUQRH14nsnVNFFV/Lnw+00NFrAkbDg4bb4=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/de600486-9780-43ee-bb2d-b811094a1445/0/46A7C8702C547FC42210027DD254571031AE05DC.crl rsync://repo-rpki.idnic.net/repo/de600486-9780-43ee-bb2d-b811094a1445/0/46A7C8702C547FC42210027DD254571031AE05DC.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/46A7C8702C547FC42210027DD254571031AE05DC.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 04 Jan 2026 05:57:52 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1d:d1:e1:6c:fa:24:9b:87:5c:a3:c3:cb:68:87:b9:2e:b2:fd:23:d3 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=46A7C8702C547FC42210027DD254571031AE05DC Validity Not Before: Jan 1 04:16:52 2026 GMT Not After : Jan 4 05:57:52 2026 GMT Subject: CN=CD2B23268745A571BEEEDC7E028CD168FFF52DF8 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c4:de:59:59:49:f8:1f:8b:18:87:d0:b5:bb:bc: 37:41:97:bb:19:04:15:ea:a1:37:65:48:ae:23:74: c4:c4:84:a9:b4:47:07:9f:91:a4:c0:91:42:1a:59: 51:50:28:9b:b3:fc:75:94:41:10:5e:25:ff:e3:8a: a4:2c:e5:83:e5:09:91:dd:9e:3e:ad:08:c0:a3:1e: 10:2a:d9:c9:ce:ff:3e:3e:67:a4:f8:c2:93:a1:c7: 0c:e5:7c:37:f1:a8:1f:a7:ce:71:6f:de:7f:13:d4: 3a:0d:fc:39:31:cf:8e:67:1c:33:b8:03:2d:3a:ac: 7c:fc:a0:1e:a6:71:94:c6:1d:23:2f:2d:05:0d:8b: 67:a0:e9:b9:ef:80:f7:2c:2c:f0:b1:e3:24:7f:d3: fd:4e:63:c6:f8:c4:4c:00:a7:b0:ce:48:dc:81:c6: 41:92:5d:2c:42:ab:69:92:e4:84:de:7e:1c:61:8a: 9a:5e:e7:26:9f:24:a5:4a:ec:7b:01:27:a7:38:31: 2d:1b:36:56:d5:51:fc:11:3e:41:e2:59:5a:36:bf: 50:b8:91:50:ea:ed:da:e9:5b:52:5f:81:2f:3d:8e: fb:9b:8c:7f:cc:f9:6f:f8:c1:2b:d9:9a:74:53:30: 9c:8a:29:39:42:04:d1:c8:2e:a3:a1:cb:f9:91:c6: 9f:c1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: CD:2B:23:26:87:45:A5:71:BE:EE:DC:7E:02:8C:D1:68:FF:F5:2D:F8 X509v3 Authority Key Identifier: keyid:46:A7:C8:70:2C:54:7F:C4:22:10:02:7D:D2:54:57:10:31:AE:05:DC X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/de600486-9780-43ee-bb2d-b811094a1445/0/46A7C8702C547FC42210027DD254571031AE05DC.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/46A7C8702C547FC42210027DD254571031AE05DC.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/de600486-9780-43ee-bb2d-b811094a1445/0/46A7C8702C547FC42210027DD254571031AE05DC.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 3e:f0:72:b5:93:4e:09:72:ea:71:d5:4d:42:69:dc:00:9f:11: 28:d5:71:8c:15:76:8a:09:84:d5:ff:bb:49:7b:28:9c:97:bd: 69:a2:20:79:97:d2:d3:3b:e6:66:e5:5c:7b:68:53:ab:05:6b: d5:a7:82:d6:97:e9:f0:17:9f:34:12:14:41:9f:ae:7b:8c:da: 13:9a:73:76:85:9d:c3:f5:4f:ea:58:03:e7:36:46:d1:7a:09: 5f:70:98:c7:b1:b8:79:98:c0:d2:98:4a:93:a7:d0:68:fc:e1: 01:39:6a:c6:11:54:54:99:4c:77:11:3b:9c:1a:ac:d9:eb:9e: ed:45:76:10:ba:ed:a0:5d:0d:38:46:c5:d7:0c:9c:a8:40:2b: f9:b3:7e:87:68:95:8d:02:d8:20:f6:b5:5b:a6:ce:ea:eb:b9: 56:9f:48:d4:76:e4:97:2c:1f:61:99:35:29:ff:e8:09:9a:26: af:ce:3f:a2:56:22:4f:7c:14:90:c0:3e:4c:99:b6:d1:05:e1: 3c:63:13:f5:f3:88:30:26:09:d3:86:05:18:ce:4f:97:5e:f9: a1:62:3b:ff:9b:ad:d5:a4:30:45:70:b8:83:5a:ae:7c:da:63: 49:8a:57:4f:ab:3a:f7:4d:f7:bc:ed:45:17:d4:4e:8a:36:7d: 29:22:7a:69 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUHdHhbPokm4dco8PLaIe5LrL9I9MwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoNDZBN0M4NzAyQzU0N0ZDNDIyMTAwMjdERDI1NDU3MTAz MUFFMDVEQzAeFw0yNjAxMDEwNDE2NTJaFw0yNjAxMDQwNTU3NTJaMDMxMTAvBgNV BAMTKENEMkIyMzI2ODc0NUE1NzFCRUVFREM3RTAyOENEMTY4RkZGNTJERjgwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDE3llZSfgfixiH0LW7vDdBl7sZ BBXqoTdlSK4jdMTEhKm0RwefkaTAkUIaWVFQKJuz/HWUQRBeJf/jiqQs5YPlCZHd nj6tCMCjHhAq2cnO/z4+Z6T4wpOhxwzlfDfxqB+nznFv3n8T1DoN/Dkxz45nHDO4 Ay06rHz8oB6mcZTGHSMvLQUNi2eg6bnvgPcsLPCx4yR/0/1OY8b4xEwAp7DOSNyB xkGSXSxCq2mS5ITefhxhippe5yafJKVK7HsBJ6c4MS0bNlbVUfwRPkHiWVo2v1C4 kVDq7drpW1JfgS89jvubjH/M+W/4wSvZmnRTMJyKKTlCBNHILqOhy/mRxp/BAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUzSsjJodFpXG+7tx+AozRaP/1LfgwHwYDVR0j BBgwFoAURqfIcCxUf8QiEAJ90lRXEDGuBdwwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby9k ZTYwMDQ4Ni05NzgwLTQzZWUtYmIyZC1iODExMDk0YTE0NDUvMC80NkE3Qzg3MDJD NTQ3RkM0MjIxMDAyN0REMjU0NTcxMDMxQUUwNURDLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvNDZBN0M4NzAyQzU0N0ZDNDIyMTAwMjdERDI1NDU3MTAzMUFF MDVEQy5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vZGU2MDA0ODYtOTc4MC00M2VlLWJi MmQtYjgxMTA5NGExNDQ1LzAvNDZBN0M4NzAyQzU0N0ZDNDIyMTAwMjdERDI1NDU3 MTAzMUFFMDVEQy5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAD7wcrWTTgly6nHVTUJp3ACfESjVcYwVdooJ hNX/u0l7KJyXvWmiIHmX0tM75mblXHtoU6sFa9WngtaX6fAXnzQSFEGfrnuM2hOa c3aFncP1T+pYA+c2RtF6CV9wmMexuHmYwNKYSpOn0Gj84QE5asYRVFSZTHcRO5wa rNnrnu1FdhC67aBdDThGxdcMnKhAK/mzfodolY0C2CD2tVumzurruVafSNR25Jcs H2GZNSn/6AmaJq/OP6JWIk98FJDAPkyZttEF4TxjE/XziDAmCdOGBRjOT5de+aFi O/+brdWkMEVwuINarnzaY0mKV0+rOvdN97ztRRfUToo2fSkiemk= -----END CERTIFICATE-----Generated at Thu Jan 1 05:47:00 2026 by rpki-client