This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf repo-rpki.idnic.net/repo/1dee126f-8192-4d28-b25e-deabdb79eb21/0/146B42876A5C2AB0705F67F1A3918D76984989AF.mft File: 146B42876A5C2AB0705F67F1A3918D76984989AF.mft (raw, json) Hash identifier: uVJPOTxIzQOGnXL8XrqUWRV9jc0hy4e5Z+B8aNCt9ew= Subject key identifier: 22:05:92:E5:EE:82:86:23:9F:BF:91:7F:91:D0:2C:2A:4C:54:AD:BD Authority key identifier: 14:6B:42:87:6A:5C:2A:B0:70:5F:67:F1:A3:91:8D:76:98:49:89:AF Certificate issuer: /CN=146B42876A5C2AB0705F67F1A3918D76984989AF Certificate serial: 674BA5B7BEC60548995F7A50EAFFA2ABA53863E8 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/146B42876A5C2AB0705F67F1A3918D76984989AF.cer Subject info access: rsync://repo-rpki.idnic.net/repo/1dee126f-8192-4d28-b25e-deabdb79eb21/0/146B42876A5C2AB0705F67F1A3918D76984989AF.mft Manifest number: 0221 Signing time: Sat 06 Dec 2025 19:41:33 +0000 Manifest this update: Sat 06 Dec 2025 19:36:33 +0000 Manifest next update: Wed 10 Dec 2025 06:51:33 +0000 Files and hashes: 1: 3130332e3139302e33302e302f32342d3234203d3e20313439383931.roa (hash: On7TkaewDfG3q672VhzDkhOW6Lq6Z1WuztT7xPC6+6E=) 2: 146B42876A5C2AB0705F67F1A3918D76984989AF.crl (hash: +EY/txgBrGkUCJ6IsX02ZpxszL58nIizI1WTMN6387A=) 3: 3130332e3139302e33312e302f32342d3234203d3e20313439383931.roa (hash: f2ET0xnRE9tVugcZTeUjwdpllzI9UCr68L6pTafrq5U=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/1dee126f-8192-4d28-b25e-deabdb79eb21/0/146B42876A5C2AB0705F67F1A3918D76984989AF.crl rsync://repo-rpki.idnic.net/repo/1dee126f-8192-4d28-b25e-deabdb79eb21/0/146B42876A5C2AB0705F67F1A3918D76984989AF.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/146B42876A5C2AB0705F67F1A3918D76984989AF.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 09 Dec 2025 15:57:52 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 67:4b:a5:b7:be:c6:05:48:99:5f:7a:50:ea:ff:a2:ab:a5:38:63:e8 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=146B42876A5C2AB0705F67F1A3918D76984989AF Validity Not Before: Dec 6 19:36:33 2025 GMT Not After : Dec 10 06:51:33 2025 GMT Subject: CN=220592E5EE8286239FBF917F91D02C2A4C54ADBD Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d1:c9:63:80:c6:f9:74:e8:b9:4a:f0:a3:06:0a: 9f:e6:e5:a9:d9:48:31:5d:77:00:18:c7:73:09:a0: f8:d4:bf:db:73:95:a1:31:5e:43:39:db:2c:94:d5: 34:90:b7:09:f7:6b:18:14:17:12:5f:6b:c4:1c:7e: 6d:67:49:b5:d7:d9:23:c8:2d:5d:1a:5c:6b:a6:c3: d6:e8:24:25:3b:4b:09:61:bb:c3:b9:b5:83:e0:56: 6c:e6:5e:5b:06:d8:ec:05:fe:4e:ef:67:49:d2:38: d0:45:14:a3:f4:ca:d5:dc:47:32:1f:df:82:6c:42: 29:a9:97:6f:63:cc:f5:53:ad:71:ca:dc:0a:66:6f: 5b:f0:c4:fb:2d:79:fd:34:42:1e:d9:70:13:28:67: 70:14:97:36:a3:d3:42:d8:6c:b2:85:db:df:ce:b5: fe:1b:79:b4:35:0d:e7:cc:98:74:b0:4a:12:db:84: f2:5f:a6:20:b4:72:3f:cc:37:81:23:98:b7:1d:32: 98:e9:97:66:e1:ff:1f:88:79:3a:28:92:9b:a4:40: 5f:50:af:5e:f1:d7:43:60:e2:b7:45:4b:03:46:9d: 2f:d4:8d:9f:d0:ce:08:e0:5b:9c:d7:af:e3:4a:2a: 41:5a:99:ab:75:28:6a:e2:46:f4:67:01:51:7a:9c: 23:21 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 22:05:92:E5:EE:82:86:23:9F:BF:91:7F:91:D0:2C:2A:4C:54:AD:BD X509v3 Authority Key Identifier: keyid:14:6B:42:87:6A:5C:2A:B0:70:5F:67:F1:A3:91:8D:76:98:49:89:AF X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/1dee126f-8192-4d28-b25e-deabdb79eb21/0/146B42876A5C2AB0705F67F1A3918D76984989AF.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/146B42876A5C2AB0705F67F1A3918D76984989AF.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/1dee126f-8192-4d28-b25e-deabdb79eb21/0/146B42876A5C2AB0705F67F1A3918D76984989AF.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 71:c1:91:18:a6:d3:f9:54:4a:5f:ca:02:54:2b:32:b8:04:fb: b4:8b:40:77:fd:c7:d9:ff:09:b4:25:d2:15:f4:8d:b7:c1:be: 85:7f:ba:5b:9e:87:71:fa:41:6c:86:5d:28:b5:23:61:32:74: 16:0a:f6:c1:8b:8e:f8:98:b4:65:42:29:ec:60:0b:3a:19:a7: 07:09:1b:a7:14:6a:e8:dc:7d:92:18:63:39:c8:95:06:93:67: f3:45:06:48:20:7d:3f:d4:26:98:1e:24:79:c2:98:24:9e:d9: e5:2c:a8:e7:fb:4e:fc:91:7c:03:bc:39:8d:44:f9:8f:f5:02: e9:2b:99:0b:4c:81:13:ed:87:e5:54:53:fc:d1:54:a1:16:bf: 62:84:3a:8c:5f:f0:fc:a7:f4:98:38:c1:ca:f2:64:b4:d9:06: 80:c2:aa:45:8b:59:ef:a3:f3:41:4d:01:16:ec:bf:29:70:cb: 7c:c7:db:71:25:a3:61:19:b6:69:15:b0:2d:f0:d1:bc:ac:d8: 11:28:7d:d8:8c:9c:fe:33:35:70:0e:5d:ed:e0:34:3a:ec:c9: 70:92:a2:f5:3f:f0:ed:54:c0:92:1d:8d:c0:4e:5c:e0:5f:ce: 65:4e:9b:2d:1b:4a:97:65:c8:0f:83:ed:85:55:2e:73:da:2f: 06:25:c9:24 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUZ0ult77GBUiZX3pQ6v+iq6U4Y+gwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMTQ2QjQyODc2QTVDMkFCMDcwNUY2N0YxQTM5MThENzY5 ODQ5ODlBRjAeFw0yNTEyMDYxOTM2MzNaFw0yNTEyMTAwNjUxMzNaMDMxMTAvBgNV BAMTKDIyMDU5MkU1RUU4Mjg2MjM5RkJGOTE3RjkxRDAyQzJBNEM1NEFEQkQwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDRyWOAxvl06LlK8KMGCp/m5anZ SDFddwAYx3MJoPjUv9tzlaExXkM52yyU1TSQtwn3axgUFxJfa8Qcfm1nSbXX2SPI LV0aXGumw9boJCU7Swlhu8O5tYPgVmzmXlsG2OwF/k7vZ0nSONBFFKP0ytXcRzIf 34JsQimpl29jzPVTrXHK3Apmb1vwxPstef00Qh7ZcBMoZ3AUlzaj00LYbLKF29/O tf4bebQ1DefMmHSwShLbhPJfpiC0cj/MN4EjmLcdMpjpl2bh/x+IeTookpukQF9Q r17x10Ng4rdFSwNGnS/UjZ/QzgjgW5zXr+NKKkFamat1KGriRvRnAVF6nCMhAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUIgWS5e6ChiOfv5F/kdAsKkxUrb0wHwYDVR0j BBgwFoAUFGtCh2pcKrBwX2fxo5GNdphJia8wDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby8x ZGVlMTI2Zi04MTkyLTRkMjgtYjI1ZS1kZWFiZGI3OWViMjEvMC8xNDZCNDI4NzZB NUMyQUIwNzA1RjY3RjFBMzkxOEQ3Njk4NDk4OUFGLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvMTQ2QjQyODc2QTVDMkFCMDcwNUY2N0YxQTM5MThENzY5ODQ5 ODlBRi5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vMWRlZTEyNmYtODE5Mi00ZDI4LWIy NWUtZGVhYmRiNzllYjIxLzAvMTQ2QjQyODc2QTVDMkFCMDcwNUY2N0YxQTM5MThE NzY5ODQ5ODlBRi5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAHHBkRim0/lUSl/KAlQrMrgE+7SLQHf9x9n/ CbQl0hX0jbfBvoV/ulueh3H6QWyGXSi1I2EydBYK9sGLjviYtGVCKexgCzoZpwcJ G6cUaujcfZIYYznIlQaTZ/NFBkggfT/UJpgeJHnCmCSe2eUsqOf7TvyRfAO8OY1E +Y/1AukrmQtMgRPth+VUU/zRVKEWv2KEOoxf8Pyn9Jg4wcryZLTZBoDCqkWLWe+j 80FNARbsvylwy3zH23Elo2EZtmkVsC3w0bys2BEofdiMnP4zNXAOXe3gNDrsyXCS ovU/8O1UwJIdjcBOXOBfzmVOmy0bSpdlyA+D7YVVLnPaLwYlySQ= -----END CERTIFICATE-----Generated at Sun Dec 7 04:15:00 2025 by rpki-client