This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf repo-rpki.idnic.net/repo/9dfb3992-1d2f-46ce-886a-8e22a32611f8/0/0246DD14AF68F5E5512ABD88D1DB7507E6913C96.mft File: 0246DD14AF68F5E5512ABD88D1DB7507E6913C96.mft (raw, json) Hash identifier: Xs3/2gj47OvXcfxLXc4iJgCIRjjr9wyZ6wDfo4HsjNY= Subject key identifier: 48:B1:E9:21:3E:72:CB:96:B9:46:81:6A:9C:56:E4:2F:90:5F:49:26 Authority key identifier: 02:46:DD:14:AF:68:F5:E5:51:2A:BD:88:D1:DB:75:07:E6:91:3C:96 Certificate issuer: /CN=0246DD14AF68F5E5512ABD88D1DB7507E6913C96 Certificate serial: 06B57185463A7779718B0A0BEB9F987BAF82AB59 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/0246DD14AF68F5E5512ABD88D1DB7507E6913C96.cer Subject info access: rsync://repo-rpki.idnic.net/repo/9dfb3992-1d2f-46ce-886a-8e22a32611f8/0/0246DD14AF68F5E5512ABD88D1DB7507E6913C96.mft Manifest number: 01BA Signing time: Wed 17 Dec 2025 22:21:03 +0000 Manifest this update: Wed 17 Dec 2025 22:16:03 +0000 Manifest next update: Sun 21 Dec 2025 03:35:03 +0000 Files and hashes: 1: 323430373a366434303a3a2f33322d3332203d3e203538383230.roa (hash: xAh6iVTptzdWaiN0lzQItEzdBxkBB7Jmc75/4/WIUXc=) 2: 323430373a366434303a3a2f33322d3438203d3e203538383230.roa (hash: 36JNQoWoEcG0XddMVhG6Y5xuDi4KHB52Q2RH2cUrQzc=) 3: 3130332e3136372e3133362e302f32332d3234203d3e20313339343536.roa (hash: obYtUl2lQpNdpgObPXIZcvY8GGanlMGkMuiOZqIlQPc=) 4: 0246DD14AF68F5E5512ABD88D1DB7507E6913C96.crl (hash: kXSFaEycx6yZK6RPu8JeNqVgGRpYxjtqmV3oLE0j6Qc=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/9dfb3992-1d2f-46ce-886a-8e22a32611f8/0/0246DD14AF68F5E5512ABD88D1DB7507E6913C96.crl rsync://repo-rpki.idnic.net/repo/9dfb3992-1d2f-46ce-886a-8e22a32611f8/0/0246DD14AF68F5E5512ABD88D1DB7507E6913C96.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/0246DD14AF68F5E5512ABD88D1DB7507E6913C96.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 21 Dec 2025 03:35:03 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 06:b5:71:85:46:3a:77:79:71:8b:0a:0b:eb:9f:98:7b:af:82:ab:59 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=0246DD14AF68F5E5512ABD88D1DB7507E6913C96 Validity Not Before: Dec 17 22:16:03 2025 GMT Not After : Dec 21 03:35:03 2025 GMT Subject: CN=48B1E9213E72CB96B946816A9C56E42F905F4926 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d9:32:df:f7:48:b7:24:38:21:cb:2c:9b:4b:ca: b5:07:bc:0e:b7:f2:eb:40:5d:e8:85:22:fc:ab:47: 2f:61:ed:fb:30:b8:2f:cd:8a:40:16:59:74:97:a5: fe:7a:cc:37:7c:37:7f:2e:95:cf:7f:99:a7:aa:b2: 38:26:5f:ea:ee:fc:a4:c5:78:64:c9:15:bf:77:3a: a1:0f:a8:38:0d:95:80:7a:c3:58:4a:fd:3f:08:b9: 2f:1f:de:af:17:06:5b:94:7a:89:c0:5f:f9:c6:07: 6b:43:c9:ad:48:04:67:6f:b1:20:69:7a:b3:dd:0d: 55:a1:63:e4:d9:1b:51:b6:e7:3d:6f:b2:c8:31:ce: 2b:ad:aa:3d:87:33:55:85:3e:b1:e9:68:11:3a:f8: 38:57:2c:0a:91:fe:f2:05:82:25:a0:b2:1f:67:26: e1:4d:f7:c6:3f:d6:71:07:22:30:0d:f1:59:d2:b3: 7d:3f:c8:1c:21:74:e6:96:b6:3c:3a:3e:b1:95:18: 04:61:4e:5f:aa:e1:d3:f0:06:f8:91:b4:3a:18:37: b2:66:a9:96:ad:65:bc:3a:21:39:60:5d:a1:c5:5a: f1:7a:2d:1a:14:0c:d2:0b:a6:34:f5:6a:0f:34:a4: fc:d9:93:89:05:13:5c:10:8d:6d:37:99:cd:a4:48: 37:0f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 48:B1:E9:21:3E:72:CB:96:B9:46:81:6A:9C:56:E4:2F:90:5F:49:26 X509v3 Authority Key Identifier: keyid:02:46:DD:14:AF:68:F5:E5:51:2A:BD:88:D1:DB:75:07:E6:91:3C:96 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/9dfb3992-1d2f-46ce-886a-8e22a32611f8/0/0246DD14AF68F5E5512ABD88D1DB7507E6913C96.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/0246DD14AF68F5E5512ABD88D1DB7507E6913C96.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/9dfb3992-1d2f-46ce-886a-8e22a32611f8/0/0246DD14AF68F5E5512ABD88D1DB7507E6913C96.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 61:5c:47:24:fb:9f:4b:70:cd:ae:f7:fc:50:20:f8:60:66:79: db:dc:3b:f3:e6:d5:33:56:26:8b:07:06:96:4a:aa:ea:d1:a4: 44:38:82:3d:aa:f4:92:c2:4c:5e:91:bf:36:ab:11:8c:4c:ea: 98:76:01:59:3c:5f:5b:74:ca:b0:7d:48:5f:df:cf:44:a0:d8: b7:ec:a4:28:ec:58:e5:61:25:67:74:be:c3:aa:34:89:84:34: c9:62:b7:56:b3:ae:66:84:10:b3:91:29:80:ee:88:53:25:af: 17:1a:e1:a9:1d:63:37:f4:2a:49:5d:c9:b8:94:9c:06:bf:f5: a5:2c:fd:0a:44:56:be:ad:a7:53:fc:11:16:be:ea:ee:b3:69: e9:39:7c:c3:17:22:5e:8f:e3:d9:dc:38:b7:d0:88:b3:1b:7d: 19:ca:96:a3:15:8f:f8:70:19:06:99:ab:2b:98:f8:05:98:29: ef:ed:8f:bc:9b:6b:7f:e6:6c:cc:c0:d9:6f:11:3a:b5:8e:7d: 32:84:ec:2e:63:8d:f5:58:fb:84:8c:36:1f:a8:36:f8:df:f9: 89:d8:92:a3:ac:97:ea:df:36:ad:fd:49:45:1e:ed:bd:59:12: b6:dc:6c:51:13:f9:84:b2:95:fa:5b:36:26:cd:58:4d:4a:a7: 76:3b:ff:08 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUBrVxhUY6d3lxiwoL65+Ye6+Cq1kwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMDI0NkREMTRBRjY4RjVFNTUxMkFCRDg4RDFEQjc1MDdF NjkxM0M5NjAeFw0yNTEyMTcyMjE2MDNaFw0yNTEyMjEwMzM1MDNaMDMxMTAvBgNV BAMTKDQ4QjFFOTIxM0U3MkNCOTZCOTQ2ODE2QTlDNTZFNDJGOTA1RjQ5MjYwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDZMt/3SLckOCHLLJtLyrUHvA63 8utAXeiFIvyrRy9h7fswuC/NikAWWXSXpf56zDd8N38ulc9/maeqsjgmX+ru/KTF eGTJFb93OqEPqDgNlYB6w1hK/T8IuS8f3q8XBluUeonAX/nGB2tDya1IBGdvsSBp erPdDVWhY+TZG1G25z1vssgxziutqj2HM1WFPrHpaBE6+DhXLAqR/vIFgiWgsh9n JuFN98Y/1nEHIjAN8VnSs30/yBwhdOaWtjw6PrGVGARhTl+q4dPwBviRtDoYN7Jm qZatZbw6ITlgXaHFWvF6LRoUDNILpjT1ag80pPzZk4kFE1wQjW03mc2kSDcPAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUSLHpIT5yy5a5RoFqnFbkL5BfSSYwHwYDVR0j BBgwFoAUAkbdFK9o9eVRKr2I0dt1B+aRPJYwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby85 ZGZiMzk5Mi0xZDJmLTQ2Y2UtODg2YS04ZTIyYTMyNjExZjgvMC8wMjQ2REQxNEFG NjhGNUU1NTEyQUJEODhEMURCNzUwN0U2OTEzQzk2LmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvMDI0NkREMTRBRjY4RjVFNTUxMkFCRDg4RDFEQjc1MDdFNjkx M0M5Ni5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vOWRmYjM5OTItMWQyZi00NmNlLTg4 NmEtOGUyMmEzMjYxMWY4LzAvMDI0NkREMTRBRjY4RjVFNTUxMkFCRDg4RDFEQjc1 MDdFNjkxM0M5Ni5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAGFcRyT7n0twza73/FAg+GBmedvcO/Pm1TNW JosHBpZKqurRpEQ4gj2q9JLCTF6RvzarEYxM6ph2AVk8X1t0yrB9SF/fz0Sg2Lfs pCjsWOVhJWd0vsOqNImENMlit1azrmaEELORKYDuiFMlrxca4akdYzf0KkldybiU nAa/9aUs/QpEVr6tp1P8ERa+6u6zaek5fMMXIl6P49ncOLfQiLMbfRnKlqMVj/hw GQaZqyuY+AWYKe/tj7yba3/mbMzA2W8ROrWOfTKE7C5jjfVY+4SMNh+oNvjf+YnY kqOsl+rfNq39SUUe7b1ZErbcbFET+YSylfpbNibNWE1Kp3Y7/wg= -----END CERTIFICATE-----Generated at Fri Dec 19 08:06:46 2025 by rpki-client