This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf repo-rpki.idnic.net/repo/de600486-9780-43ee-bb2d-b811094a1445/0/46A7C8702C547FC42210027DD254571031AE05DC.mft File: 46A7C8702C547FC42210027DD254571031AE05DC.mft (raw, json) Hash identifier: kFVyShBGiyW3mUPu9E9DspIq3cKnY0BaoB6k26vrFKg= Subject key identifier: 69:C3:35:9E:40:D7:E6:60:89:D7:3F:26:07:79:89:27:A8:53:40:38 Authority key identifier: 46:A7:C8:70:2C:54:7F:C4:22:10:02:7D:D2:54:57:10:31:AE:05:DC Certificate issuer: /CN=46A7C8702C547FC42210027DD254571031AE05DC Certificate serial: 61A0C88288A765C34A81DCEFCB03CB163F485C70 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/46A7C8702C547FC42210027DD254571031AE05DC.cer Subject info access: rsync://repo-rpki.idnic.net/repo/de600486-9780-43ee-bb2d-b811094a1445/0/46A7C8702C547FC42210027DD254571031AE05DC.mft Manifest number: 0243 Signing time: Sat 20 Dec 2025 23:12:24 +0000 Manifest this update: Sat 20 Dec 2025 23:07:24 +0000 Manifest next update: Wed 24 Dec 2025 09:11:24 +0000 Files and hashes: 1: 3130332e3137322e3132322e302f32342d3234203d3e20313431353935.roa (hash: DLyhX1mkxtUQRH14nsnVNFFV/Lnw+00NFrAkbDg4bb4=) 2: 46A7C8702C547FC42210027DD254571031AE05DC.crl (hash: g2dmHEYX6IFcVWJKl768C47SMxn2L6Verh2xBGq1vDo=) 3: 3130332e3136302e3230352e302f32342d3234203d3e20313431353935.roa (hash: kdMYWHxqdB4fcu/Vgc4AfVoBG1lh0SUu+dZG5J22ir0=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/de600486-9780-43ee-bb2d-b811094a1445/0/46A7C8702C547FC42210027DD254571031AE05DC.crl rsync://repo-rpki.idnic.net/repo/de600486-9780-43ee-bb2d-b811094a1445/0/46A7C8702C547FC42210027DD254571031AE05DC.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/46A7C8702C547FC42210027DD254571031AE05DC.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 24 Dec 2025 07:39:25 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 61:a0:c8:82:88:a7:65:c3:4a:81:dc:ef:cb:03:cb:16:3f:48:5c:70 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=46A7C8702C547FC42210027DD254571031AE05DC Validity Not Before: Dec 20 23:07:24 2025 GMT Not After : Dec 24 09:11:24 2025 GMT Subject: CN=69C3359E40D7E66089D73F2607798927A8534038 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c7:2a:71:03:54:96:cb:1a:fa:4d:43:d0:3e:79: 4b:68:5d:a4:9a:d8:a8:43:ea:ce:ce:85:30:8c:fa: 76:4a:f0:1d:9e:1d:57:33:6b:52:c0:84:45:52:ba: 6a:88:5d:30:6e:4c:a9:cf:6e:54:07:2f:fc:c0:19: 5b:00:b4:f1:8a:da:f4:54:6f:ba:a6:52:4d:f8:95: 45:cc:c7:df:cb:9d:fc:91:11:aa:0a:75:12:01:e3: 03:03:de:d5:50:95:d9:e7:8f:50:5a:05:be:a1:1a: 1d:4b:97:35:cd:9b:b7:8e:a9:0e:51:90:83:d6:ee: e2:7e:ed:fd:57:7a:51:86:58:b8:4f:ac:87:24:b5: 82:5d:b0:5a:a0:1b:8c:fc:25:42:1a:d0:24:6d:2e: 83:5e:92:7a:fb:da:4b:08:02:b9:20:cd:8c:e8:ca: ed:23:43:e7:30:92:a0:b9:05:6b:f8:74:9f:7a:00: 9b:34:c2:69:80:7d:80:78:7c:fd:b4:f0:ee:d5:66: f1:f2:5e:48:73:cf:f0:f7:57:52:02:d0:9d:f1:3b: bb:2c:b9:ed:f3:cd:a8:c2:9a:2c:22:79:9e:90:92: be:0c:d3:dd:b7:c4:d6:03:e1:da:89:86:2d:fb:c4: 18:e1:d7:31:25:27:9b:84:5d:0a:c2:41:6d:ad:e9: 4a:3f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 69:C3:35:9E:40:D7:E6:60:89:D7:3F:26:07:79:89:27:A8:53:40:38 X509v3 Authority Key Identifier: keyid:46:A7:C8:70:2C:54:7F:C4:22:10:02:7D:D2:54:57:10:31:AE:05:DC X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/de600486-9780-43ee-bb2d-b811094a1445/0/46A7C8702C547FC42210027DD254571031AE05DC.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/46A7C8702C547FC42210027DD254571031AE05DC.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/de600486-9780-43ee-bb2d-b811094a1445/0/46A7C8702C547FC42210027DD254571031AE05DC.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 07:27:d4:3b:e5:4a:f3:1c:b3:db:66:cf:b2:07:2b:16:61:45: c1:b0:cd:0d:b9:40:36:0c:9e:dc:9d:c9:d7:87:ec:db:60:f2: 2b:f0:79:4c:3e:b9:d0:36:64:06:e7:ee:ae:4c:26:e3:53:81: c8:ce:e5:44:63:b2:f3:aa:66:5b:60:48:e6:4e:6a:df:0c:9c: 7a:ef:2c:07:dc:2e:90:0a:a4:86:2a:57:7f:a5:a0:24:7a:f1: 97:0f:17:9a:f8:70:81:d7:0c:72:e7:79:c6:0f:3b:ff:99:04: 9b:58:03:fa:06:ca:76:51:02:f1:d8:2c:aa:64:03:4c:bb:62: c2:df:61:b0:f2:3a:2c:18:5c:24:0f:9a:96:5e:fd:89:37:22: d6:eb:87:12:ed:3f:2e:34:ff:85:f8:92:c9:40:99:f4:3b:df: ba:97:7a:9b:d9:da:75:7d:56:ad:13:61:b5:b4:30:88:47:52: 3e:da:61:c3:03:31:d0:af:40:9b:64:21:9e:c2:df:ef:60:82: 3b:c2:03:fc:3b:4b:8e:db:24:a6:d1:a8:7c:38:00:d5:0d:83: e0:f9:b4:3c:94:53:d1:76:c1:3b:9c:39:9d:71:d2:40:aa:93: 48:c8:9a:41:43:93:ca:b1:bf:2b:c1:29:2b:d1:67:0d:06:cd: b0:59:2a:5d -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUYaDIgoinZcNKgdzvywPLFj9IXHAwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoNDZBN0M4NzAyQzU0N0ZDNDIyMTAwMjdERDI1NDU3MTAz MUFFMDVEQzAeFw0yNTEyMjAyMzA3MjRaFw0yNTEyMjQwOTExMjRaMDMxMTAvBgNV BAMTKDY5QzMzNTlFNDBEN0U2NjA4OUQ3M0YyNjA3Nzk4OTI3QTg1MzQwMzgwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDHKnEDVJbLGvpNQ9A+eUtoXaSa 2KhD6s7OhTCM+nZK8B2eHVcza1LAhEVSumqIXTBuTKnPblQHL/zAGVsAtPGK2vRU b7qmUk34lUXMx9/LnfyREaoKdRIB4wMD3tVQldnnj1BaBb6hGh1LlzXNm7eOqQ5R kIPW7uJ+7f1XelGGWLhPrIcktYJdsFqgG4z8JUIa0CRtLoNeknr72ksIArkgzYzo yu0jQ+cwkqC5BWv4dJ96AJs0wmmAfYB4fP208O7VZvHyXkhzz/D3V1IC0J3xO7ss ue3zzajCmiwieZ6Qkr4M0923xNYD4dqJhi37xBjh1zElJ5uEXQrCQW2t6Uo/AgMB AAGjggI8MIICODAdBgNVHQ4EFgQUacM1nkDX5mCJ1z8mB3mJJ6hTQDgwHwYDVR0j BBgwFoAURqfIcCxUf8QiEAJ90lRXEDGuBdwwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby9k ZTYwMDQ4Ni05NzgwLTQzZWUtYmIyZC1iODExMDk0YTE0NDUvMC80NkE3Qzg3MDJD NTQ3RkM0MjIxMDAyN0REMjU0NTcxMDMxQUUwNURDLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvNDZBN0M4NzAyQzU0N0ZDNDIyMTAwMjdERDI1NDU3MTAzMUFF MDVEQy5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vZGU2MDA0ODYtOTc4MC00M2VlLWJi MmQtYjgxMTA5NGExNDQ1LzAvNDZBN0M4NzAyQzU0N0ZDNDIyMTAwMjdERDI1NDU3 MTAzMUFFMDVEQy5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAAcn1DvlSvMcs9tmz7IHKxZhRcGwzQ25QDYM ntydydeH7Ntg8ivweUw+udA2ZAbn7q5MJuNTgcjO5URjsvOqZltgSOZOat8MnHrv LAfcLpAKpIYqV3+loCR68ZcPF5r4cIHXDHLnecYPO/+ZBJtYA/oGynZRAvHYLKpk A0y7YsLfYbDyOiwYXCQPmpZe/Yk3ItbrhxLtPy40/4X4kslAmfQ737qXepvZ2nV9 Vq0TYbW0MIhHUj7aYcMDMdCvQJtkIZ7C3+9ggjvCA/w7S47bJKbRqHw4ANUNg+D5 tDyUU9F2wTucOZ1x0kCqk0jImkFDk8qxvyvBKSvRZw0GzbBZKl0= -----END CERTIFICATE-----Generated at Sun Dec 21 10:17:57 2025 by rpki-client