This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf repo-rpki.idnic.net/repo/648b6583-4122-469d-8384-3af1bcc6607f/0/16CD7877C91A179A0A6751085603DA8E7DE539F0.mft File: 16CD7877C91A179A0A6751085603DA8E7DE539F0.mft (raw, json) Hash identifier: QD/oRczqPVyfKfKoOGt0yTdCfurG7V98n7OdcD7ID1c= Subject key identifier: B4:0E:C2:F8:85:39:C9:DA:7E:EF:DA:2B:85:54:80:C8:B0:38:06:94 Authority key identifier: 16:CD:78:77:C9:1A:17:9A:0A:67:51:08:56:03:DA:8E:7D:E5:39:F0 Certificate issuer: /CN=16CD7877C91A179A0A6751085603DA8E7DE539F0 Certificate serial: 6CE6EFB110B49371E64F31BF10CEB55D9AD8E6F5 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/16CD7877C91A179A0A6751085603DA8E7DE539F0.cer Subject info access: rsync://repo-rpki.idnic.net/repo/648b6583-4122-469d-8384-3af1bcc6607f/0/16CD7877C91A179A0A6751085603DA8E7DE539F0.mft Manifest number: 04B4 Signing time: Thu 18 Dec 2025 09:51:31 +0000 Manifest this update: Thu 18 Dec 2025 09:46:31 +0000 Manifest next update: Sun 21 Dec 2025 12:17:31 +0000 Files and hashes: 1: 16CD7877C91A179A0A6751085603DA8E7DE539F0.crl (hash: xrlMCpXK9L9MNTrs4xAh52jFFWOeJvULJIkXs5CZYwg=) 2: 3130332e3134372e3133342e302f32332d3234203d3e20313339393633.roa (hash: EBtEj4ypwlzzw6GhMy3RkgtUq0npTq7gZQPuYhe9Zzc=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/648b6583-4122-469d-8384-3af1bcc6607f/0/16CD7877C91A179A0A6751085603DA8E7DE539F0.crl rsync://repo-rpki.idnic.net/repo/648b6583-4122-469d-8384-3af1bcc6607f/0/16CD7877C91A179A0A6751085603DA8E7DE539F0.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/16CD7877C91A179A0A6751085603DA8E7DE539F0.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 21 Dec 2025 12:17:31 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 6c:e6:ef:b1:10:b4:93:71:e6:4f:31:bf:10:ce:b5:5d:9a:d8:e6:f5 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=16CD7877C91A179A0A6751085603DA8E7DE539F0 Validity Not Before: Dec 18 09:46:31 2025 GMT Not After : Dec 21 12:17:31 2025 GMT Subject: CN=B40EC2F88539C9DA7EEFDA2B855480C8B0380694 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:fb:bc:6e:ac:83:58:7c:d4:47:89:c7:6e:12:45: db:64:3b:62:ae:43:5e:fe:60:e6:52:d9:47:82:a7: 5e:59:0f:a5:28:46:f2:e9:00:4b:f9:5b:06:36:aa: e0:d7:12:7c:12:14:80:47:45:78:9c:24:3e:5d:28: 4a:4c:e4:ac:59:c0:f7:96:dd:93:e2:e9:a7:be:0d: 17:68:35:13:f3:d0:5d:8b:df:3a:f9:2e:7c:a6:7d: 38:34:69:c7:41:89:54:47:69:d0:eb:17:c9:d7:30: 32:56:f9:06:d3:40:f3:e6:04:9d:74:36:0d:6f:ac: 55:22:06:2a:44:f8:ca:10:c1:df:1d:e8:41:7e:d6: 4b:ef:7d:5e:4a:68:0d:59:11:f6:5d:d2:c5:89:7a: e6:20:c5:14:0f:ee:b2:c8:3f:5c:28:e9:11:17:56: 90:d4:ec:b0:c5:24:69:28:77:f0:2e:e2:fc:d0:53: f9:ea:a5:25:76:68:ad:21:17:14:32:a5:05:5b:00: 63:58:c9:b8:a3:cd:44:44:5e:68:65:28:85:d5:48: 18:b8:f1:1b:36:a5:d7:04:76:91:80:83:77:69:20: 20:2e:2a:da:5b:67:55:9a:ac:3e:b3:4c:4d:bb:8f: 1f:d8:8e:39:6f:f9:42:94:83:39:6c:61:7f:83:d9: 0e:dd Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: B4:0E:C2:F8:85:39:C9:DA:7E:EF:DA:2B:85:54:80:C8:B0:38:06:94 X509v3 Authority Key Identifier: keyid:16:CD:78:77:C9:1A:17:9A:0A:67:51:08:56:03:DA:8E:7D:E5:39:F0 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/648b6583-4122-469d-8384-3af1bcc6607f/0/16CD7877C91A179A0A6751085603DA8E7DE539F0.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/16CD7877C91A179A0A6751085603DA8E7DE539F0.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/648b6583-4122-469d-8384-3af1bcc6607f/0/16CD7877C91A179A0A6751085603DA8E7DE539F0.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 61:5d:06:17:09:db:8e:92:8b:19:44:76:bb:e1:a7:78:e1:74: 4c:b3:a7:cf:57:4d:aa:28:77:e2:14:e5:1b:de:77:1e:8b:63: f0:13:47:00:70:b5:67:ba:b1:12:a0:c6:f5:70:5b:be:7b:30: 7f:29:90:d6:47:dc:61:ff:16:73:1c:00:2d:ea:79:d3:06:f0: 6e:ed:7c:13:fa:62:47:b4:8a:0f:0a:20:dc:7e:82:37:4e:2a: 8f:af:4f:6a:39:86:cd:28:8b:e4:fe:02:af:9f:cd:cb:17:4b: 7d:73:5b:50:45:20:1a:16:cb:a4:f8:5e:f3:41:2a:25:f6:f8: 15:2d:06:c6:58:4c:4f:be:00:fa:c4:22:f5:13:0a:00:86:24: eb:5b:ec:c7:63:14:ac:67:b3:08:53:74:88:24:3d:7d:17:b3: e6:1e:c0:0d:97:c3:1a:b4:78:d2:a8:bd:7d:d1:86:9e:72:56: 05:0e:c7:0a:54:4d:78:77:65:eb:58:d1:a9:3d:a6:75:8b:9b: 41:41:06:0d:99:21:d1:29:dc:fa:8c:6b:36:ea:72:ff:fd:65: ae:67:8e:d8:7e:65:92:87:90:6f:a9:65:80:35:d2:51:eb:c9: 98:b6:9a:a0:a8:34:23:91:f7:7d:f3:f1:c1:bb:b4:d6:d1:0b: f6:27:63:b0 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUbObvsRC0k3HmTzG/EM61XZrY5vUwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMTZDRDc4NzdDOTFBMTc5QTBBNjc1MTA4NTYwM0RBOEU3 REU1MzlGMDAeFw0yNTEyMTgwOTQ2MzFaFw0yNTEyMjExMjE3MzFaMDMxMTAvBgNV BAMTKEI0MEVDMkY4ODUzOUM5REE3RUVGREEyQjg1NTQ4MEM4QjAzODA2OTQwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQD7vG6sg1h81EeJx24SRdtkO2Ku Q17+YOZS2UeCp15ZD6UoRvLpAEv5WwY2quDXEnwSFIBHRXicJD5dKEpM5KxZwPeW 3ZPi6ae+DRdoNRPz0F2L3zr5LnymfTg0acdBiVRHadDrF8nXMDJW+QbTQPPmBJ10 Ng1vrFUiBipE+MoQwd8d6EF+1kvvfV5KaA1ZEfZd0sWJeuYgxRQP7rLIP1wo6REX VpDU7LDFJGkod/Au4vzQU/nqpSV2aK0hFxQypQVbAGNYybijzUREXmhlKIXVSBi4 8Rs2pdcEdpGAg3dpICAuKtpbZ1WarD6zTE27jx/Yjjlv+UKUgzlsYX+D2Q7dAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUtA7C+IU5ydp+79orhVSAyLA4BpQwHwYDVR0j BBgwFoAUFs14d8kaF5oKZ1EIVgPajn3lOfAwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby82 NDhiNjU4My00MTIyLTQ2OWQtODM4NC0zYWYxYmNjNjYwN2YvMC8xNkNENzg3N0M5 MUExNzlBMEE2NzUxMDg1NjAzREE4RTdERTUzOUYwLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvMTZDRDc4NzdDOTFBMTc5QTBBNjc1MTA4NTYwM0RBOEU3REU1 MzlGMC5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vNjQ4YjY1ODMtNDEyMi00NjlkLTgz ODQtM2FmMWJjYzY2MDdmLzAvMTZDRDc4NzdDOTFBMTc5QTBBNjc1MTA4NTYwM0RB OEU3REU1MzlGMC5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAGFdBhcJ246SixlEdrvhp3jhdEyzp89XTaoo d+IU5Rvedx6LY/ATRwBwtWe6sRKgxvVwW757MH8pkNZH3GH/FnMcAC3qedMG8G7t fBP6Yke0ig8KINx+gjdOKo+vT2o5hs0oi+T+Aq+fzcsXS31zW1BFIBoWy6T4XvNB KiX2+BUtBsZYTE++APrEIvUTCgCGJOtb7MdjFKxnswhTdIgkPX0Xs+YewA2Xwxq0 eNKovX3Rhp5yVgUOxwpUTXh3ZetY0ak9pnWLm0FBBg2ZIdEp3PqMazbqcv/9Za5n jth+ZZKHkG+pZYA10lHryZi2mqCoNCOR933z8cG7tNbRC/YnY7A= -----END CERTIFICATE-----Generated at Fri Dec 19 06:42:51 2025 by rpki-client