This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf repo-rpki.idnic.net/repo/5c285291-ce92-4144-9c18-9e8c191ddec6/0/166B4918E7A1A1641E7C79C537833379E393522E.mft File: 166B4918E7A1A1641E7C79C537833379E393522E.mft (raw, json) Hash identifier: If28Z3FUjCffX8G/JnNVIOtZoe/X5J0R/1PeumRYUwQ= Subject key identifier: 22:AF:73:B5:13:95:00:01:4C:F6:FC:00:94:93:08:75:56:BC:7E:3F Authority key identifier: 16:6B:49:18:E7:A1:A1:64:1E:7C:79:C5:37:83:33:79:E3:93:52:2E Certificate issuer: /CN=166B4918E7A1A1641E7C79C537833379E393522E Certificate serial: 0FF0BCE3CD81006EA6CD4236F28156F287E23695 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/166B4918E7A1A1641E7C79C537833379E393522E.cer Subject info access: rsync://repo-rpki.idnic.net/repo/5c285291-ce92-4144-9c18-9e8c191ddec6/0/166B4918E7A1A1641E7C79C537833379E393522E.mft Manifest number: 0310 Signing time: Sat 31 Jan 2026 16:21:07 +0000 Manifest this update: Sat 31 Jan 2026 16:16:07 +0000 Manifest next update: Tue 03 Feb 2026 17:40:07 +0000 Files and hashes: 1: 3130332e3137342e3138302e302f32342d3234203d3e20313437313037.roa (hash: WsHwgNa1eu27mA5KJGjHDisSyyKknyjiNT1hKbJ/YGc=) 2: 3130332e3137342e3138312e302f32342d3234203d3e20313437313037.roa (hash: LzEWJe+Hglc03QN90vVTDC59A7niJ+rvkY3tQyL/MFs=) 3: 166B4918E7A1A1641E7C79C537833379E393522E.crl (hash: EyqT1CzEfESaRh6YcfnEm12w4StrtZJ3xWK8tc81cwA=) 4: 3130332e3137342e3138302e302f32332d3233203d3e20313437313037.roa (hash: oK3qw71PTaTu9zr3WTDr2kf09ZEsEk1iSGVob7ZwRo0=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/5c285291-ce92-4144-9c18-9e8c191ddec6/0/166B4918E7A1A1641E7C79C537833379E393522E.crl rsync://repo-rpki.idnic.net/repo/5c285291-ce92-4144-9c18-9e8c191ddec6/0/166B4918E7A1A1641E7C79C537833379E393522E.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/166B4918E7A1A1641E7C79C537833379E393522E.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 03 Feb 2026 17:40:07 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 0f:f0:bc:e3:cd:81:00:6e:a6:cd:42:36:f2:81:56:f2:87:e2:36:95 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=166B4918E7A1A1641E7C79C537833379E393522E Validity Not Before: Jan 31 16:16:07 2026 GMT Not After : Feb 3 17:40:07 2026 GMT Subject: CN=22AF73B5139500014CF6FC009493087556BC7E3F Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cf:66:a0:64:28:01:ab:86:6b:7c:4c:36:84:71: f6:81:9f:a8:97:2d:4f:44:b1:fc:1c:e1:f5:9a:43: 07:15:a4:17:26:4f:2c:ec:34:2b:69:7e:1b:a7:f2: 17:c0:b6:0c:c5:13:31:18:2c:04:86:0b:b9:a9:27: 0b:9a:f7:2e:d6:32:45:3a:8b:e2:95:bd:c8:e0:e4: 9c:47:39:5e:45:bb:f1:cd:27:60:6e:9f:d4:31:4c: ef:53:51:60:03:49:a6:9b:a1:e8:16:34:ac:8c:5b: 0c:b2:cc:51:7b:c0:df:3b:e5:92:9c:99:95:a3:8b: 3f:d2:a6:ff:1f:e9:0e:89:88:6a:37:4d:52:31:89: da:62:7d:4a:4d:7a:e9:ee:4f:31:20:ff:c0:5d:cb: 38:5e:14:2e:a0:8e:e0:3b:5e:78:1b:ca:84:06:43: 11:3c:09:73:8a:00:b8:47:86:05:82:8b:32:83:ae: f1:7b:61:cb:05:5a:df:84:82:c9:ed:d2:fe:d9:68: 2f:1f:93:7a:28:b0:03:4f:f2:16:15:b3:5e:3e:68: 3c:57:27:61:ec:30:c6:60:cb:89:1a:af:66:78:26: ff:f0:41:f4:3e:8c:e0:be:2b:1a:c5:4b:be:56:37: 10:da:d0:0e:64:0c:b9:9a:6d:80:a3:85:0b:e4:fd: b0:29 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 22:AF:73:B5:13:95:00:01:4C:F6:FC:00:94:93:08:75:56:BC:7E:3F X509v3 Authority Key Identifier: keyid:16:6B:49:18:E7:A1:A1:64:1E:7C:79:C5:37:83:33:79:E3:93:52:2E X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/5c285291-ce92-4144-9c18-9e8c191ddec6/0/166B4918E7A1A1641E7C79C537833379E393522E.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/166B4918E7A1A1641E7C79C537833379E393522E.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/5c285291-ce92-4144-9c18-9e8c191ddec6/0/166B4918E7A1A1641E7C79C537833379E393522E.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 39:8a:29:81:2e:d9:bd:66:e1:9d:0e:9f:aa:60:c0:9c:23:36: 00:c3:85:11:8d:03:9d:56:8f:79:10:6d:c3:dd:47:59:f7:31: e4:84:9f:56:1f:35:85:8c:8b:45:11:ec:c1:99:95:8f:fe:14: cf:f9:92:b2:7f:97:43:68:5c:60:56:3d:76:fd:9d:62:7b:8f: eb:34:18:86:ce:ff:44:ea:dc:a5:bb:83:00:c9:b8:0d:7d:ea: 7b:d9:92:07:0d:ef:cc:c2:8e:10:de:3a:10:60:2a:36:02:75: 04:c5:39:2a:01:c5:ed:7d:47:22:6f:88:db:41:5e:de:94:cd: 6f:d1:e5:30:bc:81:d8:52:18:8f:0f:ee:d4:7e:94:8d:6a:4d: ca:9a:11:43:87:42:68:a5:78:1c:d3:53:f3:b6:bf:91:9a:b6: 3a:bb:4c:5d:1d:4e:0a:50:64:da:ea:28:4d:1a:de:e5:35:8f: 50:03:d7:44:ab:14:8b:77:88:3f:81:1a:dd:d9:49:12:31:4d: e9:96:ee:7c:06:fb:4b:bc:3d:3b:ec:50:61:43:ce:55:fc:ab: 94:ff:e4:42:e5:ec:d1:dd:bc:4e:ab:c6:88:43:13:99:c0:7c: e7:c7:64:52:08:9a:8c:d8:35:a9:1e:5f:2a:61:96:bb:dc:40: 13:5f:9d:b2 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUD/C8482BAG6mzUI28oFW8ofiNpUwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMTY2QjQ5MThFN0ExQTE2NDFFN0M3OUM1Mzc4MzMzNzlF MzkzNTIyRTAeFw0yNjAxMzExNjE2MDdaFw0yNjAyMDMxNzQwMDdaMDMxMTAvBgNV BAMTKDIyQUY3M0I1MTM5NTAwMDE0Q0Y2RkMwMDk0OTMwODc1NTZCQzdFM0YwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDPZqBkKAGrhmt8TDaEcfaBn6iX LU9Esfwc4fWaQwcVpBcmTyzsNCtpfhun8hfAtgzFEzEYLASGC7mpJwua9y7WMkU6 i+KVvcjg5JxHOV5Fu/HNJ2Bun9QxTO9TUWADSaaboegWNKyMWwyyzFF7wN875ZKc mZWjiz/Spv8f6Q6JiGo3TVIxidpifUpNeunuTzEg/8BdyzheFC6gjuA7XngbyoQG QxE8CXOKALhHhgWCizKDrvF7YcsFWt+Egsnt0v7ZaC8fk3oosANP8hYVs14+aDxX J2HsMMZgy4kar2Z4Jv/wQfQ+jOC+KxrFS75WNxDa0A5kDLmabYCjhQvk/bApAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUIq9ztROVAAFM9vwAlJMIdVa8fj8wHwYDVR0j BBgwFoAUFmtJGOehoWQefHnFN4MzeeOTUi4wDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby81 YzI4NTI5MS1jZTkyLTQxNDQtOWMxOC05ZThjMTkxZGRlYzYvMC8xNjZCNDkxOEU3 QTFBMTY0MUU3Qzc5QzUzNzgzMzM3OUUzOTM1MjJFLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvMTY2QjQ5MThFN0ExQTE2NDFFN0M3OUM1Mzc4MzMzNzlFMzkz NTIyRS5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vNWMyODUyOTEtY2U5Mi00MTQ0LTlj MTgtOWU4YzE5MWRkZWM2LzAvMTY2QjQ5MThFN0ExQTE2NDFFN0M3OUM1Mzc4MzMz NzlFMzkzNTIyRS5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBADmKKYEu2b1m4Z0On6pgwJwjNgDDhRGNA51W j3kQbcPdR1n3MeSEn1YfNYWMi0UR7MGZlY/+FM/5krJ/l0NoXGBWPXb9nWJ7j+s0 GIbO/0Tq3KW7gwDJuA196nvZkgcN78zCjhDeOhBgKjYCdQTFOSoBxe19RyJviNtB Xt6UzW/R5TC8gdhSGI8P7tR+lI1qTcqaEUOHQmileBzTU/O2v5Gatjq7TF0dTgpQ ZNrqKE0a3uU1j1AD10SrFIt3iD+BGt3ZSRIxTemW7nwG+0u8PTvsUGFDzlX8q5T/ 5ELl7NHdvE6rxohDE5nAfOfHZFIImozYNakeXyphlrvcQBNfnbI= -----END CERTIFICATE-----Generated at Mon Feb 2 15:52:32 2026 by rpki-client