This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf repo-rpki.idnic.net/repo/ad598e99-e9ff-4abe-b08e-226fdd07f9ae/0/516450A151C5487FCC5911F4C18941CA895B07A5.mft File: 516450A151C5487FCC5911F4C18941CA895B07A5.mft (raw, json) Hash identifier: H/va8QdBA8fgQ0KDrGQcs4LcnvDAKSrmueyK4pcNiPA= Subject key identifier: 53:0B:ED:3C:D6:B0:C6:EC:F9:F4:9E:62:4E:DA:F1:0C:EA:2B:86:8D Authority key identifier: 51:64:50:A1:51:C5:48:7F:CC:59:11:F4:C1:89:41:CA:89:5B:07:A5 Certificate issuer: /CN=516450A151C5487FCC5911F4C18941CA895B07A5 Certificate serial: 0A2B802D22DDE2C3FACC69FF04E95FDB53531D99 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/516450A151C5487FCC5911F4C18941CA895B07A5.cer Subject info access: rsync://repo-rpki.idnic.net/repo/ad598e99-e9ff-4abe-b08e-226fdd07f9ae/0/516450A151C5487FCC5911F4C18941CA895B07A5.mft Manifest number: 0334 Signing time: Wed 24 Dec 2025 00:11:31 +0000 Manifest this update: Wed 24 Dec 2025 00:06:31 +0000 Manifest next update: Sat 27 Dec 2025 01:59:31 +0000 Files and hashes: 1: 3130332e3134342e31382e302f32342d3234203d3e20313339343138.roa (hash: +9l9/c1oHNd6x+rotlaCAqAorgvfQYB/2M8mOFajTwg=) 2: 516450A151C5487FCC5911F4C18941CA895B07A5.crl (hash: ymha1qqnlT9drBNWEiohBXBTutyNVmKH6hckGXCx8PA=) 3: 3130332e3134342e31392e302f32342d3234203d3e20313339343138.roa (hash: NPTNkAFeiU4perz1lh+B9xb1IjABewQG5b/Cldme2U8=) 4: 323430353a363263303a3a2f33322d3332203d3e20313339343138.roa (hash: z85xof54DRtz327x0y44Pw+jx9DlTvA8Q/kbbufAMJs=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/ad598e99-e9ff-4abe-b08e-226fdd07f9ae/0/516450A151C5487FCC5911F4C18941CA895B07A5.crl rsync://repo-rpki.idnic.net/repo/ad598e99-e9ff-4abe-b08e-226fdd07f9ae/0/516450A151C5487FCC5911F4C18941CA895B07A5.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/516450A151C5487FCC5911F4C18941CA895B07A5.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 27 Dec 2025 01:59:31 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 0a:2b:80:2d:22:dd:e2:c3:fa:cc:69:ff:04:e9:5f:db:53:53:1d:99 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=516450A151C5487FCC5911F4C18941CA895B07A5 Validity Not Before: Dec 24 00:06:31 2025 GMT Not After : Dec 27 01:59:31 2025 GMT Subject: CN=530BED3CD6B0C6ECF9F49E624EDAF10CEA2B868D Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ad:24:99:cb:3d:73:0f:6e:d9:dd:e4:7c:40:9f: 37:e0:42:29:d0:26:ce:92:4d:7c:2b:80:c1:ae:86: 5b:77:92:cf:ed:65:02:29:5f:c1:df:7c:6b:fb:c7: 5e:b6:40:c2:68:c8:3f:ef:cc:1c:70:17:aa:af:d5: f1:1c:c0:fb:31:80:ad:05:50:8a:81:01:82:c1:be: c1:25:c9:85:5f:c9:86:f6:5c:d7:b2:73:86:59:a5: 5d:95:2f:12:e6:81:e7:80:d2:3d:9d:c9:f5:04:a4: aa:7d:8d:a9:8b:d1:b3:32:46:ed:fe:0e:c5:68:99: 57:ad:47:e5:db:61:02:e0:ef:57:59:2d:36:2f:1a: d2:01:45:e4:61:64:be:8f:75:e5:84:f9:51:5d:86: d9:e8:01:03:b8:72:23:36:37:0c:2d:5f:e8:29:0c: 8a:7b:24:49:1a:18:8d:5b:69:8b:b4:0d:c6:29:74: 12:37:57:76:a3:91:2a:34:1d:28:39:c2:05:68:3a: 25:46:d9:a5:54:1e:83:2b:b4:11:1d:75:10:93:f7: 44:41:32:55:8d:16:98:34:b6:c1:aa:5c:14:c5:90: 1f:03:28:c5:05:e7:7c:1d:4e:96:9c:56:d5:af:e5: 24:2e:5a:90:e4:e5:d4:22:e6:37:c8:ca:51:e1:42: c5:03 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 53:0B:ED:3C:D6:B0:C6:EC:F9:F4:9E:62:4E:DA:F1:0C:EA:2B:86:8D X509v3 Authority Key Identifier: keyid:51:64:50:A1:51:C5:48:7F:CC:59:11:F4:C1:89:41:CA:89:5B:07:A5 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/ad598e99-e9ff-4abe-b08e-226fdd07f9ae/0/516450A151C5487FCC5911F4C18941CA895B07A5.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/516450A151C5487FCC5911F4C18941CA895B07A5.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/ad598e99-e9ff-4abe-b08e-226fdd07f9ae/0/516450A151C5487FCC5911F4C18941CA895B07A5.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 2a:41:14:fd:74:7e:ea:51:a7:b7:78:50:a4:0f:f7:47:fc:e8: c6:16:7c:1b:fd:19:c7:a7:ac:6a:25:6c:6b:e1:28:08:6c:85: b1:40:9e:20:f6:a3:09:bb:44:a5:0c:05:5d:d9:f4:9b:f9:d6: e8:67:6b:15:f1:54:a9:84:d1:d2:ec:38:f2:2f:6d:b3:c7:3a: 5b:47:0a:fb:46:16:2a:eb:c8:28:da:eb:35:80:c9:bb:ab:3c: 33:21:6e:3c:05:7b:fc:8f:11:f2:0d:93:a8:bd:78:f1:70:de: 6b:80:df:3d:39:8b:00:13:61:0e:89:1e:9b:de:9b:df:5a:62: 29:ea:6c:d2:ec:90:34:b1:a4:82:a1:ca:1f:3d:0c:2f:3e:22: 2f:9b:88:82:87:c8:0a:9d:4c:9b:fc:2c:a7:42:33:d0:b4:01: d3:e8:9f:b2:9c:6a:f6:ab:b1:59:3e:8d:40:91:6d:09:63:a7: 9e:f4:8e:1d:74:b4:72:18:34:67:3b:fa:07:23:21:0f:e8:61: 69:f8:41:98:c6:9f:c8:e8:a1:ee:e6:49:f6:82:d0:55:84:f9: a8:ff:dd:96:06:ce:76:6c:18:90:d6:6e:94:2a:fd:44:44:81: 63:1a:92:3e:ec:67:41:24:84:5d:40:08:1b:db:94:85:c6:a7: e2:65:0b:98 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUCiuALSLd4sP6zGn/BOlf21NTHZkwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoNTE2NDUwQTE1MUM1NDg3RkNDNTkxMUY0QzE4OTQxQ0E4 OTVCMDdBNTAeFw0yNTEyMjQwMDA2MzFaFw0yNTEyMjcwMTU5MzFaMDMxMTAvBgNV BAMTKDUzMEJFRDNDRDZCMEM2RUNGOUY0OUU2MjRFREFGMTBDRUEyQjg2OEQwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCtJJnLPXMPbtnd5HxAnzfgQinQ Js6STXwrgMGuhlt3ks/tZQIpX8HffGv7x162QMJoyD/vzBxwF6qv1fEcwPsxgK0F UIqBAYLBvsElyYVfyYb2XNeyc4ZZpV2VLxLmgeeA0j2dyfUEpKp9jamL0bMyRu3+ DsVomVetR+XbYQLg71dZLTYvGtIBReRhZL6PdeWE+VFdhtnoAQO4ciM2NwwtX+gp DIp7JEkaGI1baYu0DcYpdBI3V3ajkSo0HSg5wgVoOiVG2aVUHoMrtBEddRCT90RB MlWNFpg0tsGqXBTFkB8DKMUF53wdTpacVtWv5SQuWpDk5dQi5jfIylHhQsUDAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUUwvtPNawxuz59J5iTtrxDOorho0wHwYDVR0j BBgwFoAUUWRQoVHFSH/MWRH0wYlByolbB6UwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby9h ZDU5OGU5OS1lOWZmLTRhYmUtYjA4ZS0yMjZmZGQwN2Y5YWUvMC81MTY0NTBBMTUx QzU0ODdGQ0M1OTExRjRDMTg5NDFDQTg5NUIwN0E1LmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvNTE2NDUwQTE1MUM1NDg3RkNDNTkxMUY0QzE4OTQxQ0E4OTVC MDdBNS5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vYWQ1OThlOTktZTlmZi00YWJlLWIw OGUtMjI2ZmRkMDdmOWFlLzAvNTE2NDUwQTE1MUM1NDg3RkNDNTkxMUY0QzE4OTQx Q0E4OTVCMDdBNS5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBACpBFP10fupRp7d4UKQP90f86MYWfBv9Gcen rGolbGvhKAhshbFAniD2owm7RKUMBV3Z9Jv51uhnaxXxVKmE0dLsOPIvbbPHOltH CvtGFirryCja6zWAyburPDMhbjwFe/yPEfINk6i9ePFw3muA3z05iwATYQ6JHpve m99aYinqbNLskDSxpIKhyh89DC8+Ii+biIKHyAqdTJv8LKdCM9C0AdPon7Kcavar sVk+jUCRbQljp570jh10tHIYNGc7+gcjIQ/oYWn4QZjGn8jooe7mSfaC0FWE+aj/ 3ZYGznZsGJDWbpQq/UREgWMakj7sZ0EkhF1ACBvblIXGp+JlC5g= -----END CERTIFICATE-----Generated at Wed Dec 24 22:05:10 2025 by rpki-client