This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf repo-rpki.idnic.net/repo/eb74ece6-880c-4cef-add2-77719ebedec9/0/708D1F99C0BD2A1783D1CE426BBFE83C9C0CC520.mft File: 708D1F99C0BD2A1783D1CE426BBFE83C9C0CC520.mft (raw, json) Hash identifier: 0aOhZxeT2dZuKAvvZvYsF8zBBui8p4ma0s0mUut+uMM= Subject key identifier: E2:FB:C4:7A:B6:CB:66:2C:74:23:63:9A:61:2E:E7:88:93:E8:33:84 Authority key identifier: 70:8D:1F:99:C0:BD:2A:17:83:D1:CE:42:6B:BF:E8:3C:9C:0C:C5:20 Certificate issuer: /CN=708D1F99C0BD2A1783D1CE426BBFE83C9C0CC520 Certificate serial: 3C464A36C500D01F0D272521C9E605B6668A47B6 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/708D1F99C0BD2A1783D1CE426BBFE83C9C0CC520.cer Subject info access: rsync://repo-rpki.idnic.net/repo/eb74ece6-880c-4cef-add2-77719ebedec9/0/708D1F99C0BD2A1783D1CE426BBFE83C9C0CC520.mft Manifest number: 0167 Signing time: Sat 31 Jan 2026 08:01:07 +0000 Manifest this update: Sat 31 Jan 2026 07:56:07 +0000 Manifest next update: Tue 03 Feb 2026 13:04:07 +0000 Files and hashes: 1: 708D1F99C0BD2A1783D1CE426BBFE83C9C0CC520.crl (hash: siZFR5L0ouB6eJUfg5oe2srP1J/GreOoVAD0J2GIvlI=) 2: 3131352e3138372e32382e302f32332d3234203d3e20313532303334.roa (hash: k4r6WzhxzBcS3VSCnW5AcBSPgRuHkdZqCOJR8VV2Nyw=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/eb74ece6-880c-4cef-add2-77719ebedec9/0/708D1F99C0BD2A1783D1CE426BBFE83C9C0CC520.crl rsync://repo-rpki.idnic.net/repo/eb74ece6-880c-4cef-add2-77719ebedec9/0/708D1F99C0BD2A1783D1CE426BBFE83C9C0CC520.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/708D1F99C0BD2A1783D1CE426BBFE83C9C0CC520.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 03 Feb 2026 13:04:07 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 3c:46:4a:36:c5:00:d0:1f:0d:27:25:21:c9:e6:05:b6:66:8a:47:b6 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=708D1F99C0BD2A1783D1CE426BBFE83C9C0CC520 Validity Not Before: Jan 31 07:56:07 2026 GMT Not After : Feb 3 13:04:07 2026 GMT Subject: CN=E2FBC47AB6CB662C7423639A612EE78893E83384 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:eb:64:45:3e:16:ec:3a:7c:ad:33:f5:d7:68:50: 9f:c2:3b:4a:96:b6:d0:1c:59:64:a8:ee:57:2f:45: 48:49:7c:5b:4a:e7:1c:be:a2:46:24:d8:80:e8:a3: 87:2a:f4:3a:67:df:e2:f8:78:b0:e7:79:27:c7:8c: 05:fc:a1:cf:84:09:bc:dd:5f:e7:c1:90:26:16:67: 8e:39:3e:ae:99:43:d8:43:c0:7d:b5:5f:87:3d:d8: f2:d9:ec:f7:6b:cf:b1:8f:9b:fb:e1:8c:d6:34:6e: 61:e0:d4:6a:60:35:5b:a4:62:a8:99:58:a6:84:5c: f3:05:20:8c:a7:1b:09:27:45:a5:6a:32:4e:34:b3: bf:a7:ba:05:b6:6b:e6:29:cd:69:a2:c6:f8:77:57: 5c:19:54:1e:c4:a6:20:8b:c7:1e:bb:85:b6:7f:f2: fa:3a:83:56:fc:26:f0:fa:7b:f4:5f:e7:87:4d:36: dc:bf:e3:7d:13:9d:55:67:00:3e:d0:52:68:c3:05: 13:b9:2c:a9:82:2d:2c:6b:d0:aa:d5:8c:35:41:6b: 99:60:b7:5e:4e:c3:8b:19:8a:83:9f:a3:c1:27:00: 42:3f:95:b3:bf:44:1b:9a:8e:64:1c:8d:0a:03:31: 0b:f4:97:8e:6c:62:ca:40:c6:bb:04:4d:7d:1b:dd: a0:29 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: E2:FB:C4:7A:B6:CB:66:2C:74:23:63:9A:61:2E:E7:88:93:E8:33:84 X509v3 Authority Key Identifier: keyid:70:8D:1F:99:C0:BD:2A:17:83:D1:CE:42:6B:BF:E8:3C:9C:0C:C5:20 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/eb74ece6-880c-4cef-add2-77719ebedec9/0/708D1F99C0BD2A1783D1CE426BBFE83C9C0CC520.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/708D1F99C0BD2A1783D1CE426BBFE83C9C0CC520.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/eb74ece6-880c-4cef-add2-77719ebedec9/0/708D1F99C0BD2A1783D1CE426BBFE83C9C0CC520.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 1c:d5:84:6c:c9:2b:e7:f5:7d:0d:28:f0:4e:b4:c9:a9:11:02: 92:95:8a:42:65:9d:55:35:ee:25:d4:23:3d:f0:4a:00:57:d9: 95:b4:c1:91:1a:a7:e3:80:d2:f2:ff:0f:bb:8f:bc:51:9b:4d: 04:0f:ee:aa:90:84:66:0a:cc:98:23:4a:de:5e:c9:f0:75:8c: 1f:c8:0f:86:a4:23:b4:7e:ba:68:cd:fb:c2:de:2e:7a:87:02: 78:07:f3:c3:9d:e5:a8:ce:be:f2:4e:7c:8e:da:76:24:49:5a: a5:fc:65:2a:8f:45:ea:48:b2:eb:3c:f4:71:a5:67:ab:58:ac: e1:44:19:23:6c:22:ed:6b:e2:88:32:94:94:62:3d:8d:4b:7e: f0:aa:f6:4c:20:7d:33:c4:cc:84:10:d4:d1:51:2a:2a:fb:2c: 36:6d:11:27:b8:2d:36:4f:28:3d:68:a1:39:bb:ca:0e:58:60: 9f:3a:ee:21:46:a5:bc:e1:1b:40:73:85:05:16:0c:80:fa:1f: 73:4f:5c:38:1e:6e:03:04:e3:01:6c:40:31:e6:f8:9e:b1:bd: ee:fa:7c:da:c7:2d:14:1d:d0:fb:f3:ef:f2:39:79:f2:80:d4: d7:0b:12:b7:dc:57:62:b1:97:63:b9:60:fe:77:90:d4:41:fd: d6:d0:e1:30 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUPEZKNsUA0B8NJyUhyeYFtmaKR7YwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoNzA4RDFGOTlDMEJEMkExNzgzRDFDRTQyNkJCRkU4M0M5 QzBDQzUyMDAeFw0yNjAxMzEwNzU2MDdaFw0yNjAyMDMxMzA0MDdaMDMxMTAvBgNV BAMTKEUyRkJDNDdBQjZDQjY2MkM3NDIzNjM5QTYxMkVFNzg4OTNFODMzODQwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDrZEU+Fuw6fK0z9ddoUJ/CO0qW ttAcWWSo7lcvRUhJfFtK5xy+okYk2IDoo4cq9Dpn3+L4eLDneSfHjAX8oc+ECbzd X+fBkCYWZ445Pq6ZQ9hDwH21X4c92PLZ7Pdrz7GPm/vhjNY0bmHg1GpgNVukYqiZ WKaEXPMFIIynGwknRaVqMk40s7+nugW2a+YpzWmixvh3V1wZVB7EpiCLxx67hbZ/ 8vo6g1b8JvD6e/Rf54dNNty/430TnVVnAD7QUmjDBRO5LKmCLSxr0KrVjDVBa5lg t15Ow4sZioOfo8EnAEI/lbO/RBuajmQcjQoDMQv0l45sYspAxrsETX0b3aApAgMB AAGjggI8MIICODAdBgNVHQ4EFgQU4vvEerbLZix0I2OaYS7niJPoM4QwHwYDVR0j BBgwFoAUcI0fmcC9KheD0c5Ca7/oPJwMxSAwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby9l Yjc0ZWNlNi04ODBjLTRjZWYtYWRkMi03NzcxOWViZWRlYzkvMC83MDhEMUY5OUMw QkQyQTE3ODNEMUNFNDI2QkJGRTgzQzlDMENDNTIwLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvNzA4RDFGOTlDMEJEMkExNzgzRDFDRTQyNkJCRkU4M0M5QzBD QzUyMC5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vZWI3NGVjZTYtODgwYy00Y2VmLWFk ZDItNzc3MTllYmVkZWM5LzAvNzA4RDFGOTlDMEJEMkExNzgzRDFDRTQyNkJCRkU4 M0M5QzBDQzUyMC5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBABzVhGzJK+f1fQ0o8E60yakRApKVikJlnVU1 7iXUIz3wSgBX2ZW0wZEap+OA0vL/D7uPvFGbTQQP7qqQhGYKzJgjSt5eyfB1jB/I D4akI7R+umjN+8LeLnqHAngH88Od5ajOvvJOfI7adiRJWqX8ZSqPRepIsus89HGl Z6tYrOFEGSNsIu1r4ogylJRiPY1LfvCq9kwgfTPEzIQQ1NFRKir7LDZtESe4LTZP KD1ooTm7yg5YYJ867iFGpbzhG0BzhQUWDID6H3NPXDgebgME4wFsQDHm+J6xve76 fNrHLRQd0Pvz7/I5efKA1NcLErfcV2Kxl2O5YP53kNRB/dbQ4TA= -----END CERTIFICATE-----Generated at Mon Feb 2 10:05:07 2026 by rpki-client