This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf repo-rpki.idnic.net/repo/648b6583-4122-469d-8384-3af1bcc6607f/0/16CD7877C91A179A0A6751085603DA8E7DE539F0.mft File: 16CD7877C91A179A0A6751085603DA8E7DE539F0.mft (raw, json) Hash identifier: n6CncZfiOgnWN/SkkytQTU5Dn+c4EYyLbk2PYEsYk0o= Subject key identifier: 1E:BB:70:4B:2B:D7:9F:0C:B5:3C:FF:D7:8C:17:41:0D:53:35:B9:31 Authority key identifier: 16:CD:78:77:C9:1A:17:9A:0A:67:51:08:56:03:DA:8E:7D:E5:39:F0 Certificate issuer: /CN=16CD7877C91A179A0A6751085603DA8E7DE539F0 Certificate serial: 5788553C4AE44FCC86F17E0D41AE78A9DDC8435D Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/16CD7877C91A179A0A6751085603DA8E7DE539F0.cer Subject info access: rsync://repo-rpki.idnic.net/repo/648b6583-4122-469d-8384-3af1bcc6607f/0/16CD7877C91A179A0A6751085603DA8E7DE539F0.mft Manifest number: 04C5 Signing time: Sat 24 Jan 2026 23:11:33 +0000 Manifest this update: Sat 24 Jan 2026 23:06:33 +0000 Manifest next update: Wed 28 Jan 2026 07:53:33 +0000 Files and hashes: 1: 16CD7877C91A179A0A6751085603DA8E7DE539F0.crl (hash: eohx/ur4v2ujnEPovBYRYS80iwNGhZcoePTzQhAOEa8=) 2: 3130332e3134372e3133342e302f32332d3234203d3e20313339393633.roa (hash: EBtEj4ypwlzzw6GhMy3RkgtUq0npTq7gZQPuYhe9Zzc=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/648b6583-4122-469d-8384-3af1bcc6607f/0/16CD7877C91A179A0A6751085603DA8E7DE539F0.crl rsync://repo-rpki.idnic.net/repo/648b6583-4122-469d-8384-3af1bcc6607f/0/16CD7877C91A179A0A6751085603DA8E7DE539F0.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/16CD7877C91A179A0A6751085603DA8E7DE539F0.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 28 Jan 2026 07:53:33 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 57:88:55:3c:4a:e4:4f:cc:86:f1:7e:0d:41:ae:78:a9:dd:c8:43:5d Signature Algorithm: sha256WithRSAEncryption Issuer: CN=16CD7877C91A179A0A6751085603DA8E7DE539F0 Validity Not Before: Jan 24 23:06:33 2026 GMT Not After : Jan 28 07:53:33 2026 GMT Subject: CN=1EBB704B2BD79F0CB53CFFD78C17410D5335B931 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:98:9c:8a:1f:82:ff:81:2b:97:52:99:b5:0a:c8: e6:8a:40:25:68:52:2b:78:86:9f:e8:3f:76:29:39: b0:4e:96:d6:fa:22:3b:16:81:c9:11:5d:b6:20:d8: d3:69:1b:f9:ed:50:19:41:f8:f6:7a:c1:e3:da:0f: ec:2e:12:cc:c5:6f:0a:ff:d5:fb:30:bf:5d:44:15: 9f:42:d7:07:7a:3b:a9:45:a8:10:e2:c9:30:bb:85: 1e:95:ca:58:06:74:7d:55:6e:1c:0a:1d:f1:f3:b9: b4:98:1a:ec:15:cc:63:42:e0:78:f0:c6:d2:08:6e: 72:85:cb:67:68:af:81:d2:50:fd:ee:51:a1:2c:be: cd:58:36:00:c3:b9:89:8c:b3:c3:f8:fd:14:25:0d: 8b:28:1c:fe:a2:f6:fb:e8:18:91:5a:0c:bb:fd:0d: 84:f7:73:28:14:58:2f:6c:22:3f:ee:5f:b7:2e:2e: 7f:c6:96:51:93:b4:1d:6f:f5:ff:6b:0e:77:d2:e6: ed:18:e9:bd:73:05:b5:5a:eb:ef:6e:4e:09:97:c3: 47:8c:84:04:f3:25:22:9a:bb:a3:1a:62:b7:30:21: 22:90:b5:69:d7:07:6c:fc:98:6e:61:d8:42:4e:c2: ed:a6:16:d3:85:b7:1b:7a:49:dd:d5:89:e5:65:61: 9f:23 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 1E:BB:70:4B:2B:D7:9F:0C:B5:3C:FF:D7:8C:17:41:0D:53:35:B9:31 X509v3 Authority Key Identifier: keyid:16:CD:78:77:C9:1A:17:9A:0A:67:51:08:56:03:DA:8E:7D:E5:39:F0 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/648b6583-4122-469d-8384-3af1bcc6607f/0/16CD7877C91A179A0A6751085603DA8E7DE539F0.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/16CD7877C91A179A0A6751085603DA8E7DE539F0.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/648b6583-4122-469d-8384-3af1bcc6607f/0/16CD7877C91A179A0A6751085603DA8E7DE539F0.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption b7:ed:2b:18:c5:33:96:c9:32:b3:34:c7:fb:72:2a:f4:cf:cf: 1e:95:6d:c4:87:db:46:c1:2a:e0:fb:80:6d:af:a7:e2:57:cb: 0d:eb:0b:31:46:19:1d:dc:20:5f:25:2e:21:dd:e2:67:c3:20: 13:88:6b:d8:67:5f:1f:a6:75:9c:44:4f:6d:d3:ce:e5:c2:07: e9:12:33:f2:ae:e3:cf:af:05:82:30:6a:82:62:d8:a0:0b:a5: 39:65:5c:89:f5:99:30:1e:e9:54:fc:4f:9e:35:2c:fe:c7:79: d0:c0:02:42:a9:02:50:0e:a4:69:fc:63:94:96:e7:15:2b:b3: 77:0e:cc:7b:7d:1c:06:55:30:cb:cc:3f:52:77:d5:fa:ce:92: f4:96:8d:52:a2:fb:3b:f2:48:11:aa:32:48:c6:62:25:71:c1: 80:3f:02:53:4b:91:af:a0:06:cd:de:92:b3:8e:cd:3f:2d:c8: 8a:43:3d:ed:20:f4:25:8b:91:25:65:e3:4b:69:22:49:a4:ed: 89:85:f2:16:e7:5b:1a:8b:97:ca:77:9a:ec:6b:3a:e2:fc:d8: 5d:2d:f1:c7:77:e5:a2:8e:f1:d3:9c:bf:9d:74:04:ad:06:1b: cc:5f:a7:e7:0e:76:b9:8f:44:aa:33:c8:20:a0:e1:25:3c:95: 05:b9:8e:4d -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUV4hVPErkT8yG8X4NQa54qd3IQ10wDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMTZDRDc4NzdDOTFBMTc5QTBBNjc1MTA4NTYwM0RBOEU3 REU1MzlGMDAeFw0yNjAxMjQyMzA2MzNaFw0yNjAxMjgwNzUzMzNaMDMxMTAvBgNV BAMTKDFFQkI3MDRCMkJENzlGMENCNTNDRkZENzhDMTc0MTBENTMzNUI5MzEwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCYnIofgv+BK5dSmbUKyOaKQCVo Uit4hp/oP3YpObBOltb6IjsWgckRXbYg2NNpG/ntUBlB+PZ6wePaD+wuEszFbwr/ 1fswv11EFZ9C1wd6O6lFqBDiyTC7hR6VylgGdH1VbhwKHfHzubSYGuwVzGNC4Hjw xtIIbnKFy2dor4HSUP3uUaEsvs1YNgDDuYmMs8P4/RQlDYsoHP6i9vvoGJFaDLv9 DYT3cygUWC9sIj/uX7cuLn/GllGTtB1v9f9rDnfS5u0Y6b1zBbVa6+9uTgmXw0eM hATzJSKau6MaYrcwISKQtWnXB2z8mG5h2EJOwu2mFtOFtxt6Sd3VieVlYZ8jAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUHrtwSyvXnwy1PP/XjBdBDVM1uTEwHwYDVR0j BBgwFoAUFs14d8kaF5oKZ1EIVgPajn3lOfAwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby82 NDhiNjU4My00MTIyLTQ2OWQtODM4NC0zYWYxYmNjNjYwN2YvMC8xNkNENzg3N0M5 MUExNzlBMEE2NzUxMDg1NjAzREE4RTdERTUzOUYwLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvMTZDRDc4NzdDOTFBMTc5QTBBNjc1MTA4NTYwM0RBOEU3REU1 MzlGMC5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vNjQ4YjY1ODMtNDEyMi00NjlkLTgz ODQtM2FmMWJjYzY2MDdmLzAvMTZDRDc4NzdDOTFBMTc5QTBBNjc1MTA4NTYwM0RB OEU3REU1MzlGMC5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBALftKxjFM5bJMrM0x/tyKvTPzx6VbcSH20bB KuD7gG2vp+JXyw3rCzFGGR3cIF8lLiHd4mfDIBOIa9hnXx+mdZxET23TzuXCB+kS M/Ku48+vBYIwaoJi2KALpTllXIn1mTAe6VT8T541LP7HedDAAkKpAlAOpGn8Y5SW 5xUrs3cOzHt9HAZVMMvMP1J31frOkvSWjVKi+zvySBGqMkjGYiVxwYA/AlNLka+g Bs3ekrOOzT8tyIpDPe0g9CWLkSVl40tpIkmk7YmF8hbnWxqLl8p3muxrOuL82F0t 8cd35aKO8dOcv510BK0GG8xfp+cOdrmPRKozyCCg4SU8lQW5jk0= -----END CERTIFICATE-----Generated at Mon Jan 26 01:23:16 2026 by rpki-client