This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf repo-rpki.idnic.net/repo/9d4cffe0-1f94-43d2-81ee-80030b5c3746/0/146D9338596ECF1F976FB37F330D8C0CD48414C9.mft File: 146D9338596ECF1F976FB37F330D8C0CD48414C9.mft (raw, json) Hash identifier: ZymsiP8XT199D87h7HrfigvBqPl8BkF/7LO12kcuNBs= Subject key identifier: 08:20:73:7C:F9:00:F9:5F:69:C5:E5:E8:33:1D:36:CE:F7:A0:46:12 Authority key identifier: 14:6D:93:38:59:6E:CF:1F:97:6F:B3:7F:33:0D:8C:0C:D4:84:14:C9 Certificate issuer: /CN=146D9338596ECF1F976FB37F330D8C0CD48414C9 Certificate serial: 543DA333EF8BDA3DA259E4A218C2803F9C94EE1B Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/146D9338596ECF1F976FB37F330D8C0CD48414C9.cer Subject info access: rsync://repo-rpki.idnic.net/repo/9d4cffe0-1f94-43d2-81ee-80030b5c3746/0/146D9338596ECF1F976FB37F330D8C0CD48414C9.mft Manifest number: 025B Signing time: Thu 04 Dec 2025 19:12:29 +0000 Manifest this update: Thu 04 Dec 2025 19:07:29 +0000 Manifest next update: Mon 08 Dec 2025 02:13:29 +0000 Files and hashes: 1: 146D9338596ECF1F976FB37F330D8C0CD48414C9.crl (hash: pXSJiDHffOxOhir5/efoyr+CGASmbesDhbrcY+Yd/94=) 2: 3130332e3135312e37322e302f32332d3234203d3e20313430343039.roa (hash: d+kI3rz6/1ncnjpxf/67wx7VsG4KrN+uZWF3vlmupvY=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/9d4cffe0-1f94-43d2-81ee-80030b5c3746/0/146D9338596ECF1F976FB37F330D8C0CD48414C9.crl rsync://repo-rpki.idnic.net/repo/9d4cffe0-1f94-43d2-81ee-80030b5c3746/0/146D9338596ECF1F976FB37F330D8C0CD48414C9.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/146D9338596ECF1F976FB37F330D8C0CD48414C9.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 08 Dec 2025 02:13:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 54:3d:a3:33:ef:8b:da:3d:a2:59:e4:a2:18:c2:80:3f:9c:94:ee:1b Signature Algorithm: sha256WithRSAEncryption Issuer: CN=146D9338596ECF1F976FB37F330D8C0CD48414C9 Validity Not Before: Dec 4 19:07:29 2025 GMT Not After : Dec 8 02:13:29 2025 GMT Subject: CN=0820737CF900F95F69C5E5E8331D36CEF7A04612 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a4:fc:b0:f1:80:ef:21:42:32:96:8f:4c:8c:65: 05:1e:17:c2:f5:dd:de:32:af:af:f4:78:97:9f:d2: e2:99:9f:88:7f:95:08:71:f5:22:70:9d:21:69:c2: d7:5c:19:a9:a2:a6:5e:3d:70:a8:55:b4:8c:9c:5a: 2a:bc:4d:d4:5e:c2:c1:5e:66:98:e2:07:1b:99:18: 07:0f:58:32:29:f1:ec:cd:9c:b0:51:50:10:0b:85: 41:7a:80:6a:ef:48:aa:a9:e0:09:2d:82:33:3b:ab: b8:be:67:ac:aa:24:af:02:56:73:66:b2:55:6d:40: 0b:58:0d:66:aa:21:76:01:89:5c:f1:39:c8:b5:0a: ff:11:2e:39:89:38:4b:26:70:03:70:3f:e6:fa:06: 7c:83:c4:ca:c2:3f:60:7b:1e:1a:d1:de:85:f8:d2: 84:81:dd:4a:2d:e3:05:e6:4f:b5:cb:6e:04:47:6a: 76:a8:9b:12:c5:f8:dc:c9:10:e8:8a:5d:4d:38:99: fb:d0:d7:41:b6:01:1a:2b:a6:36:ea:2d:b1:9e:c6: da:4d:59:b6:d8:2e:2c:3a:a2:95:90:98:cd:0f:65: e0:fd:08:b6:2c:b3:67:0b:20:1a:c0:7b:b9:6a:8d: 19:98:4c:ba:7e:de:02:7a:5e:39:bc:9c:5c:cc:99: e3:fd Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 08:20:73:7C:F9:00:F9:5F:69:C5:E5:E8:33:1D:36:CE:F7:A0:46:12 X509v3 Authority Key Identifier: keyid:14:6D:93:38:59:6E:CF:1F:97:6F:B3:7F:33:0D:8C:0C:D4:84:14:C9 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/9d4cffe0-1f94-43d2-81ee-80030b5c3746/0/146D9338596ECF1F976FB37F330D8C0CD48414C9.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/146D9338596ECF1F976FB37F330D8C0CD48414C9.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/9d4cffe0-1f94-43d2-81ee-80030b5c3746/0/146D9338596ECF1F976FB37F330D8C0CD48414C9.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 53:77:81:e7:07:30:66:90:9e:51:4e:e3:2f:ea:a9:49:38:af: a0:20:df:20:ee:f8:42:5b:21:8e:7a:cf:c2:7c:fe:6f:c8:96: 04:d2:2d:dc:aa:b9:17:03:1c:82:b5:82:8e:8f:13:ce:ed:b4: 2b:b4:b0:0f:62:20:eb:53:43:e9:78:d4:16:ba:f9:ca:08:a2: c6:e5:28:36:e1:e6:df:7c:9c:f7:5e:de:73:a9:1e:a0:88:25: 48:90:1e:89:cb:06:a2:dd:4b:d4:83:b3:cb:8b:14:a7:c1:4c: b5:df:0a:93:da:6b:ce:4d:a9:e5:eb:c3:8f:ae:73:c8:74:ad: 49:0c:49:5c:c1:57:ad:40:12:d7:ef:ab:90:bf:01:de:89:87: 22:02:cb:b2:33:aa:94:9b:71:78:71:92:a3:2f:e4:e8:92:a7: ca:65:f2:54:24:a0:8f:8e:65:06:45:b5:df:0d:0a:aa:04:69: b4:e9:2d:07:07:16:1e:b5:14:f7:f8:ff:18:74:b4:f9:74:d1: 35:18:bf:fa:33:ef:67:81:a8:98:8d:a1:ed:bc:1c:af:aa:dc: 65:e0:aa:bd:4f:c2:e3:e0:1e:00:35:ef:84:40:dc:84:b9:48: e8:76:08:f0:50:d8:eb:46:ef:5d:a2:a5:80:84:83:68:e0:7e: 3c:a4:28:1f -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUVD2jM++L2j2iWeSiGMKAP5yU7hswDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMTQ2RDkzMzg1OTZFQ0YxRjk3NkZCMzdGMzMwRDhDMENE NDg0MTRDOTAeFw0yNTEyMDQxOTA3MjlaFw0yNTEyMDgwMjEzMjlaMDMxMTAvBgNV BAMTKDA4MjA3MzdDRjkwMEY5NUY2OUM1RTVFODMzMUQzNkNFRjdBMDQ2MTIwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCk/LDxgO8hQjKWj0yMZQUeF8L1 3d4yr6/0eJef0uKZn4h/lQhx9SJwnSFpwtdcGamipl49cKhVtIycWiq8TdRewsFe ZpjiBxuZGAcPWDIp8ezNnLBRUBALhUF6gGrvSKqp4AktgjM7q7i+Z6yqJK8CVnNm slVtQAtYDWaqIXYBiVzxOci1Cv8RLjmJOEsmcANwP+b6BnyDxMrCP2B7HhrR3oX4 0oSB3Uot4wXmT7XLbgRHanaomxLF+NzJEOiKXU04mfvQ10G2ARorpjbqLbGextpN WbbYLiw6opWQmM0PZeD9CLYss2cLIBrAe7lqjRmYTLp+3gJ6Xjm8nFzMmeP9AgMB AAGjggI8MIICODAdBgNVHQ4EFgQUCCBzfPkA+V9pxeXoMx02zvegRhIwHwYDVR0j BBgwFoAUFG2TOFluzx+Xb7N/Mw2MDNSEFMkwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby85 ZDRjZmZlMC0xZjk0LTQzZDItODFlZS04MDAzMGI1YzM3NDYvMC8xNDZEOTMzODU5 NkVDRjFGOTc2RkIzN0YzMzBEOEMwQ0Q0ODQxNEM5LmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvMTQ2RDkzMzg1OTZFQ0YxRjk3NkZCMzdGMzMwRDhDMENENDg0 MTRDOS5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vOWQ0Y2ZmZTAtMWY5NC00M2QyLTgx ZWUtODAwMzBiNWMzNzQ2LzAvMTQ2RDkzMzg1OTZFQ0YxRjk3NkZCMzdGMzMwRDhD MENENDg0MTRDOS5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAFN3gecHMGaQnlFO4y/qqUk4r6Ag3yDu+EJb IY56z8J8/m/IlgTSLdyquRcDHIK1go6PE87ttCu0sA9iIOtTQ+l41Ba6+coIosbl KDbh5t98nPde3nOpHqCIJUiQHonLBqLdS9SDs8uLFKfBTLXfCpPaa85NqeXrw4+u c8h0rUkMSVzBV61AEtfvq5C/Ad6JhyICy7IzqpSbcXhxkqMv5OiSp8pl8lQkoI+O ZQZFtd8NCqoEabTpLQcHFh61FPf4/xh0tPl00TUYv/oz72eBqJiNoe28HK+q3GXg qr1PwuPgHgA174RA3IS5SOh2CPBQ2OtG712ipYCEg2jgfjykKB8= -----END CERTIFICATE-----Generated at Sat Dec 6 22:52:52 2025 by rpki-client