This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf repo-rpki.idnic.net/repo/04ca5868-57e9-49b9-bfe1-48d78334a18c/0/846BCB85C1E1AA59037B0A2AC59ED1E8E7420ED0.mft File: 846BCB85C1E1AA59037B0A2AC59ED1E8E7420ED0.mft (raw, json) Hash identifier: 7qBboG7LXCZnmYTImpUQyChVoe7yRz/B3t9RLVP7EW4= Subject key identifier: 4E:8E:9D:AA:BD:BA:B0:5A:F5:B7:EF:2D:9A:19:10:BD:03:D9:BE:85 Authority key identifier: 84:6B:CB:85:C1:E1:AA:59:03:7B:0A:2A:C5:9E:D1:E8:E7:42:0E:D0 Certificate issuer: /CN=846BCB85C1E1AA59037B0A2AC59ED1E8E7420ED0 Certificate serial: 70EDB9BE8E11A81855A64A352128A209BCC71F72 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/846BCB85C1E1AA59037B0A2AC59ED1E8E7420ED0.cer Subject info access: rsync://repo-rpki.idnic.net/repo/04ca5868-57e9-49b9-bfe1-48d78334a18c/0/846BCB85C1E1AA59037B0A2AC59ED1E8E7420ED0.mft Manifest number: 0393 Signing time: Thu 04 Dec 2025 23:42:05 +0000 Manifest this update: Thu 04 Dec 2025 23:37:05 +0000 Manifest next update: Mon 08 Dec 2025 11:11:05 +0000 Files and hashes: 1: 3130332e3136392e3133382e302f32332d3234203d3e20313432333433.roa (hash: VrU1SwTl8NTtyMThFSf4hTGqANokx1m/tgJCu2ItF4k=) 2: 846BCB85C1E1AA59037B0A2AC59ED1E8E7420ED0.crl (hash: OqkSeluw7b0NQ3p6vUah312eSLQ0ZG7mYHKXJWMfhY4=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/04ca5868-57e9-49b9-bfe1-48d78334a18c/0/846BCB85C1E1AA59037B0A2AC59ED1E8E7420ED0.crl rsync://repo-rpki.idnic.net/repo/04ca5868-57e9-49b9-bfe1-48d78334a18c/0/846BCB85C1E1AA59037B0A2AC59ED1E8E7420ED0.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/846BCB85C1E1AA59037B0A2AC59ED1E8E7420ED0.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 08 Dec 2025 11:11:05 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 70:ed:b9:be:8e:11:a8:18:55:a6:4a:35:21:28:a2:09:bc:c7:1f:72 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=846BCB85C1E1AA59037B0A2AC59ED1E8E7420ED0 Validity Not Before: Dec 4 23:37:05 2025 GMT Not After : Dec 8 11:11:05 2025 GMT Subject: CN=4E8E9DAABDBAB05AF5B7EF2D9A1910BD03D9BE85 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9a:4a:ff:fc:a5:2f:61:a3:3e:b7:fa:54:6a:89: bb:77:2e:55:ea:22:6b:a3:3c:c4:db:0f:20:f1:b2: 42:63:3a:37:bd:c6:7b:c0:39:e2:54:61:66:33:2a: a5:ff:fb:3f:3e:06:7e:7e:28:4a:3e:6c:aa:7b:16: 1c:32:e3:c1:77:b9:c6:a1:f8:53:fb:77:e4:49:4c: 4b:8e:cc:26:9f:74:c8:88:72:4f:77:03:c1:45:48: 68:00:25:2c:7b:3d:10:fc:f9:13:75:0a:a5:50:3e: 5f:4b:9d:4a:a5:1d:8a:55:7c:c8:f1:1f:45:f5:af: 16:88:c3:b9:b8:ea:5f:1a:0d:3b:e7:4d:97:9b:0a: bf:e8:d2:a7:d0:fb:be:75:80:2a:e6:f7:14:94:26: e6:32:90:f0:15:8e:0c:f8:6f:24:ce:38:60:ea:15: 90:0f:a7:3d:c3:09:a1:52:a7:4d:a5:6d:d6:23:d4: d5:c3:f2:5e:c8:b6:92:35:65:aa:f9:9c:68:75:df: 2f:41:8a:58:b8:09:c4:48:7b:e2:46:c5:c9:19:50: a3:44:c0:2b:a1:cc:f0:d3:9f:1a:b5:c3:3f:e9:8e: cf:38:37:a8:2c:55:69:7d:4f:61:42:3b:4d:c1:fd: bf:90:58:85:38:f0:61:6d:7e:9e:7b:6e:af:64:e5: 26:23 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 4E:8E:9D:AA:BD:BA:B0:5A:F5:B7:EF:2D:9A:19:10:BD:03:D9:BE:85 X509v3 Authority Key Identifier: keyid:84:6B:CB:85:C1:E1:AA:59:03:7B:0A:2A:C5:9E:D1:E8:E7:42:0E:D0 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/04ca5868-57e9-49b9-bfe1-48d78334a18c/0/846BCB85C1E1AA59037B0A2AC59ED1E8E7420ED0.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/846BCB85C1E1AA59037B0A2AC59ED1E8E7420ED0.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/04ca5868-57e9-49b9-bfe1-48d78334a18c/0/846BCB85C1E1AA59037B0A2AC59ED1E8E7420ED0.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 66:dd:69:da:11:6d:17:89:b0:a9:93:c9:ab:d4:f2:59:84:79: 85:43:1e:16:f7:d5:32:9c:e0:e9:dc:97:5e:bf:90:f4:d0:9a: b3:17:20:b1:ce:5b:87:b2:72:4f:49:2f:5e:15:03:91:19:3b: ac:fa:b6:4c:50:a6:95:ab:b3:67:55:df:3c:26:24:29:26:9a: 46:d8:a5:17:2b:74:46:8d:69:8b:c0:e5:64:d8:64:b7:3a:20: 7f:14:cb:99:7b:e2:ca:d9:71:8b:c7:8a:80:0e:8e:6e:87:2a: 0f:11:51:47:6a:50:18:04:74:cb:d4:ef:e4:44:3a:3b:9f:f5: db:49:8a:c2:16:87:a2:5a:7d:a4:58:72:60:5e:7f:98:29:ec: 72:7e:5c:d3:d1:93:42:28:da:c6:d1:23:0d:f5:f1:1a:40:f5: bd:27:ec:79:da:79:9b:5c:bc:87:0c:c3:59:31:a0:94:27:1f: 43:d0:f8:6a:97:85:da:9e:00:32:1e:69:0f:73:75:b7:82:a2: bd:b1:f1:a7:aa:87:0d:33:96:ed:86:21:7a:37:7a:eb:fb:6f: 7c:ff:c9:f5:33:92:7a:2f:a7:c5:f3:c7:c7:78:2a:8f:4e:2a: 74:95:69:87:e3:7a:e8:af:6c:96:45:c4:24:2c:cc:c6:0b:36: 88:f9:79:cf -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUcO25vo4RqBhVpko1ISiiCbzHH3IwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoODQ2QkNCODVDMUUxQUE1OTAzN0IwQTJBQzU5RUQxRThF NzQyMEVEMDAeFw0yNTEyMDQyMzM3MDVaFw0yNTEyMDgxMTExMDVaMDMxMTAvBgNV BAMTKDRFOEU5REFBQkRCQUIwNUFGNUI3RUYyRDlBMTkxMEJEMDNEOUJFODUwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCaSv/8pS9hoz63+lRqibt3LlXq ImujPMTbDyDxskJjOje9xnvAOeJUYWYzKqX/+z8+Bn5+KEo+bKp7Fhwy48F3ucah +FP7d+RJTEuOzCafdMiIck93A8FFSGgAJSx7PRD8+RN1CqVQPl9LnUqlHYpVfMjx H0X1rxaIw7m46l8aDTvnTZebCr/o0qfQ+751gCrm9xSUJuYykPAVjgz4byTOOGDq FZAPpz3DCaFSp02lbdYj1NXD8l7ItpI1Zar5nGh13y9Bili4CcRIe+JGxckZUKNE wCuhzPDTnxq1wz/pjs84N6gsVWl9T2FCO03B/b+QWIU48GFtfp57bq9k5SYjAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUTo6dqr26sFr1t+8tmhkQvQPZvoUwHwYDVR0j BBgwFoAUhGvLhcHhqlkDewoqxZ7R6OdCDtAwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby8w NGNhNTg2OC01N2U5LTQ5YjktYmZlMS00OGQ3ODMzNGExOGMvMC84NDZCQ0I4NUMx RTFBQTU5MDM3QjBBMkFDNTlFRDFFOEU3NDIwRUQwLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvODQ2QkNCODVDMUUxQUE1OTAzN0IwQTJBQzU5RUQxRThFNzQy MEVEMC5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vMDRjYTU4NjgtNTdlOS00OWI5LWJm ZTEtNDhkNzgzMzRhMThjLzAvODQ2QkNCODVDMUUxQUE1OTAzN0IwQTJBQzU5RUQx RThFNzQyMEVEMC5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAGbdadoRbReJsKmTyavU8lmEeYVDHhb31TKc 4Oncl16/kPTQmrMXILHOW4eyck9JL14VA5EZO6z6tkxQppWrs2dV3zwmJCkmmkbY pRcrdEaNaYvA5WTYZLc6IH8Uy5l74srZcYvHioAOjm6HKg8RUUdqUBgEdMvU7+RE Ojuf9dtJisIWh6JafaRYcmBef5gp7HJ+XNPRk0Io2sbRIw318RpA9b0n7HnaeZtc vIcMw1kxoJQnH0PQ+GqXhdqeADIeaQ9zdbeCor2x8aeqhw0zlu2GIXo3euv7b3z/ yfUzknovp8Xzx8d4Ko9OKnSVaYfjeuivbJZFxCQszMYLNoj5ec8= -----END CERTIFICATE-----Generated at Sun Dec 7 01:10:13 2025 by rpki-client