This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

$ rpki-client -vvf repo-rpki.idnic.net/repo/3c9941a4-28d2-47d1-91e7-acab59084462/0/B16C4772F3D77045BBA997F94CEACA9E0DCC2865.mft
File: B16C4772F3D77045BBA997F94CEACA9E0DCC2865.mft (raw, json)
Hash identifier: l9nLzps2oCsj/hRi2q77vWV0JX8df0td9C4XMDp/lSk=
Subject key identifier: 2F:BD:18:20:2B:DE:E9:41:49:D9:DB:70:44:D9:7F:E0:E5:8F:1D:B7
Authority key identifier: B1:6C:47:72:F3:D7:70:45:BB:A9:97:F9:4C:EA:CA:9E:0D:CC:28:65
Certificate issuer: /CN=B16C4772F3D77045BBA997F94CEACA9E0DCC2865
Certificate serial: 707EDE02E83B955FC89E9BDB6376D92112947811
Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/B16C4772F3D77045BBA997F94CEACA9E0DCC2865.cer
Subject info access: rsync://repo-rpki.idnic.net/repo/3c9941a4-28d2-47d1-91e7-acab59084462/0/B16C4772F3D77045BBA997F94CEACA9E0DCC2865.mft
Manifest number: 0161
Signing time: Sat 24 Jan 2026 14:02:02 +0000
Manifest this update: Sat 24 Jan 2026 13:57:02 +0000
Manifest next update: Tue 27 Jan 2026 17:38:02 +0000
Files and hashes: 1: 3138302e3133312e3132392e302f32342d3234203d3e20313532303238.roa (hash: IK3NBrk/iQNskIBya+kx1CnPloRzYziR32FnB/WUNZ4=)
2: B16C4772F3D77045BBA997F94CEACA9E0DCC2865.crl (hash: wY+fYolvg3x6a4I9FHP6Z+NeIvHT8vsXeytpmWPDxz4=)
Validation: OK
Signature path: rsync://repo-rpki.idnic.net/repo/3c9941a4-28d2-47d1-91e7-acab59084462/0/B16C4772F3D77045BBA997F94CEACA9E0DCC2865.crl
rsync://repo-rpki.idnic.net/repo/3c9941a4-28d2-47d1-91e7-acab59084462/0/B16C4772F3D77045BBA997F94CEACA9E0DCC2865.mft
rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/B16C4772F3D77045BBA997F94CEACA9E0DCC2865.cer
rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl
rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Tue 27 Jan 2026 17:38:02 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
70:7e:de:02:e8:3b:95:5f:c8:9e:9b:db:63:76:d9:21:12:94:78:11
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=B16C4772F3D77045BBA997F94CEACA9E0DCC2865
Validity
Not Before: Jan 24 13:57:02 2026 GMT
Not After : Jan 27 17:38:02 2026 GMT
Subject: CN=2FBD18202BDEE94149D9DB7044D97FE0E58F1DB7
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d2:83:19:bd:61:b7:4c:c8:1f:e0:d5:4b:24:cb:
8d:6d:fb:13:55:d3:99:38:f8:b0:d6:fa:ea:42:97:
a6:8b:dd:71:6e:27:09:13:40:ca:c8:a7:28:e1:f5:
0a:35:ae:21:ed:8d:81:32:33:2c:0d:69:66:9c:5b:
38:cf:5b:c2:f3:cd:ea:f9:d1:fe:8e:09:94:77:d1:
4a:c0:37:90:1c:cc:c2:7d:56:5c:11:d9:59:11:f8:
3d:72:92:0f:41:9d:68:dc:7f:53:0d:bc:43:03:e4:
c2:5e:75:3c:43:b5:81:fc:54:a8:4b:b8:82:ec:5d:
97:ed:fd:ac:a6:cd:41:43:07:38:1d:b9:b7:2c:63:
5a:ee:c4:56:be:d9:e3:c8:cf:e2:6f:ff:ac:8e:90:
4a:80:f6:95:58:df:70:8e:2a:b6:5f:4d:ff:9f:91:
93:33:60:ad:a6:32:f7:9e:cf:02:ac:cf:37:50:0f:
08:47:4b:97:cf:2b:02:15:12:1e:0c:2f:9f:2d:53:
ef:86:15:f8:77:93:5a:cb:38:53:71:75:ee:50:f2:
3d:1f:18:75:81:09:18:98:60:bf:54:da:16:32:8b:
5b:61:d4:17:4c:23:83:5b:21:a1:eb:0f:f7:9b:42:
3b:ba:87:ce:eb:5d:03:de:a0:04:b6:36:01:cf:ce:
4e:bb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
2F:BD:18:20:2B:DE:E9:41:49:D9:DB:70:44:D9:7F:E0:E5:8F:1D:B7
X509v3 Authority Key Identifier:
keyid:B1:6C:47:72:F3:D7:70:45:BB:A9:97:F9:4C:EA:CA:9E:0D:CC:28:65
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://repo-rpki.idnic.net/repo/3c9941a4-28d2-47d1-91e7-acab59084462/0/B16C4772F3D77045BBA997F94CEACA9E0DCC2865.crl
Authority Information Access:
CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/B16C4772F3D77045BBA997F94CEACA9E0DCC2865.cer
Subject Information Access:
Signed Object - URI:rsync://repo-rpki.idnic.net/repo/3c9941a4-28d2-47d1-91e7-acab59084462/0/B16C4772F3D77045BBA997F94CEACA9E0DCC2865.mft
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
33:5c:73:f6:2e:87:b4:f6:93:94:61:52:c1:16:8e:6d:41:56:
72:81:23:69:6e:5f:c6:e6:c2:a1:b6:9a:01:ce:f9:d7:8b:df:
3a:d3:7f:fb:65:d2:c5:f3:de:0a:48:3c:52:07:79:b5:7f:d9:
83:33:73:bb:38:f5:4e:a3:22:a4:95:b6:75:b8:74:e5:e1:6d:
ea:06:7d:8d:53:23:46:78:44:19:c9:b7:35:76:eb:fb:b4:50:
c8:61:79:c8:a2:05:6e:77:00:2d:70:43:93:7a:92:3e:17:9e:
17:8b:7e:98:1b:f4:26:04:b0:2d:0c:2d:67:86:4f:60:63:b7:
16:b9:9b:c4:20:59:b5:9c:bb:1b:a2:dc:32:01:6c:57:16:8c:
40:c5:1d:0a:e5:e0:f4:10:0b:2e:6b:cd:ee:20:5c:7b:ad:8f:
64:3d:e5:9a:63:fe:b2:65:64:c4:81:6f:8a:1a:93:96:f4:dc:
6d:27:34:c8:d6:6b:62:0c:d4:8f:62:f0:93:e4:51:20:99:a6:
72:9a:95:00:48:3b:ce:ca:44:76:20:eb:9c:f0:8e:c9:8c:d8:
f3:80:99:81:d6:d8:30:1f:d0:78:0c:1d:6c:df:37:c6:6e:73:
1b:fc:e5:d5:00:0e:3e:9a:53:d3:9a:cc:fe:70:f8:57:7d:5f:
4c:d7:72:0c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jan 25 20:40:23 2026 by rpki-client