This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf repo-rpki.idnic.net/repo/20481e49-f4c1-4c13-94b7-0701c92c3450/0/46E596CAE0AEADA8B4135425216E8783D92E6C76.mft File: 46E596CAE0AEADA8B4135425216E8783D92E6C76.mft (raw, json) Hash identifier: 8au2UXdceTR1//fger5txlAt6bhEPpwu2sTYut9S/bE= Subject key identifier: 88:3A:98:8E:4C:96:D6:0C:8A:C5:88:99:24:4D:84:32:8A:70:6A:C1 Authority key identifier: 46:E5:96:CA:E0:AE:AD:A8:B4:13:54:25:21:6E:87:83:D9:2E:6C:76 Certificate issuer: /CN=46E596CAE0AEADA8B4135425216E8783D92E6C76 Certificate serial: 11061222DC2B032FCBA2C15BC9C21D696B11282E Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/46E596CAE0AEADA8B4135425216E8783D92E6C76.cer Subject info access: rsync://repo-rpki.idnic.net/repo/20481e49-f4c1-4c13-94b7-0701c92c3450/0/46E596CAE0AEADA8B4135425216E8783D92E6C76.mft Manifest number: 0187 Signing time: Sat 06 Dec 2025 11:12:17 +0000 Manifest this update: Sat 06 Dec 2025 11:07:17 +0000 Manifest next update: Tue 09 Dec 2025 20:53:17 +0000 Files and hashes: 1: 3130332e3234322e37392e302f32342d3234203d3e20313531353330.roa (hash: 6h0PS6sD0cpo/dFFiqhzCPsiuizhkV5A6x6l4CJlcqA=) 2: 46E596CAE0AEADA8B4135425216E8783D92E6C76.crl (hash: bse/HgfS5mE6ObAaDfL3ezxej37lSeSlzuIhQ1J5p3k=) 3: 3130332e3234322e37392e302f32342d3234203d3e20333936393832.roa (hash: n+/j+X0EHKdzJwOO4f/AMp89n5rbo9zZecMjnTepVSI=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/20481e49-f4c1-4c13-94b7-0701c92c3450/0/46E596CAE0AEADA8B4135425216E8783D92E6C76.crl rsync://repo-rpki.idnic.net/repo/20481e49-f4c1-4c13-94b7-0701c92c3450/0/46E596CAE0AEADA8B4135425216E8783D92E6C76.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/46E596CAE0AEADA8B4135425216E8783D92E6C76.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 09 Dec 2025 15:57:52 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 11:06:12:22:dc:2b:03:2f:cb:a2:c1:5b:c9:c2:1d:69:6b:11:28:2e Signature Algorithm: sha256WithRSAEncryption Issuer: CN=46E596CAE0AEADA8B4135425216E8783D92E6C76 Validity Not Before: Dec 6 11:07:17 2025 GMT Not After : Dec 9 20:53:17 2025 GMT Subject: CN=883A988E4C96D60C8AC58899244D84328A706AC1 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a5:24:0e:64:5a:72:f9:1c:e7:47:1e:3e:9d:e0: 2c:43:c1:f6:b6:89:0c:80:a8:03:99:14:12:9a:33: 21:1c:89:8a:94:2a:83:fe:d2:1e:86:31:93:b0:9f: 77:56:cf:f6:de:23:ea:dd:73:10:43:ec:13:6c:f1: 77:b3:a4:04:55:d2:e3:16:14:33:4a:6e:f8:92:f9: 41:aa:98:6b:52:02:51:11:b7:7c:7f:37:40:df:01: fb:c5:7b:46:69:bb:96:7e:08:9c:48:82:1d:32:86: dd:f9:81:c7:e4:11:c3:73:b9:20:74:f7:d7:81:c9: 42:bc:d9:cc:37:87:82:dc:a8:b1:0f:34:e4:a8:31: 6e:a9:65:47:4c:e0:f3:54:4f:6c:9a:40:7a:e8:53: c2:b2:d7:bf:66:05:fe:a1:b7:95:41:87:c4:06:a8: ca:fb:38:96:8a:62:48:18:a3:bd:37:83:38:fd:ae: f4:a9:c3:6d:39:28:c6:f1:61:ff:a4:73:20:84:4a: c6:54:68:f4:ad:30:91:27:b7:62:85:c8:bb:aa:b5: b8:3e:3f:19:06:9d:51:ba:1f:d4:e3:88:87:6e:77: b6:bd:e6:b2:78:d4:e7:3b:34:a4:8f:0a:99:79:ec: a0:15:19:d9:d0:11:00:25:be:26:fa:5a:70:c2:d0: 9a:23 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 88:3A:98:8E:4C:96:D6:0C:8A:C5:88:99:24:4D:84:32:8A:70:6A:C1 X509v3 Authority Key Identifier: keyid:46:E5:96:CA:E0:AE:AD:A8:B4:13:54:25:21:6E:87:83:D9:2E:6C:76 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/20481e49-f4c1-4c13-94b7-0701c92c3450/0/46E596CAE0AEADA8B4135425216E8783D92E6C76.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/46E596CAE0AEADA8B4135425216E8783D92E6C76.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/20481e49-f4c1-4c13-94b7-0701c92c3450/0/46E596CAE0AEADA8B4135425216E8783D92E6C76.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption b0:c4:7a:08:ce:7a:16:80:5a:0c:64:48:f2:c4:6a:9d:31:66: 02:93:db:4d:fc:6e:e6:d7:a7:26:f9:34:99:ec:c7:0d:fe:5e: c9:22:02:23:16:d3:29:87:20:6f:1b:3b:44:49:3d:3d:71:60: 85:61:c0:6d:38:68:83:2c:b5:b8:dd:1b:f8:f0:f4:52:da:6c: ee:97:ff:62:9f:be:0f:3f:b4:2c:57:1b:0c:f6:b4:98:a0:50: 15:98:29:c1:2f:4f:71:a5:b0:4f:58:96:b7:33:cd:8c:05:15: 50:ed:22:59:2d:b7:b2:09:5f:dd:5f:1a:e6:2d:c7:7d:9e:98: 2a:d5:69:9f:32:39:14:e0:63:57:fa:8d:e3:88:f5:ee:f9:44: 23:2d:5c:49:70:d4:2d:26:fb:c8:9d:b3:20:c6:de:5a:66:30: 3c:c3:1f:10:83:cd:fc:a7:85:c3:1f:f5:61:8e:6c:f0:1d:94: 82:86:62:27:0c:0b:17:ed:1e:59:a3:bf:39:62:8a:f3:5e:c9: cc:45:14:d3:e8:cb:b9:2e:ba:d3:16:c9:60:4c:c9:6c:30:12: 8f:9f:71:52:ae:62:3b:23:09:c5:31:10:29:a1:38:d5:85:93: 77:8f:c6:d5:1e:41:6d:e3:b6:52:40:78:8d:d6:2e:a3:81:9f: a1:94:13:1e -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUEQYSItwrAy/LosFbycIdaWsRKC4wDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoNDZFNTk2Q0FFMEFFQURBOEI0MTM1NDI1MjE2RTg3ODNE OTJFNkM3NjAeFw0yNTEyMDYxMTA3MTdaFw0yNTEyMDkyMDUzMTdaMDMxMTAvBgNV BAMTKDg4M0E5ODhFNEM5NkQ2MEM4QUM1ODg5OTI0NEQ4NDMyOEE3MDZBQzEwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQClJA5kWnL5HOdHHj6d4CxDwfa2 iQyAqAOZFBKaMyEciYqUKoP+0h6GMZOwn3dWz/beI+rdcxBD7BNs8XezpARV0uMW FDNKbviS+UGqmGtSAlERt3x/N0DfAfvFe0Zpu5Z+CJxIgh0yht35gcfkEcNzuSB0 99eByUK82cw3h4LcqLEPNOSoMW6pZUdM4PNUT2yaQHroU8Ky179mBf6ht5VBh8QG qMr7OJaKYkgYo703gzj9rvSpw205KMbxYf+kcyCESsZUaPStMJEnt2KFyLuqtbg+ PxkGnVG6H9TjiIdud7a95rJ41Oc7NKSPCpl57KAVGdnQEQAlvib6WnDC0JojAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUiDqYjkyW1gyKxYiZJE2EMopwasEwHwYDVR0j BBgwFoAURuWWyuCurai0E1QlIW6Hg9kubHYwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby8y MDQ4MWU0OS1mNGMxLTRjMTMtOTRiNy0wNzAxYzkyYzM0NTAvMC80NkU1OTZDQUUw QUVBREE4QjQxMzU0MjUyMTZFODc4M0Q5MkU2Qzc2LmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvNDZFNTk2Q0FFMEFFQURBOEI0MTM1NDI1MjE2RTg3ODNEOTJF NkM3Ni5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vMjA0ODFlNDktZjRjMS00YzEzLTk0 YjctMDcwMWM5MmMzNDUwLzAvNDZFNTk2Q0FFMEFFQURBOEI0MTM1NDI1MjE2RTg3 ODNEOTJFNkM3Ni5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBALDEegjOehaAWgxkSPLEap0xZgKT2038bubX pyb5NJnsxw3+XskiAiMW0ymHIG8bO0RJPT1xYIVhwG04aIMstbjdG/jw9FLabO6X /2Kfvg8/tCxXGwz2tJigUBWYKcEvT3GlsE9YlrczzYwFFVDtIlktt7IJX91fGuYt x32emCrVaZ8yORTgY1f6jeOI9e75RCMtXElw1C0m+8idsyDG3lpmMDzDHxCDzfyn hcMf9WGObPAdlIKGYicMCxftHlmjvzliivNeycxFFNPoy7kuutMWyWBMyWwwEo+f cVKuYjsjCcUxECmhONWFk3ePxtUeQW3jtlJAeI3WLqOBn6GUEx4= -----END CERTIFICATE-----Generated at Sat Dec 6 19:34:55 2025 by rpki-client