This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

$ rpki-client -vvf repo-rpki.idnic.net/repo/e11a3d56-ac75-4981-9726-c440214c81ed/0/16B946F06E300C41DA2C037393837F098BA659D1.mft
File: 16B946F06E300C41DA2C037393837F098BA659D1.mft (raw, json)
Hash identifier: ZBY1xKW5n1j3IWUZJ1G0C4baMK2Zwkcbp7sCB6m/1V0=
Subject key identifier: E8:24:6A:7F:C0:09:1A:15:E8:A7:E3:1D:93:C9:21:34:8D:5A:E4:99
Authority key identifier: 16:B9:46:F0:6E:30:0C:41:DA:2C:03:73:93:83:7F:09:8B:A6:59:D1
Certificate issuer: /CN=16B946F06E300C41DA2C037393837F098BA659D1
Certificate serial: 72CE54C5F603D1F580301AFC7E65D67C5F472F73
Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/16B946F06E300C41DA2C037393837F098BA659D1.cer
Subject info access: rsync://repo-rpki.idnic.net/repo/e11a3d56-ac75-4981-9726-c440214c81ed/0/16B946F06E300C41DA2C037393837F098BA659D1.mft
Manifest number: 017A
Signing time: Sun 01 Feb 2026 12:20:04 +0000
Manifest this update: Sun 01 Feb 2026 12:15:04 +0000
Manifest next update: Wed 04 Feb 2026 20:08:04 +0000
Files and hashes: 1: 3130332e3130312e3134302e302f32332d3234203d3e20313530393536.roa (hash: jwEFj89dKbg3wcUKCaFzeQ/zncN2pkCnlrkS0ztC5Tk=)
2: 16B946F06E300C41DA2C037393837F098BA659D1.crl (hash: m9I/qXJ74hBJp+WWBXxglqTUkMMZRsCipndbq1SP804=)
Validation: OK
Signature path: rsync://repo-rpki.idnic.net/repo/e11a3d56-ac75-4981-9726-c440214c81ed/0/16B946F06E300C41DA2C037393837F098BA659D1.crl
rsync://repo-rpki.idnic.net/repo/e11a3d56-ac75-4981-9726-c440214c81ed/0/16B946F06E300C41DA2C037393837F098BA659D1.mft
rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/16B946F06E300C41DA2C037393837F098BA659D1.cer
rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl
rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Wed 04 Feb 2026 20:08:04 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
72:ce:54:c5:f6:03:d1:f5:80:30:1a:fc:7e:65:d6:7c:5f:47:2f:73
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=16B946F06E300C41DA2C037393837F098BA659D1
Validity
Not Before: Feb 1 12:15:04 2026 GMT
Not After : Feb 4 20:08:04 2026 GMT
Subject: CN=E8246A7FC0091A15E8A7E31D93C921348D5AE499
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c8:85:52:82:40:32:c8:74:81:12:73:ae:52:73:
c9:bf:84:62:5c:37:3d:92:3c:1a:2f:2e:bb:68:81:
12:0f:7b:3c:bb:23:76:f1:47:2d:69:8d:f7:cd:45:
67:eb:ec:57:7f:22:d5:b4:7f:f2:9c:87:13:df:dc:
6d:aa:7f:d6:b4:8c:eb:d6:d5:e4:ae:01:8a:bf:d4:
ad:f4:0b:19:6e:d3:8b:ac:c6:b1:b0:fe:c3:8f:ce:
bd:37:bc:ae:81:6e:88:09:0e:01:c1:17:6d:08:09:
ef:4b:74:3f:97:bd:c2:c8:5b:9d:db:3d:91:3e:48:
cd:d7:d6:3d:e7:59:65:da:21:a5:46:76:ea:ca:27:
39:90:1b:2d:e3:31:11:c3:d9:26:21:21:04:3e:a4:
48:0b:3f:72:a1:94:4a:ee:3d:4c:9f:18:cb:27:43:
76:c1:6f:ce:47:50:78:03:62:d9:fd:7a:3a:66:3a:
e7:52:54:77:25:05:f8:a6:b8:0e:94:34:f4:40:3a:
92:9f:72:fe:8f:fd:64:bb:0d:5a:c3:22:ab:f4:a7:
03:7e:4b:a0:05:4a:f9:7b:32:76:8c:08:23:94:1b:
67:10:1c:fb:34:51:1f:a5:59:47:ea:39:8e:94:52:
7f:33:ba:a0:9b:e7:9d:c4:5c:93:03:9f:c4:c9:7a:
8c:67
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E8:24:6A:7F:C0:09:1A:15:E8:A7:E3:1D:93:C9:21:34:8D:5A:E4:99
X509v3 Authority Key Identifier:
keyid:16:B9:46:F0:6E:30:0C:41:DA:2C:03:73:93:83:7F:09:8B:A6:59:D1
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://repo-rpki.idnic.net/repo/e11a3d56-ac75-4981-9726-c440214c81ed/0/16B946F06E300C41DA2C037393837F098BA659D1.crl
Authority Information Access:
CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/16B946F06E300C41DA2C037393837F098BA659D1.cer
Subject Information Access:
Signed Object - URI:rsync://repo-rpki.idnic.net/repo/e11a3d56-ac75-4981-9726-c440214c81ed/0/16B946F06E300C41DA2C037393837F098BA659D1.mft
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
a0:9d:cb:19:ae:cb:cd:de:83:71:e5:ed:f5:c9:0b:17:da:99:
68:1c:41:26:9c:52:64:c5:96:2f:20:5b:8a:75:33:52:f4:5c:
b6:a6:46:05:c4:f3:14:c3:31:c6:7f:31:79:1f:e6:d7:8c:3c:
62:8e:02:db:23:96:5a:66:b3:3c:3b:45:97:22:41:ea:68:f1:
17:df:ed:28:73:5c:61:6b:37:4f:a4:41:f6:75:ea:0d:e8:e1:
bd:95:fe:1d:28:4f:2c:31:f2:93:ad:35:49:c4:1f:f2:03:96:
20:df:b0:e2:30:54:bc:ed:95:83:14:0d:d0:f7:14:d4:1f:f7:
d2:aa:da:77:5b:f4:8f:54:dc:c5:ba:ed:2d:df:34:fa:54:b8:
3e:cf:fa:dc:6c:d0:b6:cd:32:05:96:db:23:e2:74:96:5d:45:
d9:3c:d5:02:3a:2a:32:57:6f:a4:6b:38:a9:ab:cf:2b:6e:9b:
80:3b:c0:f0:c4:83:80:a7:9b:ee:8a:e8:ba:10:63:25:fc:6d:
45:50:55:52:44:aa:80:3c:e7:b6:30:1b:e6:a5:b8:8d:10:3a:
37:fb:ba:04:8f:9c:18:dc:3c:5e:61:ae:f0:58:48:89:47:ba:
ab:ef:d7:06:f4:07:15:8c:04:c7:fe:13:32:cb:d0:dc:75:b4:
0d:15:6a:f2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Feb 2 09:51:09 2026 by rpki-client