This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf repo-rpki.idnic.net/repo/d05409ed-9f40-4f5a-b5ee-a088da2f5978/0/46A0859F8C7CC2C2E7D5CBC8E43634F8A3DDAAF5.mft File: 46A0859F8C7CC2C2E7D5CBC8E43634F8A3DDAAF5.mft (raw, json) Hash identifier: uZIhLzosh3iW7X7sm+5GpfPCM1YmIEndDAm7wAukETM= Subject key identifier: D2:E7:B3:48:14:2E:ED:9C:E9:B5:9A:A6:2A:A0:B1:A8:BF:DB:74:22 Authority key identifier: 46:A0:85:9F:8C:7C:C2:C2:E7:D5:CB:C8:E4:36:34:F8:A3:DD:AA:F5 Certificate issuer: /CN=46A0859F8C7CC2C2E7D5CBC8E43634F8A3DDAAF5 Certificate serial: 5D9DC3828BD8057CCC1A3C63B477271E6C4226FA Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/46A0859F8C7CC2C2E7D5CBC8E43634F8A3DDAAF5.cer Subject info access: rsync://repo-rpki.idnic.net/repo/d05409ed-9f40-4f5a-b5ee-a088da2f5978/0/46A0859F8C7CC2C2E7D5CBC8E43634F8A3DDAAF5.mft Manifest number: 015C Signing time: Tue 30 Dec 2025 04:52:27 +0000 Manifest this update: Tue 30 Dec 2025 04:47:27 +0000 Manifest next update: Fri 02 Jan 2026 08:40:27 +0000 Files and hashes: 1: 46A0859F8C7CC2C2E7D5CBC8E43634F8A3DDAAF5.crl (hash: 2bRn1ZFmI/fQ7Udan3LXidqmqSoDmUTttEFjpSZT4+8=) 2: 3131352e3138372e33312e302f32342d3234203d3e203538333639.roa (hash: VGNvRMTdXm3gJaSYZh5jyTa+JqewLa+S1Pa1sFR/Vfk=) 3: 3131352e3138372e33302e302f32342d3234203d3e203538333639.roa (hash: veTZsRvM1tQPZT/BfON0VJRneiBr6fgc60m5/I3a2Zc=) 4: 3131352e3138372e33302e302f32332d3233203d3e203538333639.roa (hash: l/6nAOjqjGZrtcrrhw7ZuCSQaMYlD7Yflxw07XBPvJ0=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/d05409ed-9f40-4f5a-b5ee-a088da2f5978/0/46A0859F8C7CC2C2E7D5CBC8E43634F8A3DDAAF5.crl rsync://repo-rpki.idnic.net/repo/d05409ed-9f40-4f5a-b5ee-a088da2f5978/0/46A0859F8C7CC2C2E7D5CBC8E43634F8A3DDAAF5.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/46A0859F8C7CC2C2E7D5CBC8E43634F8A3DDAAF5.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 02 Jan 2026 08:40:27 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 5d:9d:c3:82:8b:d8:05:7c:cc:1a:3c:63:b4:77:27:1e:6c:42:26:fa Signature Algorithm: sha256WithRSAEncryption Issuer: CN=46A0859F8C7CC2C2E7D5CBC8E43634F8A3DDAAF5 Validity Not Before: Dec 30 04:47:27 2025 GMT Not After : Jan 2 08:40:27 2026 GMT Subject: CN=D2E7B348142EED9CE9B59AA62AA0B1A8BFDB7422 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:be:c3:90:4a:24:2f:92:88:72:90:0d:b9:e2:40: ba:3b:33:e7:51:5e:94:bc:ad:65:99:99:15:14:8b: 05:1d:99:4f:61:03:f5:0d:83:03:a3:ec:57:26:af: 6e:42:dc:1f:02:05:58:8f:14:3e:34:f4:fc:f1:c4: c4:fa:4c:a8:75:4c:9e:c6:2f:aa:2b:c7:00:1b:96: ca:58:7a:3e:43:d0:e8:94:43:d9:54:82:6f:96:1c: 89:98:8e:7f:b4:1b:80:02:d4:ca:2c:39:02:21:a0: 87:8c:fd:7d:ca:0d:9d:d0:53:43:37:11:3e:23:df: 7a:13:cf:ba:18:00:2f:f9:ff:dc:f3:4b:b3:4e:8d: 35:62:26:83:cf:37:c5:27:aa:ce:78:9f:ee:c8:4e: 30:eb:76:9a:98:9a:40:03:3a:60:d5:06:d7:f5:2c: 0d:3e:14:f7:f5:5c:98:df:d3:b6:23:d9:08:80:37: 21:89:07:07:87:c9:27:d0:de:e9:ea:e2:39:c6:82: 21:e0:3f:71:3d:3b:7d:9f:87:3b:36:db:f6:f7:19: 73:49:a8:67:6b:04:4a:42:50:1e:4d:cf:31:18:d5: d2:04:8d:d3:71:9d:28:24:81:0e:bd:0a:7b:a5:fd: 50:6e:00:db:ad:a3:43:84:48:4c:26:02:b9:10:35: aa:7f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D2:E7:B3:48:14:2E:ED:9C:E9:B5:9A:A6:2A:A0:B1:A8:BF:DB:74:22 X509v3 Authority Key Identifier: keyid:46:A0:85:9F:8C:7C:C2:C2:E7:D5:CB:C8:E4:36:34:F8:A3:DD:AA:F5 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/d05409ed-9f40-4f5a-b5ee-a088da2f5978/0/46A0859F8C7CC2C2E7D5CBC8E43634F8A3DDAAF5.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/46A0859F8C7CC2C2E7D5CBC8E43634F8A3DDAAF5.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/d05409ed-9f40-4f5a-b5ee-a088da2f5978/0/46A0859F8C7CC2C2E7D5CBC8E43634F8A3DDAAF5.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 69:7e:e8:c0:db:e2:be:c5:3b:34:ad:83:49:b1:28:0f:d8:05: b5:0c:f2:bb:f0:44:65:84:30:f6:73:ba:19:ef:e5:87:c5:c7: 60:1a:9f:37:ab:23:6f:08:96:dc:08:87:4a:9c:89:de:45:16: c6:c3:6c:6a:d8:d0:b5:18:07:1d:7c:84:8c:08:24:f6:c3:44: c2:9a:1c:c2:22:c8:63:8a:a3:9f:10:4d:cf:b1:da:a6:16:51: 9f:99:d3:ae:cc:01:9d:10:2a:d6:4e:89:2f:9c:ca:37:41:5a: db:86:96:7d:84:45:4a:4e:51:bb:ab:dc:21:5f:c7:a2:35:e4: df:d0:b1:84:b0:a2:fd:49:54:c6:94:67:b5:6d:22:76:65:70: 41:a9:7a:2c:23:c7:67:41:5d:f2:a1:78:92:52:87:ec:a5:19: 15:32:1e:bf:e3:bb:58:41:28:dc:20:0e:46:c6:9d:37:87:69: 9a:d6:21:39:73:03:09:57:0d:71:25:90:9d:c4:9c:e7:04:fb: 2b:f3:f3:8a:90:65:e5:9d:f7:6e:d7:42:8a:aa:30:97:c5:3b: 8c:55:9c:2f:b6:8c:09:07:2b:a7:9b:26:fd:e5:d6:b6:97:87: e4:71:fa:e5:13:e7:95:1d:84:7e:ec:56:fb:38:af:af:2c:64: aa:40:d6:bb -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUXZ3DgovYBXzMGjxjtHcnHmxCJvowDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoNDZBMDg1OUY4QzdDQzJDMkU3RDVDQkM4RTQzNjM0RjhB M0REQUFGNTAeFw0yNTEyMzAwNDQ3MjdaFw0yNjAxMDIwODQwMjdaMDMxMTAvBgNV BAMTKEQyRTdCMzQ4MTQyRUVEOUNFOUI1OUFBNjJBQTBCMUE4QkZEQjc0MjIwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC+w5BKJC+SiHKQDbniQLo7M+dR XpS8rWWZmRUUiwUdmU9hA/UNgwOj7Fcmr25C3B8CBViPFD409PzxxMT6TKh1TJ7G L6orxwAblspYej5D0OiUQ9lUgm+WHImYjn+0G4AC1MosOQIhoIeM/X3KDZ3QU0M3 ET4j33oTz7oYAC/5/9zzS7NOjTViJoPPN8Unqs54n+7ITjDrdpqYmkADOmDVBtf1 LA0+FPf1XJjf07Yj2QiANyGJBweHySfQ3unq4jnGgiHgP3E9O32fhzs22/b3GXNJ qGdrBEpCUB5NzzEY1dIEjdNxnSgkgQ69Cnul/VBuANuto0OESEwmArkQNap/AgMB AAGjggI8MIICODAdBgNVHQ4EFgQU0uezSBQu7ZzptZqmKqCxqL/bdCIwHwYDVR0j BBgwFoAURqCFn4x8wsLn1cvI5DY0+KPdqvUwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby9k MDU0MDllZC05ZjQwLTRmNWEtYjVlZS1hMDg4ZGEyZjU5NzgvMC80NkEwODU5RjhD N0NDMkMyRTdENUNCQzhFNDM2MzRGOEEzRERBQUY1LmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvNDZBMDg1OUY4QzdDQzJDMkU3RDVDQkM4RTQzNjM0RjhBM0RE QUFGNS5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vZDA1NDA5ZWQtOWY0MC00ZjVhLWI1 ZWUtYTA4OGRhMmY1OTc4LzAvNDZBMDg1OUY4QzdDQzJDMkU3RDVDQkM4RTQzNjM0 RjhBM0REQUFGNS5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAGl+6MDb4r7FOzStg0mxKA/YBbUM8rvwRGWE MPZzuhnv5YfFx2AanzerI28IltwIh0qcid5FFsbDbGrY0LUYBx18hIwIJPbDRMKa HMIiyGOKo58QTc+x2qYWUZ+Z067MAZ0QKtZOiS+cyjdBWtuGln2ERUpOUbur3CFf x6I15N/QsYSwov1JVMaUZ7VtInZlcEGpeiwjx2dBXfKheJJSh+ylGRUyHr/ju1hB KNwgDkbGnTeHaZrWITlzAwlXDXElkJ3EnOcE+yvz84qQZeWd927XQoqqMJfFO4xV nC+2jAkHK6ebJv3l1raXh+Rx+uUT55UdhH7sVvs4r68sZKpA1rs= -----END CERTIFICATE-----Generated at Wed Dec 31 20:25:19 2025 by rpki-client