This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf repo-rpki.idnic.net/repo/57cd1d2d-7364-481b-978e-0a854a9cff4f/0/70CC719DF5876DBD92D41F5AF0359E3A698BDDD4.mft File: 70CC719DF5876DBD92D41F5AF0359E3A698BDDD4.mft (raw, json) Hash identifier: uCt0ALN42O+499afHy+6y+rMMjxVfk89JgMHZ97AcpI= Subject key identifier: 28:C2:1B:0A:1F:CD:C7:58:A9:5D:4A:D2:C9:62:A7:7A:BA:CE:B8:E2 Authority key identifier: 70:CC:71:9D:F5:87:6D:BD:92:D4:1F:5A:F0:35:9E:3A:69:8B:DD:D4 Certificate issuer: /CN=70CC719DF5876DBD92D41F5AF0359E3A698BDDD4 Certificate serial: 3C864028D8B589161B9F8B173B8F8B85FD748DCB Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/70CC719DF5876DBD92D41F5AF0359E3A698BDDD4.cer Subject info access: rsync://repo-rpki.idnic.net/repo/57cd1d2d-7364-481b-978e-0a854a9cff4f/0/70CC719DF5876DBD92D41F5AF0359E3A698BDDD4.mft Manifest number: 01DA Signing time: Sat 24 Jan 2026 07:40:39 +0000 Manifest this update: Sat 24 Jan 2026 07:35:39 +0000 Manifest next update: Tue 27 Jan 2026 12:59:39 +0000 Files and hashes: 1: 3130332e3133312e32382e302f32342d3234203d3e20313534343130.roa (hash: BT2Xm6NvivpZW/A7KKYoT5JmNwNHRn5+Zp/CE2/KpUE=) 2: 3130332e3133312e32382e302f32342d3234203d3e20323135373237.roa (hash: ls/qvCLTIAui00ibgj8c/dl69JxHxFEbZ+n3COlxeds=) 3: 70CC719DF5876DBD92D41F5AF0359E3A698BDDD4.crl (hash: ytjpl5qk0SoKdgIBqCugKR5J6bSY6SC9vtFqF+WPG0A=) 4: 3130332e3133312e32382e302f32342d3234203d3e20313530353030.roa (hash: hdvyAhrcryql4wjEziksSVWRL82EleGS11GMyW3jyaU=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/57cd1d2d-7364-481b-978e-0a854a9cff4f/0/70CC719DF5876DBD92D41F5AF0359E3A698BDDD4.crl rsync://repo-rpki.idnic.net/repo/57cd1d2d-7364-481b-978e-0a854a9cff4f/0/70CC719DF5876DBD92D41F5AF0359E3A698BDDD4.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/70CC719DF5876DBD92D41F5AF0359E3A698BDDD4.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 27 Jan 2026 12:59:39 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 3c:86:40:28:d8:b5:89:16:1b:9f:8b:17:3b:8f:8b:85:fd:74:8d:cb Signature Algorithm: sha256WithRSAEncryption Issuer: CN=70CC719DF5876DBD92D41F5AF0359E3A698BDDD4 Validity Not Before: Jan 24 07:35:39 2026 GMT Not After : Jan 27 12:59:39 2026 GMT Subject: CN=28C21B0A1FCDC758A95D4AD2C962A77ABACEB8E2 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b7:d0:7b:61:79:6d:67:e4:de:a0:c1:17:06:23: db:b1:3b:bb:38:7b:8c:26:cf:b4:fe:6c:81:c1:8a: 5d:89:1f:7c:b1:cb:e8:06:bf:db:f4:62:b4:4b:12: f2:f7:3a:a4:7c:f3:52:7c:4b:fe:5f:d9:11:e0:3f: 76:b2:f2:6a:fb:6f:e6:21:be:03:78:36:79:e7:75: 41:21:bb:0f:63:67:08:2d:f3:34:2a:20:d0:dc:3b: fd:1a:58:87:b1:26:75:55:0f:56:cd:e5:7e:4c:63: 30:71:17:8e:aa:1c:25:3e:bc:4e:66:5e:f8:63:00: 1e:90:e5:4e:52:3d:bf:47:57:ae:de:cc:4d:d4:93: 3d:80:1b:4e:a8:ee:64:15:44:be:79:26:80:52:14: ca:96:ca:86:70:64:70:8e:cd:80:74:86:7e:de:88: 5d:14:31:ca:37:91:3a:96:e0:09:d5:b4:6e:68:d8: 7f:45:61:74:e1:e5:5d:b3:57:bf:2e:52:7c:3b:66: 75:7d:8b:d6:4e:2b:52:23:89:ce:22:ca:2b:5c:5b: c5:ad:78:d2:e0:d3:b2:e1:6b:db:e1:ba:35:66:03: 61:e3:f8:03:6c:e2:4f:f3:bb:d5:8e:db:0b:01:25: 5d:7e:34:dd:8f:7d:0f:d5:32:c9:7a:35:65:98:36: 05:25 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 28:C2:1B:0A:1F:CD:C7:58:A9:5D:4A:D2:C9:62:A7:7A:BA:CE:B8:E2 X509v3 Authority Key Identifier: keyid:70:CC:71:9D:F5:87:6D:BD:92:D4:1F:5A:F0:35:9E:3A:69:8B:DD:D4 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/57cd1d2d-7364-481b-978e-0a854a9cff4f/0/70CC719DF5876DBD92D41F5AF0359E3A698BDDD4.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/70CC719DF5876DBD92D41F5AF0359E3A698BDDD4.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/57cd1d2d-7364-481b-978e-0a854a9cff4f/0/70CC719DF5876DBD92D41F5AF0359E3A698BDDD4.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 55:a5:9e:7a:b6:ff:58:0a:b5:6f:79:59:ec:71:d1:80:45:98: d4:a7:09:be:a3:1d:f5:e3:e6:bb:fc:89:77:41:51:f8:bd:e0: 4d:f6:b9:9e:3d:2a:74:52:c4:32:0d:f7:08:d4:ff:7a:bf:64: c7:8a:b2:75:ae:a4:ee:6d:45:2b:c8:55:7a:50:99:f3:8f:ec: 4c:14:af:da:64:3f:4b:cc:3f:5b:cc:d6:a5:fc:79:3a:b5:d5: 49:48:ad:39:bb:ac:5e:f1:37:4e:af:9e:f7:2d:12:d4:fb:b7: b6:f9:d5:ba:81:da:4d:26:3c:ab:6c:60:7e:a1:c7:f7:6c:dc: 0f:09:be:ab:b7:39:f8:9d:00:5a:3c:4a:9d:7b:75:42:ab:09: 9e:29:4a:82:9c:60:19:b0:33:a1:f3:04:fb:19:4d:7c:dc:21: 38:05:a3:2a:be:e6:23:26:90:67:ed:c8:65:4b:65:78:9e:2f: cc:88:76:60:c0:9c:f7:fb:f9:a1:d8:fe:23:0e:8f:7d:61:92: 7f:1e:e6:f1:5a:58:2e:33:80:3f:21:5e:57:8f:ae:aa:78:b2: e2:e4:4e:f5:a5:b2:39:4b:e6:0b:95:f9:72:bd:2e:61:46:e4: 94:e6:62:63:8a:aa:f9:14:f7:f9:a6:21:9c:6a:01:b9:f3:d2: 7d:31:c1:2a -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUPIZAKNi1iRYbn4sXO4+Lhf10jcswDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoNzBDQzcxOURGNTg3NkRCRDkyRDQxRjVBRjAzNTlFM0E2 OThCRERENDAeFw0yNjAxMjQwNzM1MzlaFw0yNjAxMjcxMjU5MzlaMDMxMTAvBgNV BAMTKDI4QzIxQjBBMUZDREM3NThBOTVENEFEMkM5NjJBNzdBQkFDRUI4RTIwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC30HtheW1n5N6gwRcGI9uxO7s4 e4wmz7T+bIHBil2JH3yxy+gGv9v0YrRLEvL3OqR881J8S/5f2RHgP3ay8mr7b+Yh vgN4NnnndUEhuw9jZwgt8zQqINDcO/0aWIexJnVVD1bN5X5MYzBxF46qHCU+vE5m XvhjAB6Q5U5SPb9HV67ezE3Ukz2AG06o7mQVRL55JoBSFMqWyoZwZHCOzYB0hn7e iF0UMco3kTqW4AnVtG5o2H9FYXTh5V2zV78uUnw7ZnV9i9ZOK1Ijic4iyitcW8Wt eNLg07Lha9vhujVmA2Hj+ANs4k/zu9WO2wsBJV1+NN2PfQ/VMsl6NWWYNgUlAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUKMIbCh/Nx1ipXUrSyWKnerrOuOIwHwYDVR0j BBgwFoAUcMxxnfWHbb2S1B9a8DWeOmmL3dQwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby81 N2NkMWQyZC03MzY0LTQ4MWItOTc4ZS0wYTg1NGE5Y2ZmNGYvMC83MENDNzE5REY1 ODc2REJEOTJENDFGNUFGMDM1OUUzQTY5OEJEREQ0LmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvNzBDQzcxOURGNTg3NkRCRDkyRDQxRjVBRjAzNTlFM0E2OThC RERENC5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vNTdjZDFkMmQtNzM2NC00ODFiLTk3 OGUtMGE4NTRhOWNmZjRmLzAvNzBDQzcxOURGNTg3NkRCRDkyRDQxRjVBRjAzNTlF M0E2OThCRERENC5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAFWlnnq2/1gKtW95Wexx0YBFmNSnCb6jHfXj 5rv8iXdBUfi94E32uZ49KnRSxDIN9wjU/3q/ZMeKsnWupO5tRSvIVXpQmfOP7EwU r9pkP0vMP1vM1qX8eTq11UlIrTm7rF7xN06vnvctEtT7t7b51bqB2k0mPKtsYH6h x/ds3A8Jvqu3OfidAFo8Sp17dUKrCZ4pSoKcYBmwM6HzBPsZTXzcITgFoyq+5iMm kGftyGVLZXieL8yIdmDAnPf7+aHY/iMOj31hkn8e5vFaWC4zgD8hXlePrqp4suLk TvWlsjlL5guV+XK9LmFG5JTmYmOKqvkU9/mmIZxqAbnz0n0xwSo= -----END CERTIFICATE-----Generated at Sun Jan 25 15:55:05 2026 by rpki-client