This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf repo-rpki.idnic.net/repo/5c285291-ce92-4144-9c18-9e8c191ddec6/0/166B4918E7A1A1641E7C79C537833379E393522E.mft File: 166B4918E7A1A1641E7C79C537833379E393522E.mft (raw, json) Hash identifier: SClN/h4f6wGaxocy5zQzyl5SL4TGr85xWClpGehR7Aw= Subject key identifier: 18:D0:81:77:8D:7C:94:9B:EB:7B:DC:8D:B9:3F:B9:EB:2F:11:2E:17 Authority key identifier: 16:6B:49:18:E7:A1:A1:64:1E:7C:79:C5:37:83:33:79:E3:93:52:2E Certificate issuer: /CN=166B4918E7A1A1641E7C79C537833379E393522E Certificate serial: 7DAE1F613016159C60923A39282EC582FAA3D6AA Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/166B4918E7A1A1641E7C79C537833379E393522E.cer Subject info access: rsync://repo-rpki.idnic.net/repo/5c285291-ce92-4144-9c18-9e8c191ddec6/0/166B4918E7A1A1641E7C79C537833379E393522E.mft Manifest number: 030D Signing time: Sun 25 Jan 2026 07:31:03 +0000 Manifest this update: Sun 25 Jan 2026 07:26:03 +0000 Manifest next update: Wed 28 Jan 2026 07:35:03 +0000 Files and hashes: 1: 166B4918E7A1A1641E7C79C537833379E393522E.crl (hash: IMl8o53zEzpx2zvw2YMM/csO57QJK47WpBOiPoBCmVI=) 2: 3130332e3137342e3138302e302f32342d3234203d3e20313437313037.roa (hash: WsHwgNa1eu27mA5KJGjHDisSyyKknyjiNT1hKbJ/YGc=) 3: 3130332e3137342e3138312e302f32342d3234203d3e20313437313037.roa (hash: LzEWJe+Hglc03QN90vVTDC59A7niJ+rvkY3tQyL/MFs=) 4: 3130332e3137342e3138302e302f32332d3233203d3e20313437313037.roa (hash: oK3qw71PTaTu9zr3WTDr2kf09ZEsEk1iSGVob7ZwRo0=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/5c285291-ce92-4144-9c18-9e8c191ddec6/0/166B4918E7A1A1641E7C79C537833379E393522E.crl rsync://repo-rpki.idnic.net/repo/5c285291-ce92-4144-9c18-9e8c191ddec6/0/166B4918E7A1A1641E7C79C537833379E393522E.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/166B4918E7A1A1641E7C79C537833379E393522E.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 28 Jan 2026 07:35:03 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 7d:ae:1f:61:30:16:15:9c:60:92:3a:39:28:2e:c5:82:fa:a3:d6:aa Signature Algorithm: sha256WithRSAEncryption Issuer: CN=166B4918E7A1A1641E7C79C537833379E393522E Validity Not Before: Jan 25 07:26:03 2026 GMT Not After : Jan 28 07:35:03 2026 GMT Subject: CN=18D081778D7C949BEB7BDC8DB93FB9EB2F112E17 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a4:38:03:d7:10:e9:95:5b:f2:07:8f:ea:ea:2b: 05:c6:06:94:ed:ef:72:1c:f0:52:ca:75:d6:88:1c: 31:05:78:34:b0:de:f8:ab:5b:c5:54:ad:77:0c:2f: c8:e3:14:db:4a:9b:23:14:21:2a:69:f9:8c:21:e4: f2:0b:50:58:38:51:af:e6:1a:e8:c0:b7:d0:df:1a: 46:a4:82:1d:d5:fc:fd:14:29:7d:22:85:de:2a:38: 74:ea:67:79:e4:76:31:3a:81:12:9e:73:de:5a:90: 0e:c9:05:0c:75:e9:60:22:c8:55:d9:2d:19:cd:8b: 2a:44:30:7b:9c:63:71:fd:7b:fe:01:03:a4:3b:d1: f7:c7:ec:6c:5f:77:82:60:5c:77:89:58:f4:93:6b: 44:bd:11:11:91:a8:90:dd:95:69:d2:8f:c6:cc:7e: b8:b1:20:21:6a:16:57:f7:a4:0f:2b:38:d0:f9:b1: 11:29:54:83:f6:2a:de:3c:df:1c:ed:7c:8a:d4:00: a5:d4:fa:63:f0:7d:a0:c0:16:e3:a7:cc:5f:ab:5a: 69:21:86:da:5f:2e:aa:58:4e:7f:81:37:a0:5c:c1: a9:d2:fa:01:e7:89:51:da:fa:70:2a:3c:ca:b6:ae: e5:39:7b:15:4c:30:fb:3e:6e:a9:4a:d8:b2:b0:37: 8f:e5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 18:D0:81:77:8D:7C:94:9B:EB:7B:DC:8D:B9:3F:B9:EB:2F:11:2E:17 X509v3 Authority Key Identifier: keyid:16:6B:49:18:E7:A1:A1:64:1E:7C:79:C5:37:83:33:79:E3:93:52:2E X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/5c285291-ce92-4144-9c18-9e8c191ddec6/0/166B4918E7A1A1641E7C79C537833379E393522E.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/166B4918E7A1A1641E7C79C537833379E393522E.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/5c285291-ce92-4144-9c18-9e8c191ddec6/0/166B4918E7A1A1641E7C79C537833379E393522E.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 4d:67:b8:4f:0e:05:20:92:62:5a:50:f9:fb:b5:74:77:c5:e9: c4:c1:6f:e0:93:3e:9b:0a:2d:e3:c5:a6:3c:3e:17:f0:5d:25: 60:5b:9d:32:d1:ee:f5:6d:dc:ad:d2:64:8e:ef:d8:84:49:ed: 2a:2c:3d:a1:a5:16:f3:5e:35:87:7d:3c:b3:e4:19:5c:ce:f7: 3b:0f:03:3a:29:87:8f:71:54:20:d5:ce:50:b1:66:5e:04:33: 7d:6a:78:06:aa:11:26:fb:99:83:95:2f:39:f4:f1:12:af:ea: e4:57:a5:77:01:a4:8a:76:9d:b0:88:9b:1c:26:64:55:cf:ed: b8:44:ed:9a:6e:58:79:2d:5c:2b:66:b4:ac:19:60:79:a0:c7: e7:2d:2e:46:26:37:bc:69:fe:ad:7d:29:83:60:1c:e4:b7:c7: 22:86:7f:d4:6d:ef:98:1f:31:4d:80:b8:19:68:95:de:b1:f7: 65:11:a8:5a:0c:a1:6b:ce:4b:63:60:ea:d5:b1:ba:65:2a:d0: 3f:d4:cd:41:1d:bd:17:18:59:73:f0:90:75:3e:52:36:e3:15: 76:06:1e:c7:87:3d:8b:99:38:df:6c:f0:c6:40:0c:03:19:e8: eb:83:38:fb:19:86:6f:6f:55:73:7c:3d:cf:1a:6a:94:b5:e6: dc:bb:06:79 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUfa4fYTAWFZxgkjo5KC7Fgvqj1qowDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMTY2QjQ5MThFN0ExQTE2NDFFN0M3OUM1Mzc4MzMzNzlF MzkzNTIyRTAeFw0yNjAxMjUwNzI2MDNaFw0yNjAxMjgwNzM1MDNaMDMxMTAvBgNV BAMTKDE4RDA4MTc3OEQ3Qzk0OUJFQjdCREM4REI5M0ZCOUVCMkYxMTJFMTcwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCkOAPXEOmVW/IHj+rqKwXGBpTt 73Ic8FLKddaIHDEFeDSw3virW8VUrXcML8jjFNtKmyMUISpp+Ywh5PILUFg4Ua/m GujAt9DfGkakgh3V/P0UKX0ihd4qOHTqZ3nkdjE6gRKec95akA7JBQx16WAiyFXZ LRnNiypEMHucY3H9e/4BA6Q70ffH7Gxfd4JgXHeJWPSTa0S9ERGRqJDdlWnSj8bM frixICFqFlf3pA8rOND5sREpVIP2Kt483xztfIrUAKXU+mPwfaDAFuOnzF+rWmkh htpfLqpYTn+BN6BcwanS+gHniVHa+nAqPMq2ruU5exVMMPs+bqlK2LKwN4/lAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUGNCBd418lJvre9yNuT+56y8RLhcwHwYDVR0j BBgwFoAUFmtJGOehoWQefHnFN4MzeeOTUi4wDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby81 YzI4NTI5MS1jZTkyLTQxNDQtOWMxOC05ZThjMTkxZGRlYzYvMC8xNjZCNDkxOEU3 QTFBMTY0MUU3Qzc5QzUzNzgzMzM3OUUzOTM1MjJFLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvMTY2QjQ5MThFN0ExQTE2NDFFN0M3OUM1Mzc4MzMzNzlFMzkz NTIyRS5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vNWMyODUyOTEtY2U5Mi00MTQ0LTlj MTgtOWU4YzE5MWRkZWM2LzAvMTY2QjQ5MThFN0ExQTE2NDFFN0M3OUM1Mzc4MzMz NzlFMzkzNTIyRS5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAE1nuE8OBSCSYlpQ+fu1dHfF6cTBb+CTPpsK LePFpjw+F/BdJWBbnTLR7vVt3K3SZI7v2IRJ7SosPaGlFvNeNYd9PLPkGVzO9zsP Azoph49xVCDVzlCxZl4EM31qeAaqESb7mYOVLzn08RKv6uRXpXcBpIp2nbCImxwm ZFXP7bhE7ZpuWHktXCtmtKwZYHmgx+ctLkYmN7xp/q19KYNgHOS3xyKGf9Rt75gf MU2AuBlold6x92URqFoMoWvOS2Ng6tWxumUq0D/UzUEdvRcYWXPwkHU+UjbjFXYG HseHPYuZON9s8MZADAMZ6OuDOPsZhm9vVXN8Pc8aapS15ty7Bnk= -----END CERTIFICATE-----Generated at Sun Jan 25 19:00:30 2026 by rpki-client