This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf repo-rpki.idnic.net/repo/0146632a-b2e1-420a-a895-c4a1e2217da3/0/46BF7D6907C7E35726A4180F0BC5F133F6C5AD93.mft File: 46BF7D6907C7E35726A4180F0BC5F133F6C5AD93.mft (raw, json) Hash identifier: Bnq1Opd8ysFUpuQq0ovVaasFbjvh71Q+B4eoH61jUZ0= Subject key identifier: 32:C4:D5:E9:F9:C7:94:D2:55:4C:0D:78:3D:A9:1D:45:50:93:7E:83 Authority key identifier: 46:BF:7D:69:07:C7:E3:57:26:A4:18:0F:0B:C5:F1:33:F6:C5:AD:93 Certificate issuer: /CN=46BF7D6907C7E35726A4180F0BC5F133F6C5AD93 Certificate serial: 2DEEF001FE016BF75A2EFAA20226039AC1CEAD9F Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/46BF7D6907C7E35726A4180F0BC5F133F6C5AD93.cer Subject info access: rsync://repo-rpki.idnic.net/repo/0146632a-b2e1-420a-a895-c4a1e2217da3/0/46BF7D6907C7E35726A4180F0BC5F133F6C5AD93.mft Manifest number: F3 Signing time: Sat 06 Dec 2025 13:42:18 +0000 Manifest this update: Sat 06 Dec 2025 13:37:18 +0000 Manifest next update: Tue 09 Dec 2025 14:02:18 +0000 Files and hashes: 1: 3130332e36302e39302e302f32342d3234203d3e20313531353730.roa (hash: YhTpL/afIyHAI7098wyo60hPl3dD1A2rEVVKj7Elh/k=) 2: 46BF7D6907C7E35726A4180F0BC5F133F6C5AD93.crl (hash: KLQoApRIBLJOPpm1dlQexrL27ZJOWi0ZGTOKkxilO5U=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/0146632a-b2e1-420a-a895-c4a1e2217da3/0/46BF7D6907C7E35726A4180F0BC5F133F6C5AD93.crl rsync://repo-rpki.idnic.net/repo/0146632a-b2e1-420a-a895-c4a1e2217da3/0/46BF7D6907C7E35726A4180F0BC5F133F6C5AD93.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/46BF7D6907C7E35726A4180F0BC5F133F6C5AD93.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 09 Dec 2025 14:02:18 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2d:ee:f0:01:fe:01:6b:f7:5a:2e:fa:a2:02:26:03:9a:c1:ce:ad:9f Signature Algorithm: sha256WithRSAEncryption Issuer: CN=46BF7D6907C7E35726A4180F0BC5F133F6C5AD93 Validity Not Before: Dec 6 13:37:18 2025 GMT Not After : Dec 9 14:02:18 2025 GMT Subject: CN=32C4D5E9F9C794D2554C0D783DA91D4550937E83 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b3:0b:c4:68:d0:f6:a5:5f:c3:f7:f1:83:ba:f8: 11:17:db:83:6f:0d:3d:3e:a0:67:11:5c:b7:0a:ca: cd:e8:55:fc:2b:33:90:3a:d9:2d:22:dc:14:e9:23: 85:38:71:74:52:22:7d:cb:ed:94:0d:80:d2:d7:23: 87:ce:59:fc:82:99:5f:fb:27:a4:e7:ad:37:8c:18: 13:4c:ed:00:9d:5a:32:ab:5e:8e:12:71:bc:a1:1a: af:1b:97:65:2d:e2:3a:1a:bd:ea:5d:c2:71:76:1f: 33:cf:00:1a:5f:cb:d4:7f:e9:50:a3:89:18:c7:d0: c7:19:74:bf:69:90:ac:d3:44:b9:32:a2:8e:39:7d: 01:c6:55:b8:07:c4:8c:9a:39:19:90:b7:19:44:3a: 8c:f5:0d:73:43:ff:f7:b4:55:dd:62:3e:13:5f:8f: 0e:b4:e5:03:00:5c:5c:66:26:bb:1b:2f:13:7c:f9: d8:c8:67:b3:36:d8:e6:d5:83:40:17:6a:47:fe:90: 2f:99:b1:e5:3b:48:01:1f:03:ed:fd:f0:ee:c2:69: db:b5:c9:28:de:43:10:ec:a3:36:9a:a3:ae:37:2c: 20:74:7a:1b:cd:59:41:76:a2:ed:44:14:44:99:33: ba:41:ea:c7:c0:20:61:1b:f1:0c:bb:d0:52:31:0a: ef:b7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 32:C4:D5:E9:F9:C7:94:D2:55:4C:0D:78:3D:A9:1D:45:50:93:7E:83 X509v3 Authority Key Identifier: keyid:46:BF:7D:69:07:C7:E3:57:26:A4:18:0F:0B:C5:F1:33:F6:C5:AD:93 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/0146632a-b2e1-420a-a895-c4a1e2217da3/0/46BF7D6907C7E35726A4180F0BC5F133F6C5AD93.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/46BF7D6907C7E35726A4180F0BC5F133F6C5AD93.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/0146632a-b2e1-420a-a895-c4a1e2217da3/0/46BF7D6907C7E35726A4180F0BC5F133F6C5AD93.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 15:da:c1:15:6e:e5:c3:ba:58:89:85:b8:e4:52:f1:39:05:bc: 31:16:c0:7c:3c:61:28:ed:73:0f:84:73:17:2d:0e:ca:f9:78: 91:89:bb:54:42:e3:94:c8:05:a0:1b:11:5e:f9:89:b4:43:09: 0e:6c:5a:8b:6b:25:e2:b8:82:f7:7b:9e:46:8d:c7:2d:a3:2f: e0:d8:5d:cd:d6:f2:54:89:c7:2e:83:06:f2:28:d9:ab:73:e3: 68:8b:65:33:4d:8a:d7:b3:41:50:1a:2a:bb:c9:f4:98:97:43: 03:d6:93:75:6b:07:08:83:45:51:a0:53:ce:5c:43:88:d3:7d: c3:93:7e:f8:36:f9:b5:cd:3f:c9:2f:d1:fd:51:c9:24:76:46: 80:a1:0d:aa:65:3b:36:12:20:cb:ae:e8:b8:4e:53:c5:88:41: 88:da:15:78:a6:8c:0b:5e:79:1f:e6:d4:7c:ca:1e:e6:b4:67: 0f:e3:4d:44:1d:8b:73:0a:b0:e7:b4:e1:0e:15:19:b5:4b:59: ac:28:f6:8d:5e:a7:c4:06:3b:67:6e:e9:6c:df:4c:ef:02:1d: 2c:c6:c7:33:ec:2f:a9:0f:22:4b:af:ef:71:d5:4b:a2:1f:56: cc:1c:cf:67:cc:ff:1d:02:09:fd:72:40:14:73:1a:12:4a:5e: 87:02:09:00 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIULe7wAf4Ba/daLvqiAiYDmsHOrZ8wDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoNDZCRjdENjkwN0M3RTM1NzI2QTQxODBGMEJDNUYxMzNG NkM1QUQ5MzAeFw0yNTEyMDYxMzM3MThaFw0yNTEyMDkxNDAyMThaMDMxMTAvBgNV BAMTKDMyQzRENUU5RjlDNzk0RDI1NTRDMEQ3ODNEQTkxRDQ1NTA5MzdFODMwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCzC8Ro0PalX8P38YO6+BEX24Nv DT0+oGcRXLcKys3oVfwrM5A62S0i3BTpI4U4cXRSIn3L7ZQNgNLXI4fOWfyCmV/7 J6TnrTeMGBNM7QCdWjKrXo4ScbyhGq8bl2Ut4joavepdwnF2HzPPABpfy9R/6VCj iRjH0McZdL9pkKzTRLkyoo45fQHGVbgHxIyaORmQtxlEOoz1DXND//e0Vd1iPhNf jw605QMAXFxmJrsbLxN8+djIZ7M22ObVg0AXakf+kC+ZseU7SAEfA+398O7Cadu1 ySjeQxDsozaao643LCB0ehvNWUF2ou1EFESZM7pB6sfAIGEb8Qy70FIxCu+3AgMB AAGjggI8MIICODAdBgNVHQ4EFgQUMsTV6fnHlNJVTA14PakdRVCTfoMwHwYDVR0j BBgwFoAURr99aQfH41cmpBgPC8XxM/bFrZMwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby8w MTQ2NjMyYS1iMmUxLTQyMGEtYTg5NS1jNGExZTIyMTdkYTMvMC80NkJGN0Q2OTA3 QzdFMzU3MjZBNDE4MEYwQkM1RjEzM0Y2QzVBRDkzLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvNDZCRjdENjkwN0M3RTM1NzI2QTQxODBGMEJDNUYxMzNGNkM1 QUQ5My5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vMDE0NjYzMmEtYjJlMS00MjBhLWE4 OTUtYzRhMWUyMjE3ZGEzLzAvNDZCRjdENjkwN0M3RTM1NzI2QTQxODBGMEJDNUYx MzNGNkM1QUQ5My5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBABXawRVu5cO6WImFuORS8TkFvDEWwHw8YSjt cw+EcxctDsr5eJGJu1RC45TIBaAbEV75ibRDCQ5sWotrJeK4gvd7nkaNxy2jL+DY Xc3W8lSJxy6DBvIo2atz42iLZTNNitezQVAaKrvJ9JiXQwPWk3VrBwiDRVGgU85c Q4jTfcOTfvg2+bXNP8kv0f1RySR2RoChDaplOzYSIMuu6LhOU8WIQYjaFXimjAte eR/m1HzKHua0Zw/jTUQdi3MKsOe04Q4VGbVLWawo9o1ep8QGO2du6WzfTO8CHSzG xzPsL6kPIkuv73HVS6IfVswcz2fM/x0CCf1yQBRzGhJKXocCCQA= -----END CERTIFICATE-----Generated at Sun Dec 7 03:58:56 2025 by rpki-client