This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf repo-rpki.idnic.net/repo/5c285291-ce92-4144-9c18-9e8c191ddec6/0/166B4918E7A1A1641E7C79C537833379E393522E.mft File: 166B4918E7A1A1641E7C79C537833379E393522E.mft (raw, json) Hash identifier: z4uPohZTY5IbtmtFqFbZXlExamLgF0gwUJNnk7HZq+U= Subject key identifier: FF:A2:60:D2:8B:51:9D:DE:80:33:0E:C0:88:23:96:4F:34:21:2F:30 Authority key identifier: 16:6B:49:18:E7:A1:A1:64:1E:7C:79:C5:37:83:33:79:E3:93:52:2E Certificate issuer: /CN=166B4918E7A1A1641E7C79C537833379E393522E Certificate serial: 6F76B93081162EABD0DAC6680E30723A0B3E6217 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/166B4918E7A1A1641E7C79C537833379E393522E.cer Subject info access: rsync://repo-rpki.idnic.net/repo/5c285291-ce92-4144-9c18-9e8c191ddec6/0/166B4918E7A1A1641E7C79C537833379E393522E.mft Manifest number: 02F5 Signing time: Mon 01 Dec 2025 16:01:04 +0000 Manifest this update: Mon 01 Dec 2025 15:56:04 +0000 Manifest next update: Fri 05 Dec 2025 02:38:04 +0000 Files and hashes: 1: 3130332e3137342e3138302e302f32342d3234203d3e20313437313037.roa (hash: WsHwgNa1eu27mA5KJGjHDisSyyKknyjiNT1hKbJ/YGc=) 2: 166B4918E7A1A1641E7C79C537833379E393522E.crl (hash: McCq7vryXj7PSb0Q3VSWfkUsWaGrgNWTmAbyyFAz16A=) 3: 3130332e3137342e3138312e302f32342d3234203d3e20313437313037.roa (hash: LzEWJe+Hglc03QN90vVTDC59A7niJ+rvkY3tQyL/MFs=) 4: 3130332e3137342e3138302e302f32332d3233203d3e20313437313037.roa (hash: oK3qw71PTaTu9zr3WTDr2kf09ZEsEk1iSGVob7ZwRo0=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/5c285291-ce92-4144-9c18-9e8c191ddec6/0/166B4918E7A1A1641E7C79C537833379E393522E.crl rsync://repo-rpki.idnic.net/repo/5c285291-ce92-4144-9c18-9e8c191ddec6/0/166B4918E7A1A1641E7C79C537833379E393522E.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/166B4918E7A1A1641E7C79C537833379E393522E.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 05 Dec 2025 02:38:04 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 6f:76:b9:30:81:16:2e:ab:d0:da:c6:68:0e:30:72:3a:0b:3e:62:17 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=166B4918E7A1A1641E7C79C537833379E393522E Validity Not Before: Dec 1 15:56:04 2025 GMT Not After : Dec 5 02:38:04 2025 GMT Subject: CN=FFA260D28B519DDE80330EC08823964F34212F30 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c7:5a:5c:66:f1:27:76:08:f3:ec:b1:6d:5a:b5: 7e:92:3e:3d:33:98:6e:ac:5b:73:72:5b:a2:f1:ec: 40:0e:10:bf:ae:61:17:92:92:21:07:78:d5:2f:12: 1f:c5:3b:10:25:17:7a:08:4e:0b:6e:c1:76:0a:e7: c8:c9:00:9d:f2:6d:ed:1a:2c:57:08:8d:74:e2:0b: d9:89:72:12:9b:74:ec:2a:38:42:32:3f:07:cd:7a: 40:7b:fb:7a:4d:1b:c8:38:1d:eb:4b:23:87:80:93: db:a5:03:3f:a1:fd:e3:1f:72:bd:cb:cb:13:ef:77: 61:2d:a6:c2:33:e2:9e:f6:c1:70:73:47:72:58:62: 50:e5:36:4e:90:36:8c:d6:51:e0:25:07:c9:86:37: 7f:1e:62:a6:ab:a2:41:43:e9:a7:19:43:6b:d6:07: 9c:81:a4:6e:0d:4b:cc:da:d1:9e:f7:11:5b:86:b5: 66:fa:0a:3f:30:63:8b:a4:b9:bc:9e:b7:75:57:b2: a4:56:93:4d:6f:dd:54:a6:dc:03:d2:26:f4:dc:0e: d9:dc:d7:a2:d7:d8:6b:3e:fb:de:b6:b7:d4:16:e8: c4:e3:4d:af:5d:2f:a2:c5:30:ae:62:1b:97:33:63: 57:16:7c:91:87:05:5d:4c:59:7f:a7:3c:c0:fa:48: 93:61 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: FF:A2:60:D2:8B:51:9D:DE:80:33:0E:C0:88:23:96:4F:34:21:2F:30 X509v3 Authority Key Identifier: keyid:16:6B:49:18:E7:A1:A1:64:1E:7C:79:C5:37:83:33:79:E3:93:52:2E X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/5c285291-ce92-4144-9c18-9e8c191ddec6/0/166B4918E7A1A1641E7C79C537833379E393522E.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/166B4918E7A1A1641E7C79C537833379E393522E.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/5c285291-ce92-4144-9c18-9e8c191ddec6/0/166B4918E7A1A1641E7C79C537833379E393522E.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 57:83:cc:e3:dc:85:5f:62:17:ca:56:c4:fc:7c:b6:57:53:0e: 05:89:1f:f0:52:9f:8c:3f:5d:04:05:e2:6e:52:22:d6:d1:8a: cc:1b:41:d8:85:60:9b:86:3e:38:b1:84:fa:ad:17:15:c8:22: ae:71:2d:b6:be:1f:1c:07:5b:e2:00:bd:3b:39:40:35:c9:27: f5:53:13:88:dc:83:c8:6d:48:99:53:b5:eb:fd:3e:bc:df:c8: f8:39:7e:bd:e7:a7:30:a2:47:cb:b7:e1:c9:a8:b5:29:e8:60: 6a:d7:79:e5:a5:fc:81:15:eb:7d:2f:50:98:38:98:6f:fe:c4: 41:b3:d4:06:d7:d4:ce:e2:2f:7e:b0:cd:a2:ae:9c:f6:2c:2d: 27:ee:94:d5:55:2b:34:63:d9:d1:c3:59:33:67:7d:b0:f3:7b: 6a:ea:d8:f8:da:cb:23:5c:61:10:01:4a:d0:72:9b:5b:39:d9: 8d:93:60:97:3a:7f:d0:15:45:5c:a8:ca:cc:f1:d5:8c:01:94: fd:e1:b3:13:f0:95:88:41:88:02:85:bc:18:0b:b0:32:4d:f8: f7:88:44:e0:5a:82:22:89:0a:bd:68:de:f6:d1:01:78:47:2d: 1c:b5:c3:12:49:22:75:72:40:a0:48:86:88:c1:95:29:8d:1d: b8:1d:40:e7 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUb3a5MIEWLqvQ2sZoDjByOgs+YhcwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMTY2QjQ5MThFN0ExQTE2NDFFN0M3OUM1Mzc4MzMzNzlF MzkzNTIyRTAeFw0yNTEyMDExNTU2MDRaFw0yNTEyMDUwMjM4MDRaMDMxMTAvBgNV BAMTKEZGQTI2MEQyOEI1MTlEREU4MDMzMEVDMDg4MjM5NjRGMzQyMTJGMzAwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDHWlxm8Sd2CPPssW1atX6SPj0z mG6sW3NyW6Lx7EAOEL+uYReSkiEHeNUvEh/FOxAlF3oITgtuwXYK58jJAJ3ybe0a LFcIjXTiC9mJchKbdOwqOEIyPwfNekB7+3pNG8g4HetLI4eAk9ulAz+h/eMfcr3L yxPvd2EtpsIz4p72wXBzR3JYYlDlNk6QNozWUeAlB8mGN38eYqarokFD6acZQ2vW B5yBpG4NS8za0Z73EVuGtWb6Cj8wY4ukubyet3VXsqRWk01v3VSm3APSJvTcDtnc 16LX2Gs++962t9QW6MTjTa9dL6LFMK5iG5czY1cWfJGHBV1MWX+nPMD6SJNhAgMB AAGjggI8MIICODAdBgNVHQ4EFgQU/6Jg0otRnd6AMw7AiCOWTzQhLzAwHwYDVR0j BBgwFoAUFmtJGOehoWQefHnFN4MzeeOTUi4wDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby81 YzI4NTI5MS1jZTkyLTQxNDQtOWMxOC05ZThjMTkxZGRlYzYvMC8xNjZCNDkxOEU3 QTFBMTY0MUU3Qzc5QzUzNzgzMzM3OUUzOTM1MjJFLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvMTY2QjQ5MThFN0ExQTE2NDFFN0M3OUM1Mzc4MzMzNzlFMzkz NTIyRS5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vNWMyODUyOTEtY2U5Mi00MTQ0LTlj MTgtOWU4YzE5MWRkZWM2LzAvMTY2QjQ5MThFN0ExQTE2NDFFN0M3OUM1Mzc4MzMz NzlFMzkzNTIyRS5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAFeDzOPchV9iF8pWxPx8tldTDgWJH/BSn4w/ XQQF4m5SItbRiswbQdiFYJuGPjixhPqtFxXIIq5xLba+HxwHW+IAvTs5QDXJJ/VT E4jcg8htSJlTtev9PrzfyPg5fr3npzCiR8u34cmotSnoYGrXeeWl/IEV630vUJg4 mG/+xEGz1AbX1M7iL36wzaKunPYsLSfulNVVKzRj2dHDWTNnfbDze2rq2PjayyNc YRABStBym1s52Y2TYJc6f9AVRVyoyszx1YwBlP3hsxPwlYhBiAKFvBgLsDJN+PeI ROBagiKJCr1o3vbRAXhHLRy1wxJJInVyQKBIhojBlSmNHbgdQOc= -----END CERTIFICATE-----Generated at Wed Dec 3 14:56:26 2025 by rpki-client