This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf repo-rpki.idnic.net/repo/de3f2e9b-1068-4fa9-ba1d-59d071a412a2/0/16889A9053AE7EB169CF822E9EE670A5C618F97E.mft File: 16889A9053AE7EB169CF822E9EE670A5C618F97E.mft (raw, json) Hash identifier: q63RIWPzUUeexnJGP91Ese85SeWV+EzMctKXeprC4Rc= Subject key identifier: 65:10:E4:5A:E4:6A:5D:67:11:8C:56:B3:BA:78:AC:B5:0A:95:29:54 Authority key identifier: 16:88:9A:90:53:AE:7E:B1:69:CF:82:2E:9E:E6:70:A5:C6:18:F9:7E Certificate issuer: /CN=16889A9053AE7EB169CF822E9EE670A5C618F97E Certificate serial: 1BF58513BAEA3315EB976E149A3A87F2CC4E4088 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/16889A9053AE7EB169CF822E9EE670A5C618F97E.cer Subject info access: rsync://repo-rpki.idnic.net/repo/de3f2e9b-1068-4fa9-ba1d-59d071a412a2/0/16889A9053AE7EB169CF822E9EE670A5C618F97E.mft Manifest number: 0151 Signing time: Wed 03 Dec 2025 06:51:16 +0000 Manifest this update: Wed 03 Dec 2025 06:46:16 +0000 Manifest next update: Sat 06 Dec 2025 11:04:16 +0000 Files and hashes: 1: 3130332e36372e38312e302f32342d3234203d3e20313532303031.roa (hash: q8j/X9Ua/0mbnku+j9y9HsFIzPIhDRyObBOKzKCiRT8=) 2: 3130332e36372e38302e302f32342d3234203d3e20313532303031.roa (hash: u3jgsDSo3O7gCdt5jEOR1X0Y8olBMi4/W5ZYcUsryek=) 3: 16889A9053AE7EB169CF822E9EE670A5C618F97E.crl (hash: L4Y3J6yf3FiB4zzR+FxJoo2BjS0FO6/cG+VNZiVYyhM=) 4: 3130332e36372e38302e302f32332d3233203d3e20313532303031.roa (hash: hdkprfHwU4RXLgXXOBxZ9L/4dynqLbbepC7imEy91UI=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/de3f2e9b-1068-4fa9-ba1d-59d071a412a2/0/16889A9053AE7EB169CF822E9EE670A5C618F97E.crl rsync://repo-rpki.idnic.net/repo/de3f2e9b-1068-4fa9-ba1d-59d071a412a2/0/16889A9053AE7EB169CF822E9EE670A5C618F97E.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/16889A9053AE7EB169CF822E9EE670A5C618F97E.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 06 Dec 2025 11:04:16 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1b:f5:85:13:ba:ea:33:15:eb:97:6e:14:9a:3a:87:f2:cc:4e:40:88 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=16889A9053AE7EB169CF822E9EE670A5C618F97E Validity Not Before: Dec 3 06:46:16 2025 GMT Not After : Dec 6 11:04:16 2025 GMT Subject: CN=6510E45AE46A5D67118C56B3BA78ACB50A952954 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b9:7c:3c:62:8c:0e:7d:81:1b:29:d4:f3:44:cf: f5:23:a7:f3:41:f1:82:f8:6d:bd:94:64:e6:26:f3: dc:b6:d1:2e:48:5c:85:54:2a:20:a0:5c:65:81:9b: a5:7c:24:e8:a6:39:6f:b9:2d:3f:34:9c:0a:08:97: 93:31:4b:d7:7b:77:7e:2e:f4:b7:81:ef:30:e2:64: d8:60:99:a9:eb:b8:d2:b2:c5:47:98:33:1f:97:6c: d7:7d:06:8d:23:1f:27:52:ba:c8:da:80:e3:f7:bc: d9:b0:f2:b7:ec:03:50:5e:cc:ae:b1:e3:5d:c4:cf: eb:2a:71:0c:0f:48:0b:7a:cc:4f:14:23:e7:df:21: 2b:3f:71:7e:65:0f:87:0f:3f:be:89:a8:81:c7:58: 56:84:f1:78:3e:7d:5e:39:a2:da:bf:5c:5a:39:48: 13:71:dc:b3:9e:0b:d3:8f:0b:15:a9:ca:f9:0f:bc: 44:2f:af:2d:86:a4:be:58:79:e0:cb:ac:7d:5e:0e: 27:84:05:dc:7b:12:ec:92:fe:ad:d7:71:28:4c:d5: 24:6b:35:24:cd:7f:5d:8d:f8:25:41:13:5d:13:f1: 5e:c9:20:60:df:f0:d5:30:d8:0a:79:ac:1e:cd:4f: e3:79:7e:3f:3c:96:64:89:6a:c5:6f:e9:d4:fc:97: 33:e3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 65:10:E4:5A:E4:6A:5D:67:11:8C:56:B3:BA:78:AC:B5:0A:95:29:54 X509v3 Authority Key Identifier: keyid:16:88:9A:90:53:AE:7E:B1:69:CF:82:2E:9E:E6:70:A5:C6:18:F9:7E X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/de3f2e9b-1068-4fa9-ba1d-59d071a412a2/0/16889A9053AE7EB169CF822E9EE670A5C618F97E.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/16889A9053AE7EB169CF822E9EE670A5C618F97E.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/de3f2e9b-1068-4fa9-ba1d-59d071a412a2/0/16889A9053AE7EB169CF822E9EE670A5C618F97E.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 99:e9:ea:5b:27:11:43:c4:33:ca:b3:db:ad:72:1f:7f:16:16: b7:a3:67:85:27:0e:a2:b9:26:66:21:79:d3:4e:95:4f:38:c5: 96:7a:52:f8:34:fe:d0:93:10:64:57:35:20:42:61:e4:f2:b6: 58:33:e7:ed:c1:7b:95:13:8b:55:e4:17:66:c3:6b:c2:65:3c: 8d:26:5d:a9:56:b8:86:98:17:05:59:ed:4c:3e:1c:bf:e8:68: 29:6e:8d:08:67:fb:79:11:5e:4c:eb:e0:28:bc:78:c2:36:b5: 87:dc:59:60:56:66:f5:d2:8d:a2:63:74:55:c5:09:15:49:e8: 60:cd:d5:fa:55:a9:51:fd:fa:7a:9f:44:7c:2e:e2:27:56:f7: 58:b6:66:70:ed:4b:a4:24:ae:cc:9a:50:5c:9d:1c:77:99:94: e2:a3:ee:66:a8:78:1b:b1:6d:27:f0:a2:ab:1b:a7:e3:5a:7d: 65:bc:29:55:ea:cc:f2:32:45:ae:59:32:a6:47:e4:48:d7:b3: dd:44:ad:b8:1b:54:38:4c:b1:4f:8f:6c:0a:b8:87:d3:18:cd: bd:20:53:d8:0f:59:2e:08:ba:4c:bc:92:73:eb:f4:a6:02:fa: 31:88:c7:2e:79:e1:c0:dd:c7:82:3c:9e:30:b8:9f:c1:c7:87: f0:bd:dd:82 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUG/WFE7rqMxXrl24UmjqH8sxOQIgwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMTY4ODlBOTA1M0FFN0VCMTY5Q0Y4MjJFOUVFNjcwQTVD NjE4Rjk3RTAeFw0yNTEyMDMwNjQ2MTZaFw0yNTEyMDYxMTA0MTZaMDMxMTAvBgNV BAMTKDY1MTBFNDVBRTQ2QTVENjcxMThDNTZCM0JBNzhBQ0I1MEE5NTI5NTQwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC5fDxijA59gRsp1PNEz/Ujp/NB 8YL4bb2UZOYm89y20S5IXIVUKiCgXGWBm6V8JOimOW+5LT80nAoIl5MxS9d7d34u 9LeB7zDiZNhgmanruNKyxUeYMx+XbNd9Bo0jHydSusjagOP3vNmw8rfsA1BezK6x 413Ez+sqcQwPSAt6zE8UI+ffISs/cX5lD4cPP76JqIHHWFaE8Xg+fV45otq/XFo5 SBNx3LOeC9OPCxWpyvkPvEQvry2GpL5YeeDLrH1eDieEBdx7EuyS/q3XcShM1SRr NSTNf12N+CVBE10T8V7JIGDf8NUw2Ap5rB7NT+N5fj88lmSJasVv6dT8lzPjAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUZRDkWuRqXWcRjFazunistQqVKVQwHwYDVR0j BBgwFoAUFoiakFOufrFpz4IunuZwpcYY+X4wDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby9k ZTNmMmU5Yi0xMDY4LTRmYTktYmExZC01OWQwNzFhNDEyYTIvMC8xNjg4OUE5MDUz QUU3RUIxNjlDRjgyMkU5RUU2NzBBNUM2MThGOTdFLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvMTY4ODlBOTA1M0FFN0VCMTY5Q0Y4MjJFOUVFNjcwQTVDNjE4 Rjk3RS5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vZGUzZjJlOWItMTA2OC00ZmE5LWJh MWQtNTlkMDcxYTQxMmEyLzAvMTY4ODlBOTA1M0FFN0VCMTY5Q0Y4MjJFOUVFNjcw QTVDNjE4Rjk3RS5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAJnp6lsnEUPEM8qz261yH38WFrejZ4UnDqK5 JmYhedNOlU84xZZ6Uvg0/tCTEGRXNSBCYeTytlgz5+3Be5UTi1XkF2bDa8JlPI0m XalWuIaYFwVZ7Uw+HL/oaClujQhn+3kRXkzr4Ci8eMI2tYfcWWBWZvXSjaJjdFXF CRVJ6GDN1fpVqVH9+nqfRHwu4idW91i2ZnDtS6QkrsyaUFydHHeZlOKj7maoeBux bSfwoqsbp+NafWW8KVXqzPIyRa5ZMqZH5EjXs91ErbgbVDhMsU+PbAq4h9MYzb0g U9gPWS4Iuky8knPr9KYC+jGIxy554cDdx4I8njC4n8HHh/C93YI= -----END CERTIFICATE-----Generated at Wed Dec 3 15:32:12 2025 by rpki-client