This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf repo-rpki.idnic.net/repo/dfd4f869-4db6-4b0a-aab6-cde47b447d77/0/B70CD666995822F32C04E09AFF01B2D4CBAA9910.mft File: B70CD666995822F32C04E09AFF01B2D4CBAA9910.mft (raw, json) Hash identifier: 30WV5DhAk7HbIg6WUGqQdHfYBVBALdBI8QKY190GOZg= Subject key identifier: B3:1B:3A:71:E7:80:51:1A:84:15:00:CA:2C:03:33:39:CF:23:2D:2B Authority key identifier: B7:0C:D6:66:99:58:22:F3:2C:04:E0:9A:FF:01:B2:D4:CB:AA:99:10 Certificate issuer: /CN=B70CD666995822F32C04E09AFF01B2D4CBAA9910 Certificate serial: 5CFD930C1326391A8C45EB2F9DE8144313B9FD4D Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/B70CD666995822F32C04E09AFF01B2D4CBAA9910.cer Subject info access: rsync://repo-rpki.idnic.net/repo/dfd4f869-4db6-4b0a-aab6-cde47b447d77/0/B70CD666995822F32C04E09AFF01B2D4CBAA9910.mft Manifest number: 0168 Signing time: Sat 24 Jan 2026 05:01:32 +0000 Manifest this update: Sat 24 Jan 2026 04:56:32 +0000 Manifest next update: Tue 27 Jan 2026 10:09:32 +0000 Files and hashes: 1: 3130332e39352e32322e302f32342d3234203d3e20313530353537.roa (hash: Lmf9Da9j85YcfNYeEFfKaXIaWC1krFrSr92XELTEqhs=) 2: 3130332e39352e32332e302f32342d3234203d3e20313530353537.roa (hash: AIJ0j0Aq9CMXFN6w7WVU0mj1+YJAf4nV9FCI3W971zc=) 3: B70CD666995822F32C04E09AFF01B2D4CBAA9910.crl (hash: b1kyQ7UqwGxr1nLqZkPkqp3Cq0bddmK+bQw50zM/MnI=) 4: 3130332e39352e32322e302f32332d3233203d3e20313530353537.roa (hash: 7AeF/hZA331ui0AxYNl+UaJERQ0zt8cfqxeWUU2JfUw=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/dfd4f869-4db6-4b0a-aab6-cde47b447d77/0/B70CD666995822F32C04E09AFF01B2D4CBAA9910.crl rsync://repo-rpki.idnic.net/repo/dfd4f869-4db6-4b0a-aab6-cde47b447d77/0/B70CD666995822F32C04E09AFF01B2D4CBAA9910.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/B70CD666995822F32C04E09AFF01B2D4CBAA9910.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 27 Jan 2026 10:09:32 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 5c:fd:93:0c:13:26:39:1a:8c:45:eb:2f:9d:e8:14:43:13:b9:fd:4d Signature Algorithm: sha256WithRSAEncryption Issuer: CN=B70CD666995822F32C04E09AFF01B2D4CBAA9910 Validity Not Before: Jan 24 04:56:32 2026 GMT Not After : Jan 27 10:09:32 2026 GMT Subject: CN=B31B3A71E780511A841500CA2C033339CF232D2B Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c2:08:9d:4a:1f:09:d4:b2:3c:a8:fa:3d:d7:70: 13:32:21:4f:02:bd:af:12:02:ad:1c:38:77:f7:9d: 5a:1f:99:fe:3c:84:a0:07:de:47:b1:99:3d:24:94: 57:cf:4a:95:9f:2f:c6:04:52:f0:c5:6f:77:a6:fd: e6:89:c3:d8:79:d9:c5:50:08:24:1f:f2:0b:d2:2b: 89:4f:2b:07:1b:78:83:8f:9f:06:cd:e9:c3:9b:7b: 51:c5:85:73:0c:42:af:08:e9:97:a0:34:a5:94:6c: b4:f8:23:28:c0:e4:11:24:8b:af:31:14:26:f6:4f: dc:63:10:c9:44:66:41:1d:14:87:87:2e:41:5e:85: 73:f5:3a:a5:6c:50:e9:69:0d:db:79:e5:93:fb:2c: 46:8d:ec:7c:77:33:25:c6:2c:ee:be:9e:b8:cd:31: f9:b7:b9:34:5c:00:4f:5a:5f:5e:51:a4:3f:10:b1: ea:49:fd:17:0e:26:9f:7f:2d:48:78:ac:9f:2d:cd: 54:1f:9e:b1:4d:8c:06:84:09:b9:45:b7:e1:37:dd: 51:18:ca:45:8f:47:87:09:da:a9:02:4f:ac:0f:0d: 1d:af:9c:d4:9c:73:22:7a:f1:d0:7f:cd:5a:b4:75: 17:b2:23:11:cf:1c:ed:61:1d:69:06:bc:2d:be:05: 43:ff Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: B3:1B:3A:71:E7:80:51:1A:84:15:00:CA:2C:03:33:39:CF:23:2D:2B X509v3 Authority Key Identifier: keyid:B7:0C:D6:66:99:58:22:F3:2C:04:E0:9A:FF:01:B2:D4:CB:AA:99:10 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/dfd4f869-4db6-4b0a-aab6-cde47b447d77/0/B70CD666995822F32C04E09AFF01B2D4CBAA9910.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/B70CD666995822F32C04E09AFF01B2D4CBAA9910.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/dfd4f869-4db6-4b0a-aab6-cde47b447d77/0/B70CD666995822F32C04E09AFF01B2D4CBAA9910.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption d5:59:3d:13:1e:68:b5:34:5e:25:dc:40:a8:f2:c8:c7:14:e5: 5e:51:86:53:fa:b9:62:26:cb:e8:29:2c:3a:f8:5f:27:38:76: bd:d8:4e:80:01:c0:6b:1b:96:23:ca:49:9a:bd:5a:d9:77:98: 77:76:c3:58:9a:c9:5a:52:f3:48:b9:3d:dc:56:aa:53:c4:de: d3:e2:4e:86:ff:65:9c:1b:ec:d0:3e:0b:34:bb:44:b9:6d:51: 48:80:cc:23:bd:74:af:28:ca:2b:ce:87:08:1f:fc:29:fd:03: 02:ed:d0:c2:cb:73:8d:af:19:ed:fe:02:fb:13:37:a7:81:e3: 00:55:a5:0c:9e:35:ee:31:dd:00:c2:53:f4:f7:c5:d6:c5:21: b2:49:5d:3f:d7:4c:a2:d6:e5:1b:71:f5:0a:de:c9:cc:40:ae: 44:12:1b:17:b7:7c:ab:fc:34:a7:19:8a:c9:34:8a:6b:18:60: cd:69:70:87:c3:20:f4:5f:97:7f:dd:b7:e6:5e:0e:42:1c:a1: 64:e1:58:7e:da:b8:4c:d9:98:87:70:40:1e:07:1a:90:7c:8d: 47:f8:fc:46:79:3d:dc:60:31:5b:72:59:66:7c:c2:9a:06:25: c7:c7:f6:4f:e8:56:46:c4:8e:59:8b:06:24:25:0e:fa:ae:48: 30:a8:c0:66 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUXP2TDBMmORqMResvnegUQxO5/U0wDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoQjcwQ0Q2NjY5OTU4MjJGMzJDMDRFMDlBRkYwMUIyRDRD QkFBOTkxMDAeFw0yNjAxMjQwNDU2MzJaFw0yNjAxMjcxMDA5MzJaMDMxMTAvBgNV BAMTKEIzMUIzQTcxRTc4MDUxMUE4NDE1MDBDQTJDMDMzMzM5Q0YyMzJEMkIwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDCCJ1KHwnUsjyo+j3XcBMyIU8C va8SAq0cOHf3nVofmf48hKAH3kexmT0klFfPSpWfL8YEUvDFb3em/eaJw9h52cVQ CCQf8gvSK4lPKwcbeIOPnwbN6cObe1HFhXMMQq8I6ZegNKWUbLT4IyjA5BEki68x FCb2T9xjEMlEZkEdFIeHLkFehXP1OqVsUOlpDdt55ZP7LEaN7Hx3MyXGLO6+nrjN Mfm3uTRcAE9aX15RpD8QsepJ/RcOJp9/LUh4rJ8tzVQfnrFNjAaECblFt+E33VEY ykWPR4cJ2qkCT6wPDR2vnNSccyJ68dB/zVq0dReyIxHPHO1hHWkGvC2+BUP/AgMB AAGjggI8MIICODAdBgNVHQ4EFgQUsxs6ceeAURqEFQDKLAMzOc8jLSswHwYDVR0j BBgwFoAUtwzWZplYIvMsBOCa/wGy1MuqmRAwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby9k ZmQ0Zjg2OS00ZGI2LTRiMGEtYWFiNi1jZGU0N2I0NDdkNzcvMC9CNzBDRDY2Njk5 NTgyMkYzMkMwNEUwOUFGRjAxQjJENENCQUE5OTEwLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvQjcwQ0Q2NjY5OTU4MjJGMzJDMDRFMDlBRkYwMUIyRDRDQkFB OTkxMC5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vZGZkNGY4NjktNGRiNi00YjBhLWFh YjYtY2RlNDdiNDQ3ZDc3LzAvQjcwQ0Q2NjY5OTU4MjJGMzJDMDRFMDlBRkYwMUIy RDRDQkFBOTkxMC5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBANVZPRMeaLU0XiXcQKjyyMcU5V5RhlP6uWIm y+gpLDr4Xyc4dr3YToABwGsbliPKSZq9Wtl3mHd2w1iayVpS80i5PdxWqlPE3tPi Tob/ZZwb7NA+CzS7RLltUUiAzCO9dK8oyivOhwgf/Cn9AwLt0MLLc42vGe3+AvsT N6eB4wBVpQyeNe4x3QDCU/T3xdbFIbJJXT/XTKLW5Rtx9QreycxArkQSGxe3fKv8 NKcZisk0imsYYM1pcIfDIPRfl3/dt+ZeDkIcoWThWH7auEzZmIdwQB4HGpB8jUf4 /EZ5PdxgMVtyWWZ8wpoGJcfH9k/oVkbEjlmLBiQlDvquSDCowGY= -----END CERTIFICATE-----Generated at Sun Jan 25 18:52:41 2026 by rpki-client