This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

$ rpki-client -vvf repo-rpki.idnic.net/repo/e11a3d56-ac75-4981-9726-c440214c81ed/0/16B946F06E300C41DA2C037393837F098BA659D1.mft
File: 16B946F06E300C41DA2C037393837F098BA659D1.mft (raw, json)
Hash identifier: W/5Gx+1Bj/0CtjIup8CQbK5R+v1lJXpwMVQCubpMUxU=
Subject key identifier: 55:48:27:F0:B6:96:5A:0D:82:A2:F9:BE:FA:ED:3A:82:17:E7:6F:66
Authority key identifier: 16:B9:46:F0:6E:30:0C:41:DA:2C:03:73:93:83:7F:09:8B:A6:59:D1
Certificate issuer: /CN=16B946F06E300C41DA2C037393837F098BA659D1
Certificate serial: 440C694433E04137D274813D222B588CC13F18EE
Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/16B946F06E300C41DA2C037393837F098BA659D1.cer
Subject info access: rsync://repo-rpki.idnic.net/repo/e11a3d56-ac75-4981-9726-c440214c81ed/0/16B946F06E300C41DA2C037393837F098BA659D1.mft
Manifest number: 0161
Signing time: Sun 07 Dec 2025 00:00:05 +0000
Manifest this update: Sat 06 Dec 2025 23:55:05 +0000
Manifest next update: Wed 10 Dec 2025 04:33:05 +0000
Files and hashes: 1: 3130332e3130312e3134302e302f32332d3234203d3e20313530393536.roa (hash: jwEFj89dKbg3wcUKCaFzeQ/zncN2pkCnlrkS0ztC5Tk=)
2: 16B946F06E300C41DA2C037393837F098BA659D1.crl (hash: QY+dratFPcZRm+ii7vVbeewOYunpz53Zu0ygFJANXFc=)
Validation: OK
Signature path: rsync://repo-rpki.idnic.net/repo/e11a3d56-ac75-4981-9726-c440214c81ed/0/16B946F06E300C41DA2C037393837F098BA659D1.crl
rsync://repo-rpki.idnic.net/repo/e11a3d56-ac75-4981-9726-c440214c81ed/0/16B946F06E300C41DA2C037393837F098BA659D1.mft
rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/16B946F06E300C41DA2C037393837F098BA659D1.cer
rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl
rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Tue 09 Dec 2025 15:57:52 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
44:0c:69:44:33:e0:41:37:d2:74:81:3d:22:2b:58:8c:c1:3f:18:ee
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=16B946F06E300C41DA2C037393837F098BA659D1
Validity
Not Before: Dec 6 23:55:05 2025 GMT
Not After : Dec 10 04:33:05 2025 GMT
Subject: CN=554827F0B6965A0D82A2F9BEFAED3A8217E76F66
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:f1:6d:97:c0:60:6c:fa:00:ee:f1:16:77:52:00:
10:bc:c4:12:fc:fe:ba:7a:21:f7:0c:73:37:74:57:
6c:52:52:8d:74:8e:a9:e2:b2:b4:9c:57:91:14:37:
ea:c6:00:8a:56:df:71:a6:9a:68:6c:dd:96:b9:28:
32:cf:c9:14:e2:cd:ea:eb:7a:67:a5:df:c3:b0:22:
91:72:81:c3:8e:9b:55:2b:3a:d3:79:e6:87:02:d0:
8d:fa:c1:05:26:81:4e:48:d0:e7:7a:60:d5:2c:c9:
1f:28:41:fb:51:12:17:c4:b8:bd:2f:d2:8b:53:6e:
31:b6:d4:1a:44:0b:d1:e1:dd:95:f0:c2:fe:8c:f5:
09:8c:f0:1a:05:3a:cd:70:c7:4c:e5:e2:d3:d8:83:
38:e7:83:e6:f7:4f:85:74:f4:8e:00:2f:81:e3:98:
68:f8:de:fa:90:77:9d:3a:cb:56:75:ed:56:14:bc:
b8:1d:ff:f5:c0:12:38:e7:9f:1a:f3:9c:bf:ef:08:
a1:fd:0a:b7:d3:23:12:fe:92:7c:a0:1a:1c:70:f8:
5b:d7:14:9a:ac:bc:b1:f5:b4:13:81:ca:01:f4:a3:
a2:8a:0b:a4:fe:9e:bb:04:59:fa:0c:46:20:a5:5a:
26:02:41:dd:13:24:8f:37:78:4b:0e:21:2c:b5:f1:
b1:87
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
55:48:27:F0:B6:96:5A:0D:82:A2:F9:BE:FA:ED:3A:82:17:E7:6F:66
X509v3 Authority Key Identifier:
keyid:16:B9:46:F0:6E:30:0C:41:DA:2C:03:73:93:83:7F:09:8B:A6:59:D1
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://repo-rpki.idnic.net/repo/e11a3d56-ac75-4981-9726-c440214c81ed/0/16B946F06E300C41DA2C037393837F098BA659D1.crl
Authority Information Access:
CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/16B946F06E300C41DA2C037393837F098BA659D1.cer
Subject Information Access:
Signed Object - URI:rsync://repo-rpki.idnic.net/repo/e11a3d56-ac75-4981-9726-c440214c81ed/0/16B946F06E300C41DA2C037393837F098BA659D1.mft
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
5f:d4:97:d5:c1:eb:2e:13:5e:82:dd:a4:c3:ae:b3:6f:f3:85:
ce:51:1b:19:bf:bd:64:17:43:04:02:51:b7:64:05:bd:35:80:
a1:ec:13:f8:fc:db:01:03:57:8c:d0:c5:20:a3:ea:36:3a:86:
4e:da:72:d2:a6:87:df:16:42:a2:2d:56:f7:43:b6:41:ca:8e:
d6:a8:3d:b2:da:5d:f4:9b:87:3a:f1:a0:cf:59:40:c6:53:64:
67:cd:34:59:99:a4:5f:2f:b6:0f:54:34:01:da:63:d1:e0:d2:
c4:6d:28:ec:07:39:c1:fc:af:b4:ed:a5:da:92:c4:4b:2f:43:
0a:4c:7b:f5:e8:4a:a1:63:77:41:b7:52:d7:f2:45:6c:7c:56:
bb:96:8c:97:5f:3f:e2:00:ed:0b:d4:c3:7a:73:03:50:d6:18:
69:7f:9e:d5:f0:65:0d:3b:2b:5b:b9:13:9a:ec:e3:6a:34:2e:
d5:36:03:27:0a:0b:f6:30:c4:57:ca:05:10:2f:52:a1:2e:da:
96:7f:6e:aa:3a:02:d6:3b:87:8d:f4:35:24:51:ae:23:e9:a4:
9a:80:06:0e:87:92:1d:09:44:1e:f3:d3:00:1a:fb:5d:0d:8e:
df:9f:67:36:86:46:4f:e0:80:da:48:d8:4a:67:6a:24:56:fd:
1b:88:83:ed
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Dec 7 01:41:41 2025 by rpki-client