This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf repo-rpki.idnic.net/repo/bd7fa210-5f25-4f0b-89a5-7d00a354a907/0/846D8A4B978C6F595D44EACDB8259295CD43C499.mft File: 846D8A4B978C6F595D44EACDB8259295CD43C499.mft (raw, json) Hash identifier: 5b0a2YATN+cLb2JeXI18fZ2FhlJMH+MGEWy8FSdlze4= Subject key identifier: D3:04:6D:BD:77:7E:C8:A6:4E:5C:1B:84:0D:54:8F:F8:FE:31:9F:70 Authority key identifier: 84:6D:8A:4B:97:8C:6F:59:5D:44:EA:CD:B8:25:92:95:CD:43:C4:99 Certificate issuer: /CN=846D8A4B978C6F595D44EACDB8259295CD43C499 Certificate serial: 149CE7775A3E2A9122D2B2A78483186817DB2825 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/846D8A4B978C6F595D44EACDB8259295CD43C499.cer Subject info access: rsync://repo-rpki.idnic.net/repo/bd7fa210-5f25-4f0b-89a5-7d00a354a907/0/846D8A4B978C6F595D44EACDB8259295CD43C499.mft Manifest number: 0146 Signing time: Mon 01 Dec 2025 15:00:54 +0000 Manifest this update: Mon 01 Dec 2025 14:55:54 +0000 Manifest next update: Thu 04 Dec 2025 15:58:54 +0000 Files and hashes: 1: 846D8A4B978C6F595D44EACDB8259295CD43C499.crl (hash: IajSmBjGM9LZQgzwQWt+ok7HYKrSYi9g8BDdrPbFiC8=) 2: 3130332e3231332e3233342e302f32342d3234203d3e20313336383733.roa (hash: SVn/IknycpzSOwxi7uz3uMCs0oz5ucYpmEXX6TOqW1w=) 3: 3130332e3231332e3233352e302f32342d3234203d3e20313531303033.roa (hash: 56KSPI3eKTwUn2nOF0K2M/sGf9VTXreg4ZHR0spJPwI=) 4: 3130332e3231332e3233342e302f32342d3234203d3e20313531303033.roa (hash: AL1FDBHVs75iHHEWETfE/oeUPgYWLb0khAD81mZRSQM=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/bd7fa210-5f25-4f0b-89a5-7d00a354a907/0/846D8A4B978C6F595D44EACDB8259295CD43C499.crl rsync://repo-rpki.idnic.net/repo/bd7fa210-5f25-4f0b-89a5-7d00a354a907/0/846D8A4B978C6F595D44EACDB8259295CD43C499.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/846D8A4B978C6F595D44EACDB8259295CD43C499.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 04 Dec 2025 15:58:54 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 14:9c:e7:77:5a:3e:2a:91:22:d2:b2:a7:84:83:18:68:17:db:28:25 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=846D8A4B978C6F595D44EACDB8259295CD43C499 Validity Not Before: Dec 1 14:55:54 2025 GMT Not After : Dec 4 15:58:54 2025 GMT Subject: CN=D3046DBD777EC8A64E5C1B840D548FF8FE319F70 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:be:63:42:28:2e:f6:d5:88:d3:6e:e9:1a:f6:99: 3b:9f:81:57:9f:85:b2:02:1a:0c:9c:6c:32:96:13: d5:d6:6a:ab:13:34:d7:42:aa:ab:b7:ea:23:4a:5f: 93:3a:c5:a4:90:a5:03:20:69:b3:91:ad:e5:c8:0a: 75:40:d2:75:c1:59:76:e4:6a:e1:36:d7:84:de:62: c8:86:05:22:47:cd:aa:b4:68:95:e7:80:93:61:a1: 84:1a:73:a4:07:eb:31:bd:db:71:78:3b:84:41:2d: 72:1e:01:12:ed:90:42:ad:fb:13:1c:dd:ef:54:73: 40:7a:e3:2d:33:0e:21:2f:cd:d0:3c:c0:5a:2a:1f: 63:78:e9:9d:b6:5f:d1:30:6c:cb:c6:ac:45:18:30: 28:d3:52:2d:94:9b:41:16:d0:74:f4:1f:67:b9:a3: 2d:8c:af:96:6d:74:99:f4:a7:de:43:d4:f8:16:38: be:7b:92:72:d2:06:bc:ad:b5:da:20:b5:51:63:92: 19:b9:79:76:13:98:47:c7:f1:79:7d:10:46:4f:22: fd:7f:a8:7e:e6:64:5c:7d:00:a7:f5:8c:81:26:7e: 60:8d:4c:e5:a2:c3:89:3c:2d:7d:30:b3:9c:f5:39: e1:99:f3:8b:29:06:80:67:e5:96:8e:6d:b6:78:fa: fe:a9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D3:04:6D:BD:77:7E:C8:A6:4E:5C:1B:84:0D:54:8F:F8:FE:31:9F:70 X509v3 Authority Key Identifier: keyid:84:6D:8A:4B:97:8C:6F:59:5D:44:EA:CD:B8:25:92:95:CD:43:C4:99 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/bd7fa210-5f25-4f0b-89a5-7d00a354a907/0/846D8A4B978C6F595D44EACDB8259295CD43C499.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/846D8A4B978C6F595D44EACDB8259295CD43C499.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/bd7fa210-5f25-4f0b-89a5-7d00a354a907/0/846D8A4B978C6F595D44EACDB8259295CD43C499.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 86:54:2e:cb:1e:9a:46:db:cb:73:91:92:8a:e5:92:65:67:40: ad:87:cb:50:47:86:97:76:f9:0b:1e:1c:48:ab:7c:33:70:53: a3:b8:3d:3f:53:3b:ee:2c:96:6b:4d:1b:18:82:ae:7c:9e:cc: 5d:f7:7d:c6:6d:17:5e:da:d8:d1:da:38:45:c0:56:9b:e2:58: 75:6d:f9:e3:6e:36:c5:ea:98:0e:45:a2:bf:fd:56:29:48:02: b7:f5:f9:fe:9f:12:02:bd:9d:9f:1c:f1:7b:4b:21:89:e5:68: 34:a8:8b:71:c2:3c:47:39:b3:25:69:15:78:d5:39:64:da:c3: a3:92:d2:16:47:fa:98:35:78:f3:13:f2:5f:92:df:07:18:b7: 40:5f:18:fc:29:6c:9c:1e:fe:95:07:b5:e7:3d:cd:2b:ba:a1: 3c:1c:06:2d:82:dd:7e:71:dc:56:10:15:c8:9c:2e:20:d5:36: 99:13:85:32:1d:6c:3b:78:0f:46:10:9a:38:1f:93:91:5a:dc: 4b:92:3c:a6:b6:c7:52:c3:1b:f5:42:8b:99:15:c5:84:99:08: 96:ea:f5:16:38:d5:9f:f5:53:6e:f5:58:b3:3b:ed:5d:64:43: 1c:e4:83:d9:7d:75:04:fa:60:2f:af:dc:4d:40:80:81:a4:a1: 42:07:d6:63 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUFJznd1o+KpEi0rKnhIMYaBfbKCUwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoODQ2RDhBNEI5NzhDNkY1OTVENDRFQUNEQjgyNTkyOTVD RDQzQzQ5OTAeFw0yNTEyMDExNDU1NTRaFw0yNTEyMDQxNTU4NTRaMDMxMTAvBgNV BAMTKEQzMDQ2REJENzc3RUM4QTY0RTVDMUI4NDBENTQ4RkY4RkUzMTlGNzAwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC+Y0IoLvbViNNu6Rr2mTufgVef hbICGgycbDKWE9XWaqsTNNdCqqu36iNKX5M6xaSQpQMgabORreXICnVA0nXBWXbk auE214TeYsiGBSJHzaq0aJXngJNhoYQac6QH6zG923F4O4RBLXIeARLtkEKt+xMc 3e9Uc0B64y0zDiEvzdA8wFoqH2N46Z22X9EwbMvGrEUYMCjTUi2Um0EW0HT0H2e5 oy2Mr5ZtdJn0p95D1PgWOL57knLSBryttdogtVFjkhm5eXYTmEfH8Xl9EEZPIv1/ qH7mZFx9AKf1jIEmfmCNTOWiw4k8LX0ws5z1OeGZ84spBoBn5ZaObbZ4+v6pAgMB AAGjggI8MIICODAdBgNVHQ4EFgQU0wRtvXd+yKZOXBuEDVSP+P4xn3AwHwYDVR0j BBgwFoAUhG2KS5eMb1ldROrNuCWSlc1DxJkwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby9i ZDdmYTIxMC01ZjI1LTRmMGItODlhNS03ZDAwYTM1NGE5MDcvMC84NDZEOEE0Qjk3 OEM2RjU5NUQ0NEVBQ0RCODI1OTI5NUNENDNDNDk5LmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvODQ2RDhBNEI5NzhDNkY1OTVENDRFQUNEQjgyNTkyOTVDRDQz QzQ5OS5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vYmQ3ZmEyMTAtNWYyNS00ZjBiLTg5 YTUtN2QwMGEzNTRhOTA3LzAvODQ2RDhBNEI5NzhDNkY1OTVENDRFQUNEQjgyNTky OTVDRDQzQzQ5OS5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAIZULssemkbby3ORkorlkmVnQK2Hy1BHhpd2 +QseHEirfDNwU6O4PT9TO+4slmtNGxiCrnyezF33fcZtF17a2NHaOEXAVpviWHVt +eNuNsXqmA5For/9VilIArf1+f6fEgK9nZ8c8XtLIYnlaDSoi3HCPEc5syVpFXjV OWTaw6OS0hZH+pg1ePMT8l+S3wcYt0BfGPwpbJwe/pUHtec9zSu6oTwcBi2C3X5x 3FYQFcicLiDVNpkThTIdbDt4D0YQmjgfk5Fa3EuSPKa2x1LDG/VCi5kVxYSZCJbq 9RY41Z/1U271WLM77V1kQxzkg9l9dQT6YC+v3E1AgIGkoUIH1mM= -----END CERTIFICATE-----Generated at Wed Dec 3 14:14:28 2025 by rpki-client