This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf repo-rpki.idnic.net/repo/de3f2e9b-1068-4fa9-ba1d-59d071a412a2/0/16889A9053AE7EB169CF822E9EE670A5C618F97E.mft File: 16889A9053AE7EB169CF822E9EE670A5C618F97E.mft (raw, json) Hash identifier: 0+EEZGRIcQ1D8zZ+/4rvC2HqNstMCbt8rgBopiMb5+8= Subject key identifier: CD:07:E8:BF:87:86:9D:03:90:EF:8D:49:57:B5:9E:21:55:27:9B:8C Authority key identifier: 16:88:9A:90:53:AE:7E:B1:69:CF:82:2E:9E:E6:70:A5:C6:18:F9:7E Certificate issuer: /CN=16889A9053AE7EB169CF822E9EE670A5C618F97E Certificate serial: 2CFE23E1C4B9B4A446E209BB11CE4EFFCABCF8C8 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/16889A9053AE7EB169CF822E9EE670A5C618F97E.cer Subject info access: rsync://repo-rpki.idnic.net/repo/de3f2e9b-1068-4fa9-ba1d-59d071a412a2/0/16889A9053AE7EB169CF822E9EE670A5C618F97E.mft Manifest number: 015A Signing time: Tue 23 Dec 2025 22:51:49 +0000 Manifest this update: Tue 23 Dec 2025 22:46:49 +0000 Manifest next update: Sat 27 Dec 2025 08:02:49 +0000 Files and hashes: 1: 16889A9053AE7EB169CF822E9EE670A5C618F97E.crl (hash: CjhaEtiNpzrpc9zJsqu2X+zcj1P4sPHzIPDzclDt9y4=) 2: 3130332e36372e38302e302f32332d3233203d3e20313532303031.roa (hash: hdkprfHwU4RXLgXXOBxZ9L/4dynqLbbepC7imEy91UI=) 3: 3130332e36372e38302e302f32342d3234203d3e20313532303031.roa (hash: u3jgsDSo3O7gCdt5jEOR1X0Y8olBMi4/W5ZYcUsryek=) 4: 3130332e36372e38312e302f32342d3234203d3e20313532303031.roa (hash: q8j/X9Ua/0mbnku+j9y9HsFIzPIhDRyObBOKzKCiRT8=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/de3f2e9b-1068-4fa9-ba1d-59d071a412a2/0/16889A9053AE7EB169CF822E9EE670A5C618F97E.crl rsync://repo-rpki.idnic.net/repo/de3f2e9b-1068-4fa9-ba1d-59d071a412a2/0/16889A9053AE7EB169CF822E9EE670A5C618F97E.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/16889A9053AE7EB169CF822E9EE670A5C618F97E.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 27 Dec 2025 08:02:49 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2c:fe:23:e1:c4:b9:b4:a4:46:e2:09:bb:11:ce:4e:ff:ca:bc:f8:c8 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=16889A9053AE7EB169CF822E9EE670A5C618F97E Validity Not Before: Dec 23 22:46:49 2025 GMT Not After : Dec 27 08:02:49 2025 GMT Subject: CN=CD07E8BF87869D0390EF8D4957B59E2155279B8C Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c4:be:13:94:1a:5f:9d:e3:0d:17:c2:63:3a:11: a7:ac:13:f2:d4:f9:0d:97:6f:6c:6e:0f:90:6e:26: 85:38:ef:55:1b:49:29:67:6a:c8:3a:02:33:58:ae: 08:1a:38:e3:d6:86:28:54:dd:26:d6:2b:ed:07:e2: f2:9e:52:70:69:34:0a:52:56:48:78:7a:a0:bc:d5: c9:f5:d3:d2:8d:08:72:28:6f:29:59:00:eb:9f:99: a3:a4:5a:0e:38:20:4b:d9:58:e7:8b:d2:8e:53:a3: 16:15:3b:d0:b6:1b:5b:df:98:45:3f:4d:0b:52:25: 0c:22:79:5c:26:68:3f:03:00:28:1a:e8:1f:88:fb: 18:dc:89:9b:97:11:15:34:4b:12:12:37:a7:f8:6c: eb:de:09:c0:4d:38:05:44:6e:7f:b3:e0:89:d3:aa: 4b:73:19:47:fb:06:1e:78:0c:54:dc:7d:10:b2:08: e8:2f:fe:51:57:46:31:95:cb:6c:75:f9:c2:61:0c: 0d:53:35:66:6d:49:b7:92:26:ea:7a:b2:da:be:e9: 7b:19:69:4c:76:79:8d:50:4c:53:a1:87:1f:45:4a: ff:7f:20:c8:44:d5:02:a5:b6:8d:1c:2f:d6:b1:7e: cd:70:87:18:b9:d6:0d:0c:1a:af:ac:b9:65:3d:00: 24:1d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: CD:07:E8:BF:87:86:9D:03:90:EF:8D:49:57:B5:9E:21:55:27:9B:8C X509v3 Authority Key Identifier: keyid:16:88:9A:90:53:AE:7E:B1:69:CF:82:2E:9E:E6:70:A5:C6:18:F9:7E X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/de3f2e9b-1068-4fa9-ba1d-59d071a412a2/0/16889A9053AE7EB169CF822E9EE670A5C618F97E.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/16889A9053AE7EB169CF822E9EE670A5C618F97E.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/de3f2e9b-1068-4fa9-ba1d-59d071a412a2/0/16889A9053AE7EB169CF822E9EE670A5C618F97E.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption a2:d2:22:15:5e:75:45:9e:ad:3d:b7:3a:11:88:62:14:38:c7: 7b:02:e4:2c:04:41:5a:31:75:fa:71:4a:a9:30:b6:34:5c:56: bd:5c:d1:23:94:8d:9c:45:4e:9f:3d:c7:45:58:c3:84:7a:cd: e7:46:99:d0:12:f7:60:a8:cf:89:c7:a7:1a:ac:11:88:cb:88: 44:c8:ad:61:55:c8:ec:2f:80:ba:d5:c9:b0:9f:7c:3e:c6:56: 9b:af:21:a0:33:ec:a9:85:7a:49:32:25:ce:39:1f:0d:f3:ca: db:5f:c2:62:73:96:f6:a5:5b:ae:58:40:07:81:58:ca:ba:79: 67:26:90:7a:9b:8b:1c:18:ee:a4:3a:a5:a9:b6:97:73:1d:3f: 4a:70:df:eb:8f:5d:b4:59:60:90:53:89:88:45:db:0d:1a:57: bc:63:f5:90:c7:4d:6f:b9:ed:0f:4c:7c:c2:e1:cb:14:33:e0: e4:4f:dc:73:81:90:4a:b8:4f:cc:96:58:9c:f5:5a:af:bd:54: 54:45:55:fb:b4:35:81:03:74:08:38:6d:f7:d0:04:2e:f1:18: eb:b8:1a:8b:51:0d:96:ec:51:15:9e:0e:ff:77:85:e8:ca:bf: 3b:83:d5:c8:12:7f:a5:6f:51:37:5c:89:3f:ce:c4:20:5f:59: 75:ef:38:d8 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIULP4j4cS5tKRG4gm7Ec5O/8q8+MgwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMTY4ODlBOTA1M0FFN0VCMTY5Q0Y4MjJFOUVFNjcwQTVD NjE4Rjk3RTAeFw0yNTEyMjMyMjQ2NDlaFw0yNTEyMjcwODAyNDlaMDMxMTAvBgNV BAMTKENEMDdFOEJGODc4NjlEMDM5MEVGOEQ0OTU3QjU5RTIxNTUyNzlCOEMwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDEvhOUGl+d4w0XwmM6EaesE/LU +Q2Xb2xuD5BuJoU471UbSSlnasg6AjNYrggaOOPWhihU3SbWK+0H4vKeUnBpNApS Vkh4eqC81cn109KNCHIobylZAOufmaOkWg44IEvZWOeL0o5ToxYVO9C2G1vfmEU/ TQtSJQwieVwmaD8DACga6B+I+xjciZuXERU0SxISN6f4bOveCcBNOAVEbn+z4InT qktzGUf7Bh54DFTcfRCyCOgv/lFXRjGVy2x1+cJhDA1TNWZtSbeSJup6stq+6XsZ aUx2eY1QTFOhhx9FSv9/IMhE1QKlto0cL9axfs1whxi51g0MGq+suWU9ACQdAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUzQfov4eGnQOQ741JV7WeIVUnm4wwHwYDVR0j BBgwFoAUFoiakFOufrFpz4IunuZwpcYY+X4wDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby9k ZTNmMmU5Yi0xMDY4LTRmYTktYmExZC01OWQwNzFhNDEyYTIvMC8xNjg4OUE5MDUz QUU3RUIxNjlDRjgyMkU5RUU2NzBBNUM2MThGOTdFLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvMTY4ODlBOTA1M0FFN0VCMTY5Q0Y4MjJFOUVFNjcwQTVDNjE4 Rjk3RS5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vZGUzZjJlOWItMTA2OC00ZmE5LWJh MWQtNTlkMDcxYTQxMmEyLzAvMTY4ODlBOTA1M0FFN0VCMTY5Q0Y4MjJFOUVFNjcw QTVDNjE4Rjk3RS5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAKLSIhVedUWerT23OhGIYhQ4x3sC5CwEQVox dfpxSqkwtjRcVr1c0SOUjZxFTp89x0VYw4R6zedGmdAS92Coz4nHpxqsEYjLiETI rWFVyOwvgLrVybCffD7GVpuvIaAz7KmFekkyJc45Hw3zyttfwmJzlvalW65YQAeB WMq6eWcmkHqbixwY7qQ6pam2l3MdP0pw3+uPXbRZYJBTiYhF2w0aV7xj9ZDHTW+5 7Q9MfMLhyxQz4ORP3HOBkEq4T8yWWJz1Wq+9VFRFVfu0NYEDdAg4bffQBC7xGOu4 GotRDZbsURWeDv93hejKvzuD1cgSf6VvUTdciT/OxCBfWXXvONg= -----END CERTIFICATE-----Generated at Wed Dec 24 22:06:00 2025 by rpki-client