This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

$ rpki-client -vvf repo-rpki.idnic.net/repo/f56d0b78-7e81-4a8c-a875-95522b467938/0/466C942AFFDB262DABF7B65D913F3E9E92C9A0C6.mft
File: 466C942AFFDB262DABF7B65D913F3E9E92C9A0C6.mft (raw, json)
Hash identifier: oa6G0eG7t88iyqg7AUoK3NfR4iipkfIx9vVLWcVdHgA=
Subject key identifier: 87:FE:F6:60:79:74:71:70:29:0C:C1:08:4A:4F:51:DB:51:37:1B:9B
Authority key identifier: 46:6C:94:2A:FF:DB:26:2D:AB:F7:B6:5D:91:3F:3E:9E:92:C9:A0:C6
Certificate issuer: /CN=466C942AFFDB262DABF7B65D913F3E9E92C9A0C6
Certificate serial: 55DCBF9990CDEBF6478545D26E2302B14AC0891A
Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/466C942AFFDB262DABF7B65D913F3E9E92C9A0C6.cer
Subject info access: rsync://repo-rpki.idnic.net/repo/f56d0b78-7e81-4a8c-a875-95522b467938/0/466C942AFFDB262DABF7B65D913F3E9E92C9A0C6.mft
Manifest number: 021C
Signing time: Tue 16 Dec 2025 11:52:24 +0000
Manifest this update: Tue 16 Dec 2025 11:47:24 +0000
Manifest next update: Fri 19 Dec 2025 13:04:24 +0000
Files and hashes: 1: 3130332e3138352e3131302e302f32342d3234203d3e20313439383832.roa (hash: 1BptPYQTBVQCwnCGCAmQpdkJZuT5jDyDH1mIYb86asQ=)
2: 3130332e3138352e3131312e302f32342d3234203d3e20313439383832.roa (hash: k33UC/S59fL9YnbENocJ8tvAJ1sRtIu7ddJOWvA5ll8=)
3: 466C942AFFDB262DABF7B65D913F3E9E92C9A0C6.crl (hash: tRY/dBypC4buGUEdo2H+NN2uUWGbi3PuONRM12Wk3bM=)
4: 3130332e3138352e3131302e302f32332d3233203d3e20313439383832.roa (hash: ud1p/krhRE3733a1j5mqZ8KrI1sOH5O1a7m3DIDez2o=)
Validation: OK
Signature path: rsync://repo-rpki.idnic.net/repo/f56d0b78-7e81-4a8c-a875-95522b467938/0/466C942AFFDB262DABF7B65D913F3E9E92C9A0C6.crl
rsync://repo-rpki.idnic.net/repo/f56d0b78-7e81-4a8c-a875-95522b467938/0/466C942AFFDB262DABF7B65D913F3E9E92C9A0C6.mft
rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/466C942AFFDB262DABF7B65D913F3E9E92C9A0C6.cer
rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl
rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Fri 19 Dec 2025 13:04:24 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
55:dc:bf:99:90:cd:eb:f6:47:85:45:d2:6e:23:02:b1:4a:c0:89:1a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=466C942AFFDB262DABF7B65D913F3E9E92C9A0C6
Validity
Not Before: Dec 16 11:47:24 2025 GMT
Not After : Dec 19 13:04:24 2025 GMT
Subject: CN=87FEF66079747170290CC1084A4F51DB51371B9B
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a5:fb:af:cd:72:d3:ab:9f:f1:ee:17:62:81:fc:
d0:ea:21:44:b0:ab:1d:1a:8b:7b:dd:16:0f:14:02:
dd:fb:90:25:df:28:c2:d8:70:de:38:8b:74:07:6c:
71:1d:be:ec:49:c8:bc:67:4e:d9:12:ac:28:cb:50:
38:2c:32:9f:8b:8d:01:d3:61:34:6b:6d:8b:bf:be:
a6:24:ca:5f:a4:ee:ba:46:e5:b0:fb:da:32:03:eb:
fb:c1:1d:05:f6:60:71:27:24:4a:6b:ee:5c:e9:22:
cc:2c:0d:17:7a:6e:da:3a:84:4b:1b:c3:67:f7:d2:
de:c2:50:40:fd:c8:b1:87:5a:48:60:08:37:80:3a:
e6:34:c2:94:e2:fa:68:bb:ff:45:01:36:ec:64:45:
bb:43:38:c7:e3:4c:df:87:f3:0b:0a:31:cc:06:6a:
0a:a6:74:2d:33:c8:5d:6a:42:02:5b:70:cb:01:8b:
da:18:db:f6:10:6e:b9:55:97:57:4f:f1:01:64:93:
23:b6:1d:1e:e0:6f:b8:c0:25:51:6e:4c:b9:93:75:
6f:f4:b4:ab:f2:81:a9:7c:24:b3:df:d3:b3:e4:3a:
de:94:52:00:52:3e:4a:b0:42:db:85:8a:05:16:5e:
c7:9e:53:7f:65:24:14:f4:28:4b:23:fe:8c:ac:c7:
bf:85
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
87:FE:F6:60:79:74:71:70:29:0C:C1:08:4A:4F:51:DB:51:37:1B:9B
X509v3 Authority Key Identifier:
keyid:46:6C:94:2A:FF:DB:26:2D:AB:F7:B6:5D:91:3F:3E:9E:92:C9:A0:C6
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://repo-rpki.idnic.net/repo/f56d0b78-7e81-4a8c-a875-95522b467938/0/466C942AFFDB262DABF7B65D913F3E9E92C9A0C6.crl
Authority Information Access:
CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/466C942AFFDB262DABF7B65D913F3E9E92C9A0C6.cer
Subject Information Access:
Signed Object - URI:rsync://repo-rpki.idnic.net/repo/f56d0b78-7e81-4a8c-a875-95522b467938/0/466C942AFFDB262DABF7B65D913F3E9E92C9A0C6.mft
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
0f:a3:97:6b:b0:0c:31:f0:64:7f:c9:00:a7:db:3c:f1:c0:04:
f3:57:ab:5c:f6:5e:d9:6a:2b:25:e4:7d:4a:4b:0c:4c:48:00:
68:55:bc:61:54:c2:22:89:c4:34:b1:e6:e7:a4:61:7a:31:55:
ab:61:80:b0:6b:67:e3:9d:cb:71:08:97:e6:18:d3:cb:d9:34:
76:33:d6:af:fd:6d:c0:19:54:49:3f:7c:af:67:9e:23:58:51:
08:4b:da:f5:2b:7b:39:bd:97:3f:d1:73:52:2c:5b:53:30:ce:
54:37:5f:23:5f:36:8a:88:d4:f9:85:da:24:67:36:d9:6d:a5:
1a:ad:c8:3f:0f:00:17:a0:78:7b:f1:ff:c1:d2:e0:00:8b:46:
91:6c:7d:68:24:ed:e2:da:72:7a:0f:66:ff:2a:65:bc:bd:d7:
7e:0e:27:88:5f:7a:bc:20:ec:66:31:01:3d:17:c4:8a:c4:fe:
e6:29:ff:84:a2:f8:79:b7:f8:d2:21:72:6f:95:ea:1d:f4:a5:
9d:35:2b:66:af:c4:ce:48:20:1c:84:06:61:6d:ba:47:ac:f9:
1e:5e:e8:cd:82:bf:ea:a5:fb:02:b6:33:bd:99:cc:98:b1:99:
db:d1:ef:46:33:4f:57:b0:ab:12:2a:8b:10:e8:5b:8f:d7:44:
34:b6:ce:da
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Dec 17 13:48:03 2025 by rpki-client