This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf repo-rpki.idnic.net/repo/d05409ed-9f40-4f5a-b5ee-a088da2f5978/0/46A0859F8C7CC2C2E7D5CBC8E43634F8A3DDAAF5.mft File: 46A0859F8C7CC2C2E7D5CBC8E43634F8A3DDAAF5.mft (raw, json) Hash identifier: ZSz0wd5GivJFILOS1kUdY+cP6RhMmgR4gPe18YEPbHM= Subject key identifier: E9:17:0F:26:E1:4F:DE:52:FD:AE:CB:1A:C4:3A:D7:0A:39:38:A0:BB Authority key identifier: 46:A0:85:9F:8C:7C:C2:C2:E7:D5:CB:C8:E4:36:34:F8:A3:DD:AA:F5 Certificate issuer: /CN=46A0859F8C7CC2C2E7D5CBC8E43634F8A3DDAAF5 Certificate serial: 5455A3A654ADB17A624313349A32386BB17A4A4B Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/46A0859F8C7CC2C2E7D5CBC8E43634F8A3DDAAF5.cer Subject info access: rsync://repo-rpki.idnic.net/repo/d05409ed-9f40-4f5a-b5ee-a088da2f5978/0/46A0859F8C7CC2C2E7D5CBC8E43634F8A3DDAAF5.mft Manifest number: 0151 Signing time: Fri 05 Dec 2025 20:22:31 +0000 Manifest this update: Fri 05 Dec 2025 20:17:31 +0000 Manifest next update: Mon 08 Dec 2025 21:29:31 +0000 Files and hashes: 1: 3131352e3138372e33302e302f32332d3233203d3e203538333639.roa (hash: l/6nAOjqjGZrtcrrhw7ZuCSQaMYlD7Yflxw07XBPvJ0=) 2: 3131352e3138372e33302e302f32342d3234203d3e203538333639.roa (hash: veTZsRvM1tQPZT/BfON0VJRneiBr6fgc60m5/I3a2Zc=) 3: 3131352e3138372e33312e302f32342d3234203d3e203538333639.roa (hash: VGNvRMTdXm3gJaSYZh5jyTa+JqewLa+S1Pa1sFR/Vfk=) 4: 46A0859F8C7CC2C2E7D5CBC8E43634F8A3DDAAF5.crl (hash: BNwQia0BetNfmf0IAHC9VUgoYHdQiL7t5yp6gABGVyw=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/d05409ed-9f40-4f5a-b5ee-a088da2f5978/0/46A0859F8C7CC2C2E7D5CBC8E43634F8A3DDAAF5.crl rsync://repo-rpki.idnic.net/repo/d05409ed-9f40-4f5a-b5ee-a088da2f5978/0/46A0859F8C7CC2C2E7D5CBC8E43634F8A3DDAAF5.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/46A0859F8C7CC2C2E7D5CBC8E43634F8A3DDAAF5.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 08 Dec 2025 21:29:31 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 54:55:a3:a6:54:ad:b1:7a:62:43:13:34:9a:32:38:6b:b1:7a:4a:4b Signature Algorithm: sha256WithRSAEncryption Issuer: CN=46A0859F8C7CC2C2E7D5CBC8E43634F8A3DDAAF5 Validity Not Before: Dec 5 20:17:31 2025 GMT Not After : Dec 8 21:29:31 2025 GMT Subject: CN=E9170F26E14FDE52FDAECB1AC43AD70A3938A0BB Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b6:eb:a0:d4:8d:78:5c:1c:93:c4:13:d3:b6:22: 55:21:f1:05:6a:19:2a:80:5a:90:65:f5:be:74:37: 2c:c5:ae:23:6e:cd:7f:dd:9a:09:c4:b1:92:28:1f: 59:b1:fd:c3:37:62:c4:2a:37:15:70:70:96:0c:db: ed:6d:5e:88:2a:96:9e:d3:95:b8:2b:63:95:61:3f: f3:8d:20:c5:91:3b:e0:fe:03:4d:b8:b7:1e:48:24: 86:19:b3:49:6b:02:4d:ca:1c:03:cd:e0:e0:b8:22: a6:1e:53:5f:c0:e3:6f:82:87:2d:2f:bf:a4:51:16: 65:bd:9d:c1:12:ee:f5:47:d0:32:67:0e:a3:d3:f7: 9e:d6:69:ca:fb:3d:90:4a:eb:e0:f4:b6:3c:c3:21: 5f:a1:47:02:6a:b6:a4:aa:64:8f:a3:e1:d7:7d:df: a9:79:ed:b4:10:d6:f0:10:a4:3b:aa:e2:74:8e:d3: 01:73:bc:02:4e:89:02:40:c8:4c:bf:8d:7f:d8:49: 79:33:53:2c:62:75:90:a1:71:c8:01:c1:17:73:29: f2:fa:fa:a0:31:b3:89:ff:9a:81:59:42:9d:80:11: 89:23:d7:72:ad:dd:0c:1d:77:78:d3:be:56:95:9c: 57:f3:a3:d2:e2:b6:ab:8e:78:25:b7:9f:9b:ca:d7: 3b:7d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: E9:17:0F:26:E1:4F:DE:52:FD:AE:CB:1A:C4:3A:D7:0A:39:38:A0:BB X509v3 Authority Key Identifier: keyid:46:A0:85:9F:8C:7C:C2:C2:E7:D5:CB:C8:E4:36:34:F8:A3:DD:AA:F5 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/d05409ed-9f40-4f5a-b5ee-a088da2f5978/0/46A0859F8C7CC2C2E7D5CBC8E43634F8A3DDAAF5.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/46A0859F8C7CC2C2E7D5CBC8E43634F8A3DDAAF5.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/d05409ed-9f40-4f5a-b5ee-a088da2f5978/0/46A0859F8C7CC2C2E7D5CBC8E43634F8A3DDAAF5.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 4b:21:48:24:f1:35:ca:3a:01:e5:0c:f0:d1:ba:36:d7:e4:d4: 89:07:9e:c3:70:38:6b:f4:bd:ee:bc:14:c4:56:78:3b:c5:5b: d4:06:c2:35:e9:ef:70:45:66:7c:9e:58:1a:fe:5f:03:50:fa: 7a:2d:5c:49:23:57:8a:33:e4:5d:0c:a9:80:ad:1e:7c:c9:11: 4d:9d:51:21:56:f7:a4:1c:bf:90:db:1d:bf:22:20:80:7c:0b: f9:48:fe:7a:af:05:cf:de:25:08:9c:a6:f9:58:3a:04:98:a4: 12:c2:a6:42:d5:52:c3:23:39:6d:6f:96:1f:68:de:75:b6:af: 35:f4:84:f5:6b:ec:1f:b0:64:9f:34:56:82:e6:c3:48:7c:bb: 32:1b:6f:6f:1e:36:6f:36:3a:3e:39:96:f9:9f:d7:e9:68:61: e8:fb:8e:7c:d6:6d:7f:c1:74:a9:7e:c3:bc:43:1b:f1:f0:45: ec:15:a5:83:de:b5:94:9b:1f:44:a7:cf:3e:10:8c:5a:d4:ea: f8:7a:b7:77:b1:64:9b:f7:4b:fc:c5:2e:df:9c:65:fa:ca:b3: 53:a7:c9:85:f5:2c:b0:6a:51:da:6f:f4:36:4b:6c:1e:4c:a8: 60:47:2a:d5:99:68:b4:8b:18:94:5b:f8:0b:9c:09:87:1f:5c: 15:d8:31:10 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUVFWjplStsXpiQxM0mjI4a7F6SkswDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoNDZBMDg1OUY4QzdDQzJDMkU3RDVDQkM4RTQzNjM0RjhB M0REQUFGNTAeFw0yNTEyMDUyMDE3MzFaFw0yNTEyMDgyMTI5MzFaMDMxMTAvBgNV BAMTKEU5MTcwRjI2RTE0RkRFNTJGREFFQ0IxQUM0M0FENzBBMzkzOEEwQkIwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC266DUjXhcHJPEE9O2IlUh8QVq GSqAWpBl9b50NyzFriNuzX/dmgnEsZIoH1mx/cM3YsQqNxVwcJYM2+1tXogqlp7T lbgrY5VhP/ONIMWRO+D+A024tx5IJIYZs0lrAk3KHAPN4OC4IqYeU1/A42+Chy0v v6RRFmW9ncES7vVH0DJnDqPT957Wacr7PZBK6+D0tjzDIV+hRwJqtqSqZI+j4dd9 36l57bQQ1vAQpDuq4nSO0wFzvAJOiQJAyEy/jX/YSXkzUyxidZChccgBwRdzKfL6 +qAxs4n/moFZQp2AEYkj13Kt3Qwdd3jTvlaVnFfzo9LitquOeCW3n5vK1zt9AgMB AAGjggI8MIICODAdBgNVHQ4EFgQU6RcPJuFP3lL9rssaxDrXCjk4oLswHwYDVR0j BBgwFoAURqCFn4x8wsLn1cvI5DY0+KPdqvUwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby9k MDU0MDllZC05ZjQwLTRmNWEtYjVlZS1hMDg4ZGEyZjU5NzgvMC80NkEwODU5RjhD N0NDMkMyRTdENUNCQzhFNDM2MzRGOEEzRERBQUY1LmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvNDZBMDg1OUY4QzdDQzJDMkU3RDVDQkM4RTQzNjM0RjhBM0RE QUFGNS5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vZDA1NDA5ZWQtOWY0MC00ZjVhLWI1 ZWUtYTA4OGRhMmY1OTc4LzAvNDZBMDg1OUY4QzdDQzJDMkU3RDVDQkM4RTQzNjM0 RjhBM0REQUFGNS5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAEshSCTxNco6AeUM8NG6Ntfk1IkHnsNwOGv0 ve68FMRWeDvFW9QGwjXp73BFZnyeWBr+XwNQ+notXEkjV4oz5F0MqYCtHnzJEU2d USFW96Qcv5DbHb8iIIB8C/lI/nqvBc/eJQicpvlYOgSYpBLCpkLVUsMjOW1vlh9o 3nW2rzX0hPVr7B+wZJ80VoLmw0h8uzIbb28eNm82Oj45lvmf1+loYej7jnzWbX/B dKl+w7xDG/HwRewVpYPetZSbH0Snzz4QjFrU6vh6t3exZJv3S/zFLt+cZfrKs1On yYX1LLBqUdpv9DZLbB5MqGBHKtWZaLSLGJRb+AucCYcfXBXYMRA= -----END CERTIFICATE-----Generated at Sun Dec 7 04:57:45 2025 by rpki-client