This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf repo-rpki.idnic.net/repo/20481e49-f4c1-4c13-94b7-0701c92c3450/0/46E596CAE0AEADA8B4135425216E8783D92E6C76.mft File: 46E596CAE0AEADA8B4135425216E8783D92E6C76.mft (raw, json) Hash identifier: LmhyAx8gzsXQH5GO0Ag+h857L2CV4kyquNCoQfyfEUs= Subject key identifier: F3:C7:28:B2:75:C7:8F:30:BC:CB:9F:FE:74:A0:8C:22:58:0A:BC:1F Authority key identifier: 46:E5:96:CA:E0:AE:AD:A8:B4:13:54:25:21:6E:87:83:D9:2E:6C:76 Certificate issuer: /CN=46E596CAE0AEADA8B4135425216E8783D92E6C76 Certificate serial: 117AFCA48971D2BBD322C493736CAABE3CD3B8B7 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/46E596CAE0AEADA8B4135425216E8783D92E6C76.cer Subject info access: rsync://repo-rpki.idnic.net/repo/20481e49-f4c1-4c13-94b7-0701c92c3450/0/46E596CAE0AEADA8B4135425216E8783D92E6C76.mft Manifest number: 019D Signing time: Sun 25 Jan 2026 20:22:23 +0000 Manifest this update: Sun 25 Jan 2026 20:17:23 +0000 Manifest next update: Wed 28 Jan 2026 20:57:23 +0000 Files and hashes: 1: 46E596CAE0AEADA8B4135425216E8783D92E6C76.crl (hash: AlFThVrfee8yx5Kb2slZHBp2N/XbpoQySeypKBfcniI=) 2: 3130332e3234322e37392e302f32342d3234203d3e20313531353330.roa (hash: 6h0PS6sD0cpo/dFFiqhzCPsiuizhkV5A6x6l4CJlcqA=) 3: 3130332e3234322e37392e302f32342d3234203d3e20333936393832.roa (hash: n+/j+X0EHKdzJwOO4f/AMp89n5rbo9zZecMjnTepVSI=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/20481e49-f4c1-4c13-94b7-0701c92c3450/0/46E596CAE0AEADA8B4135425216E8783D92E6C76.crl rsync://repo-rpki.idnic.net/repo/20481e49-f4c1-4c13-94b7-0701c92c3450/0/46E596CAE0AEADA8B4135425216E8783D92E6C76.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/46E596CAE0AEADA8B4135425216E8783D92E6C76.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 28 Jan 2026 14:00:57 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 11:7a:fc:a4:89:71:d2:bb:d3:22:c4:93:73:6c:aa:be:3c:d3:b8:b7 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=46E596CAE0AEADA8B4135425216E8783D92E6C76 Validity Not Before: Jan 25 20:17:23 2026 GMT Not After : Jan 28 20:57:23 2026 GMT Subject: CN=F3C728B275C78F30BCCB9FFE74A08C22580ABC1F Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cd:1c:0b:f1:5d:f5:fa:96:3d:80:73:87:e3:33: cd:5f:d0:70:18:31:9e:22:68:88:47:19:50:55:8a: 50:d7:c5:fa:b0:fe:c0:c9:5a:18:2b:bd:8e:8f:07: 57:85:a3:75:82:91:5d:7e:93:48:3d:98:c6:5b:86: 46:4b:48:a1:a2:64:5e:e8:4f:7e:de:6e:e5:91:91: a7:5c:f9:15:ff:30:96:60:d9:d3:18:ed:ba:60:f9: 5e:2e:81:ce:61:4a:b7:a7:52:64:d1:15:a3:c8:99: c0:98:5f:58:9f:5b:55:39:98:94:8e:fa:e1:9d:a1: 80:1f:5d:f5:14:ae:27:0b:9e:39:bb:e0:98:a1:78: 46:1d:20:87:31:5d:a3:c6:86:9e:3d:a0:17:15:76: 08:89:89:71:74:88:7e:c5:92:0d:dc:c7:5e:c8:ee: 06:d4:3e:55:88:75:da:22:99:48:51:0f:6e:3b:fb: a1:6f:9b:01:d5:97:34:ca:68:04:1c:65:51:85:e8: 7f:4b:e8:81:f8:8a:bb:37:29:c0:47:73:ec:00:f9: 7c:c9:64:43:b5:3f:47:ef:9f:a9:49:67:08:2c:41: 39:10:e5:4f:ec:50:c8:34:84:03:b4:bf:91:f2:26: ae:ad:0b:a6:8c:b9:75:26:9b:c7:a7:42:18:be:f6: 98:17 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: F3:C7:28:B2:75:C7:8F:30:BC:CB:9F:FE:74:A0:8C:22:58:0A:BC:1F X509v3 Authority Key Identifier: keyid:46:E5:96:CA:E0:AE:AD:A8:B4:13:54:25:21:6E:87:83:D9:2E:6C:76 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/20481e49-f4c1-4c13-94b7-0701c92c3450/0/46E596CAE0AEADA8B4135425216E8783D92E6C76.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/46E596CAE0AEADA8B4135425216E8783D92E6C76.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/20481e49-f4c1-4c13-94b7-0701c92c3450/0/46E596CAE0AEADA8B4135425216E8783D92E6C76.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 91:22:96:d2:f3:c3:7d:03:0a:53:8f:99:c7:2a:56:81:57:4c: 06:ed:7c:48:2b:8b:3c:90:9a:bd:e5:ad:a0:7f:3e:f9:ab:b5: aa:7c:86:f7:6e:c0:88:7b:b2:d3:8a:6c:da:23:96:59:da:18: 0d:a8:58:db:1d:36:9d:c2:44:25:05:68:cf:2b:15:22:ad:6c: e7:6e:44:5a:66:3d:36:5c:4b:e1:a2:9e:57:27:f5:b0:07:c1: 02:0a:de:d7:3f:0b:2d:2e:fd:e1:29:31:2f:ed:f7:38:15:66: f5:d3:9f:be:e7:03:bb:33:09:12:27:a6:f1:34:1e:ba:8e:a2: 76:c8:ea:d4:8a:d2:41:87:1d:5e:ed:0f:70:b9:f2:f2:98:c1: 13:38:36:d3:a8:3d:6a:b6:a6:a9:85:99:8e:90:f3:b3:60:ef: 7b:c1:f3:a3:a4:7e:ef:0e:18:06:b8:9a:36:6d:7a:99:98:59: 28:80:c6:57:4c:3e:eb:8a:f5:94:38:73:ad:b8:a5:63:d2:f4: 6e:31:68:79:9d:67:82:1d:46:36:a8:b4:8c:83:25:6d:e6:c9: 3c:03:a9:42:f1:c8:b9:c6:5f:d9:a4:45:3a:86:61:d0:3b:46: 72:4e:48:e3:33:a7:cd:54:c9:c8:ee:f7:01:f3:f9:9f:6e:12: 11:84:e1:ed -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUEXr8pIlx0rvTIsSTc2yqvjzTuLcwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoNDZFNTk2Q0FFMEFFQURBOEI0MTM1NDI1MjE2RTg3ODNE OTJFNkM3NjAeFw0yNjAxMjUyMDE3MjNaFw0yNjAxMjgyMDU3MjNaMDMxMTAvBgNV BAMTKEYzQzcyOEIyNzVDNzhGMzBCQ0NCOUZGRTc0QTA4QzIyNTgwQUJDMUYwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDNHAvxXfX6lj2Ac4fjM81f0HAY MZ4iaIhHGVBVilDXxfqw/sDJWhgrvY6PB1eFo3WCkV1+k0g9mMZbhkZLSKGiZF7o T37ebuWRkadc+RX/MJZg2dMY7bpg+V4ugc5hSrenUmTRFaPImcCYX1ifW1U5mJSO +uGdoYAfXfUUricLnjm74JiheEYdIIcxXaPGhp49oBcVdgiJiXF0iH7Fkg3cx17I 7gbUPlWIddoimUhRD247+6FvmwHVlzTKaAQcZVGF6H9L6IH4irs3KcBHc+wA+XzJ ZEO1P0fvn6lJZwgsQTkQ5U/sUMg0hAO0v5HyJq6tC6aMuXUmm8enQhi+9pgXAgMB AAGjggI8MIICODAdBgNVHQ4EFgQU88cosnXHjzC8y5/+dKCMIlgKvB8wHwYDVR0j BBgwFoAURuWWyuCurai0E1QlIW6Hg9kubHYwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby8y MDQ4MWU0OS1mNGMxLTRjMTMtOTRiNy0wNzAxYzkyYzM0NTAvMC80NkU1OTZDQUUw QUVBREE4QjQxMzU0MjUyMTZFODc4M0Q5MkU2Qzc2LmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvNDZFNTk2Q0FFMEFFQURBOEI0MTM1NDI1MjE2RTg3ODNEOTJF NkM3Ni5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vMjA0ODFlNDktZjRjMS00YzEzLTk0 YjctMDcwMWM5MmMzNDUwLzAvNDZFNTk2Q0FFMEFFQURBOEI0MTM1NDI1MjE2RTg3 ODNEOTJFNkM3Ni5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAJEiltLzw30DClOPmccqVoFXTAbtfEgrizyQ mr3lraB/Pvmrtap8hvduwIh7stOKbNojllnaGA2oWNsdNp3CRCUFaM8rFSKtbOdu RFpmPTZcS+Ginlcn9bAHwQIK3tc/Cy0u/eEpMS/t9zgVZvXTn77nA7szCRInpvE0 HrqOonbI6tSK0kGHHV7tD3C58vKYwRM4NtOoPWq2pqmFmY6Q87Ng73vB86Okfu8O GAa4mjZtepmYWSiAxldMPuuK9ZQ4c624pWPS9G4xaHmdZ4IdRjaotIyDJW3myTwD qULxyLnGX9mkRTqGYdA7RnJOSOMzp81Uycju9wHz+Z9uEhGE4e0= -----END CERTIFICATE-----Generated at Mon Jan 26 04:01:43 2026 by rpki-client