This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf repo-rpki.idnic.net/repo/04ca5868-57e9-49b9-bfe1-48d78334a18c/0/846BCB85C1E1AA59037B0A2AC59ED1E8E7420ED0.mft File: 846BCB85C1E1AA59037B0A2AC59ED1E8E7420ED0.mft (raw, json) Hash identifier: /krUAPGHE8TsN+jOhoX5+Jb7mMfO2tRWOlXSyg8+6KY= Subject key identifier: BF:59:55:47:6B:FA:D0:20:E8:4C:B1:CE:91:F2:05:84:3A:70:05:8E Authority key identifier: 84:6B:CB:85:C1:E1:AA:59:03:7B:0A:2A:C5:9E:D1:E8:E7:42:0E:D0 Certificate issuer: /CN=846BCB85C1E1AA59037B0A2AC59ED1E8E7420ED0 Certificate serial: 666A8A24E89F602DC404B05CF4A9592A043E97DA Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/846BCB85C1E1AA59037B0A2AC59ED1E8E7420ED0.cer Subject info access: rsync://repo-rpki.idnic.net/repo/04ca5868-57e9-49b9-bfe1-48d78334a18c/0/846BCB85C1E1AA59037B0A2AC59ED1E8E7420ED0.mft Manifest number: 0392 Signing time: Tue 02 Dec 2025 11:51:58 +0000 Manifest this update: Tue 02 Dec 2025 11:46:58 +0000 Manifest next update: Fri 05 Dec 2025 23:37:58 +0000 Files and hashes: 1: 3130332e3136392e3133382e302f32332d3234203d3e20313432333433.roa (hash: VrU1SwTl8NTtyMThFSf4hTGqANokx1m/tgJCu2ItF4k=) 2: 846BCB85C1E1AA59037B0A2AC59ED1E8E7420ED0.crl (hash: xer/0yW+lwfvbS4LO3xPHlz/kWihdJV2LQ8OX8Xq5iM=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/04ca5868-57e9-49b9-bfe1-48d78334a18c/0/846BCB85C1E1AA59037B0A2AC59ED1E8E7420ED0.crl rsync://repo-rpki.idnic.net/repo/04ca5868-57e9-49b9-bfe1-48d78334a18c/0/846BCB85C1E1AA59037B0A2AC59ED1E8E7420ED0.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/846BCB85C1E1AA59037B0A2AC59ED1E8E7420ED0.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 05 Dec 2025 23:37:58 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 66:6a:8a:24:e8:9f:60:2d:c4:04:b0:5c:f4:a9:59:2a:04:3e:97:da Signature Algorithm: sha256WithRSAEncryption Issuer: CN=846BCB85C1E1AA59037B0A2AC59ED1E8E7420ED0 Validity Not Before: Dec 2 11:46:58 2025 GMT Not After : Dec 5 23:37:58 2025 GMT Subject: CN=BF5955476BFAD020E84CB1CE91F205843A70058E Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d3:7f:2c:79:e7:e0:38:90:dd:ae:51:8c:52:fb: 32:fb:0b:3a:1f:1f:c2:da:ed:5e:b2:90:1f:a9:62: fe:60:f9:67:9b:01:32:32:96:03:d7:6d:05:04:df: 1d:de:fd:1a:8a:7e:5a:4b:73:ba:00:36:35:e5:fd: 34:7b:99:01:65:4a:75:2e:74:fb:21:5c:dc:ad:d5: 37:8c:4e:70:81:f8:1d:c5:de:b1:e8:37:d9:66:c5: 28:e2:c5:6c:45:b5:c7:07:96:b1:0b:10:a3:0a:21: 13:a7:b3:d4:96:b1:4f:ec:4d:77:eb:a6:72:bc:45: 42:da:ab:79:a8:7e:b3:7f:6a:07:23:d5:77:92:c2: f5:bc:9f:3f:bd:0c:72:e9:ac:36:bc:9a:5a:31:77: 96:53:2d:af:9f:aa:41:01:62:37:4c:24:ea:ca:50: 51:b2:5c:bb:82:0a:5c:6e:ef:33:9f:16:31:f9:66: f7:8f:d1:07:33:77:4a:a2:8a:48:10:87:29:21:67: 73:b5:1f:9c:ae:cd:77:6e:c7:6d:38:01:ee:a0:67: 7c:69:12:f6:a7:b5:2c:f0:63:60:cb:63:36:af:b7: e7:ca:fe:36:4c:2b:84:5e:d4:5e:57:c6:11:8e:bd: 4a:4a:2b:5a:0b:90:27:d0:e0:ad:0d:3e:0b:00:ae: 54:eb Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: BF:59:55:47:6B:FA:D0:20:E8:4C:B1:CE:91:F2:05:84:3A:70:05:8E X509v3 Authority Key Identifier: keyid:84:6B:CB:85:C1:E1:AA:59:03:7B:0A:2A:C5:9E:D1:E8:E7:42:0E:D0 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/04ca5868-57e9-49b9-bfe1-48d78334a18c/0/846BCB85C1E1AA59037B0A2AC59ED1E8E7420ED0.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/846BCB85C1E1AA59037B0A2AC59ED1E8E7420ED0.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/04ca5868-57e9-49b9-bfe1-48d78334a18c/0/846BCB85C1E1AA59037B0A2AC59ED1E8E7420ED0.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 20:99:d4:ee:e5:f3:9a:71:52:30:e1:3f:d0:bd:6d:1b:7c:7b: 11:5d:3d:7c:3e:ed:e4:17:e1:65:59:81:c7:bb:3c:6b:7c:2a: 65:75:38:43:6d:1b:19:2c:75:05:e0:e1:2b:34:46:79:93:38: c5:ba:4d:3b:60:61:2b:dd:a9:f9:4f:3b:b0:70:b8:a6:0b:65: 8f:57:70:2a:3e:f2:81:7a:5a:4f:b5:92:12:f2:7e:28:76:be: e8:b2:74:7f:96:95:c2:cf:7b:30:e1:c0:c3:dc:9a:37:46:64: e3:c2:d8:24:df:98:41:3c:65:af:5c:a3:c5:23:ca:4b:c1:30: 95:b4:86:8f:82:12:7e:2e:37:ea:b8:50:54:57:ff:ef:d2:56: 78:d8:7d:32:99:cd:a9:5b:91:fa:38:57:ad:ed:3d:2f:5d:8e: d7:41:92:5c:fe:4a:c4:22:dc:7f:72:f3:48:be:e1:ff:46:0e: fe:8e:c7:39:93:96:0b:db:ec:41:7b:90:dc:41:5d:e6:06:84: f9:a1:82:0d:22:61:44:a7:17:41:9c:dc:d7:1a:40:e9:6e:a6: b0:b5:92:c2:29:10:fb:48:17:c6:e9:4a:d5:0f:f1:73:50:fd: 1a:5d:ae:7e:37:65:98:23:e6:cd:73:3a:04:33:6f:69:b8:d7: e6:b7:30:9f -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUZmqKJOifYC3EBLBc9KlZKgQ+l9owDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoODQ2QkNCODVDMUUxQUE1OTAzN0IwQTJBQzU5RUQxRThF NzQyMEVEMDAeFw0yNTEyMDIxMTQ2NThaFw0yNTEyMDUyMzM3NThaMDMxMTAvBgNV BAMTKEJGNTk1NTQ3NkJGQUQwMjBFODRDQjFDRTkxRjIwNTg0M0E3MDA1OEUwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDTfyx55+A4kN2uUYxS+zL7Czof H8La7V6ykB+pYv5g+WebATIylgPXbQUE3x3e/RqKflpLc7oANjXl/TR7mQFlSnUu dPshXNyt1TeMTnCB+B3F3rHoN9lmxSjixWxFtccHlrELEKMKIROns9SWsU/sTXfr pnK8RULaq3mofrN/agcj1XeSwvW8nz+9DHLprDa8mloxd5ZTLa+fqkEBYjdMJOrK UFGyXLuCClxu7zOfFjH5ZveP0Qczd0qiikgQhykhZ3O1H5yuzXdux204Ae6gZ3xp EvantSzwY2DLYzavt+fK/jZMK4Re1F5XxhGOvUpKK1oLkCfQ4K0NPgsArlTrAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUv1lVR2v60CDoTLHOkfIFhDpwBY4wHwYDVR0j BBgwFoAUhGvLhcHhqlkDewoqxZ7R6OdCDtAwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby8w NGNhNTg2OC01N2U5LTQ5YjktYmZlMS00OGQ3ODMzNGExOGMvMC84NDZCQ0I4NUMx RTFBQTU5MDM3QjBBMkFDNTlFRDFFOEU3NDIwRUQwLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvODQ2QkNCODVDMUUxQUE1OTAzN0IwQTJBQzU5RUQxRThFNzQy MEVEMC5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vMDRjYTU4NjgtNTdlOS00OWI5LWJm ZTEtNDhkNzgzMzRhMThjLzAvODQ2QkNCODVDMUUxQUE1OTAzN0IwQTJBQzU5RUQx RThFNzQyMEVEMC5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBACCZ1O7l85pxUjDhP9C9bRt8exFdPXw+7eQX 4WVZgce7PGt8KmV1OENtGxksdQXg4Ss0RnmTOMW6TTtgYSvdqflPO7BwuKYLZY9X cCo+8oF6Wk+1khLyfih2vuiydH+WlcLPezDhwMPcmjdGZOPC2CTfmEE8Za9co8Uj ykvBMJW0ho+CEn4uN+q4UFRX/+/SVnjYfTKZzalbkfo4V63tPS9djtdBklz+SsQi 3H9y80i+4f9GDv6OxzmTlgvb7EF7kNxBXeYGhPmhgg0iYUSnF0Gc3NcaQOluprC1 ksIpEPtIF8bpStUP8XNQ/Rpdrn43ZZgj5s1zOgQzb2m41+a3MJ8= -----END CERTIFICATE-----Generated at Wed Dec 3 14:48:29 2025 by rpki-client