This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf repo-rpki.idnic.net/repo/91e0d17c-edd1-4202-b736-3b527efa6ba2/0/708351A7D650085780AA7D6B77F317953F16F999.mft File: 708351A7D650085780AA7D6B77F317953F16F999.mft (raw, json) Hash identifier: mzkQkhSieGUnyIhOHGpYLpbcUnZZvl3lEWNrzRZYRTc= Subject key identifier: 37:C2:77:4D:CF:E1:F3:0F:FD:70:4C:04:1B:BB:43:AD:5B:4B:83:2D Authority key identifier: 70:83:51:A7:D6:50:08:57:80:AA:7D:6B:77:F3:17:95:3F:16:F9:99 Certificate issuer: /CN=708351A7D650085780AA7D6B77F317953F16F999 Certificate serial: 2672825DE43CF1B54860304DD68343A9306D5F8D Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/708351A7D650085780AA7D6B77F317953F16F999.cer Subject info access: rsync://repo-rpki.idnic.net/repo/91e0d17c-edd1-4202-b736-3b527efa6ba2/0/708351A7D650085780AA7D6B77F317953F16F999.mft Manifest number: 01D7 Signing time: Sat 31 Jan 2026 11:50:47 +0000 Manifest this update: Sat 31 Jan 2026 11:45:47 +0000 Manifest next update: Tue 03 Feb 2026 17:24:47 +0000 Files and hashes: 1: 708351A7D650085780AA7D6B77F317953F16F999.crl (hash: ODbEsro6nDebeTS9h0zBmF4Z13FFbgnlyk96ZqhXpP4=) 2: 3130332e3139362e3135362e302f32342d3234203d3e20313530393531.roa (hash: XWHKWl1bl7orQ2vAhEeH2m+P668uWWue/l7jGZqhA9o=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/91e0d17c-edd1-4202-b736-3b527efa6ba2/0/708351A7D650085780AA7D6B77F317953F16F999.crl rsync://repo-rpki.idnic.net/repo/91e0d17c-edd1-4202-b736-3b527efa6ba2/0/708351A7D650085780AA7D6B77F317953F16F999.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/708351A7D650085780AA7D6B77F317953F16F999.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 03 Feb 2026 17:24:47 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 26:72:82:5d:e4:3c:f1:b5:48:60:30:4d:d6:83:43:a9:30:6d:5f:8d Signature Algorithm: sha256WithRSAEncryption Issuer: CN=708351A7D650085780AA7D6B77F317953F16F999 Validity Not Before: Jan 31 11:45:47 2026 GMT Not After : Feb 3 17:24:47 2026 GMT Subject: CN=37C2774DCFE1F30FFD704C041BBB43AD5B4B832D Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:f9:b2:c5:98:de:35:08:bd:a7:bd:60:4a:27:df: 53:38:4a:b7:25:fd:63:9c:f8:c1:fd:f8:8c:99:22: 90:09:bd:34:77:52:d7:21:0c:1c:13:3e:70:7e:38: 52:3c:92:18:64:d7:5c:1f:85:22:5e:24:94:4f:39: 24:86:81:b0:17:91:af:ff:fe:a0:41:3f:ba:d1:73: 9f:50:63:56:f2:bb:a8:09:a3:b2:0d:55:1e:c4:73: 08:98:f6:4f:d8:f0:44:d4:e8:d9:95:fb:e1:fa:ae: 82:b2:ed:d3:ff:04:57:34:9e:d6:8e:c2:24:3b:20: 88:46:9d:d0:7f:31:78:9d:3d:f8:b2:20:0b:0f:a0: cb:91:3a:1d:e1:d4:43:47:96:58:f7:4a:68:67:ef: b5:e0:c6:1a:8f:3f:23:fb:71:00:f7:71:3d:94:f5: 64:ce:52:d7:b8:a4:84:be:c5:2f:3f:a3:36:44:f9: 66:e4:67:0e:59:13:02:da:ee:e1:1a:6d:70:7f:c2: a7:2d:27:cc:ba:af:a1:ee:07:aa:d4:87:80:01:af: ec:97:f3:75:6c:98:71:f1:95:e9:0e:0e:1f:3a:0e: b9:80:92:08:cb:fb:43:de:9d:12:5a:b5:92:53:72: 09:ed:96:2c:03:3e:9b:b3:6a:d4:e1:74:c4:41:79: c4:59 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 37:C2:77:4D:CF:E1:F3:0F:FD:70:4C:04:1B:BB:43:AD:5B:4B:83:2D X509v3 Authority Key Identifier: keyid:70:83:51:A7:D6:50:08:57:80:AA:7D:6B:77:F3:17:95:3F:16:F9:99 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/91e0d17c-edd1-4202-b736-3b527efa6ba2/0/708351A7D650085780AA7D6B77F317953F16F999.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/708351A7D650085780AA7D6B77F317953F16F999.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/91e0d17c-edd1-4202-b736-3b527efa6ba2/0/708351A7D650085780AA7D6B77F317953F16F999.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 3e:d9:86:2a:70:2b:70:62:86:47:a0:b0:cd:2a:07:c7:c7:32: 00:60:20:94:ce:1d:91:90:4f:89:95:62:a6:ee:d3:05:34:fa: 47:d5:bf:51:bb:d6:49:b7:d7:6a:76:53:b6:cc:90:ce:96:8f: 9a:04:93:22:41:24:20:61:cf:c9:cd:a7:c9:f9:7e:52:4a:80: 89:be:78:a9:87:62:95:ab:0e:88:ae:e1:48:55:12:35:95:43: 93:c8:1d:4c:4a:ac:81:ac:2e:72:47:57:3b:59:ec:1b:fb:e4: 45:e6:cb:18:58:33:ee:9e:aa:d0:5d:f4:8e:02:ae:2a:9d:7d: 65:7d:ea:17:fd:d6:b0:83:e7:fa:db:ff:60:91:d2:5d:1e:ea: 52:ee:a8:20:76:57:b3:bc:1e:29:71:70:9c:ab:db:9d:2d:8d: 64:c9:04:ed:fc:23:07:36:5d:8d:d3:df:12:a6:c4:f9:ce:1c: 26:60:56:4d:fb:fe:50:39:e1:d3:71:11:8a:41:d5:e6:c3:1a: 6f:dd:b9:3c:ae:a8:8c:12:27:0f:85:f9:84:45:7a:94:83:b1: cc:be:22:c2:cc:28:26:a9:d1:26:32:d7:41:c2:09:14:3c:1c: 55:41:82:44:c6:3a:df:76:03:01:3c:a2:af:b6:9d:8f:38:41: 6f:b6:ac:07 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUJnKCXeQ88bVIYDBN1oNDqTBtX40wDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoNzA4MzUxQTdENjUwMDg1NzgwQUE3RDZCNzdGMzE3OTUz RjE2Rjk5OTAeFw0yNjAxMzExMTQ1NDdaFw0yNjAyMDMxNzI0NDdaMDMxMTAvBgNV BAMTKDM3QzI3NzREQ0ZFMUYzMEZGRDcwNEMwNDFCQkI0M0FENUI0QjgzMkQwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQD5ssWY3jUIvae9YEon31M4Srcl /WOc+MH9+IyZIpAJvTR3UtchDBwTPnB+OFI8khhk11wfhSJeJJRPOSSGgbAXka// /qBBP7rRc59QY1byu6gJo7INVR7EcwiY9k/Y8ETU6NmV++H6roKy7dP/BFc0ntaO wiQ7IIhGndB/MXidPfiyIAsPoMuROh3h1ENHllj3Smhn77XgxhqPPyP7cQD3cT2U 9WTOUte4pIS+xS8/ozZE+WbkZw5ZEwLa7uEabXB/wqctJ8y6r6HuB6rUh4ABr+yX 83VsmHHxlekODh86DrmAkgjL+0PenRJatZJTcgntliwDPpuzatThdMRBecRZAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUN8J3Tc/h8w/9cEwEG7tDrVtLgy0wHwYDVR0j BBgwFoAUcINRp9ZQCFeAqn1rd/MXlT8W+ZkwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby85 MWUwZDE3Yy1lZGQxLTQyMDItYjczNi0zYjUyN2VmYTZiYTIvMC83MDgzNTFBN0Q2 NTAwODU3ODBBQTdENkI3N0YzMTc5NTNGMTZGOTk5LmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvNzA4MzUxQTdENjUwMDg1NzgwQUE3RDZCNzdGMzE3OTUzRjE2 Rjk5OS5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vOTFlMGQxN2MtZWRkMS00MjAyLWI3 MzYtM2I1MjdlZmE2YmEyLzAvNzA4MzUxQTdENjUwMDg1NzgwQUE3RDZCNzdGMzE3 OTUzRjE2Rjk5OS5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAD7ZhipwK3BihkegsM0qB8fHMgBgIJTOHZGQ T4mVYqbu0wU0+kfVv1G71km312p2U7bMkM6Wj5oEkyJBJCBhz8nNp8n5flJKgIm+ eKmHYpWrDoiu4UhVEjWVQ5PIHUxKrIGsLnJHVztZ7Bv75EXmyxhYM+6eqtBd9I4C riqdfWV96hf91rCD5/rb/2CR0l0e6lLuqCB2V7O8HilxcJyr250tjWTJBO38Iwc2 XY3T3xKmxPnOHCZgVk37/lA54dNxEYpB1ebDGm/duTyuqIwSJw+F+YRFepSDscy+ IsLMKCap0SYy10HCCRQ8HFVBgkTGOt92AwE8oq+2nY84QW+2rAc= -----END CERTIFICATE-----Generated at Mon Feb 2 10:04:23 2026 by rpki-client