This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf repo-rpki.idnic.net/repo/1dee126f-8192-4d28-b25e-deabdb79eb21/0/146B42876A5C2AB0705F67F1A3918D76984989AF.mft File: 146B42876A5C2AB0705F67F1A3918D76984989AF.mft (raw, json) Hash identifier: 7DDluq5N1jcJjpWNyHtcrGXhpyenM75dEhOiVi+m4yY= Subject key identifier: 98:6B:7F:12:95:64:04:61:D0:75:6E:94:30:0E:52:6F:79:1B:CC:61 Authority key identifier: 14:6B:42:87:6A:5C:2A:B0:70:5F:67:F1:A3:91:8D:76:98:49:89:AF Certificate issuer: /CN=146B42876A5C2AB0705F67F1A3918D76984989AF Certificate serial: 40988B35936081CD34A8D358BE851B370D824744 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/146B42876A5C2AB0705F67F1A3918D76984989AF.cer Subject info access: rsync://repo-rpki.idnic.net/repo/1dee126f-8192-4d28-b25e-deabdb79eb21/0/146B42876A5C2AB0705F67F1A3918D76984989AF.mft Manifest number: 021F Signing time: Tue 02 Dec 2025 07:51:29 +0000 Manifest this update: Tue 02 Dec 2025 07:46:29 +0000 Manifest next update: Fri 05 Dec 2025 11:38:29 +0000 Files and hashes: 1: 3130332e3139302e33302e302f32342d3234203d3e20313439383931.roa (hash: On7TkaewDfG3q672VhzDkhOW6Lq6Z1WuztT7xPC6+6E=) 2: 3130332e3139302e33312e302f32342d3234203d3e20313439383931.roa (hash: f2ET0xnRE9tVugcZTeUjwdpllzI9UCr68L6pTafrq5U=) 3: 146B42876A5C2AB0705F67F1A3918D76984989AF.crl (hash: /O4ZgUlvtmmA01daifYwNBu7ZV+9Q6ryT/MqEF/YtJ8=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/1dee126f-8192-4d28-b25e-deabdb79eb21/0/146B42876A5C2AB0705F67F1A3918D76984989AF.crl rsync://repo-rpki.idnic.net/repo/1dee126f-8192-4d28-b25e-deabdb79eb21/0/146B42876A5C2AB0705F67F1A3918D76984989AF.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/146B42876A5C2AB0705F67F1A3918D76984989AF.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 05 Dec 2025 11:38:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 40:98:8b:35:93:60:81:cd:34:a8:d3:58:be:85:1b:37:0d:82:47:44 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=146B42876A5C2AB0705F67F1A3918D76984989AF Validity Not Before: Dec 2 07:46:29 2025 GMT Not After : Dec 5 11:38:29 2025 GMT Subject: CN=986B7F1295640461D0756E94300E526F791BCC61 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d7:1d:78:30:14:96:d3:53:70:16:4d:42:96:e9: 05:d9:c7:3b:e9:0a:73:48:ec:02:5f:be:be:89:78: 37:c8:d6:b7:9a:0f:2b:0d:4e:3d:9f:70:96:2e:4c: f0:d5:1e:4f:0d:8b:d2:8a:45:39:d8:7c:d9:07:67: 3a:35:7d:ad:91:35:55:6c:1a:3b:93:4f:79:b0:25: 00:43:68:0c:97:04:22:fc:90:5c:46:e3:fe:d4:ef: 43:53:a4:43:93:81:4d:b8:60:dd:53:ff:bb:45:ec: fd:d1:64:64:92:33:3a:c0:c6:8f:0b:83:9b:f8:cb: 48:16:da:9a:20:af:03:da:81:6f:8c:b5:31:6d:d9: 8c:bf:a6:e0:a3:ff:4c:e3:e6:16:57:d4:58:30:ae: 01:c3:11:31:48:cf:3b:9f:e4:c9:04:03:8f:f9:99: dc:87:1f:cb:49:74:91:7f:d0:0e:38:08:20:b5:f7: e2:4b:eb:ee:07:46:21:89:87:50:5d:22:13:26:cb: aa:34:22:a3:cf:47:31:c2:cd:0d:11:a5:df:fa:c0: 66:c1:4d:39:b8:ea:82:70:6a:eb:17:75:45:ea:12: d8:e7:cb:05:25:62:f9:0e:ab:df:c9:d0:d3:1e:3c: 1d:27:88:c4:a1:9c:7b:7b:d2:3c:3a:5a:4a:09:f5: 9a:0d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 98:6B:7F:12:95:64:04:61:D0:75:6E:94:30:0E:52:6F:79:1B:CC:61 X509v3 Authority Key Identifier: keyid:14:6B:42:87:6A:5C:2A:B0:70:5F:67:F1:A3:91:8D:76:98:49:89:AF X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/1dee126f-8192-4d28-b25e-deabdb79eb21/0/146B42876A5C2AB0705F67F1A3918D76984989AF.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/146B42876A5C2AB0705F67F1A3918D76984989AF.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/1dee126f-8192-4d28-b25e-deabdb79eb21/0/146B42876A5C2AB0705F67F1A3918D76984989AF.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 28:c7:ae:28:71:c9:d3:dc:6b:68:a1:49:9e:9e:b0:ee:71:70: 7a:eb:fa:cb:a0:28:d4:1f:20:3f:5d:49:c9:c0:c5:9b:62:28: 64:d7:9b:99:82:59:46:a7:aa:77:05:fd:d0:79:7f:33:c0:34: e1:1a:5a:c7:01:98:6e:1b:9a:01:3b:11:7e:8a:5f:3a:bb:c0: 27:c6:d7:0d:5d:fe:bc:4c:ec:c3:70:23:95:4f:96:f0:1e:af: b8:77:f9:c7:ff:3a:59:f2:6b:ad:37:07:78:40:cf:b7:f8:27: 1c:33:ba:7e:a4:e0:cb:c4:14:65:d8:a1:64:5c:da:38:02:23: f1:98:aa:1a:0c:d6:f9:f4:f3:5a:36:d4:3d:f2:f1:95:64:f9: 5c:3a:05:26:5c:14:11:47:ce:2d:b5:ef:da:05:e7:13:d5:f4: b5:eb:50:1e:a5:e5:f1:6c:0e:3f:f2:6a:25:ec:8f:b3:c6:b3: 38:1c:1c:ae:a3:53:8a:33:42:a2:b2:38:98:aa:ab:e5:dc:ee: 0b:a1:56:b2:72:b6:c2:f0:c0:ff:f3:b1:62:4c:94:a6:2d:8e: b9:3d:26:77:58:2b:c7:3a:26:c0:85:3a:52:53:f7:f0:41:ab: c7:67:65:19:fc:13:b5:13:6e:6a:2d:fa:d7:e2:7a:1c:57:98: 76:df:5d:dc -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUQJiLNZNggc00qNNYvoUbNw2CR0QwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMTQ2QjQyODc2QTVDMkFCMDcwNUY2N0YxQTM5MThENzY5 ODQ5ODlBRjAeFw0yNTEyMDIwNzQ2MjlaFw0yNTEyMDUxMTM4MjlaMDMxMTAvBgNV BAMTKDk4NkI3RjEyOTU2NDA0NjFEMDc1NkU5NDMwMEU1MjZGNzkxQkNDNjEwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDXHXgwFJbTU3AWTUKW6QXZxzvp CnNI7AJfvr6JeDfI1reaDysNTj2fcJYuTPDVHk8Ni9KKRTnYfNkHZzo1fa2RNVVs GjuTT3mwJQBDaAyXBCL8kFxG4/7U70NTpEOTgU24YN1T/7tF7P3RZGSSMzrAxo8L g5v4y0gW2pogrwPagW+MtTFt2Yy/puCj/0zj5hZX1FgwrgHDETFIzzuf5MkEA4/5 mdyHH8tJdJF/0A44CCC19+JL6+4HRiGJh1BdIhMmy6o0IqPPRzHCzQ0Rpd/6wGbB TTm46oJwausXdUXqEtjnywUlYvkOq9/J0NMePB0niMShnHt70jw6WkoJ9ZoNAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUmGt/EpVkBGHQdW6UMA5Sb3kbzGEwHwYDVR0j BBgwFoAUFGtCh2pcKrBwX2fxo5GNdphJia8wDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby8x ZGVlMTI2Zi04MTkyLTRkMjgtYjI1ZS1kZWFiZGI3OWViMjEvMC8xNDZCNDI4NzZB NUMyQUIwNzA1RjY3RjFBMzkxOEQ3Njk4NDk4OUFGLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvMTQ2QjQyODc2QTVDMkFCMDcwNUY2N0YxQTM5MThENzY5ODQ5 ODlBRi5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vMWRlZTEyNmYtODE5Mi00ZDI4LWIy NWUtZGVhYmRiNzllYjIxLzAvMTQ2QjQyODc2QTVDMkFCMDcwNUY2N0YxQTM5MThE NzY5ODQ5ODlBRi5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBACjHrihxydPca2ihSZ6esO5xcHrr+sugKNQf ID9dScnAxZtiKGTXm5mCWUanqncF/dB5fzPANOEaWscBmG4bmgE7EX6KXzq7wCfG 1w1d/rxM7MNwI5VPlvAer7h3+cf/Olnya603B3hAz7f4Jxwzun6k4MvEFGXYoWRc 2jgCI/GYqhoM1vn081o21D3y8ZVk+Vw6BSZcFBFHzi2179oF5xPV9LXrUB6l5fFs Dj/yaiXsj7PGszgcHK6jU4ozQqKyOJiqq+Xc7guhVrJytsLwwP/zsWJMlKYtjrk9 JndYK8c6JsCFOlJT9/BBq8dnZRn8E7UTbmot+tfiehxXmHbfXdw= -----END CERTIFICATE-----Generated at Wed Dec 3 14:57:23 2025 by rpki-client