This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf repo-rpki.idnic.net/repo/d05409ed-9f40-4f5a-b5ee-a088da2f5978/0/46A0859F8C7CC2C2E7D5CBC8E43634F8A3DDAAF5.mft File: 46A0859F8C7CC2C2E7D5CBC8E43634F8A3DDAAF5.mft (raw, json) Hash identifier: wq7vC043pnoZrk5oz9afCe4sXAiAiyEpGXNzwIgesDg= Subject key identifier: 65:6C:B9:4E:19:FA:5B:71:62:A2:E7:94:97:7B:B7:04:47:93:F9:3B Authority key identifier: 46:A0:85:9F:8C:7C:C2:C2:E7:D5:CB:C8:E4:36:34:F8:A3:DD:AA:F5 Certificate issuer: /CN=46A0859F8C7CC2C2E7D5CBC8E43634F8A3DDAAF5 Certificate serial: 15EA06DC2F37E4A59AAA1612F50747C7A23BB42E Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/46A0859F8C7CC2C2E7D5CBC8E43634F8A3DDAAF5.cer Subject info access: rsync://repo-rpki.idnic.net/repo/d05409ed-9f40-4f5a-b5ee-a088da2f5978/0/46A0859F8C7CC2C2E7D5CBC8E43634F8A3DDAAF5.mft Manifest number: 0167 Signing time: Sat 24 Jan 2026 07:42:26 +0000 Manifest this update: Sat 24 Jan 2026 07:37:26 +0000 Manifest next update: Tue 27 Jan 2026 07:45:26 +0000 Files and hashes: 1: 3131352e3138372e33302e302f32332d3233203d3e203538333639.roa (hash: l/6nAOjqjGZrtcrrhw7ZuCSQaMYlD7Yflxw07XBPvJ0=) 2: 3131352e3138372e33312e302f32342d3234203d3e203538333639.roa (hash: VGNvRMTdXm3gJaSYZh5jyTa+JqewLa+S1Pa1sFR/Vfk=) 3: 3131352e3138372e33302e302f32342d3234203d3e203538333639.roa (hash: veTZsRvM1tQPZT/BfON0VJRneiBr6fgc60m5/I3a2Zc=) 4: 46A0859F8C7CC2C2E7D5CBC8E43634F8A3DDAAF5.crl (hash: CyFUu4CMZKQB6B/zi2DWytsQIhz0Ov/pwKMU1flaBhg=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/d05409ed-9f40-4f5a-b5ee-a088da2f5978/0/46A0859F8C7CC2C2E7D5CBC8E43634F8A3DDAAF5.crl rsync://repo-rpki.idnic.net/repo/d05409ed-9f40-4f5a-b5ee-a088da2f5978/0/46A0859F8C7CC2C2E7D5CBC8E43634F8A3DDAAF5.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/46A0859F8C7CC2C2E7D5CBC8E43634F8A3DDAAF5.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 27 Jan 2026 07:45:26 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 15:ea:06:dc:2f:37:e4:a5:9a:aa:16:12:f5:07:47:c7:a2:3b:b4:2e Signature Algorithm: sha256WithRSAEncryption Issuer: CN=46A0859F8C7CC2C2E7D5CBC8E43634F8A3DDAAF5 Validity Not Before: Jan 24 07:37:26 2026 GMT Not After : Jan 27 07:45:26 2026 GMT Subject: CN=656CB94E19FA5B7162A2E794977BB7044793F93B Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ad:b7:a1:69:9f:8d:54:22:2c:8e:d5:41:25:80: 99:f3:54:2f:73:c2:1f:94:3e:df:79:6a:b1:3d:19: b0:0b:87:59:a0:fd:d1:90:53:b4:b2:a7:1d:b1:45: f8:79:de:64:42:db:67:c0:55:b8:fc:3c:f1:3f:92: 4f:c7:2e:c6:5c:b4:58:a1:8b:8f:8d:33:c1:7a:d7: 5f:b7:c3:22:b3:a0:aa:57:b7:ba:1e:de:f4:86:d0: 22:0d:5a:42:2a:a7:0f:87:e1:07:1b:74:a4:99:a1: 88:ca:ff:7f:bf:00:3f:ac:60:c8:52:20:39:1c:8f: 14:d9:4b:cc:6a:3e:b8:34:8a:28:75:11:04:71:37: de:e4:ea:f3:c4:dd:dd:de:41:18:18:bb:0a:4d:a2: f9:06:47:a3:8d:53:eb:65:38:39:a6:bc:c5:d4:62: 47:f5:bf:55:3b:83:dd:be:c1:ef:61:40:72:49:a5: 96:6d:b3:18:66:f2:b4:81:eb:69:73:7f:f9:ad:6c: 00:f8:3a:fe:8d:d4:f3:fe:d5:ad:5c:90:9e:b3:d9: 33:46:72:a6:c2:da:35:4f:cd:e2:64:99:de:1d:56: f8:5e:40:42:71:82:24:90:ae:3a:12:45:27:b8:a7: f9:63:dc:3d:ff:8c:e8:29:16:6e:46:86:5e:db:28: c1:c7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 65:6C:B9:4E:19:FA:5B:71:62:A2:E7:94:97:7B:B7:04:47:93:F9:3B X509v3 Authority Key Identifier: keyid:46:A0:85:9F:8C:7C:C2:C2:E7:D5:CB:C8:E4:36:34:F8:A3:DD:AA:F5 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/d05409ed-9f40-4f5a-b5ee-a088da2f5978/0/46A0859F8C7CC2C2E7D5CBC8E43634F8A3DDAAF5.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/46A0859F8C7CC2C2E7D5CBC8E43634F8A3DDAAF5.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/d05409ed-9f40-4f5a-b5ee-a088da2f5978/0/46A0859F8C7CC2C2E7D5CBC8E43634F8A3DDAAF5.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption c5:92:21:54:95:75:89:a5:5b:65:b3:6a:ec:7f:4c:2d:d9:83: e7:71:09:9d:5d:67:c4:16:5a:c5:fe:20:1e:cf:b9:96:db:98: 2b:54:14:e6:23:8f:30:c4:c4:a0:8a:56:de:0e:eb:21:f6:3a: e2:f3:a0:94:02:5d:92:19:97:6b:61:31:1b:8c:ff:bb:52:d8: 35:43:b3:55:e1:d6:11:31:0e:5b:65:06:2a:39:11:ee:5c:0f: 5b:fa:b8:d8:2c:c8:0c:0c:e0:fa:f3:cb:b0:75:3a:59:6d:63: 24:ae:4f:55:c4:1b:8d:f5:a9:7d:f3:be:3f:df:f9:97:d3:15: e3:f3:57:11:d6:98:76:c3:cf:60:52:1b:eb:b6:e1:9e:fc:08: 63:62:dd:7d:21:73:f3:ff:a0:73:9d:c8:0f:ea:9e:94:11:f0: 07:8b:0c:cf:02:67:7e:e3:cc:db:ae:d2:99:6c:6b:88:ca:83: 72:c0:3e:e3:cf:d7:9d:a6:52:36:ec:92:91:1b:a0:2f:56:33: 4c:93:64:e6:a9:58:d9:1b:9c:94:be:5c:d8:bc:1e:cb:97:dc: 4c:2c:49:8d:d3:4a:ac:d2:f8:6e:a2:1d:a7:d4:4d:5b:49:35: 67:c7:f2:39:37:a5:07:3d:d7:9f:7c:69:64:0f:bc:b9:cf:3a: 53:ed:00:fc -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUFeoG3C835KWaqhYS9QdHx6I7tC4wDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoNDZBMDg1OUY4QzdDQzJDMkU3RDVDQkM4RTQzNjM0RjhB M0REQUFGNTAeFw0yNjAxMjQwNzM3MjZaFw0yNjAxMjcwNzQ1MjZaMDMxMTAvBgNV BAMTKDY1NkNCOTRFMTlGQTVCNzE2MkEyRTc5NDk3N0JCNzA0NDc5M0Y5M0IwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCtt6Fpn41UIiyO1UElgJnzVC9z wh+UPt95arE9GbALh1mg/dGQU7Sypx2xRfh53mRC22fAVbj8PPE/kk/HLsZctFih i4+NM8F611+3wyKzoKpXt7oe3vSG0CINWkIqpw+H4QcbdKSZoYjK/3+/AD+sYMhS IDkcjxTZS8xqPrg0iih1EQRxN97k6vPE3d3eQRgYuwpNovkGR6ONU+tlODmmvMXU Ykf1v1U7g92+we9hQHJJpZZtsxhm8rSB62lzf/mtbAD4Ov6N1PP+1a1ckJ6z2TNG cqbC2jVPzeJkmd4dVvheQEJxgiSQrjoSRSe4p/lj3D3/jOgpFm5Ghl7bKMHHAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUZWy5Thn6W3FioueUl3u3BEeT+TswHwYDVR0j BBgwFoAURqCFn4x8wsLn1cvI5DY0+KPdqvUwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby9k MDU0MDllZC05ZjQwLTRmNWEtYjVlZS1hMDg4ZGEyZjU5NzgvMC80NkEwODU5RjhD N0NDMkMyRTdENUNCQzhFNDM2MzRGOEEzRERBQUY1LmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvNDZBMDg1OUY4QzdDQzJDMkU3RDVDQkM4RTQzNjM0RjhBM0RE QUFGNS5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vZDA1NDA5ZWQtOWY0MC00ZjVhLWI1 ZWUtYTA4OGRhMmY1OTc4LzAvNDZBMDg1OUY4QzdDQzJDMkU3RDVDQkM4RTQzNjM0 RjhBM0REQUFGNS5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAMWSIVSVdYmlW2Wzaux/TC3Zg+dxCZ1dZ8QW WsX+IB7PuZbbmCtUFOYjjzDExKCKVt4O6yH2OuLzoJQCXZIZl2thMRuM/7tS2DVD s1Xh1hExDltlBio5Ee5cD1v6uNgsyAwM4Przy7B1OlltYySuT1XEG431qX3zvj/f +ZfTFePzVxHWmHbDz2BSG+u24Z78CGNi3X0hc/P/oHOdyA/qnpQR8AeLDM8CZ37j zNuu0plsa4jKg3LAPuPP152mUjbskpEboC9WM0yTZOapWNkbnJS+XNi8HsuX3Ews SY3TSqzS+G6iHafUTVtJNWfH8jk3pQc91598aWQPvLnPOlPtAPw= -----END CERTIFICATE-----Generated at Sun Jan 25 18:30:29 2026 by rpki-client