This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

$ rpki-client -vvf repo-rpki.idnic.net/repo/633978f8-aeab-427a-bd75-2cdf1d9eb517/0/466F8934F3FED9355C9ED09E3826CBE32B25D402.mft
File: 466F8934F3FED9355C9ED09E3826CBE32B25D402.mft (raw, json)
Hash identifier: 5ZdNvaks++cx51u7vhlhcOgkzl9sh83Gn11kJaO29Yw=
Subject key identifier: 90:43:A2:E6:A8:69:54:44:6D:EC:43:95:A5:FF:3F:95:61:40:B9:4F
Authority key identifier: 46:6F:89:34:F3:FE:D9:35:5C:9E:D0:9E:38:26:CB:E3:2B:25:D4:02
Certificate issuer: /CN=466F8934F3FED9355C9ED09E3826CBE32B25D402
Certificate serial: 18B7D275F08A9B17FDD5369BB51306E9C18100FB
Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/466F8934F3FED9355C9ED09E3826CBE32B25D402.cer
Subject info access: rsync://repo-rpki.idnic.net/repo/633978f8-aeab-427a-bd75-2cdf1d9eb517/0/466F8934F3FED9355C9ED09E3826CBE32B25D402.mft
Manifest number: 047F
Signing time: Sat 06 Dec 2025 12:21:05 +0000
Manifest this update: Sat 06 Dec 2025 12:16:05 +0000
Manifest next update: Tue 09 Dec 2025 14:14:05 +0000
Files and hashes: 1: 3130332e3136322e36302e302f32332d3234203d3e20313431363438.roa (hash: ccEczaTD7AcSDyPGviaZr/qlql5cWkl8Ip3NAXEgdo8=)
2: 466F8934F3FED9355C9ED09E3826CBE32B25D402.crl (hash: Yw4yiToTuVHqt4CfbreDmFKPLqCio4EspjPu2xLwmrs=)
Validation: OK
Signature path: rsync://repo-rpki.idnic.net/repo/633978f8-aeab-427a-bd75-2cdf1d9eb517/0/466F8934F3FED9355C9ED09E3826CBE32B25D402.crl
rsync://repo-rpki.idnic.net/repo/633978f8-aeab-427a-bd75-2cdf1d9eb517/0/466F8934F3FED9355C9ED09E3826CBE32B25D402.mft
rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/466F8934F3FED9355C9ED09E3826CBE32B25D402.cer
rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl
rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Tue 09 Dec 2025 14:14:05 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
18:b7:d2:75:f0:8a:9b:17:fd:d5:36:9b:b5:13:06:e9:c1:81:00:fb
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=466F8934F3FED9355C9ED09E3826CBE32B25D402
Validity
Not Before: Dec 6 12:16:05 2025 GMT
Not After : Dec 9 14:14:05 2025 GMT
Subject: CN=9043A2E6A86954446DEC4395A5FF3F956140B94F
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a7:48:fb:a9:bc:eb:d0:18:d0:7c:d3:f6:1b:79:
ec:80:ab:43:fa:da:e4:9c:5a:41:2b:4b:b1:ea:4b:
dc:f5:6e:45:77:e0:fe:51:d6:6c:e8:f1:ab:a4:02:
a9:df:96:db:b9:5c:60:7d:11:04:ec:9c:12:79:45:
0b:7b:81:e1:87:bd:be:a3:6b:cb:b5:d3:3b:10:fa:
4b:06:3b:c3:3b:40:1a:08:03:fa:66:1b:a3:fb:14:
b9:8d:d6:59:67:f0:57:61:b7:14:45:af:36:eb:0e:
42:19:26:3a:e2:50:14:f7:65:13:27:e1:07:e3:82:
be:f2:18:6f:c4:df:18:48:d5:4a:da:7a:07:41:b8:
11:9c:71:b3:76:61:05:08:e4:24:b1:45:c9:5b:e2:
7e:58:0f:76:87:e1:91:46:35:00:e2:f3:27:4f:37:
62:96:8d:e6:c2:7e:96:ee:a5:b6:ed:3b:2f:b1:9d:
7a:d5:f5:97:7c:47:d2:50:60:07:73:9f:19:f9:5e:
8e:7d:51:f3:4c:90:57:e0:f4:0a:ed:cc:63:b1:45:
bb:2d:ef:48:ac:d6:f8:5a:4a:62:4a:cb:03:f6:57:
d1:f7:62:1b:51:2e:fd:7d:ff:fd:72:45:43:a4:d3:
8c:b9:07:1a:5d:5b:dd:26:d0:26:b7:d9:46:3f:3c:
c9:0f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
90:43:A2:E6:A8:69:54:44:6D:EC:43:95:A5:FF:3F:95:61:40:B9:4F
X509v3 Authority Key Identifier:
keyid:46:6F:89:34:F3:FE:D9:35:5C:9E:D0:9E:38:26:CB:E3:2B:25:D4:02
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://repo-rpki.idnic.net/repo/633978f8-aeab-427a-bd75-2cdf1d9eb517/0/466F8934F3FED9355C9ED09E3826CBE32B25D402.crl
Authority Information Access:
CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/466F8934F3FED9355C9ED09E3826CBE32B25D402.cer
Subject Information Access:
Signed Object - URI:rsync://repo-rpki.idnic.net/repo/633978f8-aeab-427a-bd75-2cdf1d9eb517/0/466F8934F3FED9355C9ED09E3826CBE32B25D402.mft
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
4d:a1:2d:70:a0:c6:54:54:6f:71:fd:6b:fe:24:50:5e:cc:e3:
38:ba:ac:c8:1d:89:e8:d2:df:89:58:cc:31:86:e2:4c:aa:47:
05:f3:cb:4a:02:ae:6d:3e:14:1e:9e:bf:ec:8a:50:6f:a5:87:
b1:ed:7a:b2:38:2d:fc:90:46:74:f9:fd:42:6b:72:81:6d:4d:
ef:9d:a0:11:68:43:7b:55:49:b4:6b:ac:40:46:27:8d:a1:c2:
a6:66:29:f4:5d:1f:5b:3b:63:1e:3c:01:8a:21:64:8c:96:49:
8d:14:14:69:0c:04:e4:10:1f:fa:3b:07:96:31:0a:91:ca:81:
1d:45:7b:6d:ce:5a:f9:97:35:3f:1b:72:f9:74:34:68:87:3d:
e9:12:88:9d:fc:5a:45:3b:b8:17:bc:33:3c:b3:ef:53:f2:5e:
b2:73:3a:1e:61:0e:d7:8e:17:58:24:27:f8:7e:18:ad:83:00:
9c:96:54:10:09:4f:e5:ae:2c:03:94:d5:2b:d0:2b:4d:59:53:
8d:65:07:3a:ae:42:1d:3e:1e:16:43:7b:24:2c:a0:bf:04:d4:
57:f8:9f:9f:e4:e7:b1:5e:26:17:ec:8d:72:a3:e7:4b:8f:4d:
af:67:da:80:16:6f:02:87:80:cd:e6:5c:f2:73:ad:ed:49:dd:
a7:aa:ac:fa
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Dec 6 23:59:44 2025 by rpki-client