This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf repo-rpki.idnic.net/repo/de600486-9780-43ee-bb2d-b811094a1445/0/46A7C8702C547FC42210027DD254571031AE05DC.mft File: 46A7C8702C547FC42210027DD254571031AE05DC.mft (raw, json) Hash identifier: vRaKqx1I2uefzAq6uhR83QFxpv9PzSn6VAdSTOxjsf0= Subject key identifier: B4:36:41:1F:94:06:C1:EE:F0:4F:28:8C:1C:08:A2:57:65:B0:E2:95 Authority key identifier: 46:A7:C8:70:2C:54:7F:C4:22:10:02:7D:D2:54:57:10:31:AE:05:DC Certificate issuer: /CN=46A7C8702C547FC42210027DD254571031AE05DC Certificate serial: 7D1049461D5AEA80FD76B7A1736CB3C307F80E17 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/46A7C8702C547FC42210027DD254571031AE05DC.cer Subject info access: rsync://repo-rpki.idnic.net/repo/de600486-9780-43ee-bb2d-b811094a1445/0/46A7C8702C547FC42210027DD254571031AE05DC.mft Manifest number: 023D Signing time: Sun 07 Dec 2025 04:41:50 +0000 Manifest this update: Sun 07 Dec 2025 04:36:50 +0000 Manifest next update: Wed 10 Dec 2025 06:11:50 +0000 Files and hashes: 1: 3130332e3136302e3230352e302f32342d3234203d3e20313431353935.roa (hash: kdMYWHxqdB4fcu/Vgc4AfVoBG1lh0SUu+dZG5J22ir0=) 2: 3130332e3137322e3132322e302f32342d3234203d3e20313431353935.roa (hash: DLyhX1mkxtUQRH14nsnVNFFV/Lnw+00NFrAkbDg4bb4=) 3: 46A7C8702C547FC42210027DD254571031AE05DC.crl (hash: WjeOJIhuZuj7vPSNHwJOmSj6zCWfleSSRgeCmxJpCcg=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/de600486-9780-43ee-bb2d-b811094a1445/0/46A7C8702C547FC42210027DD254571031AE05DC.crl rsync://repo-rpki.idnic.net/repo/de600486-9780-43ee-bb2d-b811094a1445/0/46A7C8702C547FC42210027DD254571031AE05DC.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/46A7C8702C547FC42210027DD254571031AE05DC.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 09 Dec 2025 15:57:52 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 7d:10:49:46:1d:5a:ea:80:fd:76:b7:a1:73:6c:b3:c3:07:f8:0e:17 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=46A7C8702C547FC42210027DD254571031AE05DC Validity Not Before: Dec 7 04:36:50 2025 GMT Not After : Dec 10 06:11:50 2025 GMT Subject: CN=B436411F9406C1EEF04F288C1C08A25765B0E295 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a7:2a:71:af:54:0b:e4:bb:30:76:56:d4:e7:02: c5:7f:86:65:a5:6a:98:da:42:cc:8c:3a:f0:ab:1d: d8:e2:a6:2e:bf:c0:47:9f:c2:98:eb:3d:d6:29:06: eb:92:98:19:ef:c6:2f:fc:ca:91:5e:59:f5:98:79: e3:eb:1a:89:52:d8:f0:9b:9e:c6:1c:fe:8b:2c:f3: 81:1b:3f:fa:fa:ac:4b:a6:db:85:50:a3:45:b9:d4: 67:bc:eb:f8:2f:2f:87:de:60:aa:47:9f:a3:86:d0: 66:fa:8e:01:86:42:ae:12:a1:8d:17:20:06:cb:f0: 34:b7:ed:26:8f:97:01:87:06:3d:26:0a:5a:fa:9e: f1:ac:43:37:0a:8b:8f:19:6e:91:c6:02:80:f3:db: d7:a5:cb:40:38:cf:f4:16:01:40:b4:dc:48:5b:a2: 86:7c:06:6a:46:14:28:57:6a:85:fa:f2:ce:d1:3e: 20:40:a0:8d:6f:78:e6:4c:6c:0c:e6:ca:2b:98:5d: d5:1b:b0:a8:bf:8d:ff:e7:54:aa:fa:24:7b:e0:ad: 70:77:74:92:15:7b:08:89:13:e6:92:e1:85:78:28: 74:bf:4c:5e:76:46:27:61:9f:eb:29:70:e5:57:3b: 3d:ce:1f:eb:70:21:12:c0:54:22:d1:6b:1b:9d:d2: 89:f5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: B4:36:41:1F:94:06:C1:EE:F0:4F:28:8C:1C:08:A2:57:65:B0:E2:95 X509v3 Authority Key Identifier: keyid:46:A7:C8:70:2C:54:7F:C4:22:10:02:7D:D2:54:57:10:31:AE:05:DC X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/de600486-9780-43ee-bb2d-b811094a1445/0/46A7C8702C547FC42210027DD254571031AE05DC.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/46A7C8702C547FC42210027DD254571031AE05DC.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/de600486-9780-43ee-bb2d-b811094a1445/0/46A7C8702C547FC42210027DD254571031AE05DC.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 1f:5c:3f:41:99:30:17:2a:d5:b7:dd:fa:b5:83:71:b4:a4:83: 90:37:a9:d2:3a:e8:8c:91:47:07:92:65:28:79:a6:f5:72:2e: 78:1b:0a:52:b9:76:23:76:28:4e:fa:a3:35:f1:db:e4:18:05: af:d3:b7:2c:97:01:7b:d8:96:84:03:2a:a5:6d:d3:6c:24:c6: ff:83:ad:1b:cf:0f:9c:6a:e9:cd:d4:3c:67:40:51:e3:9f:c9: cc:d0:62:c1:3a:1e:ad:0f:0a:ef:25:7b:23:0b:2e:90:e0:35: f0:6a:23:b9:05:ac:d7:9d:a9:12:ac:87:f4:4c:36:87:74:56: f7:42:17:c4:86:38:38:32:f3:4e:74:6f:d1:bb:f9:57:d2:2c: 2c:c2:4c:f6:61:26:bc:6d:12:d6:a8:b4:a8:00:d3:63:c1:0c: 82:96:69:ac:76:80:59:dc:2f:0c:6f:a9:a1:bd:ce:85:79:87: 10:89:a3:48:cd:f5:89:57:1a:60:23:2a:53:4d:cf:5f:22:9e: 14:ae:f1:98:23:54:0e:f4:ad:71:f4:6d:28:79:28:0b:13:97: 4f:00:00:ac:63:a7:3e:ea:06:c4:da:2f:02:12:79:1a:c7:6e: e7:78:3d:12:c1:5f:f6:40:6f:f6:80:16:4c:2a:ef:55:c1:8a: 8f:cb:5c:45 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUfRBJRh1a6oD9drehc2yzwwf4DhcwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoNDZBN0M4NzAyQzU0N0ZDNDIyMTAwMjdERDI1NDU3MTAz MUFFMDVEQzAeFw0yNTEyMDcwNDM2NTBaFw0yNTEyMTAwNjExNTBaMDMxMTAvBgNV BAMTKEI0MzY0MTFGOTQwNkMxRUVGMDRGMjg4QzFDMDhBMjU3NjVCMEUyOTUwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCnKnGvVAvkuzB2VtTnAsV/hmWl apjaQsyMOvCrHdjipi6/wEefwpjrPdYpBuuSmBnvxi/8ypFeWfWYeePrGolS2PCb nsYc/oss84EbP/r6rEum24VQo0W51Ge86/gvL4feYKpHn6OG0Gb6jgGGQq4SoY0X IAbL8DS37SaPlwGHBj0mClr6nvGsQzcKi48ZbpHGAoDz29ely0A4z/QWAUC03Ehb ooZ8BmpGFChXaoX68s7RPiBAoI1veOZMbAzmyiuYXdUbsKi/jf/nVKr6JHvgrXB3 dJIVewiJE+aS4YV4KHS/TF52Ridhn+spcOVXOz3OH+twIRLAVCLRaxud0on1AgMB AAGjggI8MIICODAdBgNVHQ4EFgQUtDZBH5QGwe7wTyiMHAiiV2Ww4pUwHwYDVR0j BBgwFoAURqfIcCxUf8QiEAJ90lRXEDGuBdwwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby9k ZTYwMDQ4Ni05NzgwLTQzZWUtYmIyZC1iODExMDk0YTE0NDUvMC80NkE3Qzg3MDJD NTQ3RkM0MjIxMDAyN0REMjU0NTcxMDMxQUUwNURDLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvNDZBN0M4NzAyQzU0N0ZDNDIyMTAwMjdERDI1NDU3MTAzMUFF MDVEQy5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vZGU2MDA0ODYtOTc4MC00M2VlLWJi MmQtYjgxMTA5NGExNDQ1LzAvNDZBN0M4NzAyQzU0N0ZDNDIyMTAwMjdERDI1NDU3 MTAzMUFFMDVEQy5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAB9cP0GZMBcq1bfd+rWDcbSkg5A3qdI66IyR RweSZSh5pvVyLngbClK5diN2KE76ozXx2+QYBa/TtyyXAXvYloQDKqVt02wkxv+D rRvPD5xq6c3UPGdAUeOfyczQYsE6Hq0PCu8leyMLLpDgNfBqI7kFrNedqRKsh/RM Nod0VvdCF8SGODgy8050b9G7+VfSLCzCTPZhJrxtEtaotKgA02PBDIKWaax2gFnc LwxvqaG9zoV5hxCJo0jN9YlXGmAjKlNNz18inhSu8ZgjVA70rXH0bSh5KAsTl08A AKxjpz7qBsTaLwISeRrHbud4PRLBX/ZAb/aAFkwq71XBio/LXEU= -----END CERTIFICATE-----Generated at Sun Dec 7 07:47:09 2025 by rpki-client