This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf repo-rpki.idnic.net/repo/89718f6b-b516-43ae-b589-83a25faa30be/0/1160709118182E564A6D9E250FF5000EFA5166A5.mft File: 1160709118182E564A6D9E250FF5000EFA5166A5.mft (raw, json) Hash identifier: UR4tZIHXKgYG6TXEHqmwV6guakezIHyYoElfLHFHXCQ= Subject key identifier: 51:02:68:1D:91:97:A2:5E:3D:C6:8C:A8:34:1C:17:76:FB:EF:33:12 Authority key identifier: 11:60:70:91:18:18:2E:56:4A:6D:9E:25:0F:F5:00:0E:FA:51:66:A5 Certificate issuer: /CN=1160709118182E564A6D9E250FF5000EFA5166A5 Certificate serial: 0DB880900A3981CD0E0B2A8A3E0008EC848661CC Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/1160709118182E564A6D9E250FF5000EFA5166A5.cer Subject info access: rsync://repo-rpki.idnic.net/repo/89718f6b-b516-43ae-b589-83a25faa30be/0/1160709118182E564A6D9E250FF5000EFA5166A5.mft Manifest number: 01C3 Signing time: Tue 23 Dec 2025 20:51:30 +0000 Manifest this update: Tue 23 Dec 2025 20:46:30 +0000 Manifest next update: Sat 27 Dec 2025 03:17:30 +0000 Files and hashes: 1: 1160709118182E564A6D9E250FF5000EFA5166A5.crl (hash: 9SN7wjT/URgU6CO0TgrmAxL1YZ6o6AKSAfUfwvxDG3o=) 2: 3130332e38362e3131362e302f32332d3233203d3e20313530353532.roa (hash: BffdL0xKitvxF+n5DIFwc3meIV1XU+P2BJOh3472GOA=) 3: 3130332e38362e3131362e302f32342d3234203d3e20313530353532.roa (hash: ja3IpRMbJ39xL9dCXnsQKYTFFR+b+ZemcabWb42o+iQ=) 4: 3130332e38362e3131372e302f32342d3234203d3e20313530353532.roa (hash: jLdTwnwuZ2oNm7k6y9AMJvKWkqS7oKk99hplqsfZVHE=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/89718f6b-b516-43ae-b589-83a25faa30be/0/1160709118182E564A6D9E250FF5000EFA5166A5.crl rsync://repo-rpki.idnic.net/repo/89718f6b-b516-43ae-b589-83a25faa30be/0/1160709118182E564A6D9E250FF5000EFA5166A5.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/1160709118182E564A6D9E250FF5000EFA5166A5.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 27 Dec 2025 03:17:30 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 0d:b8:80:90:0a:39:81:cd:0e:0b:2a:8a:3e:00:08:ec:84:86:61:cc Signature Algorithm: sha256WithRSAEncryption Issuer: CN=1160709118182E564A6D9E250FF5000EFA5166A5 Validity Not Before: Dec 23 20:46:30 2025 GMT Not After : Dec 27 03:17:30 2025 GMT Subject: CN=5102681D9197A25E3DC68CA8341C1776FBEF3312 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c9:24:e2:76:cc:0c:7a:69:ee:a7:d9:75:57:a2: 6c:65:d7:ca:bb:a1:2a:c5:59:1c:2b:aa:83:61:2f: e9:01:1b:ab:10:7b:38:de:18:9d:3b:dd:43:f9:c7: d4:0d:f0:a8:6f:d3:56:92:d5:cf:16:9f:02:17:9c: 28:5e:7b:7b:27:88:90:33:01:79:93:4f:98:0e:2f: 58:27:f2:08:08:0e:98:d8:a5:48:f7:32:c5:7d:03: 3d:c3:53:15:94:cd:c2:63:01:8b:ce:17:40:85:a0: f6:40:6e:ab:17:85:de:95:be:db:9a:fe:ce:60:46: 9c:4a:49:dc:74:65:37:1e:8c:16:3b:82:7e:a6:37: 58:b0:7b:f8:85:54:ee:50:0a:07:03:42:79:20:7c: dc:23:97:21:2c:27:e9:5d:8f:eb:28:31:c9:7e:a3: 00:21:97:e1:a9:b0:ec:39:df:40:cb:c9:a4:dc:f0: a4:d9:b1:e8:30:8f:d0:52:aa:58:05:08:47:10:19: d9:09:13:c9:57:4d:91:37:df:95:39:44:12:e4:54: 00:2e:24:59:c4:c5:e2:60:20:56:bb:48:cf:c3:63: fe:3e:a1:71:fd:05:ad:2a:93:23:95:cd:7c:46:3d: 86:eb:fe:fb:3e:7d:33:6a:31:0f:15:54:4f:e5:44: 5a:07 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 51:02:68:1D:91:97:A2:5E:3D:C6:8C:A8:34:1C:17:76:FB:EF:33:12 X509v3 Authority Key Identifier: keyid:11:60:70:91:18:18:2E:56:4A:6D:9E:25:0F:F5:00:0E:FA:51:66:A5 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/89718f6b-b516-43ae-b589-83a25faa30be/0/1160709118182E564A6D9E250FF5000EFA5166A5.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/1160709118182E564A6D9E250FF5000EFA5166A5.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/89718f6b-b516-43ae-b589-83a25faa30be/0/1160709118182E564A6D9E250FF5000EFA5166A5.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 92:a7:a1:20:ab:ea:55:8a:8b:1f:37:60:34:26:0c:2b:21:96: 03:df:38:b6:be:d2:d4:e8:77:f8:76:8a:b9:9f:1e:db:df:74: d9:35:4b:5e:b0:7c:6a:39:66:f7:82:b3:e5:36:8a:84:9c:ac: f6:35:b6:ca:1e:58:7c:e7:3f:b5:5a:39:c8:11:b2:a6:ae:80: 81:ab:c7:6c:9b:71:a6:5c:10:53:85:9c:b7:b6:99:e6:8a:75: fe:64:00:05:7a:f1:43:43:55:6b:6a:f9:4f:70:0f:0a:c1:4c: 71:9e:25:52:80:c9:75:40:7b:cc:6f:7f:b6:fb:b6:fa:f8:02: 8d:5a:eb:73:bc:a9:8a:55:eb:80:c9:0b:5b:b5:47:30:ae:67: 74:cd:e8:29:eb:5e:1a:2e:43:83:6f:a7:52:db:ae:f4:a8:3a: 67:bd:02:e2:0c:91:24:a6:41:73:fd:5c:56:ec:4b:11:c7:69: 1e:c4:1e:d7:b9:c4:32:72:0b:4d:74:56:f5:e4:f6:d4:88:d4: 5c:89:6f:ba:fd:20:a6:1c:1a:6e:37:26:7a:ee:44:df:1a:05: 32:0d:d8:e5:83:02:20:68:59:9b:95:4d:b0:c0:55:fc:05:68: c2:a5:41:9b:2c:38:06:7a:53:e0:13:e6:05:52:ea:d7:8b:43: fd:f5:34:e2 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUDbiAkAo5gc0OCyqKPgAI7ISGYcwwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMTE2MDcwOTExODE4MkU1NjRBNkQ5RTI1MEZGNTAwMEVG QTUxNjZBNTAeFw0yNTEyMjMyMDQ2MzBaFw0yNTEyMjcwMzE3MzBaMDMxMTAvBgNV BAMTKDUxMDI2ODFEOTE5N0EyNUUzREM2OENBODM0MUMxNzc2RkJFRjMzMTIwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDJJOJ2zAx6ae6n2XVXomxl18q7 oSrFWRwrqoNhL+kBG6sQezjeGJ073UP5x9QN8Khv01aS1c8WnwIXnChee3sniJAz AXmTT5gOL1gn8ggIDpjYpUj3MsV9Az3DUxWUzcJjAYvOF0CFoPZAbqsXhd6Vvtua /s5gRpxKSdx0ZTcejBY7gn6mN1iwe/iFVO5QCgcDQnkgfNwjlyEsJ+ldj+soMcl+ owAhl+GpsOw530DLyaTc8KTZsegwj9BSqlgFCEcQGdkJE8lXTZE335U5RBLkVAAu JFnExeJgIFa7SM/DY/4+oXH9Ba0qkyOVzXxGPYbr/vs+fTNqMQ8VVE/lRFoHAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUUQJoHZGXol49xoyoNBwXdvvvMxIwHwYDVR0j BBgwFoAUEWBwkRgYLlZKbZ4lD/UADvpRZqUwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby84 OTcxOGY2Yi1iNTE2LTQzYWUtYjU4OS04M2EyNWZhYTMwYmUvMC8xMTYwNzA5MTE4 MTgyRTU2NEE2RDlFMjUwRkY1MDAwRUZBNTE2NkE1LmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvMTE2MDcwOTExODE4MkU1NjRBNkQ5RTI1MEZGNTAwMEVGQTUx NjZBNS5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vODk3MThmNmItYjUxNi00M2FlLWI1 ODktODNhMjVmYWEzMGJlLzAvMTE2MDcwOTExODE4MkU1NjRBNkQ5RTI1MEZGNTAw MEVGQTUxNjZBNS5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAJKnoSCr6lWKix83YDQmDCshlgPfOLa+0tTo d/h2irmfHtvfdNk1S16wfGo5ZveCs+U2ioScrPY1tsoeWHznP7VaOcgRsqaugIGr x2ybcaZcEFOFnLe2meaKdf5kAAV68UNDVWtq+U9wDwrBTHGeJVKAyXVAe8xvf7b7 tvr4Ao1a63O8qYpV64DJC1u1RzCuZ3TN6CnrXhouQ4Nvp1LbrvSoOme9AuIMkSSm QXP9XFbsSxHHaR7EHte5xDJyC010VvXk9tSI1FyJb7r9IKYcGm43JnruRN8aBTIN 2OWDAiBoWZuVTbDAVfwFaMKlQZssOAZ6U+AT5gVS6teLQ/31NOI= -----END CERTIFICATE-----Generated at Wed Dec 24 20:25:16 2025 by rpki-client