This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

$ rpki-client -vvf repo-rpki.idnic.net/repo/20481e49-f4c1-4c13-94b7-0701c92c3450/0/46E596CAE0AEADA8B4135425216E8783D92E6C76.mft
File: 46E596CAE0AEADA8B4135425216E8783D92E6C76.mft (raw, json)
Hash identifier: gdmnGpGwZps+0vQbOmHTkDFySGsK1ABCQJE82nhyB2o=
Subject key identifier: 9E:36:51:4F:43:25:1F:3F:2C:D7:A6:79:9C:CB:E5:E7:2B:D7:29:37
Authority key identifier: 46:E5:96:CA:E0:AE:AD:A8:B4:13:54:25:21:6E:87:83:D9:2E:6C:76
Certificate issuer: /CN=46E596CAE0AEADA8B4135425216E8783D92E6C76
Certificate serial: 239A08FE3B887317B24D13CB20BFF0BAB22B0350
Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/46E596CAE0AEADA8B4135425216E8783D92E6C76.cer
Subject info access: rsync://repo-rpki.idnic.net/repo/20481e49-f4c1-4c13-94b7-0701c92c3450/0/46E596CAE0AEADA8B4135425216E8783D92E6C76.mft
Manifest number: 018C
Signing time: Thu 18 Dec 2025 01:32:17 +0000
Manifest this update: Thu 18 Dec 2025 01:27:17 +0000
Manifest next update: Sun 21 Dec 2025 13:23:17 +0000
Files and hashes: 1: 3130332e3234322e37392e302f32342d3234203d3e20333936393832.roa (hash: n+/j+X0EHKdzJwOO4f/AMp89n5rbo9zZecMjnTepVSI=)
2: 3130332e3234322e37392e302f32342d3234203d3e20313531353330.roa (hash: 6h0PS6sD0cpo/dFFiqhzCPsiuizhkV5A6x6l4CJlcqA=)
3: 46E596CAE0AEADA8B4135425216E8783D92E6C76.crl (hash: iJw3sFYIupsOV3uPhU5kaWPVb/HFrxA/uYk82uco4g4=)
Validation: OK
Signature path: rsync://repo-rpki.idnic.net/repo/20481e49-f4c1-4c13-94b7-0701c92c3450/0/46E596CAE0AEADA8B4135425216E8783D92E6C76.crl
rsync://repo-rpki.idnic.net/repo/20481e49-f4c1-4c13-94b7-0701c92c3450/0/46E596CAE0AEADA8B4135425216E8783D92E6C76.mft
rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/46E596CAE0AEADA8B4135425216E8783D92E6C76.cer
rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl
rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Sun 21 Dec 2025 13:23:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
23:9a:08:fe:3b:88:73:17:b2:4d:13:cb:20:bf:f0:ba:b2:2b:03:50
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=46E596CAE0AEADA8B4135425216E8783D92E6C76
Validity
Not Before: Dec 18 01:27:17 2025 GMT
Not After : Dec 21 13:23:17 2025 GMT
Subject: CN=9E36514F43251F3F2CD7A6799CCBE5E72BD72937
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:be:e4:b9:fc:d0:58:bf:c0:30:c7:6d:a4:5a:5e:
e3:0f:d7:1d:22:50:68:7a:7e:09:a2:c2:a8:87:eb:
80:10:77:68:b6:e1:36:98:9d:64:93:a9:03:bd:9e:
70:c1:59:82:f4:cc:b1:57:3b:30:e7:be:fb:a8:34:
00:4d:6f:84:ee:1c:90:34:ba:35:95:05:9d:d4:57:
ed:60:c7:75:aa:70:06:8b:33:31:43:56:ba:77:a9:
65:93:d6:0e:da:62:32:b6:22:39:48:e2:7f:09:5c:
43:9c:c8:1a:6b:ae:c9:b5:d9:4f:db:3c:f7:f8:f1:
e7:c2:09:8d:18:fe:8e:2f:17:11:25:73:98:fc:4e:
8b:e5:79:e0:69:8f:eb:d1:ec:f4:8c:86:45:cd:a7:
6d:b1:39:da:7b:e4:96:9b:08:3d:a4:5b:f4:a8:03:
70:de:29:e5:cb:23:60:8a:75:cc:5c:cd:8a:67:fa:
7e:94:c4:ce:5f:eb:87:21:32:28:e1:2c:17:f2:9a:
c6:e6:ea:c6:38:48:25:a8:1a:f9:91:0a:97:d9:db:
27:04:dc:06:8a:36:c1:39:dc:f2:17:5e:a9:d0:9a:
2a:5e:19:ed:9a:6e:af:21:b2:48:6a:1c:6a:63:33:
97:3e:6c:f8:48:94:0f:83:02:62:ce:31:8c:8c:d8:
bb:ab
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
9E:36:51:4F:43:25:1F:3F:2C:D7:A6:79:9C:CB:E5:E7:2B:D7:29:37
X509v3 Authority Key Identifier:
keyid:46:E5:96:CA:E0:AE:AD:A8:B4:13:54:25:21:6E:87:83:D9:2E:6C:76
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://repo-rpki.idnic.net/repo/20481e49-f4c1-4c13-94b7-0701c92c3450/0/46E596CAE0AEADA8B4135425216E8783D92E6C76.crl
Authority Information Access:
CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/46E596CAE0AEADA8B4135425216E8783D92E6C76.cer
Subject Information Access:
Signed Object - URI:rsync://repo-rpki.idnic.net/repo/20481e49-f4c1-4c13-94b7-0701c92c3450/0/46E596CAE0AEADA8B4135425216E8783D92E6C76.mft
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
7f:a3:83:9e:61:c3:cf:a0:54:c0:d3:03:48:94:3d:e9:b5:90:
1f:9a:35:4f:50:b5:81:6b:38:36:22:38:e6:b3:bd:d0:5a:d2:
ad:23:7f:a5:ea:99:9c:8f:f8:9b:7a:d2:ab:bb:a1:54:20:5a:
00:fc:8e:63:6d:ca:25:15:15:b6:b1:24:58:c0:fc:d2:b7:bd:
17:bf:24:fa:ff:0a:a6:f3:e5:cf:ca:ce:7e:78:00:4f:39:f4:
0c:72:98:57:a4:3f:9a:c3:b3:d6:d5:00:66:61:4e:51:21:2d:
5a:7a:26:41:95:e7:e2:46:bf:d1:9d:e8:ea:ef:64:19:57:6e:
e2:65:20:c9:1c:d8:f7:c6:d6:74:e4:01:e7:de:15:b9:78:01:
a1:e5:81:cb:d9:a1:72:8b:d4:fb:94:9d:c5:b1:43:9d:59:53:
f7:31:8c:10:e5:a5:ec:ac:fa:2c:1f:e8:d4:a6:7b:8c:41:ca:
c4:2a:94:53:54:72:98:f8:89:4e:6d:76:49:99:e1:d9:0a:2c:
be:fb:f9:6a:15:b9:40:20:10:d2:42:be:97:1a:4b:63:91:88:
2e:aa:3c:36:d9:ff:1b:88:92:6b:10:38:a2:bc:a4:eb:f2:1c:
a3:37:62:41:07:ea:40:8d:5f:41:33:b0:aa:f8:d4:9e:d5:3b:
a8:33:b6:f3
-----BEGIN CERTIFICATE-----
MIIFMjCCBBqgAwIBAgIUI5oI/juIcxeyTRPLIL/wurIrA1AwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoNDZFNTk2Q0FFMEFFQURBOEI0MTM1NDI1MjE2RTg3ODNE
OTJFNkM3NjAeFw0yNTEyMTgwMTI3MTdaFw0yNTEyMjExMzIzMTdaMDMxMTAvBgNV
BAMTKDlFMzY1MTRGNDMyNTFGM0YyQ0Q3QTY3OTlDQ0JFNUU3MkJENzI5MzcwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC+5Ln80Fi/wDDHbaRaXuMP1x0i
UGh6fgmiwqiH64AQd2i24TaYnWSTqQO9nnDBWYL0zLFXOzDnvvuoNABNb4TuHJA0
ujWVBZ3UV+1gx3WqcAaLMzFDVrp3qWWT1g7aYjK2IjlI4n8JXEOcyBprrsm12U/b
PPf48efCCY0Y/o4vFxElc5j8TovleeBpj+vR7PSMhkXNp22xOdp75JabCD2kW/So
A3DeKeXLI2CKdcxczYpn+n6UxM5f64chMijhLBfymsbm6sY4SCWoGvmRCpfZ2ycE
3AaKNsE53PIXXqnQmipeGe2abq8hskhqHGpjM5c+bPhIlA+DAmLOMYyM2LurAgMB
AAGjggI8MIICODAdBgNVHQ4EFgQUnjZRT0MlHz8s16Z5nMvl5yvXKTcwHwYDVR0j
BBgwFoAURuWWyuCurai0E1QlIW6Hg9kubHYwDgYDVR0PAQH/BAQDAgeAMIGFBgNV
HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby8y
MDQ4MWU0OS1mNGMxLTRjMTMtOTRiNy0wNzAxYzkyYzM0NTAvMC80NkU1OTZDQUUw
QUVBREE4QjQxMzU0MjUyMTZFODc4M0Q5MkU2Qzc2LmNybDB0BggrBgEFBQcBAQRo
MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv
L0lETklDLUlELzIvNDZFNTk2Q0FFMEFFQURBOEI0MTM1NDI1MjE2RTg3ODNEOTJF
NkM3Ni5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6
Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vMjA0ODFlNDktZjRjMS00YzEzLTk0
YjctMDcwMWM5MmMzNDUwLzAvNDZFNTk2Q0FFMEFFQURBOEI0MTM1NDI1MjE2RTg3
ODNEOTJFNkM3Ni5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF
BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC
BQAwDQYJKoZIhvcNAQELBQADggEBAH+jg55hw8+gVMDTA0iUPem1kB+aNU9QtYFr
ODYiOOazvdBa0q0jf6XqmZyP+Jt60qu7oVQgWgD8jmNtyiUVFbaxJFjA/NK3vRe/
JPr/Cqbz5c/Kzn54AE859AxymFekP5rDs9bVAGZhTlEhLVp6JkGV5+JGv9Gd6Orv
ZBlXbuJlIMkc2PfG1nTkAefeFbl4AaHlgcvZoXKL1PuUncWxQ51ZU/cxjBDlpeys
+iwf6NSme4xBysQqlFNUcpj4iU5tdkmZ4dkKLL77+WoVuUAgENJCvpcaS2ORiC6q
PDbZ/xuIkmsQOKK8pOvyHKM3YkEH6kCNX0EzsKr41J7VO6gztvM=
-----END CERTIFICATE-----
Generated at Fri Dec 19 09:30:45 2025 by rpki-client