This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

$ rpki-client -vvf repo-rpki.idnic.net/repo/633978f8-aeab-427a-bd75-2cdf1d9eb517/0/466F8934F3FED9355C9ED09E3826CBE32B25D402.mft
File: 466F8934F3FED9355C9ED09E3826CBE32B25D402.mft (raw, json)
Hash identifier: DVIXvhzp/LZTi5+T1MibLUBGOdgQgjeWBBS7xhmbvbY=
Subject key identifier: 9E:C5:4E:86:D3:06:4D:79:CE:47:8E:73:2A:88:83:D6:20:45:CA:E3
Authority key identifier: 46:6F:89:34:F3:FE:D9:35:5C:9E:D0:9E:38:26:CB:E3:2B:25:D4:02
Certificate issuer: /CN=466F8934F3FED9355C9ED09E3826CBE32B25D402
Certificate serial: 301C5DAE2A340687CBB2589200178120402CC20E
Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/466F8934F3FED9355C9ED09E3826CBE32B25D402.cer
Subject info access: rsync://repo-rpki.idnic.net/repo/633978f8-aeab-427a-bd75-2cdf1d9eb517/0/466F8934F3FED9355C9ED09E3826CBE32B25D402.mft
Manifest number: 047C
Signing time: Mon 01 Dec 2025 03:11:05 +0000
Manifest this update: Mon 01 Dec 2025 03:06:05 +0000
Manifest next update: Thu 04 Dec 2025 14:37:05 +0000
Files and hashes: 1: 466F8934F3FED9355C9ED09E3826CBE32B25D402.crl (hash: SCPMXk8Y96U0BBAJg436kNobClYve1AyFqveNlVQwoA=)
2: 3130332e3136322e36302e302f32332d3234203d3e20313431363438.roa (hash: 4Z5eDrrHZmqs6QxVIkyuY07V0t6QahOws6as1cnmdoY=)
Validation: OK
Signature path: rsync://repo-rpki.idnic.net/repo/633978f8-aeab-427a-bd75-2cdf1d9eb517/0/466F8934F3FED9355C9ED09E3826CBE32B25D402.crl
rsync://repo-rpki.idnic.net/repo/633978f8-aeab-427a-bd75-2cdf1d9eb517/0/466F8934F3FED9355C9ED09E3826CBE32B25D402.mft
rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/466F8934F3FED9355C9ED09E3826CBE32B25D402.cer
rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl
rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Thu 04 Dec 2025 14:37:05 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
30:1c:5d:ae:2a:34:06:87:cb:b2:58:92:00:17:81:20:40:2c:c2:0e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=466F8934F3FED9355C9ED09E3826CBE32B25D402
Validity
Not Before: Dec 1 03:06:05 2025 GMT
Not After : Dec 4 14:37:05 2025 GMT
Subject: CN=9EC54E86D3064D79CE478E732A8883D62045CAE3
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:aa:06:48:36:e1:42:f1:68:a6:ef:42:51:4c:02:
40:53:e3:f5:24:e1:45:85:5b:cd:3f:db:54:b0:25:
3a:34:3d:40:6b:8c:ab:e9:b6:58:68:6b:60:79:19:
f4:32:bb:26:2e:e9:16:3a:67:80:f1:87:44:ba:81:
8d:c3:1b:e1:da:2b:fa:af:b2:4f:fa:6c:ef:57:48:
bd:a0:4a:45:a7:10:ae:8e:86:d7:be:a2:c2:55:4a:
d0:65:46:c5:40:12:c3:02:96:48:6e:9d:4d:90:72:
60:b2:bf:89:11:b3:b6:22:b5:9f:c8:cb:33:a1:0b:
9a:0d:c2:56:8a:cb:5c:15:d6:f4:b5:2a:27:73:ff:
65:39:16:0a:7e:cd:6e:19:75:bf:0a:d8:ed:4b:2d:
57:2e:dd:3f:5a:86:56:2a:e9:09:c9:87:ba:99:db:
1c:31:75:76:70:c2:ee:b7:7c:0a:fb:c1:30:7a:a9:
f5:a3:c4:08:53:19:86:34:68:ad:f9:f7:08:fa:f6:
5c:9b:f1:52:0f:bd:53:12:8c:1b:e9:2b:a0:71:9d:
8f:d0:cf:d6:cd:04:f2:c9:5d:1f:53:9a:86:99:5f:
b1:30:cd:64:ee:75:44:d8:e8:80:d5:18:55:fa:55:
89:b2:a7:f7:d4:16:5b:f3:5a:06:8c:54:cf:8d:13:
3d:73
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
9E:C5:4E:86:D3:06:4D:79:CE:47:8E:73:2A:88:83:D6:20:45:CA:E3
X509v3 Authority Key Identifier:
keyid:46:6F:89:34:F3:FE:D9:35:5C:9E:D0:9E:38:26:CB:E3:2B:25:D4:02
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://repo-rpki.idnic.net/repo/633978f8-aeab-427a-bd75-2cdf1d9eb517/0/466F8934F3FED9355C9ED09E3826CBE32B25D402.crl
Authority Information Access:
CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/466F8934F3FED9355C9ED09E3826CBE32B25D402.cer
Subject Information Access:
Signed Object - URI:rsync://repo-rpki.idnic.net/repo/633978f8-aeab-427a-bd75-2cdf1d9eb517/0/466F8934F3FED9355C9ED09E3826CBE32B25D402.mft
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
6d:c9:a7:3d:a3:2d:86:47:22:eb:4f:8d:3d:61:c7:41:9e:77:
59:28:0d:72:22:87:b2:64:1f:80:db:77:78:33:e8:25:99:33:
d8:bf:b1:76:19:46:54:22:fc:a9:7c:4e:53:43:52:22:56:b4:
fe:5e:c0:5c:a4:4b:72:fb:e1:6c:ba:82:fd:a3:9c:ec:3a:4d:
2f:cd:23:fb:3b:5a:24:dd:f0:75:0d:51:65:c9:db:16:ed:bc:
da:d7:59:d9:4e:f0:1b:d6:26:79:a0:a5:39:e4:25:71:26:de:
f8:d8:48:02:2a:a4:9c:2c:f2:7e:16:c0:c8:a7:25:37:40:11:
be:a2:52:80:16:07:f5:e1:a2:91:0c:37:9f:fa:67:42:bd:8e:
dc:ee:95:b8:28:ee:d3:e1:d3:86:70:a5:7d:e4:0f:df:44:a0:
0b:cc:84:2f:57:c8:35:b5:0b:93:f5:69:5f:d7:9b:c4:cd:15:
ee:d7:f4:10:b8:f1:54:e9:72:a1:d1:1d:cc:de:31:41:13:59:
0c:73:30:b6:90:0a:ed:b1:cb:3e:2d:07:41:6e:7e:32:a9:86:
dc:a4:03:4d:8e:c4:be:eb:52:18:11:73:b5:b7:40:7e:e5:4b:
72:78:d6:0b:72:f3:d9:43:bf:04:ad:fc:47:fd:4d:1d:f2:bb:
a9:1d:89:ad
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Dec 3 15:30:33 2025 by rpki-client