This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf repo-rpki.idnic.net/repo/91e0d17c-edd1-4202-b736-3b527efa6ba2/0/708351A7D650085780AA7D6B77F317953F16F999.mft File: 708351A7D650085780AA7D6B77F317953F16F999.mft (raw, json) Hash identifier: 52+WMYhf8hyln3dJwUGlL+IZCpIvLpo2Vb8BxonFd6Q= Subject key identifier: F9:76:B5:8F:2A:0B:1B:D0:4C:02:B4:42:59:B7:1F:55:A6:18:27:F6 Authority key identifier: 70:83:51:A7:D6:50:08:57:80:AA:7D:6B:77:F3:17:95:3F:16:F9:99 Certificate issuer: /CN=708351A7D650085780AA7D6B77F317953F16F999 Certificate serial: 46940782F0649D0F974C41257B401909767E43AD Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/708351A7D650085780AA7D6B77F317953F16F999.cer Subject info access: rsync://repo-rpki.idnic.net/repo/91e0d17c-edd1-4202-b736-3b527efa6ba2/0/708351A7D650085780AA7D6B77F317953F16F999.mft Manifest number: 01D4 Signing time: Sat 24 Jan 2026 11:10:46 +0000 Manifest this update: Sat 24 Jan 2026 11:05:46 +0000 Manifest next update: Tue 27 Jan 2026 20:38:46 +0000 Files and hashes: 1: 708351A7D650085780AA7D6B77F317953F16F999.crl (hash: t4fYtceLS58tnsnyjS+EZKqeTd0VSzSWdmAhq75++eI=) 2: 3130332e3139362e3135362e302f32342d3234203d3e20313530393531.roa (hash: XWHKWl1bl7orQ2vAhEeH2m+P668uWWue/l7jGZqhA9o=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/91e0d17c-edd1-4202-b736-3b527efa6ba2/0/708351A7D650085780AA7D6B77F317953F16F999.crl rsync://repo-rpki.idnic.net/repo/91e0d17c-edd1-4202-b736-3b527efa6ba2/0/708351A7D650085780AA7D6B77F317953F16F999.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/708351A7D650085780AA7D6B77F317953F16F999.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 27 Jan 2026 20:38:46 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 46:94:07:82:f0:64:9d:0f:97:4c:41:25:7b:40:19:09:76:7e:43:ad Signature Algorithm: sha256WithRSAEncryption Issuer: CN=708351A7D650085780AA7D6B77F317953F16F999 Validity Not Before: Jan 24 11:05:46 2026 GMT Not After : Jan 27 20:38:46 2026 GMT Subject: CN=F976B58F2A0B1BD04C02B44259B71F55A61827F6 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e9:d3:d4:8e:9c:fd:f0:e5:f4:8d:c4:a0:c2:37: 2e:e1:d8:bd:43:bb:f2:d8:cf:49:d1:b4:1f:ff:75: c5:9a:aa:74:0e:ee:9a:e0:5d:86:b6:e7:f2:3f:bf: 52:20:f5:80:75:c6:53:dc:e6:72:c3:63:3e:cd:fa: c3:5e:64:5d:75:4f:0a:16:8e:68:0a:2a:8f:6d:d4: 7d:fe:99:67:ac:33:70:a6:d8:8a:4c:ba:54:eb:63: 8f:f0:fb:e0:8f:b5:50:84:fc:85:62:72:00:a9:af: 20:5c:d9:0f:a5:44:bf:32:27:87:ee:87:18:d6:35: 43:a8:91:2f:65:97:6b:3a:2c:47:09:c8:cb:51:08: 12:a8:9f:f4:eb:45:03:22:b6:bc:c0:da:39:ec:a1: 43:af:2d:43:e3:a8:66:71:4b:b4:08:af:d7:e5:4d: 7b:23:46:19:4e:ec:5a:cd:4b:b2:08:21:e4:75:89: 95:30:1e:b5:21:b0:9d:98:dc:48:52:20:ff:9f:c6: 87:82:87:dd:b8:d6:b4:f0:be:2e:2e:af:2d:05:03: 55:c2:6d:9c:49:dd:35:98:f0:77:d0:5a:81:a7:89: 26:39:17:9a:0a:a9:d9:d5:ea:e2:c5:20:e6:3e:36: 1c:8b:14:18:34:e5:9f:9a:28:48:be:38:b9:bb:bb: 10:f7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: F9:76:B5:8F:2A:0B:1B:D0:4C:02:B4:42:59:B7:1F:55:A6:18:27:F6 X509v3 Authority Key Identifier: keyid:70:83:51:A7:D6:50:08:57:80:AA:7D:6B:77:F3:17:95:3F:16:F9:99 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/91e0d17c-edd1-4202-b736-3b527efa6ba2/0/708351A7D650085780AA7D6B77F317953F16F999.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/708351A7D650085780AA7D6B77F317953F16F999.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/91e0d17c-edd1-4202-b736-3b527efa6ba2/0/708351A7D650085780AA7D6B77F317953F16F999.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 6c:dd:48:c0:76:86:05:62:65:dc:8b:99:63:07:92:c2:be:2f: a5:9a:9d:2a:ba:b4:2a:c2:84:a3:68:8d:6a:13:f4:26:d4:3a: 3f:4a:62:d5:46:bd:09:7c:64:10:db:e6:10:8b:91:65:45:f2: da:d0:35:1f:90:96:4e:37:d4:f3:15:d6:90:64:3b:ec:c9:96: fb:39:78:28:a1:b5:7d:47:f2:db:fd:f9:01:c2:0e:83:6d:5d: 51:07:21:b3:8d:41:58:b8:e9:d2:bd:34:6a:34:bb:4e:9d:4e: e8:53:19:8a:6e:ab:4b:95:b3:29:8d:97:e3:41:dd:0d:b2:a7: 62:13:6d:77:da:34:9c:86:7a:2c:12:0a:b9:0f:92:56:ab:d6: f6:58:98:84:f0:26:d8:9f:df:7c:9d:f5:c4:ed:b6:c5:92:d2: d8:bf:75:c9:9a:2c:d0:09:22:a5:08:2f:fe:de:7d:ce:9f:62: 66:cc:4f:1f:e4:e8:f1:0e:9d:01:a3:dd:b1:6f:36:61:66:d5: cd:41:47:4f:a1:eb:e8:15:6f:5c:5c:c0:e0:ec:a4:fb:25:0b: 64:e9:f2:53:e3:7e:b7:87:b1:4e:76:6e:cd:f6:ce:fa:6c:da: de:72:cd:e2:81:ba:f5:53:f4:4c:ad:a0:0f:48:79:65:25:30: d9:92:ea:7c -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIURpQHgvBknQ+XTEEle0AZCXZ+Q60wDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoNzA4MzUxQTdENjUwMDg1NzgwQUE3RDZCNzdGMzE3OTUz RjE2Rjk5OTAeFw0yNjAxMjQxMTA1NDZaFw0yNjAxMjcyMDM4NDZaMDMxMTAvBgNV BAMTKEY5NzZCNThGMkEwQjFCRDA0QzAyQjQ0MjU5QjcxRjU1QTYxODI3RjYwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDp09SOnP3w5fSNxKDCNy7h2L1D u/LYz0nRtB//dcWaqnQO7prgXYa25/I/v1Ig9YB1xlPc5nLDYz7N+sNeZF11TwoW jmgKKo9t1H3+mWesM3Cm2IpMulTrY4/w++CPtVCE/IVicgCpryBc2Q+lRL8yJ4fu hxjWNUOokS9ll2s6LEcJyMtRCBKon/TrRQMitrzA2jnsoUOvLUPjqGZxS7QIr9fl TXsjRhlO7FrNS7IIIeR1iZUwHrUhsJ2Y3EhSIP+fxoeCh9241rTwvi4ury0FA1XC bZxJ3TWY8HfQWoGniSY5F5oKqdnV6uLFIOY+NhyLFBg05Z+aKEi+OLm7uxD3AgMB AAGjggI8MIICODAdBgNVHQ4EFgQU+Xa1jyoLG9BMArRCWbcfVaYYJ/YwHwYDVR0j BBgwFoAUcINRp9ZQCFeAqn1rd/MXlT8W+ZkwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby85 MWUwZDE3Yy1lZGQxLTQyMDItYjczNi0zYjUyN2VmYTZiYTIvMC83MDgzNTFBN0Q2 NTAwODU3ODBBQTdENkI3N0YzMTc5NTNGMTZGOTk5LmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvNzA4MzUxQTdENjUwMDg1NzgwQUE3RDZCNzdGMzE3OTUzRjE2 Rjk5OS5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vOTFlMGQxN2MtZWRkMS00MjAyLWI3 MzYtM2I1MjdlZmE2YmEyLzAvNzA4MzUxQTdENjUwMDg1NzgwQUE3RDZCNzdGMzE3 OTUzRjE2Rjk5OS5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAGzdSMB2hgViZdyLmWMHksK+L6WanSq6tCrC hKNojWoT9CbUOj9KYtVGvQl8ZBDb5hCLkWVF8trQNR+Qlk431PMV1pBkO+zJlvs5 eCihtX1H8tv9+QHCDoNtXVEHIbONQVi46dK9NGo0u06dTuhTGYpuq0uVsymNl+NB 3Q2yp2ITbXfaNJyGeiwSCrkPklar1vZYmITwJtif33yd9cTttsWS0ti/dcmaLNAJ IqUIL/7efc6fYmbMTx/k6PEOnQGj3bFvNmFm1c1BR0+h6+gVb1xcwODspPslC2Tp 8lPjfreHsU52bs32zvps2t5yzeKBuvVT9EytoA9IeWUlMNmS6nw= -----END CERTIFICATE-----Generated at Sun Jan 25 18:48:27 2026 by rpki-client