This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf repo-rpki.idnic.net/repo/e11a3d56-ac75-4981-9726-c440214c81ed/0/16B946F06E300C41DA2C037393837F098BA659D1.mft File: 16B946F06E300C41DA2C037393837F098BA659D1.mft (raw, json) Hash identifier: bkMOgtAgTATyMQsKFCprnS4Ema19Asu2x6eRY+26AY0= Subject key identifier: 5A:83:18:B7:1F:0D:BE:BE:B0:A1:92:B8:16:ED:21:B7:30:A6:DA:F8 Authority key identifier: 16:B9:46:F0:6E:30:0C:41:DA:2C:03:73:93:83:7F:09:8B:A6:59:D1 Certificate issuer: /CN=16B946F06E300C41DA2C037393837F098BA659D1 Certificate serial: 5611DFDC75541A152087F29D4D9A93FEA42E7AB4 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/16B946F06E300C41DA2C037393837F098BA659D1.cer Subject info access: rsync://repo-rpki.idnic.net/repo/e11a3d56-ac75-4981-9726-c440214c81ed/0/16B946F06E300C41DA2C037393837F098BA659D1.mft Manifest number: 0164 Signing time: Sat 13 Dec 2025 17:50:04 +0000 Manifest this update: Sat 13 Dec 2025 17:45:04 +0000 Manifest next update: Tue 16 Dec 2025 23:52:04 +0000 Files and hashes: 1: 3130332e3130312e3134302e302f32332d3234203d3e20313530393536.roa (hash: jwEFj89dKbg3wcUKCaFzeQ/zncN2pkCnlrkS0ztC5Tk=) 2: 16B946F06E300C41DA2C037393837F098BA659D1.crl (hash: bMHnS+EgHr5BB5PWeXknbjLX6r0A9F6e2VJppylXwsc=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/e11a3d56-ac75-4981-9726-c440214c81ed/0/16B946F06E300C41DA2C037393837F098BA659D1.crl rsync://repo-rpki.idnic.net/repo/e11a3d56-ac75-4981-9726-c440214c81ed/0/16B946F06E300C41DA2C037393837F098BA659D1.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/16B946F06E300C41DA2C037393837F098BA659D1.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 16 Dec 2025 23:52:04 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 56:11:df:dc:75:54:1a:15:20:87:f2:9d:4d:9a:93:fe:a4:2e:7a:b4 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=16B946F06E300C41DA2C037393837F098BA659D1 Validity Not Before: Dec 13 17:45:04 2025 GMT Not After : Dec 16 23:52:04 2025 GMT Subject: CN=5A8318B71F0DBEBEB0A192B816ED21B730A6DAF8 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a1:34:74:50:55:b8:e0:99:87:1b:df:35:03:f8: 18:4c:8e:c3:39:79:ba:4d:d5:f0:1d:a4:17:19:80: c8:89:aa:47:df:c5:87:ad:1c:8a:8d:12:95:f0:21: 2d:6b:e0:1c:a6:0b:86:08:60:c6:25:71:e1:32:a1: e7:4d:67:1f:96:e7:38:26:ef:b4:3f:9f:ed:cd:c6: 3b:8e:5e:dd:0c:60:82:6d:10:fb:70:01:ec:31:f3: c5:9e:9f:ed:bf:b4:1e:fd:4d:e2:9b:bc:52:d7:fd: 7a:ef:a8:00:e4:d1:c0:55:6e:80:fd:cf:27:83:77: ef:e0:b8:c8:6e:76:4d:af:2c:5a:7d:c2:22:78:27: 8c:93:87:e0:dd:e4:5b:29:78:20:14:4e:0d:a6:6c: 61:46:e8:c7:bd:1a:86:a9:cc:ef:7b:c0:bf:63:ce: 00:60:f8:c8:c1:ad:0f:65:a4:aa:a8:58:66:73:d5: a6:c5:8e:8b:9d:a5:f4:ae:44:a4:ea:67:f6:9c:e1: 68:1e:de:4b:47:9c:0d:7d:8d:61:5f:35:c8:c6:98: af:d1:cc:29:8d:d3:ba:18:76:21:1c:60:3c:fd:c1: b8:4a:f0:74:82:99:a5:e5:71:24:ab:d3:39:18:fa: bf:89:cb:71:32:84:17:1e:39:36:d7:0b:21:76:2b: 97:1b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 5A:83:18:B7:1F:0D:BE:BE:B0:A1:92:B8:16:ED:21:B7:30:A6:DA:F8 X509v3 Authority Key Identifier: keyid:16:B9:46:F0:6E:30:0C:41:DA:2C:03:73:93:83:7F:09:8B:A6:59:D1 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/e11a3d56-ac75-4981-9726-c440214c81ed/0/16B946F06E300C41DA2C037393837F098BA659D1.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/16B946F06E300C41DA2C037393837F098BA659D1.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/e11a3d56-ac75-4981-9726-c440214c81ed/0/16B946F06E300C41DA2C037393837F098BA659D1.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 67:db:b6:8c:f5:5e:8c:8b:2f:3d:3b:fa:a5:09:81:38:f4:2c: 8d:a8:5b:cc:8b:66:a7:ed:55:30:63:19:14:40:a5:db:40:b9: d1:9c:2b:b3:ba:ef:e4:da:d1:2d:71:7a:99:da:06:0d:9a:55: 97:70:9b:20:55:19:58:76:8f:82:b1:8c:41:92:c7:38:e3:82: b6:42:50:f2:ab:23:75:b9:cd:dd:45:de:27:f5:6b:34:97:6b: 9a:85:53:72:8f:56:79:c7:ca:f0:a6:da:fb:29:17:42:68:06: b1:a0:5f:75:d1:37:ec:55:a2:ae:2a:53:2d:ad:fb:13:c3:c3: 4e:3a:01:f8:10:21:45:ea:33:6f:8a:76:00:3e:48:17:f1:40: e1:86:26:5e:ff:f5:91:32:f4:6c:85:e4:19:16:82:d5:78:e4: 40:32:64:81:cb:6e:1e:43:0a:7a:b3:15:4a:62:f4:28:d4:45: 2a:8d:e1:92:45:c7:74:c8:6f:c5:35:36:b7:d9:aa:d0:0a:4b: 92:30:7a:db:ee:f6:0b:37:4d:eb:45:cd:3b:f6:7c:8c:bf:44: 30:ed:4c:2a:18:30:4b:8e:c9:70:7e:64:a9:4a:cb:27:fb:dd: 1e:78:dd:71:39:92:2b:e2:db:ba:85:b4:cd:be:56:ce:66:c3: 4d:78:fb:1e -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUVhHf3HVUGhUgh/KdTZqT/qQuerQwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMTZCOTQ2RjA2RTMwMEM0MURBMkMwMzczOTM4MzdGMDk4 QkE2NTlEMTAeFw0yNTEyMTMxNzQ1MDRaFw0yNTEyMTYyMzUyMDRaMDMxMTAvBgNV BAMTKDVBODMxOEI3MUYwREJFQkVCMEExOTJCODE2RUQyMUI3MzBBNkRBRjgwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQChNHRQVbjgmYcb3zUD+BhMjsM5 ebpN1fAdpBcZgMiJqkffxYetHIqNEpXwIS1r4BymC4YIYMYlceEyoedNZx+W5zgm 77Q/n+3NxjuOXt0MYIJtEPtwAewx88Wen+2/tB79TeKbvFLX/XrvqADk0cBVboD9 zyeDd+/guMhudk2vLFp9wiJ4J4yTh+Dd5FspeCAUTg2mbGFG6Me9GoapzO97wL9j zgBg+MjBrQ9lpKqoWGZz1abFjoudpfSuRKTqZ/ac4Wge3ktHnA19jWFfNcjGmK/R zCmN07oYdiEcYDz9wbhK8HSCmaXlcSSr0zkY+r+Jy3EyhBceOTbXCyF2K5cbAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUWoMYtx8Nvr6woZK4Fu0htzCm2vgwHwYDVR0j BBgwFoAUFrlG8G4wDEHaLANzk4N/CYumWdEwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby9l MTFhM2Q1Ni1hYzc1LTQ5ODEtOTcyNi1jNDQwMjE0YzgxZWQvMC8xNkI5NDZGMDZF MzAwQzQxREEyQzAzNzM5MzgzN0YwOThCQTY1OUQxLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvMTZCOTQ2RjA2RTMwMEM0MURBMkMwMzczOTM4MzdGMDk4QkE2 NTlEMS5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vZTExYTNkNTYtYWM3NS00OTgxLTk3 MjYtYzQ0MDIxNGM4MWVkLzAvMTZCOTQ2RjA2RTMwMEM0MURBMkMwMzczOTM4MzdG MDk4QkE2NTlEMS5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAGfbtoz1XoyLLz07+qUJgTj0LI2oW8yLZqft VTBjGRRApdtAudGcK7O67+Ta0S1xepnaBg2aVZdwmyBVGVh2j4KxjEGSxzjjgrZC UPKrI3W5zd1F3if1azSXa5qFU3KPVnnHyvCm2vspF0JoBrGgX3XRN+xVoq4qUy2t +xPDw046AfgQIUXqM2+KdgA+SBfxQOGGJl7/9ZEy9GyF5BkWgtV45EAyZIHLbh5D CnqzFUpi9CjURSqN4ZJFx3TIb8U1NrfZqtAKS5Iwetvu9gs3TetFzTv2fIy/RDDt TCoYMEuOyXB+ZKlKyyf73R543XE5kivi27qFtM2+Vs5mw014+x4= -----END CERTIFICATE-----Generated at Mon Dec 15 04:57:10 2025 by rpki-client