This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf repo-rpki.idnic.net/repo/9d4cffe0-1f94-43d2-81ee-80030b5c3746/0/146D9338596ECF1F976FB37F330D8C0CD48414C9.mft File: 146D9338596ECF1F976FB37F330D8C0CD48414C9.mft (raw, json) Hash identifier: 9Othn1F72xhisoMmyWykblHZDsAp6a3NsyhF6QWvy9M= Subject key identifier: A0:60:D6:6F:B1:8E:2D:46:7F:05:35:0B:CC:2A:60:97:77:D1:96:0C Authority key identifier: 14:6D:93:38:59:6E:CF:1F:97:6F:B3:7F:33:0D:8C:0C:D4:84:14:C9 Certificate issuer: /CN=146D9338596ECF1F976FB37F330D8C0CD48414C9 Certificate serial: 67EDB65DD2BE447017CB8C33E495D4652CF8D675 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/146D9338596ECF1F976FB37F330D8C0CD48414C9.cer Subject info access: rsync://repo-rpki.idnic.net/repo/9d4cffe0-1f94-43d2-81ee-80030b5c3746/0/146D9338596ECF1F976FB37F330D8C0CD48414C9.mft Manifest number: 025A Signing time: Tue 02 Dec 2025 08:00:52 +0000 Manifest this update: Tue 02 Dec 2025 07:55:52 +0000 Manifest next update: Fri 05 Dec 2025 19:03:52 +0000 Files and hashes: 1: 3130332e3135312e37322e302f32332d3234203d3e20313430343039.roa (hash: d+kI3rz6/1ncnjpxf/67wx7VsG4KrN+uZWF3vlmupvY=) 2: 146D9338596ECF1F976FB37F330D8C0CD48414C9.crl (hash: 66RVYCDhMp7bqvnJTysmvjzi9gsZjTzpm2fxoHCqVws=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/9d4cffe0-1f94-43d2-81ee-80030b5c3746/0/146D9338596ECF1F976FB37F330D8C0CD48414C9.crl rsync://repo-rpki.idnic.net/repo/9d4cffe0-1f94-43d2-81ee-80030b5c3746/0/146D9338596ECF1F976FB37F330D8C0CD48414C9.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/146D9338596ECF1F976FB37F330D8C0CD48414C9.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 05 Dec 2025 19:03:52 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 67:ed:b6:5d:d2:be:44:70:17:cb:8c:33:e4:95:d4:65:2c:f8:d6:75 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=146D9338596ECF1F976FB37F330D8C0CD48414C9 Validity Not Before: Dec 2 07:55:52 2025 GMT Not After : Dec 5 19:03:52 2025 GMT Subject: CN=A060D66FB18E2D467F05350BCC2A609777D1960C Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c2:7a:d3:29:22:2a:3e:ca:c2:dd:cc:3d:50:be: ae:8a:5e:d6:8e:60:34:e6:c0:c2:ea:90:d0:fc:e7: 75:47:af:0e:84:5d:e2:9c:82:77:f0:21:8d:db:46: 85:aa:7e:fe:d4:05:2a:01:a0:d6:49:0b:5b:ab:d4: 1d:2a:14:ed:12:3c:22:5d:c7:4a:ba:ec:19:a3:7c: a9:b0:39:e8:84:21:5e:c1:84:97:b9:b1:76:d2:24: 68:21:16:db:4e:a0:71:08:97:71:be:25:81:fa:ee: ee:5c:4c:93:34:36:d6:ae:ba:90:c4:c3:8e:74:71: 71:8b:59:6e:da:29:64:ad:6a:5e:b4:e2:c3:3c:3b: 24:47:0b:45:9f:2e:47:3a:9c:b1:63:c4:b7:6c:69: 4f:18:20:0f:51:68:b8:ba:c0:1e:71:52:56:ef:7b: c2:62:bb:6b:1b:23:f5:0a:b0:7b:d7:cf:b0:e0:d0: 1a:38:ed:1d:7a:ef:77:42:7c:fd:91:e4:3c:39:24: 48:76:5b:a9:89:52:e3:96:98:ac:74:d0:f6:28:02: 2f:2a:dc:57:02:18:e8:50:a4:2c:64:0d:44:e6:9e: 0e:15:6c:f1:fb:73:be:4d:8c:41:3d:f3:8d:ca:a3: 54:3d:cf:e9:5f:1d:6e:53:ee:c2:c4:bc:7c:0f:4f: 04:c9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: A0:60:D6:6F:B1:8E:2D:46:7F:05:35:0B:CC:2A:60:97:77:D1:96:0C X509v3 Authority Key Identifier: keyid:14:6D:93:38:59:6E:CF:1F:97:6F:B3:7F:33:0D:8C:0C:D4:84:14:C9 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/9d4cffe0-1f94-43d2-81ee-80030b5c3746/0/146D9338596ECF1F976FB37F330D8C0CD48414C9.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/146D9338596ECF1F976FB37F330D8C0CD48414C9.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/9d4cffe0-1f94-43d2-81ee-80030b5c3746/0/146D9338596ECF1F976FB37F330D8C0CD48414C9.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 69:f5:c9:d1:57:54:88:45:a5:39:46:2f:e4:22:b2:76:cf:c9: bd:a7:fe:28:1c:67:85:0a:2f:1c:a4:b2:ad:ee:1a:94:f9:5c: 91:d4:6b:79:9c:62:d1:ec:cb:8b:3b:99:ee:95:6d:57:4f:a5: 5b:e8:b8:68:28:b5:f7:e2:2d:28:ad:e2:b0:6b:5a:d1:64:59: 8e:63:d4:36:39:eb:5e:04:fe:0d:13:aa:fa:cb:b6:e5:4b:63: 7f:c0:e4:a4:5d:fd:f5:9c:d9:3a:1a:58:ef:38:d6:da:e7:83: 3d:d0:cf:6f:7f:09:94:8e:95:00:5f:bb:8c:0c:b6:77:95:15: a1:33:33:06:3e:11:e3:a2:6f:b9:fb:69:a2:79:e7:c7:89:c9: 87:99:aa:6d:97:08:44:64:f9:cb:a6:4e:84:e9:1a:6d:de:63: 49:42:9a:d7:68:03:00:f0:0a:09:8b:13:43:66:a8:d3:55:b3: f5:52:be:58:a0:80:6f:05:a9:85:2a:5d:22:29:bb:df:41:ae: b6:af:20:cd:42:92:6b:a5:4f:b4:72:e2:2b:c6:dc:0a:ca:af: 89:d7:45:4c:b1:1f:4b:8a:c6:3f:5a:d1:2e:4b:c8:c1:bd:10: b0:1c:42:61:58:33:58:e3:f4:45:2a:46:bb:28:e4:df:35:6b: ea:ad:97:cf -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUZ+22XdK+RHAXy4wz5JXUZSz41nUwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMTQ2RDkzMzg1OTZFQ0YxRjk3NkZCMzdGMzMwRDhDMENE NDg0MTRDOTAeFw0yNTEyMDIwNzU1NTJaFw0yNTEyMDUxOTAzNTJaMDMxMTAvBgNV BAMTKEEwNjBENjZGQjE4RTJENDY3RjA1MzUwQkNDMkE2MDk3NzdEMTk2MEMwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDCetMpIio+ysLdzD1Qvq6KXtaO YDTmwMLqkND853VHrw6EXeKcgnfwIY3bRoWqfv7UBSoBoNZJC1ur1B0qFO0SPCJd x0q67BmjfKmwOeiEIV7BhJe5sXbSJGghFttOoHEIl3G+JYH67u5cTJM0NtauupDE w450cXGLWW7aKWStal604sM8OyRHC0WfLkc6nLFjxLdsaU8YIA9RaLi6wB5xUlbv e8Jiu2sbI/UKsHvXz7Dg0Bo47R1673dCfP2R5Dw5JEh2W6mJUuOWmKx00PYoAi8q 3FcCGOhQpCxkDUTmng4VbPH7c75NjEE9843Ko1Q9z+lfHW5T7sLEvHwPTwTJAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUoGDWb7GOLUZ/BTULzCpgl3fRlgwwHwYDVR0j BBgwFoAUFG2TOFluzx+Xb7N/Mw2MDNSEFMkwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby85 ZDRjZmZlMC0xZjk0LTQzZDItODFlZS04MDAzMGI1YzM3NDYvMC8xNDZEOTMzODU5 NkVDRjFGOTc2RkIzN0YzMzBEOEMwQ0Q0ODQxNEM5LmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvMTQ2RDkzMzg1OTZFQ0YxRjk3NkZCMzdGMzMwRDhDMENENDg0 MTRDOS5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vOWQ0Y2ZmZTAtMWY5NC00M2QyLTgx ZWUtODAwMzBiNWMzNzQ2LzAvMTQ2RDkzMzg1OTZFQ0YxRjk3NkZCMzdGMzMwRDhD MENENDg0MTRDOS5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAGn1ydFXVIhFpTlGL+QisnbPyb2n/igcZ4UK Lxyksq3uGpT5XJHUa3mcYtHsy4s7me6VbVdPpVvouGgotffiLSit4rBrWtFkWY5j 1DY5614E/g0TqvrLtuVLY3/A5KRd/fWc2ToaWO841trngz3Qz29/CZSOlQBfu4wM tneVFaEzMwY+EeOib7n7aaJ558eJyYeZqm2XCERk+cumToTpGm3eY0lCmtdoAwDw CgmLE0NmqNNVs/VSvliggG8FqYUqXSIpu99BrravIM1CkmulT7Ry4ivG3ArKr4nX RUyxH0uKxj9a0S5LyMG9ELAcQmFYM1jj9EUqRrso5N81a+qtl88= -----END CERTIFICATE-----Generated at Wed Dec 3 14:43:44 2025 by rpki-client