This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf repo-rpki.idnic.net/repo/ad598e99-e9ff-4abe-b08e-226fdd07f9ae/0/516450A151C5487FCC5911F4C18941CA895B07A5.mft File: 516450A151C5487FCC5911F4C18941CA895B07A5.mft (raw, json) Hash identifier: qP62IOrJ3NoiRz8TKXsJdRiwnH5l37QB+sM3ezXXrBI= Subject key identifier: 90:D2:82:15:5F:FA:61:A4:0D:F8:DC:6B:AB:A5:2B:CC:69:21:09:D6 Authority key identifier: 51:64:50:A1:51:C5:48:7F:CC:59:11:F4:C1:89:41:CA:89:5B:07:A5 Certificate issuer: /CN=516450A151C5487FCC5911F4C18941CA895B07A5 Certificate serial: 641FE45421F75F7B975B5C115D8B1540062443D3 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/516450A151C5487FCC5911F4C18941CA895B07A5.cer Subject info access: rsync://repo-rpki.idnic.net/repo/ad598e99-e9ff-4abe-b08e-226fdd07f9ae/0/516450A151C5487FCC5911F4C18941CA895B07A5.mft Manifest number: 0331 Signing time: Tue 16 Dec 2025 20:40:58 +0000 Manifest this update: Tue 16 Dec 2025 20:35:58 +0000 Manifest next update: Sat 20 Dec 2025 05:35:58 +0000 Files and hashes: 1: 3130332e3134342e31382e302f32342d3234203d3e20313339343138.roa (hash: +9l9/c1oHNd6x+rotlaCAqAorgvfQYB/2M8mOFajTwg=) 2: 516450A151C5487FCC5911F4C18941CA895B07A5.crl (hash: MgceTfB8dcOL07R+VkLQm4qPPnom9AvGx8cASZAmjJg=) 3: 323430353a363263303a3a2f33322d3332203d3e20313339343138.roa (hash: z85xof54DRtz327x0y44Pw+jx9DlTvA8Q/kbbufAMJs=) 4: 3130332e3134342e31392e302f32342d3234203d3e20313339343138.roa (hash: NPTNkAFeiU4perz1lh+B9xb1IjABewQG5b/Cldme2U8=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/ad598e99-e9ff-4abe-b08e-226fdd07f9ae/0/516450A151C5487FCC5911F4C18941CA895B07A5.crl rsync://repo-rpki.idnic.net/repo/ad598e99-e9ff-4abe-b08e-226fdd07f9ae/0/516450A151C5487FCC5911F4C18941CA895B07A5.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/516450A151C5487FCC5911F4C18941CA895B07A5.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 20 Dec 2025 05:35:58 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 64:1f:e4:54:21:f7:5f:7b:97:5b:5c:11:5d:8b:15:40:06:24:43:d3 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=516450A151C5487FCC5911F4C18941CA895B07A5 Validity Not Before: Dec 16 20:35:58 2025 GMT Not After : Dec 20 05:35:58 2025 GMT Subject: CN=90D282155FFA61A40DF8DC6BABA52BCC692109D6 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b5:b1:63:e6:80:81:ef:60:d5:cc:96:44:49:b8: 76:b0:20:46:68:33:3e:d1:28:3d:51:df:02:56:88: 3d:08:e4:63:77:d4:3f:97:3d:82:6a:bd:f0:ff:ba: dc:79:ae:f4:a5:14:93:13:f4:be:6f:ce:46:37:0b: e2:5d:e2:5d:85:f0:ef:6a:53:80:ce:b8:84:a7:f0: f7:ed:ca:99:37:3e:1d:32:1c:a4:92:63:dd:9e:62: 51:92:35:73:46:10:bc:99:71:cb:9e:cc:8d:a9:cf: 69:58:44:3d:90:81:52:ed:29:b6:df:9d:6b:a0:31: 5b:15:e6:3c:2b:13:29:82:95:83:5d:63:d8:f3:b6: eb:3b:d4:ac:54:0a:14:98:53:95:56:3b:19:f6:5c: 8a:49:36:50:f8:6b:cf:a9:7f:74:da:b7:3c:c9:aa: de:af:7c:ae:72:43:82:96:64:90:cf:56:f6:2a:81: 39:06:d5:39:d6:ac:31:ef:e6:62:8b:32:00:03:ea: 20:e9:c6:b1:1c:fe:ec:f0:7b:29:a6:19:30:cb:b2: eb:47:3f:64:74:90:b7:53:f8:e1:33:82:ca:d5:5c: e8:38:38:4d:8b:bd:03:25:81:54:87:25:9d:8b:fc: dd:16:0d:c7:59:4b:f3:1f:59:46:39:16:cc:63:e1: e2:2d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 90:D2:82:15:5F:FA:61:A4:0D:F8:DC:6B:AB:A5:2B:CC:69:21:09:D6 X509v3 Authority Key Identifier: keyid:51:64:50:A1:51:C5:48:7F:CC:59:11:F4:C1:89:41:CA:89:5B:07:A5 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/ad598e99-e9ff-4abe-b08e-226fdd07f9ae/0/516450A151C5487FCC5911F4C18941CA895B07A5.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/516450A151C5487FCC5911F4C18941CA895B07A5.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/ad598e99-e9ff-4abe-b08e-226fdd07f9ae/0/516450A151C5487FCC5911F4C18941CA895B07A5.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 02:39:2b:6a:45:2a:e3:d7:59:0d:c1:27:26:88:60:df:19:db: ef:cd:8b:22:55:06:b1:9a:69:3a:ae:7d:e2:13:5b:69:f7:ac: f1:9a:1c:99:5f:49:8f:eb:5d:38:4c:a3:e4:95:99:9d:56:37: 04:b8:3a:b1:16:c6:a0:71:b5:c6:27:43:a8:d9:30:ed:8c:4f: 23:28:dc:fc:e8:4e:3f:73:f3:66:61:68:a4:11:c4:db:03:ae: 84:2e:3e:fe:87:c6:9f:38:86:bc:9f:d5:94:c6:ff:be:68:29: 65:b0:f9:1a:66:f4:46:3e:6a:37:a3:b8:70:46:1d:f7:ce:52: a2:5e:63:03:4b:d7:80:6e:f5:f1:0f:d6:0f:17:2c:d4:8f:85: 63:f6:ff:a2:53:36:94:a3:5a:88:73:a8:83:25:8e:df:af:e9: 46:db:f1:fd:ca:22:62:95:c4:12:ba:cb:5e:f8:e6:e6:9e:46: 00:86:2a:f5:b3:d4:3d:76:83:dd:f3:88:d6:d6:10:4c:50:83: eb:8a:96:4a:52:02:f3:c5:a0:ee:17:b0:de:da:44:b2:22:4d: dc:d7:9f:d7:9c:0f:65:ac:04:6f:54:e7:05:ce:7a:a7:2c:b9: 37:40:1e:bc:cc:0f:bc:32:93:30:eb:4e:3a:4c:ea:bd:0f:73: 89:25:2e:36 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUZB/kVCH3X3uXW1wRXYsVQAYkQ9MwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoNTE2NDUwQTE1MUM1NDg3RkNDNTkxMUY0QzE4OTQxQ0E4 OTVCMDdBNTAeFw0yNTEyMTYyMDM1NThaFw0yNTEyMjAwNTM1NThaMDMxMTAvBgNV BAMTKDkwRDI4MjE1NUZGQTYxQTQwREY4REM2QkFCQTUyQkNDNjkyMTA5RDYwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC1sWPmgIHvYNXMlkRJuHawIEZo Mz7RKD1R3wJWiD0I5GN31D+XPYJqvfD/utx5rvSlFJMT9L5vzkY3C+Jd4l2F8O9q U4DOuISn8Pftypk3Ph0yHKSSY92eYlGSNXNGELyZccuezI2pz2lYRD2QgVLtKbbf nWugMVsV5jwrEymClYNdY9jztus71KxUChSYU5VWOxn2XIpJNlD4a8+pf3TatzzJ qt6vfK5yQ4KWZJDPVvYqgTkG1TnWrDHv5mKLMgAD6iDpxrEc/uzweymmGTDLsutH P2R0kLdT+OEzgsrVXOg4OE2LvQMlgVSHJZ2L/N0WDcdZS/MfWUY5Fsxj4eItAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUkNKCFV/6YaQN+Nxrq6UrzGkhCdYwHwYDVR0j BBgwFoAUUWRQoVHFSH/MWRH0wYlByolbB6UwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby9h ZDU5OGU5OS1lOWZmLTRhYmUtYjA4ZS0yMjZmZGQwN2Y5YWUvMC81MTY0NTBBMTUx QzU0ODdGQ0M1OTExRjRDMTg5NDFDQTg5NUIwN0E1LmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvNTE2NDUwQTE1MUM1NDg3RkNDNTkxMUY0QzE4OTQxQ0E4OTVC MDdBNS5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vYWQ1OThlOTktZTlmZi00YWJlLWIw OGUtMjI2ZmRkMDdmOWFlLzAvNTE2NDUwQTE1MUM1NDg3RkNDNTkxMUY0QzE4OTQx Q0E4OTVCMDdBNS5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAAI5K2pFKuPXWQ3BJyaIYN8Z2+/NiyJVBrGa aTqufeITW2n3rPGaHJlfSY/rXThMo+SVmZ1WNwS4OrEWxqBxtcYnQ6jZMO2MTyMo 3PzoTj9z82ZhaKQRxNsDroQuPv6Hxp84hryf1ZTG/75oKWWw+Rpm9EY+ajejuHBG HffOUqJeYwNL14Bu9fEP1g8XLNSPhWP2/6JTNpSjWohzqIMljt+v6Ubb8f3KImKV xBK6y1745uaeRgCGKvWz1D12g93ziNbWEExQg+uKlkpSAvPFoO4XsN7aRLIiTdzX n9ecD2WsBG9U5wXOeqcsuTdAHrzMD7wykzDrTjpM6r0Pc4klLjY= -----END CERTIFICATE-----Generated at Thu Dec 18 03:06:57 2025 by rpki-client