This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf repo-rpki.idnic.net/repo/3c9941a4-28d2-47d1-91e7-acab59084462/0/B16C4772F3D77045BBA997F94CEACA9E0DCC2865.mft File: B16C4772F3D77045BBA997F94CEACA9E0DCC2865.mft (raw, json) Hash identifier: 957hBZ9DdFY7SpwBY2xS6C/LF3Qy7c59TSbT3s+iA80= Subject key identifier: 5A:ED:13:CE:09:A3:A6:BB:3A:A0:88:F4:0A:28:3D:44:35:05:7A:63 Authority key identifier: B1:6C:47:72:F3:D7:70:45:BB:A9:97:F9:4C:EA:CA:9E:0D:CC:28:65 Certificate issuer: /CN=B16C4772F3D77045BBA997F94CEACA9E0DCC2865 Certificate serial: 2A2A912BD106F5CAC3A0168D79126F0091814653 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/B16C4772F3D77045BBA997F94CEACA9E0DCC2865.cer Subject info access: rsync://repo-rpki.idnic.net/repo/3c9941a4-28d2-47d1-91e7-acab59084462/0/B16C4772F3D77045BBA997F94CEACA9E0DCC2865.mft Manifest number: 014A Signing time: Wed 03 Dec 2025 13:02:03 +0000 Manifest this update: Wed 03 Dec 2025 12:57:03 +0000 Manifest next update: Sat 06 Dec 2025 22:20:03 +0000 Files and hashes: 1: B16C4772F3D77045BBA997F94CEACA9E0DCC2865.crl (hash: XErT9maMAXUTFjUAV10MWT6Kpcaqbtzo+JekL2G5gv4=) 2: 3138302e3133312e3132392e302f32342d3234203d3e20313532303238.roa (hash: IK3NBrk/iQNskIBya+kx1CnPloRzYziR32FnB/WUNZ4=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/3c9941a4-28d2-47d1-91e7-acab59084462/0/B16C4772F3D77045BBA997F94CEACA9E0DCC2865.crl rsync://repo-rpki.idnic.net/repo/3c9941a4-28d2-47d1-91e7-acab59084462/0/B16C4772F3D77045BBA997F94CEACA9E0DCC2865.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/B16C4772F3D77045BBA997F94CEACA9E0DCC2865.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 06 Dec 2025 12:07:02 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2a:2a:91:2b:d1:06:f5:ca:c3:a0:16:8d:79:12:6f:00:91:81:46:53 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=B16C4772F3D77045BBA997F94CEACA9E0DCC2865 Validity Not Before: Dec 3 12:57:03 2025 GMT Not After : Dec 6 22:20:03 2025 GMT Subject: CN=5AED13CE09A3A6BB3AA088F40A283D4435057A63 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ec:e7:cb:79:09:7b:e2:fc:0f:9b:b0:10:7f:1f: 0a:ed:20:99:f3:d6:16:13:5c:1f:07:f8:83:8f:4d: a0:bd:96:d0:df:33:77:0e:5b:c5:05:73:b1:52:40: b3:74:8a:83:1d:1f:6e:04:9c:91:2f:e6:b5:c9:6f: 2f:7a:eb:ec:60:a0:e5:e0:c2:ec:80:4c:79:05:39: 58:17:ce:b8:e3:66:0b:5c:84:57:76:d6:3e:d0:cf: 85:18:18:b2:be:57:28:4b:8b:a0:b5:85:03:67:d7: b5:3f:d3:d4:65:5b:81:ed:cb:5c:9c:7f:fb:66:1c: 68:30:58:ff:9d:e1:80:28:e2:b7:2c:1b:5d:73:d6: c1:ad:ca:94:57:87:0e:e1:97:c4:55:ce:47:55:d7: 6e:30:e3:f6:5d:77:63:ee:42:78:6d:4d:3e:74:d5: bb:d9:5b:f6:c1:18:36:af:1b:c5:4e:e7:48:ae:a9: a3:4b:c1:cd:28:06:f9:b2:0c:eb:59:52:6e:cc:6d: e3:f9:f8:b2:5f:23:d9:6b:b0:6c:30:25:44:6b:05: e8:28:a2:f9:c3:5c:85:92:3c:7f:f2:24:a3:c1:85: 96:21:67:d4:42:47:cd:3c:28:8f:eb:14:06:0a:50: fd:78:a7:22:a4:19:da:cd:40:b6:97:bb:e9:b1:a8: 4e:11 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 5A:ED:13:CE:09:A3:A6:BB:3A:A0:88:F4:0A:28:3D:44:35:05:7A:63 X509v3 Authority Key Identifier: keyid:B1:6C:47:72:F3:D7:70:45:BB:A9:97:F9:4C:EA:CA:9E:0D:CC:28:65 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/3c9941a4-28d2-47d1-91e7-acab59084462/0/B16C4772F3D77045BBA997F94CEACA9E0DCC2865.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/B16C4772F3D77045BBA997F94CEACA9E0DCC2865.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/3c9941a4-28d2-47d1-91e7-acab59084462/0/B16C4772F3D77045BBA997F94CEACA9E0DCC2865.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 10:3c:08:8f:3c:ac:cb:fe:ce:72:61:38:20:10:a4:64:e4:3f: 5a:9d:84:9c:c7:a0:ba:52:1c:02:23:98:76:2b:0e:4d:de:cb: 47:34:f6:6d:74:4a:17:39:f4:2d:85:32:fd:fc:5b:bf:63:30: 8d:5a:e6:d7:56:f1:e7:5d:8b:af:e0:73:c1:58:9c:36:32:81: 8a:61:37:96:fd:77:8f:97:3a:4c:fd:bd:4f:7e:58:06:5a:02: 19:46:a7:1e:58:14:ac:67:da:91:57:8f:d5:c1:01:6d:9b:8c: 8a:23:25:7e:da:04:d5:f9:b0:b9:fb:1c:af:41:18:eb:f4:07: d6:e4:bc:62:f1:45:e2:d5:4b:a8:bb:8c:7e:05:b3:e5:68:87: e7:a4:7b:2d:4e:e5:79:e5:99:41:f0:ea:88:bd:25:eb:78:c8: 0d:23:49:c0:32:46:04:3a:fc:e9:19:bf:70:cc:e3:a5:e0:ce: 7b:7c:0e:49:aa:89:27:5e:30:06:9f:41:61:bc:24:32:81:4d: 53:8c:ec:5e:08:e6:4a:7e:93:6c:75:6e:b0:30:f3:d6:e0:e6: 63:81:34:5c:f4:c0:3b:57:bd:47:3c:84:4f:f3:14:e7:85:f9: 21:52:78:d7:b2:7a:47:b3:d9:44:25:72:07:54:0e:e5:2c:e9: 73:44:d2:04 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUKiqRK9EG9crDoBaNeRJvAJGBRlMwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoQjE2QzQ3NzJGM0Q3NzA0NUJCQTk5N0Y5NENFQUNBOUUw RENDMjg2NTAeFw0yNTEyMDMxMjU3MDNaFw0yNTEyMDYyMjIwMDNaMDMxMTAvBgNV BAMTKDVBRUQxM0NFMDlBM0E2QkIzQUEwODhGNDBBMjgzRDQ0MzUwNTdBNjMwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDs58t5CXvi/A+bsBB/HwrtIJnz 1hYTXB8H+IOPTaC9ltDfM3cOW8UFc7FSQLN0ioMdH24EnJEv5rXJby966+xgoOXg wuyATHkFOVgXzrjjZgtchFd21j7Qz4UYGLK+VyhLi6C1hQNn17U/09RlW4Hty1yc f/tmHGgwWP+d4YAo4rcsG11z1sGtypRXhw7hl8RVzkdV124w4/Zdd2PuQnhtTT50 1bvZW/bBGDavG8VO50iuqaNLwc0oBvmyDOtZUm7MbeP5+LJfI9lrsGwwJURrBego ovnDXIWSPH/yJKPBhZYhZ9RCR808KI/rFAYKUP14pyKkGdrNQLaXu+mxqE4RAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUWu0Tzgmjprs6oIj0Cig9RDUFemMwHwYDVR0j BBgwFoAUsWxHcvPXcEW7qZf5TOrKng3MKGUwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby8z Yzk5NDFhNC0yOGQyLTQ3ZDEtOTFlNy1hY2FiNTkwODQ0NjIvMC9CMTZDNDc3MkYz RDc3MDQ1QkJBOTk3Rjk0Q0VBQ0E5RTBEQ0MyODY1LmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvQjE2QzQ3NzJGM0Q3NzA0NUJCQTk5N0Y5NENFQUNBOUUwREND Mjg2NS5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vM2M5OTQxYTQtMjhkMi00N2QxLTkx ZTctYWNhYjU5MDg0NDYyLzAvQjE2QzQ3NzJGM0Q3NzA0NUJCQTk5N0Y5NENFQUNB OUUwRENDMjg2NS5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBABA8CI88rMv+znJhOCAQpGTkP1qdhJzHoLpS HAIjmHYrDk3ey0c09m10Shc59C2FMv38W79jMI1a5tdW8eddi6/gc8FYnDYygYph N5b9d4+XOkz9vU9+WAZaAhlGpx5YFKxn2pFXj9XBAW2bjIojJX7aBNX5sLn7HK9B GOv0B9bkvGLxReLVS6i7jH4Fs+Voh+ekey1O5XnlmUHw6oi9Jet4yA0jScAyRgQ6 /OkZv3DM46Xgznt8DkmqiSdeMAafQWG8JDKBTVOM7F4I5kp+k2x1brAw89bg5mOB NFz0wDtXvUc8hE/zFOeF+SFSeNeyekez2UQlcgdUDuUs6XNE0gQ= -----END CERTIFICATE-----Generated at Wed Dec 3 14:44:24 2025 by rpki-client