This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf repo-rpki.idnic.net/repo/648b6583-4122-469d-8384-3af1bcc6607f/0/16CD7877C91A179A0A6751085603DA8E7DE539F0.mft File: 16CD7877C91A179A0A6751085603DA8E7DE539F0.mft (raw, json) Hash identifier: BhZDJqDlFrw9ihHeUOo6QCpagMMWlBif0QF1ZmTsRjg= Subject key identifier: B7:1F:A4:C8:C6:7E:2C:9D:8B:65:28:C7:64:59:03:0E:4E:C0:B2:B1 Authority key identifier: 16:CD:78:77:C9:1A:17:9A:0A:67:51:08:56:03:DA:8E:7D:E5:39:F0 Certificate issuer: /CN=16CD7877C91A179A0A6751085603DA8E7DE539F0 Certificate serial: 166E1C9D0B7A9227DE2F2CAA3693813E07BE0CDD Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/16CD7877C91A179A0A6751085603DA8E7DE539F0.cer Subject info access: rsync://repo-rpki.idnic.net/repo/648b6583-4122-469d-8384-3af1bcc6607f/0/16CD7877C91A179A0A6751085603DA8E7DE539F0.mft Manifest number: 04AD Signing time: Tue 02 Dec 2025 17:01:33 +0000 Manifest this update: Tue 02 Dec 2025 16:56:33 +0000 Manifest next update: Fri 05 Dec 2025 19:41:33 +0000 Files and hashes: 1: 16CD7877C91A179A0A6751085603DA8E7DE539F0.crl (hash: q/Nqnlm66MPCeBvh+IsDXIC8STNxzdIRkrF/bBYmVZg=) 2: 3130332e3134372e3133342e302f32332d3234203d3e20313339393633.roa (hash: EBtEj4ypwlzzw6GhMy3RkgtUq0npTq7gZQPuYhe9Zzc=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/648b6583-4122-469d-8384-3af1bcc6607f/0/16CD7877C91A179A0A6751085603DA8E7DE539F0.crl rsync://repo-rpki.idnic.net/repo/648b6583-4122-469d-8384-3af1bcc6607f/0/16CD7877C91A179A0A6751085603DA8E7DE539F0.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/16CD7877C91A179A0A6751085603DA8E7DE539F0.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 05 Dec 2025 19:41:33 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 16:6e:1c:9d:0b:7a:92:27:de:2f:2c:aa:36:93:81:3e:07:be:0c:dd Signature Algorithm: sha256WithRSAEncryption Issuer: CN=16CD7877C91A179A0A6751085603DA8E7DE539F0 Validity Not Before: Dec 2 16:56:33 2025 GMT Not After : Dec 5 19:41:33 2025 GMT Subject: CN=B71FA4C8C67E2C9D8B6528C76459030E4EC0B2B1 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ce:d0:6d:26:70:a7:5c:b1:56:92:62:9d:58:7f: dc:73:bb:1c:19:c3:70:ff:09:60:b1:ca:42:ee:53: 72:07:4d:3a:63:80:20:10:47:5a:43:0b:22:c1:63: 09:b0:1c:1a:7a:bb:d2:40:cd:6b:68:04:c1:3c:76: 0c:bb:40:d2:4f:b3:62:e4:2d:52:fd:97:a2:bc:11: e4:f6:6f:17:d4:d5:4c:41:f7:0f:40:a8:c4:4b:7f: c1:5a:49:48:bb:a1:58:76:3f:e2:00:b0:67:42:5a: b8:f7:62:a2:82:45:81:46:26:3f:9a:cb:fc:5f:09: 6a:4a:99:a0:92:e5:37:f9:11:d6:9e:33:05:7e:a6: dd:07:96:13:8a:a5:7a:1a:3e:1d:70:8c:aa:20:3a: 54:01:6b:5b:50:a2:2e:ba:23:92:ad:33:ea:68:7d: 0f:f1:1b:da:e1:15:e6:22:14:39:f5:99:e6:a6:a9: 41:18:82:b0:0c:ad:34:dc:64:f3:57:1a:f0:72:fd: 24:d4:ef:a2:24:9b:f9:d0:eb:ce:c8:8e:c4:c4:07: 28:c3:1a:15:93:7d:c2:91:2c:07:a6:73:cd:f9:4e: a0:20:2d:a9:45:68:2d:e2:1c:ff:9a:35:2c:42:37: 41:49:b9:59:61:1c:5e:2b:65:3d:fc:f0:36:0f:19: 9e:6f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: B7:1F:A4:C8:C6:7E:2C:9D:8B:65:28:C7:64:59:03:0E:4E:C0:B2:B1 X509v3 Authority Key Identifier: keyid:16:CD:78:77:C9:1A:17:9A:0A:67:51:08:56:03:DA:8E:7D:E5:39:F0 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/648b6583-4122-469d-8384-3af1bcc6607f/0/16CD7877C91A179A0A6751085603DA8E7DE539F0.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/16CD7877C91A179A0A6751085603DA8E7DE539F0.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/648b6583-4122-469d-8384-3af1bcc6607f/0/16CD7877C91A179A0A6751085603DA8E7DE539F0.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption a6:d6:90:f0:af:87:fb:5e:ce:ef:62:31:34:18:71:53:75:88: 2f:79:db:3a:0a:13:a8:6b:30:cc:cd:3f:72:d6:71:a5:07:1e: e0:97:e2:bb:95:64:92:71:12:0c:73:df:22:1d:55:0c:6f:7d: 22:dd:90:83:82:13:17:b5:d3:b2:1f:52:f6:9a:c2:5a:4f:88: 03:55:be:56:72:f1:e6:58:1c:e9:1a:62:ff:15:90:8b:43:d6: c3:5f:58:0e:69:1d:cf:17:2d:89:ba:aa:13:06:14:22:ca:da: 1a:76:a9:8a:d9:3d:92:18:f5:0e:62:76:e1:ea:32:ec:18:71: 0a:b0:25:33:75:3f:bc:81:39:4c:a6:f9:62:ea:34:a6:f4:f1: bd:b5:ab:1f:c2:37:b4:b1:65:87:78:c8:1a:da:87:80:bd:45: c6:41:7b:c9:bd:8c:eb:62:b6:96:fc:f8:2f:b2:36:b3:36:31: 64:f7:2c:b4:66:36:df:32:a7:2e:e8:dd:a6:94:be:4a:63:6a: 24:95:10:c1:1c:90:24:76:fc:11:0c:f5:e3:56:bc:58:43:85: ee:31:13:3a:01:b9:cb:1f:cd:23:23:07:ce:c1:25:6f:c2:9a: 4a:f6:49:71:89:81:03:d2:ab:14:90:54:1a:6d:da:59:79:ff: 16:c0:55:73 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUFm4cnQt6kifeLyyqNpOBPge+DN0wDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMTZDRDc4NzdDOTFBMTc5QTBBNjc1MTA4NTYwM0RBOEU3 REU1MzlGMDAeFw0yNTEyMDIxNjU2MzNaFw0yNTEyMDUxOTQxMzNaMDMxMTAvBgNV BAMTKEI3MUZBNEM4QzY3RTJDOUQ4QjY1MjhDNzY0NTkwMzBFNEVDMEIyQjEwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDO0G0mcKdcsVaSYp1Yf9xzuxwZ w3D/CWCxykLuU3IHTTpjgCAQR1pDCyLBYwmwHBp6u9JAzWtoBME8dgy7QNJPs2Lk LVL9l6K8EeT2bxfU1UxB9w9AqMRLf8FaSUi7oVh2P+IAsGdCWrj3YqKCRYFGJj+a y/xfCWpKmaCS5Tf5EdaeMwV+pt0HlhOKpXoaPh1wjKogOlQBa1tQoi66I5KtM+po fQ/xG9rhFeYiFDn1meamqUEYgrAMrTTcZPNXGvBy/STU76Ikm/nQ687IjsTEByjD GhWTfcKRLAemc835TqAgLalFaC3iHP+aNSxCN0FJuVlhHF4rZT388DYPGZ5vAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUtx+kyMZ+LJ2LZSjHZFkDDk7AsrEwHwYDVR0j BBgwFoAUFs14d8kaF5oKZ1EIVgPajn3lOfAwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby82 NDhiNjU4My00MTIyLTQ2OWQtODM4NC0zYWYxYmNjNjYwN2YvMC8xNkNENzg3N0M5 MUExNzlBMEE2NzUxMDg1NjAzREE4RTdERTUzOUYwLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvMTZDRDc4NzdDOTFBMTc5QTBBNjc1MTA4NTYwM0RBOEU3REU1 MzlGMC5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vNjQ4YjY1ODMtNDEyMi00NjlkLTgz ODQtM2FmMWJjYzY2MDdmLzAvMTZDRDc4NzdDOTFBMTc5QTBBNjc1MTA4NTYwM0RB OEU3REU1MzlGMC5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAKbWkPCvh/tezu9iMTQYcVN1iC952zoKE6hr MMzNP3LWcaUHHuCX4ruVZJJxEgxz3yIdVQxvfSLdkIOCExe107IfUvaawlpPiANV vlZy8eZYHOkaYv8VkItD1sNfWA5pHc8XLYm6qhMGFCLK2hp2qYrZPZIY9Q5iduHq MuwYcQqwJTN1P7yBOUym+WLqNKb08b21qx/CN7SxZYd4yBrah4C9RcZBe8m9jOti tpb8+C+yNrM2MWT3LLRmNt8ypy7o3aaUvkpjaiSVEMEckCR2/BEM9eNWvFhDhe4x EzoBucsfzSMjB87BJW/Cmkr2SXGJgQPSqxSQVBpt2ll5/xbAVXM= -----END CERTIFICATE-----Generated at Wed Dec 3 15:30:56 2025 by rpki-client