This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf repo-rpki.idnic.net/repo/6939dbf1-3075-4519-ba90-cee8d3979fcd/0/2146CDCD7A3C7A1915B78C5B2C9FCFBA8A3B6E79.mft File: 2146CDCD7A3C7A1915B78C5B2C9FCFBA8A3B6E79.mft (raw, json) Hash identifier: CHdDBKA2DU/UITv48QIPZgNO+qDYrgMJ5GwLeCrd1Lk= Subject key identifier: E2:67:5C:96:FA:58:07:8F:EE:DB:4C:48:FE:E0:CE:C1:37:06:9C:25 Authority key identifier: 21:46:CD:CD:7A:3C:7A:19:15:B7:8C:5B:2C:9F:CF:BA:8A:3B:6E:79 Certificate issuer: /CN=2146CDCD7A3C7A1915B78C5B2C9FCFBA8A3B6E79 Certificate serial: 7E913BE50D2B4FF52C754B780C1934AC012FD9DD Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/2146CDCD7A3C7A1915B78C5B2C9FCFBA8A3B6E79.cer Subject info access: rsync://repo-rpki.idnic.net/repo/6939dbf1-3075-4519-ba90-cee8d3979fcd/0/2146CDCD7A3C7A1915B78C5B2C9FCFBA8A3B6E79.mft Manifest number: 0382 Signing time: Sat 06 Dec 2025 23:21:08 +0000 Manifest this update: Sat 06 Dec 2025 23:16:08 +0000 Manifest next update: Wed 10 Dec 2025 06:32:08 +0000 Files and hashes: 1: 323430343a353938303a3a2f33322d3332203d3e20313334363535.roa (hash: QZavpRmJwgWpUP/+i0D2076ri9bNfiH2V5J64XJ0fT4=) 2: 3130332e3234372e3231312e302f32342d3234203d3e20313334363535.roa (hash: +RIUAVxGB33d0KDSRHLJ9X8+j7gj5NlzbX8RpGUfLIQ=) 3: 2146CDCD7A3C7A1915B78C5B2C9FCFBA8A3B6E79.crl (hash: u2QHT6kptJYYxAmgXraV8B2lom1fAp6yl1Y4QObRRhE=) 4: 3230332e39362e3232382e302f32332d3234203d3e20313334363535.roa (hash: WnEoSKGZIFsfEoy7vBg6GUxPJ2sdlBMhPa8SmUKwOwQ=) 5: 3130332e3230392e3138342e302f32322d3234203d3e20313334363535.roa (hash: AOicjomaXVowUxKVLUAzngaobesRemFsc6Mjiuwj2Bg=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/6939dbf1-3075-4519-ba90-cee8d3979fcd/0/2146CDCD7A3C7A1915B78C5B2C9FCFBA8A3B6E79.crl rsync://repo-rpki.idnic.net/repo/6939dbf1-3075-4519-ba90-cee8d3979fcd/0/2146CDCD7A3C7A1915B78C5B2C9FCFBA8A3B6E79.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/2146CDCD7A3C7A1915B78C5B2C9FCFBA8A3B6E79.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 09 Dec 2025 15:57:52 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 7e:91:3b:e5:0d:2b:4f:f5:2c:75:4b:78:0c:19:34:ac:01:2f:d9:dd Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2146CDCD7A3C7A1915B78C5B2C9FCFBA8A3B6E79 Validity Not Before: Dec 6 23:16:08 2025 GMT Not After : Dec 10 06:32:08 2025 GMT Subject: CN=E2675C96FA58078FEEDB4C48FEE0CEC137069C25 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d1:e7:06:1f:2d:95:0c:35:6b:bc:d1:61:76:05: 4e:27:16:e3:66:21:43:47:c5:9c:ef:ad:98:a8:f5: 0b:e1:62:d3:4a:30:9c:1b:d8:18:af:b1:50:5e:9b: 53:b8:c0:32:5b:ac:c3:cf:5f:c7:9c:88:64:e9:e3: b9:7b:22:76:47:20:2f:48:95:1c:9e:26:f9:72:c3: 53:da:a5:75:ba:4c:43:51:a8:cd:7e:e2:ff:35:27: ac:e5:c4:b1:1a:3b:c5:23:41:a2:6a:fb:4d:75:20: 1e:e8:d0:9f:38:32:5e:b7:e4:0e:a3:d6:62:38:52: 19:51:37:a1:28:a4:84:c3:68:eb:79:29:40:97:06: 2b:c4:08:d6:ef:74:1e:cd:a2:fa:2e:17:b1:79:2c: 67:c3:b4:86:2b:5c:81:30:40:75:e0:b2:0c:e6:5a: b1:e3:49:b2:03:35:04:6a:ab:6c:d6:c1:2f:74:d1: f3:56:a7:a2:54:35:61:46:5f:bf:1c:f3:72:d9:f7: 79:ef:7f:d7:45:94:89:ec:8a:c4:98:ea:ab:7a:6f: 4a:61:55:0d:c6:7d:fb:f3:84:1e:5a:8b:73:fd:33: f2:a8:47:c2:9f:71:b8:fd:ca:e7:51:bb:ef:ce:4e: ff:1a:fd:6b:3b:3b:f7:a3:f9:5c:74:e2:66:3f:53: 55:77 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: E2:67:5C:96:FA:58:07:8F:EE:DB:4C:48:FE:E0:CE:C1:37:06:9C:25 X509v3 Authority Key Identifier: keyid:21:46:CD:CD:7A:3C:7A:19:15:B7:8C:5B:2C:9F:CF:BA:8A:3B:6E:79 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/6939dbf1-3075-4519-ba90-cee8d3979fcd/0/2146CDCD7A3C7A1915B78C5B2C9FCFBA8A3B6E79.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/2146CDCD7A3C7A1915B78C5B2C9FCFBA8A3B6E79.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/6939dbf1-3075-4519-ba90-cee8d3979fcd/0/2146CDCD7A3C7A1915B78C5B2C9FCFBA8A3B6E79.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 62:90:bc:5c:4e:ef:ac:24:4d:cd:70:f0:a4:f5:aa:da:f8:b1: 65:08:ad:54:3b:18:ba:ee:50:5d:33:cf:bb:b5:ab:93:c3:3c: 5d:a0:74:f4:4e:ab:5c:e2:66:21:83:59:12:75:5f:6a:59:9b: c9:de:0c:ca:b3:a2:91:ff:31:2a:6a:e8:b7:1a:e4:a5:95:b3: 4d:cf:2c:7a:93:80:2f:fb:84:c7:db:6f:ef:01:cd:8e:65:84: 5c:ac:1c:04:85:8a:b8:e9:9d:55:49:55:22:98:16:a2:85:1f: 9f:02:7b:6e:ac:f8:fd:27:7e:cd:68:a2:40:0f:03:2f:3b:80: f5:7e:bd:62:f3:88:fc:67:3c:99:98:57:29:7c:ed:2f:a1:d8: 0e:db:cd:48:75:61:fc:85:84:e3:3c:35:95:5f:a3:73:4f:d4: 6b:76:d2:f1:2e:32:92:c7:fc:00:6a:cf:41:10:78:db:fa:30: ba:7e:de:59:98:4d:76:83:57:69:62:01:4d:76:7a:8d:03:21: 05:84:a5:7f:cb:6b:34:7b:05:80:ce:18:3b:02:97:73:ea:8a: 8c:cb:e6:bb:8d:b7:0d:ad:9b:9f:2b:66:58:03:2d:aa:08:2c: be:bb:42:f6:2f:4a:34:33:72:28:35:f2:27:ea:0d:bc:de:62: 79:ba:71:7a -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUfpE75Q0rT/UsdUt4DBk0rAEv2d0wDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMjE0NkNEQ0Q3QTNDN0ExOTE1Qjc4QzVCMkM5RkNGQkE4 QTNCNkU3OTAeFw0yNTEyMDYyMzE2MDhaFw0yNTEyMTAwNjMyMDhaMDMxMTAvBgNV BAMTKEUyNjc1Qzk2RkE1ODA3OEZFRURCNEM0OEZFRTBDRUMxMzcwNjlDMjUwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDR5wYfLZUMNWu80WF2BU4nFuNm IUNHxZzvrZio9QvhYtNKMJwb2BivsVBem1O4wDJbrMPPX8eciGTp47l7InZHIC9I lRyeJvlyw1PapXW6TENRqM1+4v81J6zlxLEaO8UjQaJq+011IB7o0J84Ml635A6j 1mI4UhlRN6EopITDaOt5KUCXBivECNbvdB7NovouF7F5LGfDtIYrXIEwQHXgsgzm WrHjSbIDNQRqq2zWwS900fNWp6JUNWFGX78c83LZ93nvf9dFlInsisSY6qt6b0ph VQ3GffvzhB5ai3P9M/KoR8Kfcbj9yudRu+/OTv8a/Ws7O/ej+Vx04mY/U1V3AgMB AAGjggI8MIICODAdBgNVHQ4EFgQU4mdclvpYB4/u20xI/uDOwTcGnCUwHwYDVR0j BBgwFoAUIUbNzXo8ehkVt4xbLJ/Puoo7bnkwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby82 OTM5ZGJmMS0zMDc1LTQ1MTktYmE5MC1jZWU4ZDM5NzlmY2QvMC8yMTQ2Q0RDRDdB M0M3QTE5MTVCNzhDNUIyQzlGQ0ZCQThBM0I2RTc5LmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvMjE0NkNEQ0Q3QTNDN0ExOTE1Qjc4QzVCMkM5RkNGQkE4QTNC NkU3OS5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vNjkzOWRiZjEtMzA3NS00NTE5LWJh OTAtY2VlOGQzOTc5ZmNkLzAvMjE0NkNEQ0Q3QTNDN0ExOTE1Qjc4QzVCMkM5RkNG QkE4QTNCNkU3OS5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAGKQvFxO76wkTc1w8KT1qtr4sWUIrVQ7GLru UF0zz7u1q5PDPF2gdPROq1ziZiGDWRJ1X2pZm8neDMqzopH/MSpq6Lca5KWVs03P LHqTgC/7hMfbb+8BzY5lhFysHASFirjpnVVJVSKYFqKFH58Ce26s+P0nfs1ookAP Ay87gPV+vWLziPxnPJmYVyl87S+h2A7bzUh1YfyFhOM8NZVfo3NP1Gt20vEuMpLH /ABqz0EQeNv6MLp+3lmYTXaDV2liAU12eo0DIQWEpX/LazR7BYDOGDsCl3PqiozL 5ruNtw2tm58rZlgDLaoILL67QvYvSjQzcig18ifqDbzeYnm6cXo= -----END CERTIFICATE-----Generated at Sun Dec 7 01:02:05 2025 by rpki-client