This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf repo-rpki.idnic.net/repo/9dfb3992-1d2f-46ce-886a-8e22a32611f8/0/0246DD14AF68F5E5512ABD88D1DB7507E6913C96.mft File: 0246DD14AF68F5E5512ABD88D1DB7507E6913C96.mft (raw, json) Hash identifier: 5D7g6TCH2S/olUO5eI9IwlDMfU5yDJaGDq1wtDoLWuI= Subject key identifier: E2:EA:AD:06:BF:34:82:BE:45:9A:2C:4B:18:DA:C1:70:03:95:98:FB Authority key identifier: 02:46:DD:14:AF:68:F5:E5:51:2A:BD:88:D1:DB:75:07:E6:91:3C:96 Certificate issuer: /CN=0246DD14AF68F5E5512ABD88D1DB7507E6913C96 Certificate serial: 1D06C4365576509A744383AB9B3BA479A555670F Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/0246DD14AF68F5E5512ABD88D1DB7507E6913C96.cer Subject info access: rsync://repo-rpki.idnic.net/repo/9dfb3992-1d2f-46ce-886a-8e22a32611f8/0/0246DD14AF68F5E5512ABD88D1DB7507E6913C96.mft Manifest number: 01B9 Signing time: Mon 15 Dec 2025 12:51:03 +0000 Manifest this update: Mon 15 Dec 2025 12:46:03 +0000 Manifest next update: Thu 18 Dec 2025 22:21:03 +0000 Files and hashes: 1: 0246DD14AF68F5E5512ABD88D1DB7507E6913C96.crl (hash: xRaJEEDW2cx2/p9q9+6a+KTY1em5GZ0vaUWfkG4sbS0=) 2: 323430373a366434303a3a2f33322d3438203d3e203538383230.roa (hash: 36JNQoWoEcG0XddMVhG6Y5xuDi4KHB52Q2RH2cUrQzc=) 3: 323430373a366434303a3a2f33322d3332203d3e203538383230.roa (hash: xAh6iVTptzdWaiN0lzQItEzdBxkBB7Jmc75/4/WIUXc=) 4: 3130332e3136372e3133362e302f32332d3234203d3e20313339343536.roa (hash: obYtUl2lQpNdpgObPXIZcvY8GGanlMGkMuiOZqIlQPc=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/9dfb3992-1d2f-46ce-886a-8e22a32611f8/0/0246DD14AF68F5E5512ABD88D1DB7507E6913C96.crl rsync://repo-rpki.idnic.net/repo/9dfb3992-1d2f-46ce-886a-8e22a32611f8/0/0246DD14AF68F5E5512ABD88D1DB7507E6913C96.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/0246DD14AF68F5E5512ABD88D1DB7507E6913C96.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 18 Dec 2025 22:21:03 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1d:06:c4:36:55:76:50:9a:74:43:83:ab:9b:3b:a4:79:a5:55:67:0f Signature Algorithm: sha256WithRSAEncryption Issuer: CN=0246DD14AF68F5E5512ABD88D1DB7507E6913C96 Validity Not Before: Dec 15 12:46:03 2025 GMT Not After : Dec 18 22:21:03 2025 GMT Subject: CN=E2EAAD06BF3482BE459A2C4B18DAC170039598FB Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ad:de:da:27:30:89:18:4e:69:9e:ec:72:ba:fc: 00:a7:20:6b:04:84:70:c6:93:66:3b:72:27:15:7b: 24:dc:b4:07:82:51:55:b1:67:7c:84:0f:0c:1c:34: 7c:ef:b3:87:3b:da:75:60:1e:09:c5:4b:fe:ee:18: 0e:93:2f:58:56:c4:af:90:86:84:e6:66:9c:2e:71: 57:d7:5d:d2:09:fb:b4:1c:85:e6:e4:c8:b4:05:03: 1a:b8:d6:a4:9e:12:a8:3d:84:bb:10:3c:f8:10:0c: b1:2d:69:78:2d:2d:ec:ba:95:34:24:d3:44:41:82: 44:71:c4:b5:81:1e:f4:4d:88:f1:6e:93:cb:a0:ee: eb:0d:bc:87:4c:52:e6:9a:ed:b9:e3:28:fe:07:00: 5a:d3:6d:bf:3c:48:65:9a:11:08:5f:f0:d4:d8:dc: ab:d6:62:94:70:d8:d7:87:22:e7:4b:76:79:b6:a5: ca:be:a7:ef:92:39:ef:40:b3:01:48:08:73:40:d1: 10:0f:cc:04:d3:42:a0:be:39:eb:17:a6:7b:ea:2e: 01:01:8c:0d:7e:9e:70:ac:d1:76:a9:f7:aa:c5:ff: 8d:c2:6b:b0:f1:67:94:39:68:01:4a:ec:16:18:97: 32:90:f6:9f:77:4d:f0:c0:7b:82:1c:0e:2b:c7:27: 1f:4d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: E2:EA:AD:06:BF:34:82:BE:45:9A:2C:4B:18:DA:C1:70:03:95:98:FB X509v3 Authority Key Identifier: keyid:02:46:DD:14:AF:68:F5:E5:51:2A:BD:88:D1:DB:75:07:E6:91:3C:96 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/9dfb3992-1d2f-46ce-886a-8e22a32611f8/0/0246DD14AF68F5E5512ABD88D1DB7507E6913C96.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/0246DD14AF68F5E5512ABD88D1DB7507E6913C96.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/9dfb3992-1d2f-46ce-886a-8e22a32611f8/0/0246DD14AF68F5E5512ABD88D1DB7507E6913C96.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 22:22:d1:fa:72:3a:b5:2d:c6:54:44:e7:de:86:a8:7b:a1:a5: 90:1a:11:44:cd:ec:33:39:df:6d:0e:7b:f3:76:79:d4:8d:db: f5:48:bd:d7:65:d8:92:8f:72:2e:bb:27:01:bc:5a:14:8e:40: 36:2a:82:55:0b:dd:9b:45:be:27:bc:a1:a8:c6:f1:33:18:e8: 37:23:31:36:2b:62:63:fe:a5:b9:6f:86:e7:7d:cd:45:24:b6: 72:33:8d:09:9a:e4:c3:a8:e7:e2:82:53:9d:b6:7a:8e:64:32: 8d:e9:34:2d:e4:40:c3:d3:c4:df:a8:e9:87:6b:69:6b:fe:f5: 24:c3:c0:09:3f:09:c0:51:e6:92:ce:45:7b:67:b7:ea:fe:e9: c6:4b:38:4e:9e:39:6c:c6:6e:37:47:91:82:1c:16:6a:a6:2e: cc:74:b2:10:36:63:ff:53:aa:81:35:82:99:75:00:0d:69:54: cf:77:64:11:f9:c3:e5:66:48:7d:ba:bb:2d:3b:e0:a4:48:e9: 7e:53:94:c1:7f:f2:be:6e:e1:5b:cb:e9:f9:0e:af:bc:97:5c: 1c:57:cf:6a:03:75:f2:21:38:2a:e0:4f:e4:af:9f:5e:db:9c: b4:ac:a9:80:f5:e2:0c:b5:9d:f4:c6:3a:48:ac:00:a1:d0:a7: 69:9f:a1:02 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUHQbENlV2UJp0Q4OrmzukeaVVZw8wDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMDI0NkREMTRBRjY4RjVFNTUxMkFCRDg4RDFEQjc1MDdF NjkxM0M5NjAeFw0yNTEyMTUxMjQ2MDNaFw0yNTEyMTgyMjIxMDNaMDMxMTAvBgNV BAMTKEUyRUFBRDA2QkYzNDgyQkU0NTlBMkM0QjE4REFDMTcwMDM5NTk4RkIwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCt3tonMIkYTmme7HK6/ACnIGsE hHDGk2Y7cicVeyTctAeCUVWxZ3yEDwwcNHzvs4c72nVgHgnFS/7uGA6TL1hWxK+Q hoTmZpwucVfXXdIJ+7QchebkyLQFAxq41qSeEqg9hLsQPPgQDLEtaXgtLey6lTQk 00RBgkRxxLWBHvRNiPFuk8ug7usNvIdMUuaa7bnjKP4HAFrTbb88SGWaEQhf8NTY 3KvWYpRw2NeHIudLdnm2pcq+p++SOe9AswFICHNA0RAPzATTQqC+OesXpnvqLgEB jA1+nnCs0Xap96rF/43Ca7DxZ5Q5aAFK7BYYlzKQ9p93TfDAe4IcDivHJx9NAgMB AAGjggI8MIICODAdBgNVHQ4EFgQU4uqtBr80gr5FmixLGNrBcAOVmPswHwYDVR0j BBgwFoAUAkbdFK9o9eVRKr2I0dt1B+aRPJYwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby85 ZGZiMzk5Mi0xZDJmLTQ2Y2UtODg2YS04ZTIyYTMyNjExZjgvMC8wMjQ2REQxNEFG NjhGNUU1NTEyQUJEODhEMURCNzUwN0U2OTEzQzk2LmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvMDI0NkREMTRBRjY4RjVFNTUxMkFCRDg4RDFEQjc1MDdFNjkx M0M5Ni5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vOWRmYjM5OTItMWQyZi00NmNlLTg4 NmEtOGUyMmEzMjYxMWY4LzAvMDI0NkREMTRBRjY4RjVFNTUxMkFCRDg4RDFEQjc1 MDdFNjkxM0M5Ni5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBACIi0fpyOrUtxlRE596GqHuhpZAaEUTN7DM5 320Oe/N2edSN2/VIvddl2JKPci67JwG8WhSOQDYqglUL3ZtFvie8oajG8TMY6Dcj MTYrYmP+pblvhud9zUUktnIzjQma5MOo5+KCU522eo5kMo3pNC3kQMPTxN+o6Ydr aWv+9STDwAk/CcBR5pLORXtnt+r+6cZLOE6eOWzGbjdHkYIcFmqmLsx0shA2Y/9T qoE1gpl1AA1pVM93ZBH5w+VmSH26uy074KRI6X5TlMF/8r5u4VvL6fkOr7yXXBxX z2oDdfIhOCrgT+Svn17bnLSsqYD14gy1nfTGOkisAKHQp2mfoQI= -----END CERTIFICATE-----Generated at Wed Dec 17 17:02:29 2025 by rpki-client