This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf repo-rpki.idnic.net/repo/9b709044-5718-4f1d-a6d0-8766ea73eaf4/0/A70723C87D2C27B95BE6227C631E7D85EF89D513.mft File: A70723C87D2C27B95BE6227C631E7D85EF89D513.mft (raw, json) Hash identifier: y1Yo0T0THh1OgdplqLvOpulK+Znoacxt0a74Bu5PAMc= Subject key identifier: 39:36:4F:D7:9A:5C:E1:5E:9F:8C:B1:78:4E:C5:85:6F:3C:99:6C:99 Authority key identifier: A7:07:23:C8:7D:2C:27:B9:5B:E6:22:7C:63:1E:7D:85:EF:89:D5:13 Certificate issuer: /CN=A70723C87D2C27B95BE6227C631E7D85EF89D513 Certificate serial: 14EDF8F0FB707EA5602C5190D2FD27617C94A151 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/A70723C87D2C27B95BE6227C631E7D85EF89D513.cer Subject info access: rsync://repo-rpki.idnic.net/repo/9b709044-5718-4f1d-a6d0-8766ea73eaf4/0/A70723C87D2C27B95BE6227C631E7D85EF89D513.mft Manifest number: 0542 Signing time: Sat 24 Jan 2026 13:10:57 +0000 Manifest this update: Sat 24 Jan 2026 13:05:57 +0000 Manifest next update: Tue 27 Jan 2026 22:07:57 +0000 Files and hashes: 1: 3130332e34382e3132382e302f32322d3234203d3e203633383631.roa (hash: QAI5cYTeOrxvcausPsC1CnYV2kULdBh9ytAc4ZJZoM0=) 2: A70723C87D2C27B95BE6227C631E7D85EF89D513.crl (hash: dG5OREn7Csdba4Csqjtgyy4o2ACC8tmZkvK0oPFIvaM=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/9b709044-5718-4f1d-a6d0-8766ea73eaf4/0/A70723C87D2C27B95BE6227C631E7D85EF89D513.crl rsync://repo-rpki.idnic.net/repo/9b709044-5718-4f1d-a6d0-8766ea73eaf4/0/A70723C87D2C27B95BE6227C631E7D85EF89D513.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/A70723C87D2C27B95BE6227C631E7D85EF89D513.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 27 Jan 2026 22:07:57 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 14:ed:f8:f0:fb:70:7e:a5:60:2c:51:90:d2:fd:27:61:7c:94:a1:51 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A70723C87D2C27B95BE6227C631E7D85EF89D513 Validity Not Before: Jan 24 13:05:57 2026 GMT Not After : Jan 27 22:07:57 2026 GMT Subject: CN=39364FD79A5CE15E9F8CB1784EC5856F3C996C99 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b6:a4:57:96:3f:6c:ca:e9:54:e4:82:58:77:ab: a3:66:9b:4a:2b:65:d5:ec:1d:31:f6:95:f3:ea:57: d1:2b:65:5b:a8:06:97:76:f4:70:18:e9:7f:86:1d: aa:72:e6:a1:fe:53:fe:5b:73:31:3b:d6:0b:a3:a9: 8e:a6:77:c2:42:60:da:47:c5:05:4e:1a:55:10:16: e0:9b:56:ce:f1:5a:0c:62:58:03:be:1b:b2:e2:2e: d1:c8:e0:e2:c2:c0:e7:d1:34:64:3f:e4:ad:81:2f: 1b:26:9d:04:9e:a8:23:9a:f4:b0:b1:f8:91:03:61: 40:d1:5f:73:e8:96:82:94:42:16:ab:15:be:2b:34: 2b:ff:fe:c8:56:45:e4:65:2b:b5:49:24:cc:c9:81: 92:96:c6:ab:63:a2:6b:f2:18:5c:1d:d5:b6:6f:d9: d9:9b:37:c4:92:a3:56:3d:74:95:07:b5:91:ac:5b: bc:92:77:b5:62:4d:a6:6c:de:ec:95:eb:9f:31:69: 0a:5b:dd:22:b8:e3:f3:99:56:1d:bd:06:36:f2:d9: ad:d7:3c:46:76:d7:60:92:1c:fb:75:fa:90:3f:60: 56:07:db:2d:e9:34:1b:d5:d1:3e:98:c2:31:a2:61: 0a:7e:5b:6f:cd:65:66:68:91:4e:9b:34:b8:20:c1: bf:57 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 39:36:4F:D7:9A:5C:E1:5E:9F:8C:B1:78:4E:C5:85:6F:3C:99:6C:99 X509v3 Authority Key Identifier: keyid:A7:07:23:C8:7D:2C:27:B9:5B:E6:22:7C:63:1E:7D:85:EF:89:D5:13 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/9b709044-5718-4f1d-a6d0-8766ea73eaf4/0/A70723C87D2C27B95BE6227C631E7D85EF89D513.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/A70723C87D2C27B95BE6227C631E7D85EF89D513.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/9b709044-5718-4f1d-a6d0-8766ea73eaf4/0/A70723C87D2C27B95BE6227C631E7D85EF89D513.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 1c:51:2e:d7:60:d0:d9:86:05:17:ae:bd:46:6a:22:3e:a8:6e: 8d:9e:cd:8e:4c:81:1e:ee:d2:83:7c:7f:dd:10:f4:cf:6a:c4: 11:2c:68:cd:0d:78:d6:33:e3:aa:c3:0b:2c:98:73:03:0b:f8: 65:95:e9:71:92:35:23:8b:a5:3d:9f:05:25:30:05:2a:2f:80: d0:2c:d3:b3:3f:41:26:e1:b5:02:ba:4a:5f:fe:58:57:f3:f2: 74:c9:78:1a:53:65:16:bc:cc:dc:15:5d:fa:44:38:0c:8a:a1: f3:a3:8d:c1:ef:bc:86:73:d9:91:d5:3e:1e:95:b0:ab:cd:c1: 35:2c:f1:d8:14:48:c6:a7:83:97:4b:f4:d8:a8:20:60:f0:87: be:a9:5a:eb:71:35:ed:65:ab:b6:71:a9:3b:5b:1b:3a:fe:49: 25:09:08:72:f6:a6:dd:8b:92:3e:2b:e9:53:c0:ea:ec:63:5a: d6:76:19:0c:23:40:29:22:fd:2f:cc:9f:e1:ce:c9:bd:e0:80: 43:6e:56:99:38:11:98:48:f5:fa:44:28:1d:0e:d4:e0:47:67: 0f:56:e2:bc:3a:c2:76:02:ef:2d:01:b2:b2:af:eb:4c:00:94: d4:6d:a0:df:53:6c:e9:5b:94:1c:55:44:3b:8e:10:1b:de:25: 5d:2c:2b:84 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUFO348PtwfqVgLFGQ0v0nYXyUoVEwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoQTcwNzIzQzg3RDJDMjdCOTVCRTYyMjdDNjMxRTdEODVF Rjg5RDUxMzAeFw0yNjAxMjQxMzA1NTdaFw0yNjAxMjcyMjA3NTdaMDMxMTAvBgNV BAMTKDM5MzY0RkQ3OUE1Q0UxNUU5RjhDQjE3ODRFQzU4NTZGM0M5OTZDOTkwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC2pFeWP2zK6VTkglh3q6Nmm0or ZdXsHTH2lfPqV9ErZVuoBpd29HAY6X+GHapy5qH+U/5bczE71gujqY6md8JCYNpH xQVOGlUQFuCbVs7xWgxiWAO+G7LiLtHI4OLCwOfRNGQ/5K2BLxsmnQSeqCOa9LCx +JEDYUDRX3PoloKUQharFb4rNCv//shWReRlK7VJJMzJgZKWxqtjomvyGFwd1bZv 2dmbN8SSo1Y9dJUHtZGsW7ySd7ViTaZs3uyV658xaQpb3SK44/OZVh29Bjby2a3X PEZ212CSHPt1+pA/YFYH2y3pNBvV0T6YwjGiYQp+W2/NZWZokU6bNLggwb9XAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUOTZP15pc4V6fjLF4TsWFbzyZbJkwHwYDVR0j BBgwFoAUpwcjyH0sJ7lb5iJ8Yx59he+J1RMwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby85 YjcwOTA0NC01NzE4LTRmMWQtYTZkMC04NzY2ZWE3M2VhZjQvMC9BNzA3MjNDODdE MkMyN0I5NUJFNjIyN0M2MzFFN0Q4NUVGODlENTEzLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvQTcwNzIzQzg3RDJDMjdCOTVCRTYyMjdDNjMxRTdEODVFRjg5 RDUxMy5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vOWI3MDkwNDQtNTcxOC00ZjFkLWE2 ZDAtODc2NmVhNzNlYWY0LzAvQTcwNzIzQzg3RDJDMjdCOTVCRTYyMjdDNjMxRTdE ODVFRjg5RDUxMy5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBABxRLtdg0NmGBReuvUZqIj6obo2ezY5MgR7u 0oN8f90Q9M9qxBEsaM0NeNYz46rDCyyYcwML+GWV6XGSNSOLpT2fBSUwBSovgNAs 07M/QSbhtQK6Sl/+WFfz8nTJeBpTZRa8zNwVXfpEOAyKofOjjcHvvIZz2ZHVPh6V sKvNwTUs8dgUSMang5dL9NioIGDwh76pWutxNe1lq7ZxqTtbGzr+SSUJCHL2pt2L kj4r6VPA6uxjWtZ2GQwjQCki/S/Mn+HOyb3ggENuVpk4EZhI9fpEKB0O1OBHZw9W 4rw6wnYC7y0BsrKv60wAlNRtoN9TbOlblBxVRDuOEBveJV0sK4Q= -----END CERTIFICATE-----Generated at Mon Jan 26 04:02:00 2026 by rpki-client