This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf repo-rpki.idnic.net/repo/5c285291-ce92-4144-9c18-9e8c191ddec6/0/166B4918E7A1A1641E7C79C537833379E393522E.mft File: 166B4918E7A1A1641E7C79C537833379E393522E.mft (raw, json) Hash identifier: 5skWuZOesSrryw3H6R/ZkkKLyeOfUfUadfPglwxl9JQ= Subject key identifier: 6E:F4:B4:30:E2:37:64:92:09:E3:A2:CE:BD:7F:87:63:1A:2A:C3:55 Authority key identifier: 16:6B:49:18:E7:A1:A1:64:1E:7C:79:C5:37:83:33:79:E3:93:52:2E Certificate issuer: /CN=166B4918E7A1A1641E7C79C537833379E393522E Certificate serial: 019AA3DDAD522139537680CC00A2591DFACFC6EF Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/166B4918E7A1A1641E7C79C537833379E393522E.cer Subject info access: rsync://repo-rpki.idnic.net/repo/5c285291-ce92-4144-9c18-9e8c191ddec6/0/166B4918E7A1A1641E7C79C537833379E393522E.mft Manifest number: 0301 Signing time: Mon 29 Dec 2025 09:01:05 +0000 Manifest this update: Mon 29 Dec 2025 08:56:05 +0000 Manifest next update: Thu 01 Jan 2026 13:28:05 +0000 Files and hashes: 1: 166B4918E7A1A1641E7C79C537833379E393522E.crl (hash: FyPoeAb/ofm80GTo5THjf7WouUSyHC4V/YVIu5DZOMU=) 2: 3130332e3137342e3138302e302f32342d3234203d3e20313437313037.roa (hash: WsHwgNa1eu27mA5KJGjHDisSyyKknyjiNT1hKbJ/YGc=) 3: 3130332e3137342e3138312e302f32342d3234203d3e20313437313037.roa (hash: LzEWJe+Hglc03QN90vVTDC59A7niJ+rvkY3tQyL/MFs=) 4: 3130332e3137342e3138302e302f32332d3233203d3e20313437313037.roa (hash: oK3qw71PTaTu9zr3WTDr2kf09ZEsEk1iSGVob7ZwRo0=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/5c285291-ce92-4144-9c18-9e8c191ddec6/0/166B4918E7A1A1641E7C79C537833379E393522E.crl rsync://repo-rpki.idnic.net/repo/5c285291-ce92-4144-9c18-9e8c191ddec6/0/166B4918E7A1A1641E7C79C537833379E393522E.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/166B4918E7A1A1641E7C79C537833379E393522E.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 01 Jan 2026 13:28:05 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:a3:dd:ad:52:21:39:53:76:80:cc:00:a2:59:1d:fa:cf:c6:ef Signature Algorithm: sha256WithRSAEncryption Issuer: CN=166B4918E7A1A1641E7C79C537833379E393522E Validity Not Before: Dec 29 08:56:05 2025 GMT Not After : Jan 1 13:28:05 2026 GMT Subject: CN=6EF4B430E237649209E3A2CEBD7F87631A2AC355 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:da:08:64:fa:d1:78:5d:ac:8e:55:86:02:05:7f: 37:b9:0c:0b:7f:e2:e9:a1:11:9d:e8:3f:2c:a5:58: dc:1d:62:d5:5c:3a:09:ad:12:43:3b:b4:de:18:c7: d5:1c:2f:11:23:ef:45:f6:b9:8c:66:8d:cb:eb:18: a3:2a:da:c4:61:16:89:5f:5b:00:aa:58:c0:cd:a0: 5c:56:c9:60:f3:bc:c6:cb:9b:2e:87:7d:53:58:07: 40:63:a7:bb:d4:3f:35:df:35:2e:1b:8b:03:53:c0: 72:31:22:4c:b3:82:f2:22:7b:9a:cc:e1:3b:8c:f6: 17:9f:51:fa:c2:5e:d3:6b:e0:8a:ac:25:ef:fb:fd: 64:f2:2a:cb:49:26:fb:85:be:0c:cf:88:3b:d3:a8: 8d:b2:f9:00:f8:4c:3f:45:d4:04:32:f7:46:85:a5: 48:bc:38:db:61:cd:08:10:94:e6:05:e7:bc:18:65: 9b:e6:cf:b7:9a:e4:85:ae:d9:7d:52:0f:3c:86:74: 5b:51:04:54:1e:bc:2f:5a:c4:94:e9:bb:7e:f7:bd: 92:ec:b2:f6:32:30:8a:1e:85:5a:d6:cb:ec:a6:ef: 78:8c:a0:49:ae:f8:63:ed:d7:83:68:4b:88:8d:b5: 5c:dc:ee:cc:53:ba:0c:91:1e:65:6a:34:32:36:fa: 60:ff Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 6E:F4:B4:30:E2:37:64:92:09:E3:A2:CE:BD:7F:87:63:1A:2A:C3:55 X509v3 Authority Key Identifier: keyid:16:6B:49:18:E7:A1:A1:64:1E:7C:79:C5:37:83:33:79:E3:93:52:2E X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/5c285291-ce92-4144-9c18-9e8c191ddec6/0/166B4918E7A1A1641E7C79C537833379E393522E.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/166B4918E7A1A1641E7C79C537833379E393522E.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/5c285291-ce92-4144-9c18-9e8c191ddec6/0/166B4918E7A1A1641E7C79C537833379E393522E.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption ae:7c:3b:d0:46:dc:a2:c7:43:69:20:7c:cd:dd:f8:86:d8:d9: ed:da:7a:37:e4:a8:84:90:28:9a:0b:af:1f:a8:fd:05:c0:85: 7a:0b:07:81:fd:9f:42:d0:5b:80:d6:85:63:7b:ad:c2:91:6f: 02:51:a6:d1:88:c4:3c:05:f0:1b:1d:b0:7d:0d:9c:99:d5:34: a9:f1:a0:ab:a1:01:30:da:55:51:cb:b5:05:a3:b6:ff:26:73: d2:7d:74:41:e5:01:cf:57:6b:32:3b:59:96:5e:cf:d2:1f:56: 11:a0:8b:be:e1:43:16:0a:d0:a9:11:82:3a:df:de:1f:93:6a: 4a:44:18:10:5a:1a:3d:1e:c0:5d:1e:34:e5:34:74:36:4f:c7: 20:36:6d:70:c8:18:84:d3:71:48:42:b1:53:99:49:5b:b3:ad: c8:57:23:3c:fa:6a:e7:2a:27:b8:e6:d4:5f:2f:ac:8e:c1:78: 8c:2b:a9:0d:1c:52:98:da:ad:6a:5a:17:d3:af:e4:33:5e:e5: 1c:f6:83:bd:f2:fe:e8:3a:a9:fe:75:89:f8:f8:82:25:c0:11: 44:3f:90:e9:3f:79:dc:a5:41:0a:07:b4:b9:fb:b3:0e:a6:c9: 43:14:af:d2:fd:3c:18:8a:fb:17:69:01:06:f5:4b:7f:e4:81: 88:a1:71:c0 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUAZqj3a1SITlTdoDMAKJZHfrPxu8wDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMTY2QjQ5MThFN0ExQTE2NDFFN0M3OUM1Mzc4MzMzNzlF MzkzNTIyRTAeFw0yNTEyMjkwODU2MDVaFw0yNjAxMDExMzI4MDVaMDMxMTAvBgNV BAMTKDZFRjRCNDMwRTIzNzY0OTIwOUUzQTJDRUJEN0Y4NzYzMUEyQUMzNTUwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDaCGT60XhdrI5VhgIFfze5DAt/ 4umhEZ3oPyylWNwdYtVcOgmtEkM7tN4Yx9UcLxEj70X2uYxmjcvrGKMq2sRhFolf WwCqWMDNoFxWyWDzvMbLmy6HfVNYB0Bjp7vUPzXfNS4biwNTwHIxIkyzgvIie5rM 4TuM9hefUfrCXtNr4IqsJe/7/WTyKstJJvuFvgzPiDvTqI2y+QD4TD9F1AQy90aF pUi8ONthzQgQlOYF57wYZZvmz7ea5IWu2X1SDzyGdFtRBFQevC9axJTpu373vZLs svYyMIoehVrWy+ym73iMoEmu+GPt14NoS4iNtVzc7sxTugyRHmVqNDI2+mD/AgMB AAGjggI8MIICODAdBgNVHQ4EFgQUbvS0MOI3ZJIJ46LOvX+HYxoqw1UwHwYDVR0j BBgwFoAUFmtJGOehoWQefHnFN4MzeeOTUi4wDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby81 YzI4NTI5MS1jZTkyLTQxNDQtOWMxOC05ZThjMTkxZGRlYzYvMC8xNjZCNDkxOEU3 QTFBMTY0MUU3Qzc5QzUzNzgzMzM3OUUzOTM1MjJFLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvMTY2QjQ5MThFN0ExQTE2NDFFN0M3OUM1Mzc4MzMzNzlFMzkz NTIyRS5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vNWMyODUyOTEtY2U5Mi00MTQ0LTlj MTgtOWU4YzE5MWRkZWM2LzAvMTY2QjQ5MThFN0ExQTE2NDFFN0M3OUM1Mzc4MzMz NzlFMzkzNTIyRS5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAK58O9BG3KLHQ2kgfM3d+IbY2e3aejfkqISQ KJoLrx+o/QXAhXoLB4H9n0LQW4DWhWN7rcKRbwJRptGIxDwF8BsdsH0NnJnVNKnx oKuhATDaVVHLtQWjtv8mc9J9dEHlAc9XazI7WZZez9IfVhGgi77hQxYK0KkRgjrf 3h+TakpEGBBaGj0ewF0eNOU0dDZPxyA2bXDIGITTcUhCsVOZSVuzrchXIzz6aucq J7jm1F8vrI7BeIwrqQ0cUpjarWpaF9Ov5DNe5Rz2g73y/ug6qf51ifj4giXAEUQ/ kOk/edylQQoHtLn7sw6myUMUr9L9PBiK+xdpAQb1S3/kgYihccA= -----END CERTIFICATE-----Generated at Tue Dec 30 16:34:30 2025 by rpki-client