This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf repo-rpki.idnic.net/repo/e11a3d56-ac75-4981-9726-c440214c81ed/0/16B946F06E300C41DA2C037393837F098BA659D1.mft File: 16B946F06E300C41DA2C037393837F098BA659D1.mft (raw, json) Hash identifier: wvl0V0lbIhNGzrK85CUZKmReYw5zTgJ7sD71WTvoppM= Subject key identifier: D0:8C:31:4F:08:FA:29:75:D8:DB:9D:AE:24:C7:05:A1:42:A6:BA:E0 Authority key identifier: 16:B9:46:F0:6E:30:0C:41:DA:2C:03:73:93:83:7F:09:8B:A6:59:D1 Certificate issuer: /CN=16B946F06E300C41DA2C037393837F098BA659D1 Certificate serial: 4CB9694FBA62FE346B6E884A7BE3221B42AFF130 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/16B946F06E300C41DA2C037393837F098BA659D1.cer Subject info access: rsync://repo-rpki.idnic.net/repo/e11a3d56-ac75-4981-9726-c440214c81ed/0/16B946F06E300C41DA2C037393837F098BA659D1.mft Manifest number: 0166 Signing time: Thu 18 Dec 2025 11:10:04 +0000 Manifest this update: Thu 18 Dec 2025 11:05:04 +0000 Manifest next update: Sun 21 Dec 2025 13:17:04 +0000 Files and hashes: 1: 16B946F06E300C41DA2C037393837F098BA659D1.crl (hash: ZSyN6KbVChI8za3ap3CHGK+CWfopL6yfgfqFMqX8/pg=) 2: 3130332e3130312e3134302e302f32332d3234203d3e20313530393536.roa (hash: jwEFj89dKbg3wcUKCaFzeQ/zncN2pkCnlrkS0ztC5Tk=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/e11a3d56-ac75-4981-9726-c440214c81ed/0/16B946F06E300C41DA2C037393837F098BA659D1.crl rsync://repo-rpki.idnic.net/repo/e11a3d56-ac75-4981-9726-c440214c81ed/0/16B946F06E300C41DA2C037393837F098BA659D1.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/16B946F06E300C41DA2C037393837F098BA659D1.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 21 Dec 2025 13:17:04 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 4c:b9:69:4f:ba:62:fe:34:6b:6e:88:4a:7b:e3:22:1b:42:af:f1:30 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=16B946F06E300C41DA2C037393837F098BA659D1 Validity Not Before: Dec 18 11:05:04 2025 GMT Not After : Dec 21 13:17:04 2025 GMT Subject: CN=D08C314F08FA2975D8DB9DAE24C705A142A6BAE0 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b6:80:18:d0:dc:40:ea:45:06:23:3c:17:87:23: 10:7d:11:30:fa:29:7b:3e:11:52:e3:44:3d:62:39: a3:d9:ca:f1:bb:e5:64:b0:90:4f:d5:bd:14:7f:3d: 3f:02:4f:80:6a:2c:4a:3b:e1:3a:f4:2c:b0:76:57: 6b:db:90:01:77:58:7a:b6:3e:81:76:45:de:e5:f4: a3:dc:a9:63:0c:f5:97:7b:e3:73:d0:4b:64:78:1b: 76:0a:24:b2:db:4d:f4:9b:df:bc:a2:aa:d5:22:be: e5:8f:02:57:0d:15:5d:ef:60:b0:46:4f:0d:46:e2: 20:3b:cc:30:5e:e2:a3:ef:d9:3a:4d:0d:af:a2:bb: 92:8c:f0:8a:f1:1a:32:3f:3e:c4:29:6f:7c:9a:8d: 33:3b:7d:96:bb:fb:ea:7f:86:17:1a:c3:6a:4a:a1: 0f:98:60:0d:b8:4a:31:f2:8e:01:6c:df:33:b5:ff: c5:87:a6:14:63:2d:9a:7c:a7:0c:b2:eb:a7:2f:df: ff:ab:b9:98:22:30:56:38:bb:71:b0:e0:4f:4e:53: 12:7f:50:13:82:08:86:17:52:25:72:dd:f2:9c:2b: 39:4e:7f:12:e6:7d:11:cc:6d:6e:32:be:0e:b5:56: 4a:37:c7:d5:55:d5:a3:9e:00:bf:96:da:c1:18:f3: ea:c7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D0:8C:31:4F:08:FA:29:75:D8:DB:9D:AE:24:C7:05:A1:42:A6:BA:E0 X509v3 Authority Key Identifier: keyid:16:B9:46:F0:6E:30:0C:41:DA:2C:03:73:93:83:7F:09:8B:A6:59:D1 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/e11a3d56-ac75-4981-9726-c440214c81ed/0/16B946F06E300C41DA2C037393837F098BA659D1.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/16B946F06E300C41DA2C037393837F098BA659D1.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/e11a3d56-ac75-4981-9726-c440214c81ed/0/16B946F06E300C41DA2C037393837F098BA659D1.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 30:d1:4d:5f:7a:0e:73:f4:62:34:51:8a:a2:ae:9a:5a:ae:d9: 4f:6d:bc:5c:de:fa:04:11:22:0b:33:8a:8d:90:68:ba:8d:75: 42:4c:72:30:d4:48:7c:c2:5d:a6:c6:f8:44:78:6c:0c:14:2d: cb:be:55:e3:bf:18:0c:1c:4b:d0:82:98:1c:a4:6d:71:02:d9: 27:9a:94:86:0e:e6:84:76:56:a7:3d:38:7d:be:b1:f6:83:38: aa:89:d1:16:02:ce:1a:4c:ae:d5:46:86:9e:74:e4:77:60:d1: c9:b7:10:a7:9e:30:2a:72:03:86:c9:42:f9:23:3e:70:fa:e7: 6f:ab:5a:57:f3:fc:c0:4a:f7:1a:11:aa:be:c3:5f:88:06:ba: 5b:f7:73:d0:0e:d2:a4:58:ba:80:5f:a0:6e:ab:bc:3c:96:fd: c0:4f:d2:02:88:46:2e:33:00:cc:0b:8c:56:4b:d9:fb:aa:42: 9f:55:26:cf:14:f3:53:95:cd:42:54:c4:51:db:4f:98:c8:56: db:93:99:b6:29:31:47:3a:3b:7c:ae:2b:4e:70:cd:23:cc:c3: d9:dc:33:62:73:0c:3c:c0:c4:25:b1:b7:96:0a:70:ea:7a:94: 4d:9d:ca:06:96:d9:55:77:00:50:a5:8d:2c:cc:72:09:1d:f6: 02:82:51:61 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUTLlpT7pi/jRrbohKe+MiG0Kv8TAwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMTZCOTQ2RjA2RTMwMEM0MURBMkMwMzczOTM4MzdGMDk4 QkE2NTlEMTAeFw0yNTEyMTgxMTA1MDRaFw0yNTEyMjExMzE3MDRaMDMxMTAvBgNV BAMTKEQwOEMzMTRGMDhGQTI5NzVEOERCOURBRTI0QzcwNUExNDJBNkJBRTAwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC2gBjQ3EDqRQYjPBeHIxB9ETD6 KXs+EVLjRD1iOaPZyvG75WSwkE/VvRR/PT8CT4BqLEo74Tr0LLB2V2vbkAF3WHq2 PoF2Rd7l9KPcqWMM9Zd743PQS2R4G3YKJLLbTfSb37yiqtUivuWPAlcNFV3vYLBG Tw1G4iA7zDBe4qPv2TpNDa+iu5KM8IrxGjI/PsQpb3yajTM7fZa7++p/hhcaw2pK oQ+YYA24SjHyjgFs3zO1/8WHphRjLZp8pwyy66cv3/+ruZgiMFY4u3Gw4E9OUxJ/ UBOCCIYXUiVy3fKcKzlOfxLmfRHMbW4yvg61Vko3x9VV1aOeAL+W2sEY8+rHAgMB AAGjggI8MIICODAdBgNVHQ4EFgQU0IwxTwj6KXXY252uJMcFoUKmuuAwHwYDVR0j BBgwFoAUFrlG8G4wDEHaLANzk4N/CYumWdEwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby9l MTFhM2Q1Ni1hYzc1LTQ5ODEtOTcyNi1jNDQwMjE0YzgxZWQvMC8xNkI5NDZGMDZF MzAwQzQxREEyQzAzNzM5MzgzN0YwOThCQTY1OUQxLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvMTZCOTQ2RjA2RTMwMEM0MURBMkMwMzczOTM4MzdGMDk4QkE2 NTlEMS5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vZTExYTNkNTYtYWM3NS00OTgxLTk3 MjYtYzQ0MDIxNGM4MWVkLzAvMTZCOTQ2RjA2RTMwMEM0MURBMkMwMzczOTM4MzdG MDk4QkE2NTlEMS5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBADDRTV96DnP0YjRRiqKumlqu2U9tvFze+gQR Igszio2QaLqNdUJMcjDUSHzCXabG+ER4bAwULcu+VeO/GAwcS9CCmBykbXEC2Sea lIYO5oR2Vqc9OH2+sfaDOKqJ0RYCzhpMrtVGhp505Hdg0cm3EKeeMCpyA4bJQvkj PnD652+rWlfz/MBK9xoRqr7DX4gGulv3c9AO0qRYuoBfoG6rvDyW/cBP0gKIRi4z AMwLjFZL2fuqQp9VJs8U81OVzUJUxFHbT5jIVtuTmbYpMUc6O3yuK05wzSPMw9nc M2JzDDzAxCWxt5YKcOp6lE2dygaW2VV3AFCljSzMcgkd9gKCUWE= -----END CERTIFICATE-----Generated at Fri Dec 19 17:55:18 2025 by rpki-client