This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf repo-rpki.idnic.net/repo/a5deca82-89ab-4582-8e82-8ec8a51fec42/0/71876CD3DD087E9543A347F614A4D24A87A40F95.mft File: 71876CD3DD087E9543A347F614A4D24A87A40F95.mft (raw, json) Hash identifier: vEnTk2VhUjCUZQ0d7oTlXlTBB9Tn53RzBzCW83ZNbKI= Subject key identifier: 1B:21:94:47:18:AB:12:25:13:B7:E9:77:10:BA:63:CD:B2:F5:BD:E8 Authority key identifier: 71:87:6C:D3:DD:08:7E:95:43:A3:47:F6:14:A4:D2:4A:87:A4:0F:95 Certificate issuer: /CN=71876CD3DD087E9543A347F614A4D24A87A40F95 Certificate serial: 3CB96704C51876EB6A9A7EC9BCAD11FC022A57D6 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/71876CD3DD087E9543A347F614A4D24A87A40F95.cer Subject info access: rsync://repo-rpki.idnic.net/repo/a5deca82-89ab-4582-8e82-8ec8a51fec42/0/71876CD3DD087E9543A347F614A4D24A87A40F95.mft Manifest number: 01EE Signing time: Fri 23 Jan 2026 09:30:50 +0000 Manifest this update: Fri 23 Jan 2026 09:25:50 +0000 Manifest next update: Mon 26 Jan 2026 20:44:50 +0000 Files and hashes: 1: 3130332e3130372e3230362e302f32342d3234203d3e20313431313238.roa (hash: o+ObFNPOeoy9QHMr9JkuLi0Oplv3Nwb5WNwb7QDMg90=) 2: 3130332e3135382e3133302e302f32342d3234203d3e20313431313238.roa (hash: InJPaa/K/Tdw95KsetWVBO6eC2FHgWnfV4A1F9baTg0=) 3: 71876CD3DD087E9543A347F614A4D24A87A40F95.crl (hash: 0H1z/U4wwfa5Nx3kekKpMV37byYqVt6BF1Pc7P5w75E=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/a5deca82-89ab-4582-8e82-8ec8a51fec42/0/71876CD3DD087E9543A347F614A4D24A87A40F95.crl rsync://repo-rpki.idnic.net/repo/a5deca82-89ab-4582-8e82-8ec8a51fec42/0/71876CD3DD087E9543A347F614A4D24A87A40F95.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/71876CD3DD087E9543A347F614A4D24A87A40F95.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 26 Jan 2026 20:44:50 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 3c:b9:67:04:c5:18:76:eb:6a:9a:7e:c9:bc:ad:11:fc:02:2a:57:d6 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=71876CD3DD087E9543A347F614A4D24A87A40F95 Validity Not Before: Jan 23 09:25:50 2026 GMT Not After : Jan 26 20:44:50 2026 GMT Subject: CN=1B21944718AB122513B7E97710BA63CDB2F5BDE8 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:db:92:c4:c1:49:6b:90:08:c7:18:30:a8:50:fb: 7b:03:74:54:1d:bc:16:2d:bc:42:38:72:30:80:78: 3c:c1:84:bf:ee:74:5d:41:4d:f2:e8:fb:ea:08:08: 4d:c0:54:06:53:f5:15:a3:05:22:d4:e7:fb:3d:2a: 7e:86:31:d7:ee:69:4b:0c:d8:4d:ad:9e:3f:c1:8f: 1a:bd:da:82:79:cb:19:a5:e6:df:88:b2:fb:a0:53: b2:c6:54:dc:a8:19:0a:64:e0:f1:a7:d2:87:61:fa: ed:7b:3d:79:e6:96:a8:86:bb:14:97:40:a8:a2:69: 27:f4:aa:24:76:fd:ec:78:c2:0a:43:bf:e6:8f:f0: 88:8a:81:0c:cd:e3:a9:58:bf:4c:12:73:3e:39:6e: 15:65:bd:bc:ac:74:87:cb:77:ce:f7:17:4f:e0:fa: ce:df:77:07:d5:fd:47:2f:2d:4c:17:68:3c:32:a8: ca:4d:38:58:51:c5:8a:84:2f:a5:c6:da:45:36:71: a9:ff:58:4d:6b:f0:53:7c:30:d0:9f:4e:7f:a6:e2: 09:d7:2a:26:90:e1:08:f5:92:e2:c8:b6:29:6c:59: dc:dc:1f:62:95:04:10:4e:05:f9:22:72:53:6b:78: c2:7b:5e:e9:b3:6a:87:0a:62:c5:01:38:ca:5f:6c: e2:a7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 1B:21:94:47:18:AB:12:25:13:B7:E9:77:10:BA:63:CD:B2:F5:BD:E8 X509v3 Authority Key Identifier: keyid:71:87:6C:D3:DD:08:7E:95:43:A3:47:F6:14:A4:D2:4A:87:A4:0F:95 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/a5deca82-89ab-4582-8e82-8ec8a51fec42/0/71876CD3DD087E9543A347F614A4D24A87A40F95.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/71876CD3DD087E9543A347F614A4D24A87A40F95.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/a5deca82-89ab-4582-8e82-8ec8a51fec42/0/71876CD3DD087E9543A347F614A4D24A87A40F95.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 06:55:34:ea:09:32:d6:0e:17:97:6e:0f:7c:24:b5:18:64:ba: ca:8c:08:f1:81:c4:ae:b2:53:ed:17:a7:7a:2e:e5:11:b8:96: 59:83:39:e1:ab:db:58:6f:a9:3d:5a:56:11:9a:94:9f:91:aa: fc:f3:2f:ba:6a:4c:14:f9:27:cf:c4:4e:1a:c4:59:90:b9:d2: de:74:47:45:d7:2b:e2:ec:7e:a8:47:22:36:f6:e5:9a:88:50: ec:f8:9c:34:5e:50:f2:1d:88:d2:ef:c0:c3:c6:05:ab:01:91: 5d:3f:07:19:98:6f:f1:ca:56:91:24:6d:12:24:ef:0c:b6:27: 3e:d4:08:5b:60:b2:85:ae:01:bc:61:3e:37:65:d4:18:2b:84: 8d:62:d6:ca:cd:d4:d1:63:5e:d3:51:47:00:b8:3d:6f:62:d5: 9f:80:b7:1f:4f:eb:23:e8:6a:b7:a5:1f:10:de:fa:22:f7:08: f4:bf:76:d9:96:28:e1:19:e0:4b:73:76:c7:d1:6c:2b:76:af: a5:5b:b7:28:b5:28:fc:f7:5c:97:25:35:52:0e:88:47:6c:32: 46:d3:e5:3e:13:9e:77:b0:f2:77:53:8e:ad:4e:3a:98:f6:2d: 30:84:29:19:ef:ca:4c:c2:6e:bd:49:fa:b8:6e:60:96:82:b4: 47:7f:b6:68 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUPLlnBMUYdutqmn7JvK0R/AIqV9YwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoNzE4NzZDRDNERDA4N0U5NTQzQTM0N0Y2MTRBNEQyNEE4 N0E0MEY5NTAeFw0yNjAxMjMwOTI1NTBaFw0yNjAxMjYyMDQ0NTBaMDMxMTAvBgNV BAMTKDFCMjE5NDQ3MThBQjEyMjUxM0I3RTk3NzEwQkE2M0NEQjJGNUJERTgwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDbksTBSWuQCMcYMKhQ+3sDdFQd vBYtvEI4cjCAeDzBhL/udF1BTfLo++oICE3AVAZT9RWjBSLU5/s9Kn6GMdfuaUsM 2E2tnj/Bjxq92oJ5yxml5t+IsvugU7LGVNyoGQpk4PGn0odh+u17PXnmlqiGuxSX QKiiaSf0qiR2/ex4wgpDv+aP8IiKgQzN46lYv0wScz45bhVlvbysdIfLd873F0/g +s7fdwfV/UcvLUwXaDwyqMpNOFhRxYqEL6XG2kU2can/WE1r8FN8MNCfTn+m4gnX KiaQ4Qj1kuLItilsWdzcH2KVBBBOBfkiclNreMJ7XumzaocKYsUBOMpfbOKnAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUGyGURxirEiUTt+l3ELpjzbL1vegwHwYDVR0j BBgwFoAUcYds090IfpVDo0f2FKTSSoekD5UwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby9h NWRlY2E4Mi04OWFiLTQ1ODItOGU4Mi04ZWM4YTUxZmVjNDIvMC83MTg3NkNEM0RE MDg3RTk1NDNBMzQ3RjYxNEE0RDI0QTg3QTQwRjk1LmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvNzE4NzZDRDNERDA4N0U5NTQzQTM0N0Y2MTRBNEQyNEE4N0E0 MEY5NS5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vYTVkZWNhODItODlhYi00NTgyLThl ODItOGVjOGE1MWZlYzQyLzAvNzE4NzZDRDNERDA4N0U5NTQzQTM0N0Y2MTRBNEQy NEE4N0E0MEY5NS5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAAZVNOoJMtYOF5duD3wktRhkusqMCPGBxK6y U+0Xp3ou5RG4llmDOeGr21hvqT1aVhGalJ+RqvzzL7pqTBT5J8/EThrEWZC50t50 R0XXK+LsfqhHIjb25ZqIUOz4nDReUPIdiNLvwMPGBasBkV0/BxmYb/HKVpEkbRIk 7wy2Jz7UCFtgsoWuAbxhPjdl1BgrhI1i1srN1NFjXtNRRwC4PW9i1Z+Atx9P6yPo arelHxDe+iL3CPS/dtmWKOEZ4EtzdsfRbCt2r6Vbtyi1KPz3XJclNVIOiEdsMkbT 5T4Tnnew8ndTjq1OOpj2LTCEKRnvykzCbr1J+rhuYJaCtEd/tmg= -----END CERTIFICATE-----Generated at Sun Jan 25 22:00:22 2026 by rpki-client