This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

$ rpki-client -vvf repo-rpki.idnic.net/repo/3c9941a4-28d2-47d1-91e7-acab59084462/0/B16C4772F3D77045BBA997F94CEACA9E0DCC2865.mft
File: B16C4772F3D77045BBA997F94CEACA9E0DCC2865.mft (raw, json)
Hash identifier: rGFvtcmFR1KcUpGALadz7LQcciDagklCuEI9HCizNus=
Subject key identifier: 44:61:E1:9C:BF:69:D1:53:C2:EB:C8:BD:62:43:DA:FF:14:6F:81:5E
Authority key identifier: B1:6C:47:72:F3:D7:70:45:BB:A9:97:F9:4C:EA:CA:9E:0D:CC:28:65
Certificate issuer: /CN=B16C4772F3D77045BBA997F94CEACA9E0DCC2865
Certificate serial: 1FA9D9ECE3C9212B20B2E5D555E41718F87CD370
Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/B16C4772F3D77045BBA997F94CEACA9E0DCC2865.cer
Subject info access: rsync://repo-rpki.idnic.net/repo/3c9941a4-28d2-47d1-91e7-acab59084462/0/B16C4772F3D77045BBA997F94CEACA9E0DCC2865.mft
Manifest number: 0165
Signing time: Mon 02 Feb 2026 06:22:04 +0000
Manifest this update: Mon 02 Feb 2026 06:17:04 +0000
Manifest next update: Thu 05 Feb 2026 10:47:04 +0000
Files and hashes: 1: B16C4772F3D77045BBA997F94CEACA9E0DCC2865.crl (hash: J2BEOBddc7Z6fm6Bmvn/LCYHD3dqhPSQVTea3qOPvSE=)
2: 3138302e3133312e3132392e302f32342d3234203d3e20313532303238.roa (hash: IK3NBrk/iQNskIBya+kx1CnPloRzYziR32FnB/WUNZ4=)
Validation: OK
Signature path: rsync://repo-rpki.idnic.net/repo/3c9941a4-28d2-47d1-91e7-acab59084462/0/B16C4772F3D77045BBA997F94CEACA9E0DCC2865.crl
rsync://repo-rpki.idnic.net/repo/3c9941a4-28d2-47d1-91e7-acab59084462/0/B16C4772F3D77045BBA997F94CEACA9E0DCC2865.mft
rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/B16C4772F3D77045BBA997F94CEACA9E0DCC2865.cer
rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl
rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Thu 05 Feb 2026 05:24:03 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
1f:a9:d9:ec:e3:c9:21:2b:20:b2:e5:d5:55:e4:17:18:f8:7c:d3:70
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=B16C4772F3D77045BBA997F94CEACA9E0DCC2865
Validity
Not Before: Feb 2 06:17:04 2026 GMT
Not After : Feb 5 10:47:04 2026 GMT
Subject: CN=4461E19CBF69D153C2EBC8BD6243DAFF146F815E
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ba:2f:aa:7e:92:af:4e:ff:08:68:0f:a9:23:77:
25:a0:58:b1:87:f7:0a:d9:0c:59:27:4c:51:b3:70:
13:03:18:47:52:07:fc:81:51:35:de:c4:23:cb:2b:
a4:8c:34:59:1e:67:9a:0f:1a:c8:d6:5c:0b:02:cb:
66:38:db:f4:a3:32:41:2f:3c:a2:ee:3f:0a:12:05:
53:de:72:9b:8b:aa:03:e3:2e:81:67:58:9e:47:b8:
07:77:e5:17:18:4a:e9:68:49:72:1c:8a:70:3b:23:
99:40:7e:17:ff:e2:ee:53:5a:af:db:c9:d6:03:5f:
89:64:49:d9:17:0c:aa:25:fe:d0:dd:8e:4e:fa:59:
bb:ca:bb:e1:ad:ea:fc:ff:a8:23:c5:09:57:6f:0a:
47:55:22:49:24:28:a5:dc:2e:07:cc:1e:62:7d:a1:
d9:c6:85:9d:73:b4:3f:b6:da:96:5d:c7:9a:dc:7c:
1b:31:de:fb:a5:ab:93:39:a8:81:85:7a:12:7c:75:
1c:27:7a:6a:32:a7:b9:70:dc:af:ec:e3:c9:41:38:
5a:d8:cd:43:4d:d2:8f:a5:92:d6:d0:c3:0d:b4:18:
b0:c5:c0:12:7e:4b:aa:69:b8:25:60:48:53:20:0d:
63:fd:64:d5:52:5b:b5:02:5c:80:ab:0b:c4:e3:ce:
3d:1d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
44:61:E1:9C:BF:69:D1:53:C2:EB:C8:BD:62:43:DA:FF:14:6F:81:5E
X509v3 Authority Key Identifier:
keyid:B1:6C:47:72:F3:D7:70:45:BB:A9:97:F9:4C:EA:CA:9E:0D:CC:28:65
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://repo-rpki.idnic.net/repo/3c9941a4-28d2-47d1-91e7-acab59084462/0/B16C4772F3D77045BBA997F94CEACA9E0DCC2865.crl
Authority Information Access:
CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/B16C4772F3D77045BBA997F94CEACA9E0DCC2865.cer
Subject Information Access:
Signed Object - URI:rsync://repo-rpki.idnic.net/repo/3c9941a4-28d2-47d1-91e7-acab59084462/0/B16C4772F3D77045BBA997F94CEACA9E0DCC2865.mft
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
61:38:44:ec:00:af:6c:ac:b8:4a:58:0e:13:e0:5f:5e:8a:23:
f9:00:be:2b:1a:59:96:29:7b:d1:49:1e:0b:36:07:68:51:1f:
34:90:9d:28:72:2c:e3:6f:27:47:44:f1:d9:5d:0f:37:62:ce:
d4:60:87:70:0f:2c:c1:d5:6f:90:cb:3f:25:fe:ad:0b:39:5c:
aa:a0:04:a9:c4:c3:a9:91:5b:1c:67:83:fb:9e:25:23:ef:11:
cb:88:21:b3:88:a7:96:eb:e4:f2:9a:0a:79:46:a7:a6:7e:d2:
7b:b0:78:42:85:21:11:e0:0f:52:5f:1f:2f:47:a1:d2:d4:30:
32:d7:49:be:c0:d2:94:07:5f:47:40:d1:f5:e2:88:24:34:72:
60:22:4b:bb:fe:7c:14:ea:51:26:0b:2f:1f:48:64:9a:15:25:
bb:77:d3:6d:fc:ef:b7:7b:31:bd:bc:f3:63:23:fe:66:84:f0:
68:e4:8a:04:56:b2:f2:84:c7:fa:87:ce:83:4b:69:39:fa:89:
a6:04:5f:60:63:1e:01:33:67:07:a2:52:e5:d2:4f:33:74:61:
2d:18:a8:25:3c:74:66:b3:47:77:7d:3f:91:dd:c0:29:7f:98:
46:71:fc:c3:21:a4:db:79:36:00:d9:93:40:6a:79:ff:48:af:
5d:5e:53:32
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Feb 2 09:44:02 2026 by rpki-client