This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf repo-rpki.idnic.net/repo/eb74ece6-880c-4cef-add2-77719ebedec9/0/708D1F99C0BD2A1783D1CE426BBFE83C9C0CC520.mft File: 708D1F99C0BD2A1783D1CE426BBFE83C9C0CC520.mft (raw, json) Hash identifier: 32VqJPaKdEBIoRk3BUjmaFVHA5qloEpLBT3iGrzHdL4= Subject key identifier: 17:4D:8A:09:06:0F:AC:78:8B:B3:47:1C:11:B3:30:33:6C:26:69:E8 Authority key identifier: 70:8D:1F:99:C0:BD:2A:17:83:D1:CE:42:6B:BF:E8:3C:9C:0C:C5:20 Certificate issuer: /CN=708D1F99C0BD2A1783D1CE426BBFE83C9C0CC520 Certificate serial: 264D932DE3DFBE76A56DCA0A441D317377DC1EF8 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/708D1F99C0BD2A1783D1CE426BBFE83C9C0CC520.cer Subject info access: rsync://repo-rpki.idnic.net/repo/eb74ece6-880c-4cef-add2-77719ebedec9/0/708D1F99C0BD2A1783D1CE426BBFE83C9C0CC520.mft Manifest number: 0164 Signing time: Sat 24 Jan 2026 12:21:06 +0000 Manifest this update: Sat 24 Jan 2026 12:16:06 +0000 Manifest next update: Tue 27 Jan 2026 18:53:06 +0000 Files and hashes: 1: 708D1F99C0BD2A1783D1CE426BBFE83C9C0CC520.crl (hash: C0sfSpozHVtXOcur+d4njQ4eGlVDDHCy3ZNrwYlS8+s=) 2: 3131352e3138372e32382e302f32332d3234203d3e20313532303334.roa (hash: k4r6WzhxzBcS3VSCnW5AcBSPgRuHkdZqCOJR8VV2Nyw=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/eb74ece6-880c-4cef-add2-77719ebedec9/0/708D1F99C0BD2A1783D1CE426BBFE83C9C0CC520.crl rsync://repo-rpki.idnic.net/repo/eb74ece6-880c-4cef-add2-77719ebedec9/0/708D1F99C0BD2A1783D1CE426BBFE83C9C0CC520.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/708D1F99C0BD2A1783D1CE426BBFE83C9C0CC520.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 27 Jan 2026 18:53:06 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 26:4d:93:2d:e3:df:be:76:a5:6d:ca:0a:44:1d:31:73:77:dc:1e:f8 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=708D1F99C0BD2A1783D1CE426BBFE83C9C0CC520 Validity Not Before: Jan 24 12:16:06 2026 GMT Not After : Jan 27 18:53:06 2026 GMT Subject: CN=174D8A09060FAC788BB3471C11B330336C2669E8 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e2:0e:11:7a:b6:90:2f:81:38:b5:d5:05:ae:61: a5:69:b9:e3:12:93:80:7f:ca:22:74:bd:2f:41:be: 58:ec:94:94:62:da:19:fc:9b:29:e8:e1:74:7f:f1: 84:30:9a:96:d6:4a:25:7d:79:fa:f9:50:b2:43:19: 91:b4:40:d5:b1:4c:70:38:e4:b2:72:8c:ab:e3:82: a6:26:09:ac:23:ac:6d:5c:2e:ed:6d:0a:1b:2b:16: cd:32:f3:a2:3b:43:53:a0:d4:33:d9:aa:e1:3e:48: 27:10:93:c4:29:1c:e2:ea:0f:3b:4e:30:0f:60:ad: 0d:2c:b3:61:de:ea:05:59:f9:b3:9e:2b:1a:51:69: a0:a6:94:f7:e7:88:4c:59:ac:d5:94:d1:e8:d3:75: 6b:27:ac:cd:c2:3a:c8:33:21:a8:5e:50:37:bf:a9: 0b:72:8f:06:29:8b:ad:d1:86:07:95:18:16:ac:7b: bb:83:33:d2:de:20:14:8e:f0:4b:c6:ce:53:e1:b8: 3d:a7:42:1c:01:58:17:7a:a5:ca:b7:0e:29:da:d5: 3a:c9:d9:9a:45:14:fd:19:b7:7b:bb:ed:a1:37:d5: bb:72:dd:e9:be:42:7c:9e:18:df:e4:aa:b8:e2:6b: 04:15:ba:dc:6b:d8:db:55:fe:6a:03:7b:5b:47:64: 09:cf Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 17:4D:8A:09:06:0F:AC:78:8B:B3:47:1C:11:B3:30:33:6C:26:69:E8 X509v3 Authority Key Identifier: keyid:70:8D:1F:99:C0:BD:2A:17:83:D1:CE:42:6B:BF:E8:3C:9C:0C:C5:20 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/eb74ece6-880c-4cef-add2-77719ebedec9/0/708D1F99C0BD2A1783D1CE426BBFE83C9C0CC520.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/708D1F99C0BD2A1783D1CE426BBFE83C9C0CC520.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/eb74ece6-880c-4cef-add2-77719ebedec9/0/708D1F99C0BD2A1783D1CE426BBFE83C9C0CC520.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 96:40:88:d6:ba:82:b7:45:c7:0b:0b:bc:3c:c0:e0:13:0c:a2: 5d:44:95:bd:f7:1a:02:48:ee:ae:e0:e8:b0:62:57:b2:06:00: b6:2c:9a:11:39:6f:d2:a5:3e:2a:ee:94:6e:a7:7f:49:ec:30: 89:d9:a7:7c:39:79:1d:17:ad:99:da:3c:14:5a:b2:4a:5d:50: eb:94:09:ed:18:b9:1c:f3:ed:a0:38:b0:73:3e:a9:54:69:78: b7:2f:82:4d:2d:bb:04:83:98:20:d0:b3:54:c0:da:91:53:48: 2e:c4:7e:be:df:00:9a:e1:c8:32:ed:63:8a:c4:d2:e7:c6:c8: 79:96:ac:e6:25:96:f7:a7:1e:6b:8a:22:13:c7:70:e9:63:b6: a3:ae:fd:b3:f0:c7:73:bd:03:1d:ab:45:a4:2f:94:b9:54:a6: 74:2f:25:16:c3:45:39:b8:d4:6c:9b:dd:7a:48:52:16:77:98: 7e:cd:0c:1f:6d:5d:6d:90:76:78:90:3a:20:81:fa:ad:82:ad: 2d:76:24:21:2a:b1:3d:9c:0c:c6:8f:6c:e2:97:4e:d2:a4:59: d2:39:69:d3:c7:d7:b2:ac:ab:32:d3:33:9e:ff:c4:78:7b:5e: 69:f4:1f:49:5c:17:b2:df:3c:cb:0f:97:41:e9:e3:ff:41:9b: 9a:23:73:87 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUJk2TLePfvnalbcoKRB0xc3fcHvgwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoNzA4RDFGOTlDMEJEMkExNzgzRDFDRTQyNkJCRkU4M0M5 QzBDQzUyMDAeFw0yNjAxMjQxMjE2MDZaFw0yNjAxMjcxODUzMDZaMDMxMTAvBgNV BAMTKDE3NEQ4QTA5MDYwRkFDNzg4QkIzNDcxQzExQjMzMDMzNkMyNjY5RTgwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDiDhF6tpAvgTi11QWuYaVpueMS k4B/yiJ0vS9BvljslJRi2hn8myno4XR/8YQwmpbWSiV9efr5ULJDGZG0QNWxTHA4 5LJyjKvjgqYmCawjrG1cLu1tChsrFs0y86I7Q1Og1DPZquE+SCcQk8QpHOLqDztO MA9grQ0ss2He6gVZ+bOeKxpRaaCmlPfniExZrNWU0ejTdWsnrM3COsgzIaheUDe/ qQtyjwYpi63RhgeVGBase7uDM9LeIBSO8EvGzlPhuD2nQhwBWBd6pcq3Dina1TrJ 2ZpFFP0Zt3u77aE31bty3em+QnyeGN/kqrjiawQVutxr2NtV/moDe1tHZAnPAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUF02KCQYPrHiLs0ccEbMwM2wmaegwHwYDVR0j BBgwFoAUcI0fmcC9KheD0c5Ca7/oPJwMxSAwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby9l Yjc0ZWNlNi04ODBjLTRjZWYtYWRkMi03NzcxOWViZWRlYzkvMC83MDhEMUY5OUMw QkQyQTE3ODNEMUNFNDI2QkJGRTgzQzlDMENDNTIwLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvNzA4RDFGOTlDMEJEMkExNzgzRDFDRTQyNkJCRkU4M0M5QzBD QzUyMC5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vZWI3NGVjZTYtODgwYy00Y2VmLWFk ZDItNzc3MTllYmVkZWM5LzAvNzA4RDFGOTlDMEJEMkExNzgzRDFDRTQyNkJCRkU4 M0M5QzBDQzUyMC5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAJZAiNa6grdFxwsLvDzA4BMMol1Elb33GgJI 7q7g6LBiV7IGALYsmhE5b9KlPirulG6nf0nsMInZp3w5eR0XrZnaPBRaskpdUOuU Ce0YuRzz7aA4sHM+qVRpeLcvgk0tuwSDmCDQs1TA2pFTSC7Efr7fAJrhyDLtY4rE 0ufGyHmWrOYllvenHmuKIhPHcOljtqOu/bPwx3O9Ax2rRaQvlLlUpnQvJRbDRTm4 1Gyb3XpIUhZ3mH7NDB9tXW2QdniQOiCB+q2CrS12JCEqsT2cDMaPbOKXTtKkWdI5 adPH17KsqzLTM57/xHh7Xmn0H0lcF7LfPMsPl0Hp4/9Bm5ojc4c= -----END CERTIFICATE-----Generated at Sun Jan 25 18:36:50 2026 by rpki-client