This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf repo-rpki.idnic.net/repo/4421985b-a0e6-4e05-bef6-fe6f5a6e2f43/0/CA704F785EA58B3F659E6E3C8F71E2D4CFD7E26C.mft File: CA704F785EA58B3F659E6E3C8F71E2D4CFD7E26C.mft (raw, json) Hash identifier: gysfgm+9iNvb0Ts5TB1huxSgZMx3FzX3f90ZD00gbag= Subject key identifier: 19:7C:2A:03:A1:B1:61:B2:BB:72:6F:26:71:8F:00:54:DA:A4:76:DC Authority key identifier: CA:70:4F:78:5E:A5:8B:3F:65:9E:6E:3C:8F:71:E2:D4:CF:D7:E2:6C Certificate issuer: /CN=CA704F785EA58B3F659E6E3C8F71E2D4CFD7E26C Certificate serial: 61F4352CCF494843F5AD1E05708C2F4CE1AE4E77 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/CA704F785EA58B3F659E6E3C8F71E2D4CFD7E26C.cer Subject info access: rsync://repo-rpki.idnic.net/repo/4421985b-a0e6-4e05-bef6-fe6f5a6e2f43/0/CA704F785EA58B3F659E6E3C8F71E2D4CFD7E26C.mft Manifest number: 03BA Signing time: Sun 25 Jan 2026 02:32:20 +0000 Manifest this update: Sun 25 Jan 2026 02:27:20 +0000 Manifest next update: Wed 28 Jan 2026 11:08:20 +0000 Files and hashes: 1: CA704F785EA58B3F659E6E3C8F71E2D4CFD7E26C.crl (hash: T4xEBKR3q7KP88bmnxkQENizOrtR6iF7F86c58td4vM=) 2: 323030313a6466303a663730303a3a2f34382d3438203d3e20313339333939.roa (hash: ylDWnunXe+P0sSpHe2ems7WUQ+PsguFxQzvub0cWxiw=) 3: 3132332e3235332e3234342e302f32322d3234203d3e20313339333939.roa (hash: rNa2on5+DMAnzayjr8XpEII8JqHWgOprf/5TlZrlTb0=) 4: 3130332e39312e32382e302f32322d3234203d3e203338343936.roa (hash: fYk1A/6JlSofdoRQTxZ35IGs4jax1F7uqVxTxU6HBk4=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/4421985b-a0e6-4e05-bef6-fe6f5a6e2f43/0/CA704F785EA58B3F659E6E3C8F71E2D4CFD7E26C.crl rsync://repo-rpki.idnic.net/repo/4421985b-a0e6-4e05-bef6-fe6f5a6e2f43/0/CA704F785EA58B3F659E6E3C8F71E2D4CFD7E26C.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/CA704F785EA58B3F659E6E3C8F71E2D4CFD7E26C.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 28 Jan 2026 11:08:20 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 61:f4:35:2c:cf:49:48:43:f5:ad:1e:05:70:8c:2f:4c:e1:ae:4e:77 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=CA704F785EA58B3F659E6E3C8F71E2D4CFD7E26C Validity Not Before: Jan 25 02:27:20 2026 GMT Not After : Jan 28 11:08:20 2026 GMT Subject: CN=197C2A03A1B161B2BB726F26718F0054DAA476DC Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bd:c0:95:f1:bf:35:d1:52:e9:f9:a6:bd:f3:26: d6:fd:77:7f:5b:ea:51:a8:41:b8:88:d0:15:59:1c: ce:c2:ac:a1:3a:ac:fc:73:7c:75:ca:df:c2:a7:f3: 76:5c:c6:2d:df:40:58:69:8d:6d:61:6f:94:5b:a9: a8:8b:d9:c6:5b:b2:75:91:3b:da:85:b2:55:48:ea: fe:c5:b2:8b:61:ac:95:3b:04:05:78:2e:2d:c6:12: 7f:8b:12:81:f4:18:8e:7d:94:14:49:46:5a:26:a5: 8b:27:ba:f2:18:21:58:9b:9e:f0:14:66:5b:45:1d: a9:88:cc:d2:77:70:a2:9f:d0:5a:77:e1:f0:74:3e: e3:c0:1b:27:9b:e0:3d:19:fd:17:d9:6b:2c:0d:f1: 6d:50:61:d9:78:a2:76:e8:0b:2e:7d:02:60:95:07: 6c:a1:d5:36:45:ba:89:78:cc:46:b3:a0:44:83:bc: af:53:5c:ef:68:ee:5f:7f:b7:46:7d:73:6b:90:bf: 50:6d:f5:0f:0e:1d:57:49:c6:be:21:a0:27:10:a4: 16:bf:1a:ba:4e:30:a6:67:23:f8:22:5f:d8:07:46: e7:51:6f:c3:c1:fd:ee:99:91:8f:01:3a:e0:63:76: 78:ba:5f:64:66:98:d0:74:b0:86:74:e3:9b:a1:b4: 49:bd Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 19:7C:2A:03:A1:B1:61:B2:BB:72:6F:26:71:8F:00:54:DA:A4:76:DC X509v3 Authority Key Identifier: keyid:CA:70:4F:78:5E:A5:8B:3F:65:9E:6E:3C:8F:71:E2:D4:CF:D7:E2:6C X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/4421985b-a0e6-4e05-bef6-fe6f5a6e2f43/0/CA704F785EA58B3F659E6E3C8F71E2D4CFD7E26C.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/CA704F785EA58B3F659E6E3C8F71E2D4CFD7E26C.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/4421985b-a0e6-4e05-bef6-fe6f5a6e2f43/0/CA704F785EA58B3F659E6E3C8F71E2D4CFD7E26C.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 09:82:09:14:06:55:ce:66:a1:07:d9:aa:87:d2:fa:0c:bc:af: 6f:e3:18:45:99:cf:9e:21:3e:c7:67:e3:27:a2:f8:6a:5f:ba: ab:f5:14:e0:cb:36:5c:bd:ae:de:85:f3:ea:8c:1e:32:9f:d7: 18:7f:5e:21:69:df:08:e3:e9:5e:19:c0:da:8d:80:0b:27:cf: f2:ee:65:8f:23:84:aa:aa:e2:51:17:87:55:10:0a:d7:a0:3b: b1:e4:9a:3c:f5:b7:9d:1f:b8:1f:80:69:86:e0:34:cd:0c:e2: d6:43:d6:2e:03:2f:0b:c7:63:db:6c:00:da:6e:69:e6:d7:51: 93:cc:52:d5:2e:77:42:81:34:9a:d8:8b:61:d0:1c:41:82:c4: ae:ab:a1:c1:07:1f:e4:0b:f1:b6:25:e6:25:7a:5c:8d:7e:03: 40:1d:3e:6f:94:26:93:27:8b:bf:ba:89:c2:6e:9e:7d:e5:53: a4:5a:ef:82:2f:a8:a6:49:65:8c:19:33:7d:a4:4e:6d:ea:53: c0:64:bb:d7:81:81:7c:57:95:5e:19:44:0c:9b:c8:db:32:f7: 1e:17:80:2a:b4:d2:9a:0e:12:95:b0:05:c7:96:0b:d8:71:f2: 3b:0c:c5:5b:38:db:79:64:fb:ec:27:74:ab:08:87:67:ad:71: ae:28:6f:21 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUYfQ1LM9JSEP1rR4FcIwvTOGuTncwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoQ0E3MDRGNzg1RUE1OEIzRjY1OUU2RTNDOEY3MUUyRDRD RkQ3RTI2QzAeFw0yNjAxMjUwMjI3MjBaFw0yNjAxMjgxMTA4MjBaMDMxMTAvBgNV BAMTKDE5N0MyQTAzQTFCMTYxQjJCQjcyNkYyNjcxOEYwMDU0REFBNDc2REMwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC9wJXxvzXRUun5pr3zJtb9d39b 6lGoQbiI0BVZHM7CrKE6rPxzfHXK38Kn83Zcxi3fQFhpjW1hb5RbqaiL2cZbsnWR O9qFslVI6v7FsothrJU7BAV4Li3GEn+LEoH0GI59lBRJRlompYsnuvIYIVibnvAU ZltFHamIzNJ3cKKf0Fp34fB0PuPAGyeb4D0Z/RfZaywN8W1QYdl4onboCy59AmCV B2yh1TZFuol4zEazoESDvK9TXO9o7l9/t0Z9c2uQv1Bt9Q8OHVdJxr4hoCcQpBa/ GrpOMKZnI/giX9gHRudRb8PB/e6ZkY8BOuBjdni6X2RmmNB0sIZ045uhtEm9AgMB AAGjggI8MIICODAdBgNVHQ4EFgQUGXwqA6GxYbK7cm8mcY8AVNqkdtwwHwYDVR0j BBgwFoAUynBPeF6liz9lnm48j3Hi1M/X4mwwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby80 NDIxOTg1Yi1hMGU2LTRlMDUtYmVmNi1mZTZmNWE2ZTJmNDMvMC9DQTcwNEY3ODVF QTU4QjNGNjU5RTZFM0M4RjcxRTJENENGRDdFMjZDLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvQ0E3MDRGNzg1RUE1OEIzRjY1OUU2RTNDOEY3MUUyRDRDRkQ3 RTI2Qy5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vNDQyMTk4NWItYTBlNi00ZTA1LWJl ZjYtZmU2ZjVhNmUyZjQzLzAvQ0E3MDRGNzg1RUE1OEIzRjY1OUU2RTNDOEY3MUUy RDRDRkQ3RTI2Qy5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAAmCCRQGVc5moQfZqofS+gy8r2/jGEWZz54h Psdn4yei+Gpfuqv1FODLNly9rt6F8+qMHjKf1xh/XiFp3wjj6V4ZwNqNgAsnz/Lu ZY8jhKqq4lEXh1UQCtegO7Hkmjz1t50fuB+AaYbgNM0M4tZD1i4DLwvHY9tsANpu aebXUZPMUtUud0KBNJrYi2HQHEGCxK6rocEHH+QL8bYl5iV6XI1+A0AdPm+UJpMn i7+6icJunn3lU6Ra74IvqKZJZYwZM32kTm3qU8Bku9eBgXxXlV4ZRAybyNsy9x4X gCq00poOEpWwBceWC9hx8jsMxVs423lk++wndKsIh2etca4obyE= -----END CERTIFICATE-----Generated at Mon Jan 26 05:37:23 2026 by rpki-client