This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf repo-rpki.idnic.net/repo/c3a9d788-bcf7-46f0-8b5b-0d7d1fcb6da3/0/16F8223FA3342ACE31ED864C538E59E22A52BC89.mft File: 16F8223FA3342ACE31ED864C538E59E22A52BC89.mft (raw, json) Hash identifier: ZZTD/z8jtM1+oLwpzl0u7W49wwzXFUfW2EVp4KnT9WU= Subject key identifier: FF:18:4E:D8:AC:A0:0C:BE:7E:BF:2F:36:2E:60:74:8E:EB:F2:BA:E0 Authority key identifier: 16:F8:22:3F:A3:34:2A:CE:31:ED:86:4C:53:8E:59:E2:2A:52:BC:89 Certificate issuer: /CN=16F8223FA3342ACE31ED864C538E59E22A52BC89 Certificate serial: 349439D8EBD0C72A0BBA58B6172823E9D9592808 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/16F8223FA3342ACE31ED864C538E59E22A52BC89.cer Subject info access: rsync://repo-rpki.idnic.net/repo/c3a9d788-bcf7-46f0-8b5b-0d7d1fcb6da3/0/16F8223FA3342ACE31ED864C538E59E22A52BC89.mft Manifest number: A6 Signing time: Sat 20 Dec 2025 10:02:14 +0000 Manifest this update: Sat 20 Dec 2025 09:57:14 +0000 Manifest next update: Tue 23 Dec 2025 15:19:14 +0000 Files and hashes: 1: 16F8223FA3342ACE31ED864C538E59E22A52BC89.crl (hash: VKoS/02qJOnc3DWG0DnC2N+nE27ovATR1QCCugNfRKg=) 2: 3136302e32352e3135372e302f32342d3234203d3e20313533303835.roa (hash: aKd9F4ACmgNItMgz+uXKOhQG73PpNtSpdGFc0rlMBFo=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/c3a9d788-bcf7-46f0-8b5b-0d7d1fcb6da3/0/16F8223FA3342ACE31ED864C538E59E22A52BC89.crl rsync://repo-rpki.idnic.net/repo/c3a9d788-bcf7-46f0-8b5b-0d7d1fcb6da3/0/16F8223FA3342ACE31ED864C538E59E22A52BC89.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/16F8223FA3342ACE31ED864C538E59E22A52BC89.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/60F8BE9C16625C424B269EE06C64A83BAB8506D4.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/60F8BE9C16625C424B269EE06C64A83BAB8506D4.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/YPi-nBZiXEJLJp7gbGSoO6uFBtQ.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 23 Dec 2025 15:19:14 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 34:94:39:d8:eb:d0:c7:2a:0b:ba:58:b6:17:28:23:e9:d9:59:28:08 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=16F8223FA3342ACE31ED864C538E59E22A52BC89 Validity Not Before: Dec 20 09:57:14 2025 GMT Not After : Dec 23 15:19:14 2025 GMT Subject: CN=FF184ED8ACA00CBE7EBF2F362E60748EEBF2BAE0 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b0:e7:b2:76:17:62:5f:5c:3c:0c:83:01:51:d0: 24:42:00:7d:60:8f:3d:23:04:69:52:1e:66:1b:15: 29:d2:4c:ac:c9:5f:ee:7c:71:2e:dc:45:92:98:70: f1:ae:f3:86:ca:0f:e0:cc:d3:84:75:36:85:bb:f1: 6e:d8:7f:3a:fa:42:ad:94:d0:f2:0a:84:67:8c:98: c7:e0:39:30:2e:4f:d7:56:3e:ea:b6:fe:d3:ae:d3: 15:02:98:e7:11:a2:1a:dd:da:a0:f4:cb:8a:c4:6b: 60:9f:f5:11:c5:4f:3e:be:b7:9c:4b:76:6a:7b:a6: 4f:13:11:9a:5c:a0:24:23:4a:18:6a:4b:d4:26:b9: 18:e4:7f:db:7e:ce:50:2a:54:d9:15:75:8a:d0:0c: ff:96:a2:15:4c:bf:c5:d6:49:46:37:00:d4:3a:25: 50:cb:cd:42:7d:b3:d8:9c:6b:df:3d:81:a7:4b:bf: cf:8a:f9:82:d2:05:5d:20:4a:87:7c:31:2d:72:53: 49:de:17:24:64:32:f2:d8:52:33:12:97:d6:32:65: fc:e9:0d:03:3f:70:36:f0:ac:85:04:05:88:a2:b5: c6:da:c7:5c:93:83:ef:be:aa:a8:8c:05:61:74:e7: 4d:51:a4:3f:53:cb:6a:02:6e:b8:62:b7:47:8b:a9: b1:15 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: FF:18:4E:D8:AC:A0:0C:BE:7E:BF:2F:36:2E:60:74:8E:EB:F2:BA:E0 X509v3 Authority Key Identifier: keyid:16:F8:22:3F:A3:34:2A:CE:31:ED:86:4C:53:8E:59:E2:2A:52:BC:89 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/c3a9d788-bcf7-46f0-8b5b-0d7d1fcb6da3/0/16F8223FA3342ACE31ED864C538E59E22A52BC89.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/16F8223FA3342ACE31ED864C538E59E22A52BC89.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/c3a9d788-bcf7-46f0-8b5b-0d7d1fcb6da3/0/16F8223FA3342ACE31ED864C538E59E22A52BC89.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 79:85:f4:3c:be:2c:b2:5b:30:86:3a:a1:1d:c4:65:1c:55:56: 11:a7:6a:b6:3b:5c:66:18:1b:a7:87:a3:42:86:85:93:75:93: 5f:d6:e9:f5:6b:8d:5a:71:bc:39:e5:de:b3:5c:fc:99:6a:b3: 04:d4:6e:0a:a5:2a:29:6e:97:f4:10:61:13:e1:53:b1:42:27: 3a:01:5b:e7:9d:29:7f:e6:6d:3b:db:1f:0a:4d:e9:f7:7b:7a: c9:9a:43:21:ab:e3:ba:52:9b:6e:94:2c:a7:ef:b8:49:7e:e2: bc:6d:d5:8c:32:72:2c:3c:4e:7d:c9:f9:b1:2f:b3:5b:39:ed: df:28:3a:38:c3:76:0f:e7:74:12:14:fd:57:5c:a2:4f:5c:97: 98:e9:77:0a:c0:01:e1:ce:36:6d:fd:b6:79:2a:17:35:f4:a6: 26:cc:84:aa:d6:fe:73:45:41:cb:3a:13:29:5b:a3:9c:7b:da: 72:68:2c:bf:9d:43:d0:a5:5d:17:a7:e0:9f:64:9a:f6:10:f1: cd:33:41:25:56:d1:8b:33:a4:f8:ff:7e:63:7a:95:02:ba:e3: ac:cf:59:5d:72:8d:7a:58:59:48:04:6f:72:bc:06:69:7f:97: 3e:7f:b7:7f:bd:4c:7b:2f:fa:31:01:f4:46:00:21:91:cb:d5: ac:64:5d:cb -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUNJQ52OvQxyoLuli2Fygj6dlZKAgwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMTZGODIyM0ZBMzM0MkFDRTMxRUQ4NjRDNTM4RTU5RTIy QTUyQkM4OTAeFw0yNTEyMjAwOTU3MTRaFw0yNTEyMjMxNTE5MTRaMDMxMTAvBgNV BAMTKEZGMTg0RUQ4QUNBMDBDQkU3RUJGMkYzNjJFNjA3NDhFRUJGMkJBRTAwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCw57J2F2JfXDwMgwFR0CRCAH1g jz0jBGlSHmYbFSnSTKzJX+58cS7cRZKYcPGu84bKD+DM04R1NoW78W7Yfzr6Qq2U 0PIKhGeMmMfgOTAuT9dWPuq2/tOu0xUCmOcRohrd2qD0y4rEa2Cf9RHFTz6+t5xL dmp7pk8TEZpcoCQjShhqS9QmuRjkf9t+zlAqVNkVdYrQDP+WohVMv8XWSUY3ANQ6 JVDLzUJ9s9ica989gadLv8+K+YLSBV0gSod8MS1yU0neFyRkMvLYUjMSl9YyZfzp DQM/cDbwrIUEBYiitcbax1yTg+++qqiMBWF0501RpD9Ty2oCbrhit0eLqbEVAgMB AAGjggI8MIICODAdBgNVHQ4EFgQU/xhO2KygDL5+vy82LmB0juvyuuAwHwYDVR0j BBgwFoAUFvgiP6M0Ks4x7YZMU45Z4ipSvIkwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby9j M2E5ZDc4OC1iY2Y3LTQ2ZjAtOGI1Yi0wZDdkMWZjYjZkYTMvMC8xNkY4MjIzRkEz MzQyQUNFMzFFRDg2NEM1MzhFNTlFMjJBNTJCQzg5LmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzEvMTZGODIyM0ZBMzM0MkFDRTMxRUQ4NjRDNTM4RTU5RTIyQTUy QkM4OS5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vYzNhOWQ3ODgtYmNmNy00NmYwLThi NWItMGQ3ZDFmY2I2ZGEzLzAvMTZGODIyM0ZBMzM0MkFDRTMxRUQ4NjRDNTM4RTU5 RTIyQTUyQkM4OS5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAHmF9Dy+LLJbMIY6oR3EZRxVVhGnarY7XGYY G6eHo0KGhZN1k1/W6fVrjVpxvDnl3rNc/JlqswTUbgqlKilul/QQYRPhU7FCJzoB W+edKX/mbTvbHwpN6fd7esmaQyGr47pSm26ULKfvuEl+4rxt1Ywyciw8Tn3J+bEv s1s57d8oOjjDdg/ndBIU/Vdcok9cl5jpdwrAAeHONm39tnkqFzX0pibMhKrW/nNF Qcs6Eylbo5x72nJoLL+dQ9ClXRen4J9kmvYQ8c0zQSVW0YszpPj/fmN6lQK646zP WV1yjXpYWUgEb3K8Bml/lz5/t3+9THsv+jEB9EYAIZHL1axkXcs= -----END CERTIFICATE-----Generated at Sun Dec 21 22:26:54 2025 by rpki-client