This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf repo-rpki.idnic.net/repo/de600486-9780-43ee-bb2d-b811094a1445/0/46A7C8702C547FC42210027DD254571031AE05DC.mft File: 46A7C8702C547FC42210027DD254571031AE05DC.mft (raw, json) Hash identifier: 3ZYbU15r7xsaZgJaWHw2BcUeXWmtFwrUp0DD1f3T5ec= Subject key identifier: 69:EB:98:FF:BB:5C:30:75:05:29:38:66:7F:A6:8B:39:E8:BE:E8:0E Authority key identifier: 46:A7:C8:70:2C:54:7F:C4:22:10:02:7D:D2:54:57:10:31:AE:05:DC Certificate issuer: /CN=46A7C8702C547FC42210027DD254571031AE05DC Certificate serial: 76B7D52362A8A07009FB60DA2493A1D27C4E67D4 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/46A7C8702C547FC42210027DD254571031AE05DC.cer Subject info access: rsync://repo-rpki.idnic.net/repo/de600486-9780-43ee-bb2d-b811094a1445/0/46A7C8702C547FC42210027DD254571031AE05DC.mft Manifest number: 023B Signing time: Tue 02 Dec 2025 07:41:54 +0000 Manifest this update: Tue 02 Dec 2025 07:36:54 +0000 Manifest next update: Fri 05 Dec 2025 18:44:54 +0000 Files and hashes: 1: 46A7C8702C547FC42210027DD254571031AE05DC.crl (hash: zrHVF9swZ+A2G+8hiYEExjEirGqjkyK9mAH15138tig=) 2: 3130332e3136302e3230352e302f32342d3234203d3e20313431353935.roa (hash: kdMYWHxqdB4fcu/Vgc4AfVoBG1lh0SUu+dZG5J22ir0=) 3: 3130332e3137322e3132322e302f32342d3234203d3e20313431353935.roa (hash: DLyhX1mkxtUQRH14nsnVNFFV/Lnw+00NFrAkbDg4bb4=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/de600486-9780-43ee-bb2d-b811094a1445/0/46A7C8702C547FC42210027DD254571031AE05DC.crl rsync://repo-rpki.idnic.net/repo/de600486-9780-43ee-bb2d-b811094a1445/0/46A7C8702C547FC42210027DD254571031AE05DC.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/46A7C8702C547FC42210027DD254571031AE05DC.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 05 Dec 2025 18:44:54 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 76:b7:d5:23:62:a8:a0:70:09:fb:60:da:24:93:a1:d2:7c:4e:67:d4 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=46A7C8702C547FC42210027DD254571031AE05DC Validity Not Before: Dec 2 07:36:54 2025 GMT Not After : Dec 5 18:44:54 2025 GMT Subject: CN=69EB98FFBB5C3075052938667FA68B39E8BEE80E Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bd:21:fb:a8:7a:cc:ff:91:ec:b5:c7:d5:da:1b: 3a:9e:11:a6:6f:f3:44:3c:9e:19:9c:c1:2a:11:86: e6:13:0d:e2:62:d4:69:dc:90:f9:aa:9f:22:b7:15: 25:92:d0:2f:02:87:9e:fa:7e:bd:82:1d:01:56:75: 6c:30:8d:cc:57:40:02:1f:6f:01:3e:5a:de:9c:1b: 63:22:07:2b:97:1a:89:f3:13:9e:44:3a:84:79:1e: 16:13:d9:27:5e:f6:d7:84:85:a5:89:73:70:86:3a: 4a:52:0f:dd:f1:12:88:fb:53:75:c8:b1:97:a6:d4: 3f:65:d5:5a:fc:ed:6e:98:ef:61:b9:51:25:a8:fc: 54:71:83:ea:4c:6c:85:cb:99:54:d8:82:80:0c:cc: de:96:02:01:f1:4a:ad:88:59:ea:50:d7:86:f7:95: 44:74:2b:61:78:2f:33:51:5e:d8:91:98:3f:a6:4b: 1d:63:7f:98:77:c2:e9:71:c8:e4:a5:e6:9a:9f:a5: 88:bd:cf:f5:cf:72:a8:c8:54:d3:2e:f0:87:c2:ab: 3b:b2:36:ac:4a:0a:26:2c:b8:bb:5b:b3:81:50:28: 77:6d:bb:91:60:07:83:0d:49:7b:24:08:b0:b5:36: 2b:2b:0a:89:e2:ea:d8:54:e3:9e:44:97:52:2e:1f: 27:85 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 69:EB:98:FF:BB:5C:30:75:05:29:38:66:7F:A6:8B:39:E8:BE:E8:0E X509v3 Authority Key Identifier: keyid:46:A7:C8:70:2C:54:7F:C4:22:10:02:7D:D2:54:57:10:31:AE:05:DC X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/de600486-9780-43ee-bb2d-b811094a1445/0/46A7C8702C547FC42210027DD254571031AE05DC.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/46A7C8702C547FC42210027DD254571031AE05DC.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/de600486-9780-43ee-bb2d-b811094a1445/0/46A7C8702C547FC42210027DD254571031AE05DC.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 3b:31:3e:0d:74:db:05:d4:ed:96:bb:0e:53:58:6a:d3:0e:f4: 78:aa:8a:e7:29:d4:26:c8:f3:31:72:7b:19:7a:5a:da:b3:e0: 86:83:7c:d6:61:2f:03:39:6f:d9:45:5e:08:7e:4b:55:67:2d: 40:c1:04:c3:de:58:84:6a:a3:ff:6f:ef:50:df:12:bc:8f:42: 7e:30:ac:b0:d2:16:96:45:1d:a7:b3:f5:7d:5a:6a:b6:0b:71: 55:07:0a:d3:59:2f:65:04:e6:86:df:3e:42:50:85:f8:c9:0d: c1:dc:6d:98:7c:83:71:50:ae:f1:cc:72:70:34:93:51:c3:16: 2f:70:92:9f:f4:e8:ac:91:1f:db:63:d3:15:ab:e9:c3:f2:71: b8:4d:d5:30:95:b1:43:56:80:ba:ad:09:73:62:90:98:61:27: a6:f3:2d:6b:b3:21:b5:ea:f8:30:fc:5a:23:d9:d0:d4:a8:e7: fd:78:a7:ed:51:c5:1c:dc:8d:fc:08:1b:75:4b:a8:80:a5:9e: 2f:ed:ec:32:f1:a1:11:1f:60:ba:f1:94:9c:b0:82:03:4a:fa: 63:f8:1e:6f:9f:dd:d2:30:3c:ec:d0:86:4e:78:89:5e:2a:e5: 88:fa:93:7f:d5:19:41:73:35:0a:d6:dc:ee:7b:bf:21:3a:00: 37:b9:d5:68 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUdrfVI2KooHAJ+2DaJJOh0nxOZ9QwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoNDZBN0M4NzAyQzU0N0ZDNDIyMTAwMjdERDI1NDU3MTAz MUFFMDVEQzAeFw0yNTEyMDIwNzM2NTRaFw0yNTEyMDUxODQ0NTRaMDMxMTAvBgNV BAMTKDY5RUI5OEZGQkI1QzMwNzUwNTI5Mzg2NjdGQTY4QjM5RThCRUU4MEUwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC9Ifuoesz/key1x9XaGzqeEaZv 80Q8nhmcwSoRhuYTDeJi1GnckPmqnyK3FSWS0C8Ch576fr2CHQFWdWwwjcxXQAIf bwE+Wt6cG2MiByuXGonzE55EOoR5HhYT2Sde9teEhaWJc3CGOkpSD93xEoj7U3XI sZem1D9l1Vr87W6Y72G5USWo/FRxg+pMbIXLmVTYgoAMzN6WAgHxSq2IWepQ14b3 lUR0K2F4LzNRXtiRmD+mSx1jf5h3wulxyOSl5pqfpYi9z/XPcqjIVNMu8IfCqzuy NqxKCiYsuLtbs4FQKHdtu5FgB4MNSXskCLC1NisrConi6thU455El1IuHyeFAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUaeuY/7tcMHUFKThmf6aLOei+6A4wHwYDVR0j BBgwFoAURqfIcCxUf8QiEAJ90lRXEDGuBdwwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby9k ZTYwMDQ4Ni05NzgwLTQzZWUtYmIyZC1iODExMDk0YTE0NDUvMC80NkE3Qzg3MDJD NTQ3RkM0MjIxMDAyN0REMjU0NTcxMDMxQUUwNURDLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvNDZBN0M4NzAyQzU0N0ZDNDIyMTAwMjdERDI1NDU3MTAzMUFF MDVEQy5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vZGU2MDA0ODYtOTc4MC00M2VlLWJi MmQtYjgxMTA5NGExNDQ1LzAvNDZBN0M4NzAyQzU0N0ZDNDIyMTAwMjdERDI1NDU3 MTAzMUFFMDVEQy5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBADsxPg102wXU7Za7DlNYatMO9Hiqiucp1CbI 8zFyexl6Wtqz4IaDfNZhLwM5b9lFXgh+S1VnLUDBBMPeWIRqo/9v71DfEryPQn4w rLDSFpZFHaez9X1aarYLcVUHCtNZL2UE5obfPkJQhfjJDcHcbZh8g3FQrvHMcnA0 k1HDFi9wkp/06KyRH9tj0xWr6cPycbhN1TCVsUNWgLqtCXNikJhhJ6bzLWuzIbXq +DD8WiPZ0NSo5/14p+1RxRzcjfwIG3VLqIClni/t7DLxoREfYLrxlJywggNK+mP4 Hm+f3dIwPOzQhk54iV4q5Yj6k3/VGUFzNQrW3O57vyE6ADe51Wg= -----END CERTIFICATE-----Generated at Wed Dec 3 14:56:30 2025 by rpki-client