This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf repo-rpki.idnic.net/repo/e2e83afe-3bdc-44b2-a702-b4555daa65ea/0/46F8E3AC44B2F2208037674979268378CA60B901.mft File: 46F8E3AC44B2F2208037674979268378CA60B901.mft (raw, json) Hash identifier: m9uIoM8ijpKjQGKr5auUkw6167ef4sjYyKz2ljBvwTc= Subject key identifier: 27:FA:97:FC:53:77:C7:0E:A0:0E:00:54:A0:74:82:7E:DA:DB:D4:46 Authority key identifier: 46:F8:E3:AC:44:B2:F2:20:80:37:67:49:79:26:83:78:CA:60:B9:01 Certificate issuer: /CN=46F8E3AC44B2F2208037674979268378CA60B901 Certificate serial: 650C1A4C2745583F1BD1E858C962C61E58008298 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/46F8E3AC44B2F2208037674979268378CA60B901.cer Subject info access: rsync://repo-rpki.idnic.net/repo/e2e83afe-3bdc-44b2-a702-b4555daa65ea/0/46F8E3AC44B2F2208037674979268378CA60B901.mft Manifest number: 011E Signing time: Mon 22 Dec 2025 22:11:38 +0000 Manifest this update: Mon 22 Dec 2025 22:06:38 +0000 Manifest next update: Thu 25 Dec 2025 22:22:38 +0000 Files and hashes: 1: 3135372e32302e3231382e302f32332d3233203d3e20313532343233.roa (hash: 0XtLIEJG3py88w82k3Uk1bJyRF5CgN3WezTFPdzYJTo=) 2: 3135372e32302e3231382e302f32342d3234203d3e20313532343233.roa (hash: w6SUeBV7r7eMx4zjejoHugvjH0LAjK8+Ny4oivQOtS8=) 3: 3135372e32302e3231392e302f32342d3234203d3e20313532343233.roa (hash: lEKQqCDUmBCxPybh1zwAuhAJa6FoeEwr4Hftj79+ZXw=) 4: 46F8E3AC44B2F2208037674979268378CA60B901.crl (hash: kpwAt162ai2hou+fwmlIrF19fjesL63QFEDP7lW9v6U=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/e2e83afe-3bdc-44b2-a702-b4555daa65ea/0/46F8E3AC44B2F2208037674979268378CA60B901.crl rsync://repo-rpki.idnic.net/repo/e2e83afe-3bdc-44b2-a702-b4555daa65ea/0/46F8E3AC44B2F2208037674979268378CA60B901.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/46F8E3AC44B2F2208037674979268378CA60B901.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/60F8BE9C16625C424B269EE06C64A83BAB8506D4.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/60F8BE9C16625C424B269EE06C64A83BAB8506D4.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/YPi-nBZiXEJLJp7gbGSoO6uFBtQ.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 25 Dec 2025 22:22:38 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 65:0c:1a:4c:27:45:58:3f:1b:d1:e8:58:c9:62:c6:1e:58:00:82:98 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=46F8E3AC44B2F2208037674979268378CA60B901 Validity Not Before: Dec 22 22:06:38 2025 GMT Not After : Dec 25 22:22:38 2025 GMT Subject: CN=27FA97FC5377C70EA00E0054A074827EDADBD446 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a2:31:cb:51:32:45:a0:e5:c3:41:1a:6a:c7:55: c3:b9:eb:03:5f:bd:d7:30:ef:8d:46:a0:28:d7:a0: cc:37:a7:41:45:7e:bc:2e:d1:03:36:d8:4b:e1:f8: 74:0b:96:f5:da:91:08:09:f1:77:6a:48:98:77:d8: 67:95:da:35:8c:15:47:37:51:ff:51:72:b7:33:62: f0:92:97:ec:b9:52:fc:36:3b:76:68:30:6a:25:8e: b1:5c:2a:32:7b:d6:81:09:09:a5:b5:af:bb:b6:8c: 83:d4:08:1a:84:e7:fd:42:d7:f7:cd:b9:79:f3:9e: 07:08:93:b0:7c:83:08:9a:c1:26:71:49:5a:34:1c: 91:53:68:c9:f9:01:83:0e:96:ef:88:44:8b:2e:84: 97:38:c8:de:82:c3:cd:12:e6:d0:96:28:9b:0f:7d: ca:33:fc:a8:64:5e:ea:41:87:bf:a7:fe:7b:8d:9d: df:ca:83:e4:62:c1:96:87:48:3f:d1:3c:3b:fe:75: 80:8e:81:54:20:da:26:f4:fb:0e:ed:7d:6f:17:53: 05:a1:c5:43:e0:e6:e4:e4:5c:92:75:f1:bf:b2:e6: 9d:51:cd:34:6f:b6:12:52:fb:98:ad:9c:e7:8d:4b: f3:0a:5d:e5:cd:19:b0:8d:97:42:5d:67:a0:b0:38: 92:61 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 27:FA:97:FC:53:77:C7:0E:A0:0E:00:54:A0:74:82:7E:DA:DB:D4:46 X509v3 Authority Key Identifier: keyid:46:F8:E3:AC:44:B2:F2:20:80:37:67:49:79:26:83:78:CA:60:B9:01 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/e2e83afe-3bdc-44b2-a702-b4555daa65ea/0/46F8E3AC44B2F2208037674979268378CA60B901.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/46F8E3AC44B2F2208037674979268378CA60B901.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/e2e83afe-3bdc-44b2-a702-b4555daa65ea/0/46F8E3AC44B2F2208037674979268378CA60B901.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption c7:b5:fc:24:01:70:16:7d:5a:3f:8c:50:e7:70:d0:10:b3:dd: db:4d:16:bb:70:a5:bb:4b:b5:80:3a:b6:f7:31:20:ea:2b:af: 1a:e0:dd:d1:ce:e4:f5:d8:c4:43:b8:2f:6b:9f:33:68:e4:e7: 58:2d:7a:7a:74:f7:3a:ff:ad:5e:0c:99:a4:ca:6f:d7:b1:01: 57:9b:ec:41:17:3d:7e:c6:89:28:da:69:ea:f7:54:a9:55:ea: 55:42:ee:79:c0:68:78:b2:02:fa:8c:44:cc:7e:af:f1:78:d5: 13:c7:b6:82:2b:4a:6f:25:a1:89:81:71:32:54:f5:d7:05:b5: 74:89:ce:de:92:5f:02:be:82:85:26:a9:c1:b8:91:6f:e8:40: ad:c6:ab:22:d5:38:ae:7d:8c:3e:cb:3b:d1:0e:ec:9a:86:14: ab:21:79:0d:51:4c:eb:2d:10:e4:38:36:9a:4f:1d:10:a1:3e: 79:b9:c9:ae:e5:ea:54:84:74:7e:4d:dc:68:99:83:f6:c9:22: 22:d4:11:71:19:7e:b8:1a:60:f0:b9:b5:b6:0c:eb:47:ed:47: 90:6c:83:a7:d6:ba:33:cb:a2:ff:e7:d9:96:09:14:46:09:bf: c6:ae:ed:f8:4f:64:d6:53:72:1d:ca:82:f2:62:b8:94:83:d8: 5d:e7:d2:e1 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUZQwaTCdFWD8b0ehYyWLGHlgAgpgwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoNDZGOEUzQUM0NEIyRjIyMDgwMzc2NzQ5NzkyNjgzNzhD QTYwQjkwMTAeFw0yNTEyMjIyMjA2MzhaFw0yNTEyMjUyMjIyMzhaMDMxMTAvBgNV BAMTKDI3RkE5N0ZDNTM3N0M3MEVBMDBFMDA1NEEwNzQ4MjdFREFEQkQ0NDYwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCiMctRMkWg5cNBGmrHVcO56wNf vdcw741GoCjXoMw3p0FFfrwu0QM22Evh+HQLlvXakQgJ8XdqSJh32GeV2jWMFUc3 Uf9RcrczYvCSl+y5Uvw2O3ZoMGoljrFcKjJ71oEJCaW1r7u2jIPUCBqE5/1C1/fN uXnzngcIk7B8gwiawSZxSVo0HJFTaMn5AYMOlu+IRIsuhJc4yN6Cw80S5tCWKJsP fcoz/KhkXupBh7+n/nuNnd/Kg+RiwZaHSD/RPDv+dYCOgVQg2ib0+w7tfW8XUwWh xUPg5uTkXJJ18b+y5p1RzTRvthJS+5itnOeNS/MKXeXNGbCNl0JdZ6CwOJJhAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUJ/qX/FN3xw6gDgBUoHSCftrb1EYwHwYDVR0j BBgwFoAURvjjrESy8iCAN2dJeSaDeMpguQEwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby9l MmU4M2FmZS0zYmRjLTQ0YjItYTcwMi1iNDU1NWRhYTY1ZWEvMC80NkY4RTNBQzQ0 QjJGMjIwODAzNzY3NDk3OTI2ODM3OENBNjBCOTAxLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzEvNDZGOEUzQUM0NEIyRjIyMDgwMzc2NzQ5NzkyNjgzNzhDQTYw QjkwMS5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vZTJlODNhZmUtM2JkYy00NGIyLWE3 MDItYjQ1NTVkYWE2NWVhLzAvNDZGOEUzQUM0NEIyRjIyMDgwMzc2NzQ5NzkyNjgz NzhDQTYwQjkwMS5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAMe1/CQBcBZ9Wj+MUOdw0BCz3dtNFrtwpbtL tYA6tvcxIOorrxrg3dHO5PXYxEO4L2ufM2jk51gtenp09zr/rV4MmaTKb9exAVeb 7EEXPX7GiSjaaer3VKlV6lVC7nnAaHiyAvqMRMx+r/F41RPHtoIrSm8loYmBcTJU 9dcFtXSJzt6SXwK+goUmqcG4kW/oQK3GqyLVOK59jD7LO9EO7JqGFKsheQ1RTOst EOQ4NppPHRChPnm5ya7l6lSEdH5N3GiZg/bJIiLUEXEZfrgaYPC5tbYM60ftR5Bs g6fWujPLov/n2ZYJFEYJv8au7fhPZNZTch3KgvJiuJSD2F3n0uE= -----END CERTIFICATE-----Generated at Wed Dec 24 10:04:05 2025 by rpki-client