This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf repo-rpki.idnic.net/repo/57cd1d2d-7364-481b-978e-0a854a9cff4f/0/70CC719DF5876DBD92D41F5AF0359E3A698BDDD4.mft File: 70CC719DF5876DBD92D41F5AF0359E3A698BDDD4.mft (raw, json) Hash identifier: 5zQRTpfMI55LLxwJUX07sWERNVl8rml71xeWo6inVzc= Subject key identifier: 76:67:22:43:AC:82:93:D6:D9:52:50:32:FE:00:1B:2C:A3:14:F2:41 Authority key identifier: 70:CC:71:9D:F5:87:6D:BD:92:D4:1F:5A:F0:35:9E:3A:69:8B:DD:D4 Certificate issuer: /CN=70CC719DF5876DBD92D41F5AF0359E3A698BDDD4 Certificate serial: 33AA2B0A9478DCE469DAD022809EB6830A7B2E76 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/70CC719DF5876DBD92D41F5AF0359E3A698BDDD4.cer Subject info access: rsync://repo-rpki.idnic.net/repo/57cd1d2d-7364-481b-978e-0a854a9cff4f/0/70CC719DF5876DBD92D41F5AF0359E3A698BDDD4.mft Manifest number: 01D7 Signing time: Sat 17 Jan 2026 21:50:39 +0000 Manifest this update: Sat 17 Jan 2026 21:45:39 +0000 Manifest next update: Wed 21 Jan 2026 05:05:39 +0000 Files and hashes: 1: 70CC719DF5876DBD92D41F5AF0359E3A698BDDD4.crl (hash: evuTPmB4jgkSTFB7KUZI4fOFZqK2ttPPhBPKag0Wr/0=) 2: 3130332e3133312e32382e302f32342d3234203d3e20313534343130.roa (hash: BT2Xm6NvivpZW/A7KKYoT5JmNwNHRn5+Zp/CE2/KpUE=) 3: 3130332e3133312e32382e302f32342d3234203d3e20323135373237.roa (hash: ls/qvCLTIAui00ibgj8c/dl69JxHxFEbZ+n3COlxeds=) 4: 3130332e3133312e32382e302f32342d3234203d3e20313530353030.roa (hash: hdvyAhrcryql4wjEziksSVWRL82EleGS11GMyW3jyaU=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/57cd1d2d-7364-481b-978e-0a854a9cff4f/0/70CC719DF5876DBD92D41F5AF0359E3A698BDDD4.crl rsync://repo-rpki.idnic.net/repo/57cd1d2d-7364-481b-978e-0a854a9cff4f/0/70CC719DF5876DBD92D41F5AF0359E3A698BDDD4.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/70CC719DF5876DBD92D41F5AF0359E3A698BDDD4.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 21 Jan 2026 05:05:39 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 33:aa:2b:0a:94:78:dc:e4:69:da:d0:22:80:9e:b6:83:0a:7b:2e:76 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=70CC719DF5876DBD92D41F5AF0359E3A698BDDD4 Validity Not Before: Jan 17 21:45:39 2026 GMT Not After : Jan 21 05:05:39 2026 GMT Subject: CN=76672243AC8293D6D9525032FE001B2CA314F241 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ca:b0:4a:3e:0a:0d:8b:92:35:ff:31:76:be:91: 27:f8:64:50:98:6b:68:f2:b7:e3:05:3a:cb:0c:c8: aa:6c:19:19:d3:1a:49:8f:5c:3a:ed:87:e9:57:8a: 0f:0b:af:9e:c3:ee:7d:5c:77:93:b8:5c:53:ef:1b: 03:55:9d:e2:80:c9:3b:76:81:81:ca:b3:bb:ad:b2: 66:2c:02:87:52:b8:be:28:91:b4:49:04:5e:69:c3: e2:db:63:63:63:e8:17:32:fc:92:78:35:34:c1:54: 53:7e:9e:f0:d4:b2:fe:19:1b:47:db:64:ba:49:08: 74:d9:27:a6:48:c8:dc:4c:1d:11:a9:a8:9c:5f:9b: b5:21:8d:32:f8:7a:2f:b8:25:02:d7:63:24:8e:ab: 8c:6b:df:22:4a:7c:9e:80:94:2b:09:06:82:ff:3d: ae:10:f8:a3:57:3d:75:d8:c1:c7:ff:b5:27:4c:86: 66:c2:82:45:5c:92:0f:cb:78:af:b5:45:9e:9a:be: 5d:b4:b4:4b:cf:fd:ef:22:bb:82:10:0f:90:4a:62: b6:d5:63:d0:57:fa:87:69:42:cc:45:c9:ae:23:12: 19:db:5a:bd:86:52:4f:cc:63:47:67:d4:5e:1b:d1: d4:91:6c:5b:51:8b:ec:0e:8a:9a:e4:31:64:90:18: 2f:a9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 76:67:22:43:AC:82:93:D6:D9:52:50:32:FE:00:1B:2C:A3:14:F2:41 X509v3 Authority Key Identifier: keyid:70:CC:71:9D:F5:87:6D:BD:92:D4:1F:5A:F0:35:9E:3A:69:8B:DD:D4 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/57cd1d2d-7364-481b-978e-0a854a9cff4f/0/70CC719DF5876DBD92D41F5AF0359E3A698BDDD4.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/70CC719DF5876DBD92D41F5AF0359E3A698BDDD4.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/57cd1d2d-7364-481b-978e-0a854a9cff4f/0/70CC719DF5876DBD92D41F5AF0359E3A698BDDD4.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 56:5c:f8:ea:39:d3:77:b5:48:74:c7:70:c1:0b:8a:cb:e2:56: f9:7e:51:22:0c:77:99:bf:ef:cd:42:b3:e2:3b:1e:e1:4a:ad: 3c:1c:28:8e:e0:8d:b1:f5:c4:cb:8e:2a:be:e1:75:dc:8b:6c: 00:cc:46:9b:99:da:96:b9:ce:cd:30:db:5f:9c:2f:4b:b7:63: 47:73:a5:0d:36:1a:e5:eb:38:09:bc:22:9e:b1:86:37:0d:a3: b7:9e:61:67:5b:b2:6e:39:06:0f:16:d3:06:29:cc:ed:26:07: fa:2e:86:fb:ad:10:ca:b4:69:a9:0c:45:cf:f8:c4:2d:90:78: 38:3b:41:96:e8:bb:5a:df:c5:d0:bf:e4:0c:bd:f7:bd:8e:15: d6:0e:1a:8c:82:62:a4:72:02:fa:56:0f:e0:41:4b:f2:d3:d2: f4:ec:0c:47:f1:d4:51:f4:31:94:5f:c3:66:02:4c:80:34:32: a5:fe:6d:7e:0e:f2:81:6a:da:69:d3:c0:05:f9:f8:51:72:80: 4c:8f:a1:55:7a:68:39:6b:f4:76:9d:07:a8:f6:4e:67:6c:c8: cb:0b:78:8d:9b:26:27:45:7b:6c:59:1d:00:56:68:1b:9d:a7: 14:f8:3d:f8:0e:42:15:cc:5b:ef:e9:f5:f0:58:13:f0:3a:03: 33:b2:8d:8a -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUM6orCpR43ORp2tAigJ62gwp7LnYwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoNzBDQzcxOURGNTg3NkRCRDkyRDQxRjVBRjAzNTlFM0E2 OThCRERENDAeFw0yNjAxMTcyMTQ1MzlaFw0yNjAxMjEwNTA1MzlaMDMxMTAvBgNV BAMTKDc2NjcyMjQzQUM4MjkzRDZEOTUyNTAzMkZFMDAxQjJDQTMxNEYyNDEwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDKsEo+Cg2LkjX/MXa+kSf4ZFCY a2jyt+MFOssMyKpsGRnTGkmPXDrth+lXig8Lr57D7n1cd5O4XFPvGwNVneKAyTt2 gYHKs7utsmYsAodSuL4okbRJBF5pw+LbY2Nj6Bcy/JJ4NTTBVFN+nvDUsv4ZG0fb ZLpJCHTZJ6ZIyNxMHRGpqJxfm7UhjTL4ei+4JQLXYySOq4xr3yJKfJ6AlCsJBoL/ Pa4Q+KNXPXXYwcf/tSdMhmbCgkVckg/LeK+1RZ6avl20tEvP/e8iu4IQD5BKYrbV Y9BX+odpQsxFya4jEhnbWr2GUk/MY0dn1F4b0dSRbFtRi+wOiprkMWSQGC+pAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUdmciQ6yCk9bZUlAy/gAbLKMU8kEwHwYDVR0j BBgwFoAUcMxxnfWHbb2S1B9a8DWeOmmL3dQwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby81 N2NkMWQyZC03MzY0LTQ4MWItOTc4ZS0wYTg1NGE5Y2ZmNGYvMC83MENDNzE5REY1 ODc2REJEOTJENDFGNUFGMDM1OUUzQTY5OEJEREQ0LmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvNzBDQzcxOURGNTg3NkRCRDkyRDQxRjVBRjAzNTlFM0E2OThC RERENC5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vNTdjZDFkMmQtNzM2NC00ODFiLTk3 OGUtMGE4NTRhOWNmZjRmLzAvNzBDQzcxOURGNTg3NkRCRDkyRDQxRjVBRjAzNTlF M0E2OThCRERENC5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAFZc+Oo503e1SHTHcMELisviVvl+USIMd5m/ 781Cs+I7HuFKrTwcKI7gjbH1xMuOKr7hddyLbADMRpuZ2pa5zs0w21+cL0u3Y0dz pQ02GuXrOAm8Ip6xhjcNo7eeYWdbsm45Bg8W0wYpzO0mB/ouhvutEMq0aakMRc/4 xC2QeDg7QZbou1rfxdC/5Ay9972OFdYOGoyCYqRyAvpWD+BBS/LT0vTsDEfx1FH0 MZRfw2YCTIA0MqX+bX4O8oFq2mnTwAX5+FFygEyPoVV6aDlr9HadB6j2TmdsyMsL eI2bJidFe2xZHQBWaBudpxT4PfgOQhXMW+/p9fBYE/A6AzOyjYo= -----END CERTIFICATE-----Generated at Mon Jan 19 20:01:59 2026 by rpki-client