This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf repo-rpki.idnic.net/repo/c3a9d788-bcf7-46f0-8b5b-0d7d1fcb6da3/0/16F8223FA3342ACE31ED864C538E59E22A52BC89.mft File: 16F8223FA3342ACE31ED864C538E59E22A52BC89.mft (raw, json) Hash identifier: mEmPoXmk4aCjhdbdGt3s4tB53UFowAQ6PGMMoq3tSNQ= Subject key identifier: 01:24:ED:C5:0E:E8:BC:99:62:8A:D2:0D:8A:94:09:35:BD:31:67:E3 Authority key identifier: 16:F8:22:3F:A3:34:2A:CE:31:ED:86:4C:53:8E:59:E2:2A:52:BC:89 Certificate issuer: /CN=16F8223FA3342ACE31ED864C538E59E22A52BC89 Certificate serial: 505B519D4016935AA243C93FD56825160E8E4F45 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/16F8223FA3342ACE31ED864C538E59E22A52BC89.cer Subject info access: rsync://repo-rpki.idnic.net/repo/c3a9d788-bcf7-46f0-8b5b-0d7d1fcb6da3/0/16F8223FA3342ACE31ED864C538E59E22A52BC89.mft Manifest number: A4 Signing time: Mon 15 Dec 2025 21:43:04 +0000 Manifest this update: Mon 15 Dec 2025 21:38:04 +0000 Manifest next update: Fri 19 Dec 2025 07:24:04 +0000 Files and hashes: 1: 16F8223FA3342ACE31ED864C538E59E22A52BC89.crl (hash: vxpTOlsPTlDgF8b6Dk74dmCUdVxN2jjZYvEVD6tvHds=) 2: 3136302e32352e3135372e302f32342d3234203d3e20313533303835.roa (hash: aKd9F4ACmgNItMgz+uXKOhQG73PpNtSpdGFc0rlMBFo=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/c3a9d788-bcf7-46f0-8b5b-0d7d1fcb6da3/0/16F8223FA3342ACE31ED864C538E59E22A52BC89.crl rsync://repo-rpki.idnic.net/repo/c3a9d788-bcf7-46f0-8b5b-0d7d1fcb6da3/0/16F8223FA3342ACE31ED864C538E59E22A52BC89.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/16F8223FA3342ACE31ED864C538E59E22A52BC89.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/60F8BE9C16625C424B269EE06C64A83BAB8506D4.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/60F8BE9C16625C424B269EE06C64A83BAB8506D4.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/YPi-nBZiXEJLJp7gbGSoO6uFBtQ.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 19 Dec 2025 07:24:04 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 50:5b:51:9d:40:16:93:5a:a2:43:c9:3f:d5:68:25:16:0e:8e:4f:45 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=16F8223FA3342ACE31ED864C538E59E22A52BC89 Validity Not Before: Dec 15 21:38:04 2025 GMT Not After : Dec 19 07:24:04 2025 GMT Subject: CN=0124EDC50EE8BC99628AD20D8A940935BD3167E3 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c3:06:7b:eb:d2:cf:b5:55:31:51:e4:8e:93:0e: 64:ac:b0:42:c6:f5:16:64:97:e2:6b:14:67:6e:d5: 08:e2:d2:55:83:42:8d:f0:36:fb:49:63:3b:39:d2: ee:aa:be:8e:1a:3f:7a:70:d8:de:20:50:e8:bc:a7: be:00:9e:f8:49:43:9f:1e:e2:af:6b:14:37:fc:3e: 3d:d4:86:6f:02:8d:5d:8a:64:bd:73:83:8d:61:23: 10:36:ae:fd:ac:57:fa:cc:26:0c:cb:22:05:80:8e: 82:53:a5:84:cb:3b:16:23:84:c2:2c:2a:6f:57:aa: 65:b5:fa:40:43:e6:b3:de:10:99:69:fb:e8:27:02: f7:e6:15:f6:0e:fd:75:20:90:4b:8d:f5:36:77:bf: 11:fa:81:db:16:28:9c:da:b8:06:43:c3:09:73:ce: 5d:f1:14:a9:0c:95:69:c8:c9:ef:db:8e:fe:2c:cb: 66:be:03:35:b4:5d:f1:d3:ee:78:8d:76:12:fe:02: c1:61:bc:48:f3:31:60:ea:16:11:ff:55:41:8a:5a: 98:9c:4a:61:83:64:ae:d7:b6:9c:a8:a4:20:a6:09: 2c:43:17:ab:67:d9:f1:fc:6e:a4:46:56:57:09:3c: fd:cd:97:3b:ec:c2:51:3e:cf:89:c8:4f:90:4d:df: f1:db Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 01:24:ED:C5:0E:E8:BC:99:62:8A:D2:0D:8A:94:09:35:BD:31:67:E3 X509v3 Authority Key Identifier: keyid:16:F8:22:3F:A3:34:2A:CE:31:ED:86:4C:53:8E:59:E2:2A:52:BC:89 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/c3a9d788-bcf7-46f0-8b5b-0d7d1fcb6da3/0/16F8223FA3342ACE31ED864C538E59E22A52BC89.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/16F8223FA3342ACE31ED864C538E59E22A52BC89.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/c3a9d788-bcf7-46f0-8b5b-0d7d1fcb6da3/0/16F8223FA3342ACE31ED864C538E59E22A52BC89.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 9c:6f:49:52:6e:85:da:10:d3:c3:b2:6d:7c:bd:d6:9e:cf:5e: 59:a1:da:e5:79:96:0a:49:af:27:df:59:4c:90:9c:44:d5:f4: a2:ef:d4:34:6b:a1:83:91:43:d4:9e:bc:51:6e:15:7c:2f:66: 84:e6:9e:96:58:ab:8f:9f:c1:64:ca:b3:7c:62:7a:dd:63:f2: e5:a9:db:b6:6b:02:10:17:d7:86:84:c9:04:bc:3b:d5:06:ae: 41:11:b7:37:d9:0f:1d:3d:86:56:59:3b:64:20:62:11:87:aa: 13:8a:d4:e5:2d:bd:21:15:aa:a9:5d:d4:21:6c:41:ee:3a:75: 42:48:0b:0f:b9:5f:18:4e:e4:2a:48:1a:cb:64:53:c6:21:80: 05:8a:05:d5:53:7a:84:ee:e3:58:d8:1f:52:d6:ef:32:14:46: 17:29:ef:1b:f8:9f:83:0f:1b:29:dc:9b:bf:4b:b2:98:a1:22: 72:12:ed:60:b8:28:9d:de:d9:11:f2:d1:92:78:a3:a8:d8:b1: 06:96:03:40:98:82:5d:f1:e7:f9:c3:7a:3f:90:3b:58:5a:0f: 68:fe:0b:9b:cc:48:03:70:87:d9:fa:92:e9:48:d5:7d:f0:4a: b0:ec:f9:09:81:16:f7:77:9c:4f:38:d5:cf:2d:17:99:98:9d: bf:03:72:40 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUUFtRnUAWk1qiQ8k/1WglFg6OT0UwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMTZGODIyM0ZBMzM0MkFDRTMxRUQ4NjRDNTM4RTU5RTIy QTUyQkM4OTAeFw0yNTEyMTUyMTM4MDRaFw0yNTEyMTkwNzI0MDRaMDMxMTAvBgNV BAMTKDAxMjRFREM1MEVFOEJDOTk2MjhBRDIwRDhBOTQwOTM1QkQzMTY3RTMwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDDBnvr0s+1VTFR5I6TDmSssELG 9RZkl+JrFGdu1Qji0lWDQo3wNvtJYzs50u6qvo4aP3pw2N4gUOi8p74AnvhJQ58e 4q9rFDf8Pj3Uhm8CjV2KZL1zg41hIxA2rv2sV/rMJgzLIgWAjoJTpYTLOxYjhMIs Km9XqmW1+kBD5rPeEJlp++gnAvfmFfYO/XUgkEuN9TZ3vxH6gdsWKJzauAZDwwlz zl3xFKkMlWnIye/bjv4sy2a+AzW0XfHT7niNdhL+AsFhvEjzMWDqFhH/VUGKWpic SmGDZK7XtpyopCCmCSxDF6tn2fH8bqRGVlcJPP3NlzvswlE+z4nIT5BN3/HbAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUASTtxQ7ovJliitINipQJNb0xZ+MwHwYDVR0j BBgwFoAUFvgiP6M0Ks4x7YZMU45Z4ipSvIkwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby9j M2E5ZDc4OC1iY2Y3LTQ2ZjAtOGI1Yi0wZDdkMWZjYjZkYTMvMC8xNkY4MjIzRkEz MzQyQUNFMzFFRDg2NEM1MzhFNTlFMjJBNTJCQzg5LmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzEvMTZGODIyM0ZBMzM0MkFDRTMxRUQ4NjRDNTM4RTU5RTIyQTUy QkM4OS5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vYzNhOWQ3ODgtYmNmNy00NmYwLThi NWItMGQ3ZDFmY2I2ZGEzLzAvMTZGODIyM0ZBMzM0MkFDRTMxRUQ4NjRDNTM4RTU5 RTIyQTUyQkM4OS5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAJxvSVJuhdoQ08OybXy91p7PXlmh2uV5lgpJ ryffWUyQnETV9KLv1DRroYORQ9SevFFuFXwvZoTmnpZYq4+fwWTKs3xiet1j8uWp 27ZrAhAX14aEyQS8O9UGrkERtzfZDx09hlZZO2QgYhGHqhOK1OUtvSEVqqld1CFs Qe46dUJICw+5XxhO5CpIGstkU8YhgAWKBdVTeoTu41jYH1LW7zIURhcp7xv4n4MP Gyncm79LspihInIS7WC4KJ3e2RHy0ZJ4o6jYsQaWA0CYgl3x5/nDej+QO1haD2j+ C5vMSANwh9n6kulI1X3wSrDs+QmBFvd3nE841c8tF5mYnb8DckA= -----END CERTIFICATE-----Generated at Tue Dec 16 10:36:21 2025 by rpki-client