This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf repo-rpki.idnic.net/repo/c3a9d788-bcf7-46f0-8b5b-0d7d1fcb6da3/0/16F8223FA3342ACE31ED864C538E59E22A52BC89.mft File: 16F8223FA3342ACE31ED864C538E59E22A52BC89.mft (raw, json) Hash identifier: +t5A0871QSMDxL/7T2NePANEW+mZ51sfNlqg7Jq+BsU= Subject key identifier: 63:DD:99:EE:05:8B:36:AB:DE:A4:79:C0:B4:30:6C:65:6E:A4:E7:2C Authority key identifier: 16:F8:22:3F:A3:34:2A:CE:31:ED:86:4C:53:8E:59:E2:2A:52:BC:89 Certificate issuer: /CN=16F8223FA3342ACE31ED864C538E59E22A52BC89 Certificate serial: 13BD233E1D5C8FB975B0BEF09FFC21661EEE324E Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/16F8223FA3342ACE31ED864C538E59E22A52BC89.cer Subject info access: rsync://repo-rpki.idnic.net/repo/c3a9d788-bcf7-46f0-8b5b-0d7d1fcb6da3/0/16F8223FA3342ACE31ED864C538E59E22A52BC89.mft Manifest number: A0 Signing time: Sat 06 Dec 2025 15:51:15 +0000 Manifest this update: Sat 06 Dec 2025 15:46:15 +0000 Manifest next update: Wed 10 Dec 2025 00:09:15 +0000 Files and hashes: 1: 3136302e32352e3135372e302f32342d3234203d3e20313533303835.roa (hash: aKd9F4ACmgNItMgz+uXKOhQG73PpNtSpdGFc0rlMBFo=) 2: 16F8223FA3342ACE31ED864C538E59E22A52BC89.crl (hash: PASRnWaQDzBtkpOy+wkGUnwV432o/ijcI6i7bMHqCyI=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/c3a9d788-bcf7-46f0-8b5b-0d7d1fcb6da3/0/16F8223FA3342ACE31ED864C538E59E22A52BC89.crl rsync://repo-rpki.idnic.net/repo/c3a9d788-bcf7-46f0-8b5b-0d7d1fcb6da3/0/16F8223FA3342ACE31ED864C538E59E22A52BC89.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/16F8223FA3342ACE31ED864C538E59E22A52BC89.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/60F8BE9C16625C424B269EE06C64A83BAB8506D4.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/60F8BE9C16625C424B269EE06C64A83BAB8506D4.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/YPi-nBZiXEJLJp7gbGSoO6uFBtQ.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 09 Dec 2025 06:55:17 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 13:bd:23:3e:1d:5c:8f:b9:75:b0:be:f0:9f:fc:21:66:1e:ee:32:4e Signature Algorithm: sha256WithRSAEncryption Issuer: CN=16F8223FA3342ACE31ED864C538E59E22A52BC89 Validity Not Before: Dec 6 15:46:15 2025 GMT Not After : Dec 10 00:09:15 2025 GMT Subject: CN=63DD99EE058B36ABDEA479C0B4306C656EA4E72C Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d0:07:3f:c9:70:c7:97:fa:27:8c:3a:46:25:ee: 86:e4:56:23:59:5f:3d:8c:2f:90:0c:64:90:d1:2a: f6:7a:16:08:f5:df:21:e0:d2:7d:ac:1d:f8:ed:b0: 9f:50:60:f6:67:eb:d9:23:87:9e:4e:76:0e:f1:a1: a1:81:7d:0b:1a:34:58:bf:ad:b0:ce:ee:7f:ab:ce: 92:27:d2:69:0a:84:b1:f8:7c:2b:91:7f:39:98:c1: 0b:10:98:c9:e1:b4:29:70:1d:94:ae:17:15:e2:02: d2:a2:99:8c:ad:16:fa:0a:8d:24:2b:e7:2e:20:e8: 3d:de:7d:91:d1:52:36:9a:f0:0f:fa:3a:2e:ac:62: a2:0b:3f:69:be:97:18:96:71:7a:b8:29:d3:5d:c1: fc:86:39:8c:1e:41:9c:50:03:f7:5d:e1:d2:82:9d: ed:d5:e4:d9:70:59:e5:dd:29:54:17:d9:45:f3:91: e5:e4:96:2a:21:e4:af:75:18:f2:d4:26:10:53:e6: 88:b2:b5:5f:e2:30:46:e2:9c:07:76:c0:00:58:e1: 1f:6d:65:ad:d8:3c:b6:73:c9:33:46:cd:7c:bd:12: f5:76:54:34:6f:82:57:e4:23:5b:f0:b5:92:cb:3b: d6:de:3a:e4:d2:1c:06:1d:00:af:8f:fc:2d:f6:e9: 83:19 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 63:DD:99:EE:05:8B:36:AB:DE:A4:79:C0:B4:30:6C:65:6E:A4:E7:2C X509v3 Authority Key Identifier: keyid:16:F8:22:3F:A3:34:2A:CE:31:ED:86:4C:53:8E:59:E2:2A:52:BC:89 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/c3a9d788-bcf7-46f0-8b5b-0d7d1fcb6da3/0/16F8223FA3342ACE31ED864C538E59E22A52BC89.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/16F8223FA3342ACE31ED864C538E59E22A52BC89.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/c3a9d788-bcf7-46f0-8b5b-0d7d1fcb6da3/0/16F8223FA3342ACE31ED864C538E59E22A52BC89.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 3d:77:42:ef:b1:94:b4:94:41:d4:f7:26:0e:73:b9:57:5b:af: 0c:b4:cf:20:f5:2a:bd:3d:ac:3f:43:52:33:cd:26:c5:24:eb: 8b:e3:d7:20:1b:46:f1:53:eb:62:c6:aa:81:95:7f:8d:b5:fd: ba:5f:bf:44:34:7a:47:fb:fc:f2:41:3b:a2:6f:c4:a0:db:0e: d5:d4:2f:cf:b6:d3:31:57:fa:2e:b9:d5:cd:0d:21:81:44:99: 91:74:fe:cc:66:d5:97:c8:ab:28:1e:74:23:5e:69:84:0c:3c: 9b:3e:22:33:74:ff:ba:53:2d:19:67:eb:2d:bc:f3:eb:0d:25: 32:3b:17:32:72:33:28:9a:a1:d4:54:13:54:34:a9:b0:99:f9: bb:4e:1c:5b:92:b4:40:0f:0f:69:f8:ab:c9:a5:ca:b7:83:80: 0d:d6:2d:3e:58:2c:ba:3a:3c:46:fd:9e:4a:98:49:b2:cd:02: f2:98:2f:1d:6a:f4:aa:c2:cf:8d:4f:e5:1d:bb:84:fc:c1:dd: 8b:19:c4:7d:e3:aa:0a:50:80:d7:ce:6e:df:b3:14:39:33:3e: 7d:1f:04:09:6c:c3:29:0e:0e:66:a2:4b:44:4a:8d:f2:96:9b: b5:93:60:92:3c:3a:65:25:a8:1d:d4:4d:1d:ad:d1:18:90:4a: 23:11:9f:07 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUE70jPh1cj7l1sL7wn/whZh7uMk4wDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMTZGODIyM0ZBMzM0MkFDRTMxRUQ4NjRDNTM4RTU5RTIy QTUyQkM4OTAeFw0yNTEyMDYxNTQ2MTVaFw0yNTEyMTAwMDA5MTVaMDMxMTAvBgNV BAMTKDYzREQ5OUVFMDU4QjM2QUJERUE0NzlDMEI0MzA2QzY1NkVBNEU3MkMwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDQBz/JcMeX+ieMOkYl7obkViNZ Xz2ML5AMZJDRKvZ6Fgj13yHg0n2sHfjtsJ9QYPZn69kjh55Odg7xoaGBfQsaNFi/ rbDO7n+rzpIn0mkKhLH4fCuRfzmYwQsQmMnhtClwHZSuFxXiAtKimYytFvoKjSQr 5y4g6D3efZHRUjaa8A/6Oi6sYqILP2m+lxiWcXq4KdNdwfyGOYweQZxQA/dd4dKC ne3V5NlwWeXdKVQX2UXzkeXklioh5K91GPLUJhBT5oiytV/iMEbinAd2wABY4R9t Za3YPLZzyTNGzXy9EvV2VDRvglfkI1vwtZLLO9beOuTSHAYdAK+P/C326YMZAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUY92Z7gWLNqvepHnAtDBsZW6k5ywwHwYDVR0j BBgwFoAUFvgiP6M0Ks4x7YZMU45Z4ipSvIkwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby9j M2E5ZDc4OC1iY2Y3LTQ2ZjAtOGI1Yi0wZDdkMWZjYjZkYTMvMC8xNkY4MjIzRkEz MzQyQUNFMzFFRDg2NEM1MzhFNTlFMjJBNTJCQzg5LmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzEvMTZGODIyM0ZBMzM0MkFDRTMxRUQ4NjRDNTM4RTU5RTIyQTUy QkM4OS5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vYzNhOWQ3ODgtYmNmNy00NmYwLThi NWItMGQ3ZDFmY2I2ZGEzLzAvMTZGODIyM0ZBMzM0MkFDRTMxRUQ4NjRDNTM4RTU5 RTIyQTUyQkM4OS5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAD13Qu+xlLSUQdT3Jg5zuVdbrwy0zyD1Kr09 rD9DUjPNJsUk64vj1yAbRvFT62LGqoGVf421/bpfv0Q0ekf7/PJBO6JvxKDbDtXU L8+20zFX+i651c0NIYFEmZF0/sxm1ZfIqygedCNeaYQMPJs+IjN0/7pTLRln6y28 8+sNJTI7FzJyMyiaodRUE1Q0qbCZ+btOHFuStEAPD2n4q8mlyreDgA3WLT5YLLo6 PEb9nkqYSbLNAvKYLx1q9KrCz41P5R27hPzB3YsZxH3jqgpQgNfObt+zFDkzPn0f BAlswykODmaiS0RKjfKWm7WTYJI8OmUlqB3UTR2t0RiQSiMRnwc= -----END CERTIFICATE-----Generated at Sun Dec 7 01:24:47 2025 by rpki-client