This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf repo-rpki.idnic.net/repo/dd48bd04-f787-414a-a501-5138a6d6b3e1/0/71E51A9B65D8A123513A350F0D99F98D6C9B72E2.mft File: 71E51A9B65D8A123513A350F0D99F98D6C9B72E2.mft (raw, json) Hash identifier: FvEnY8y3JTA1ofYDAIkbbIFU4rLGFcHnIDIzwkcwTn8= Subject key identifier: 1F:2B:B1:88:05:4A:A0:A5:E9:56:B6:19:B5:E2:91:49:F7:40:D0:B1 Authority key identifier: 71:E5:1A:9B:65:D8:A1:23:51:3A:35:0F:0D:99:F9:8D:6C:9B:72:E2 Certificate issuer: /CN=71E51A9B65D8A123513A350F0D99F98D6C9B72E2 Certificate serial: 7AC5B1F6958852DFB8C2258885E50DFE662145AC Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/71E51A9B65D8A123513A350F0D99F98D6C9B72E2.cer Subject info access: rsync://repo-rpki.idnic.net/repo/dd48bd04-f787-414a-a501-5138a6d6b3e1/0/71E51A9B65D8A123513A350F0D99F98D6C9B72E2.mft Manifest number: 03FE Signing time: Sat 24 Jan 2026 01:41:19 +0000 Manifest this update: Sat 24 Jan 2026 01:36:19 +0000 Manifest next update: Tue 27 Jan 2026 07:23:19 +0000 Files and hashes: 1: 71E51A9B65D8A123513A350F0D99F98D6C9B72E2.crl (hash: D1PCAiZiWzkbN468iQlNihqzGoZLJWbVYfNb85wDS8A=) 2: 3130332e3130372e3138372e302f32342d3234203d3e20313337333030.roa (hash: qbGMe4OJOUlVBBlNS/T+BUhcFyXomn3ouFjeMKM/9vg=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/dd48bd04-f787-414a-a501-5138a6d6b3e1/0/71E51A9B65D8A123513A350F0D99F98D6C9B72E2.crl rsync://repo-rpki.idnic.net/repo/dd48bd04-f787-414a-a501-5138a6d6b3e1/0/71E51A9B65D8A123513A350F0D99F98D6C9B72E2.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/71E51A9B65D8A123513A350F0D99F98D6C9B72E2.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 27 Jan 2026 07:23:19 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 7a:c5:b1:f6:95:88:52:df:b8:c2:25:88:85:e5:0d:fe:66:21:45:ac Signature Algorithm: sha256WithRSAEncryption Issuer: CN=71E51A9B65D8A123513A350F0D99F98D6C9B72E2 Validity Not Before: Jan 24 01:36:19 2026 GMT Not After : Jan 27 07:23:19 2026 GMT Subject: CN=1F2BB188054AA0A5E956B619B5E29149F740D0B1 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bc:16:4d:1b:62:60:67:13:7c:ff:19:e9:ad:0d: b1:f8:b4:c4:a0:90:20:cf:66:8f:92:b4:d9:26:43: 9d:df:b7:0f:e2:21:4d:6b:8e:eb:94:23:a6:25:50: 3d:1c:5f:d4:46:d8:db:91:06:d5:10:74:36:77:b7: 13:45:8e:5b:e4:d5:51:03:c3:70:17:23:bf:55:03: ac:02:ef:25:a1:9c:88:21:bd:3f:5e:ec:d9:15:07: 51:b1:e2:5c:81:54:16:53:34:a3:63:4a:19:ba:6e: 95:d2:eb:56:0e:5e:a3:1f:27:f2:9c:f0:23:87:48: 3d:5a:dd:bb:6b:6a:f6:6a:df:55:61:ca:2d:cb:27: 28:1b:57:e6:14:4a:4a:fa:a3:1e:e6:cb:57:ff:a6: 4f:69:46:5f:20:ac:05:db:c6:4c:c1:90:49:d8:27: 7e:33:6a:e4:b1:72:6d:1c:be:2e:9a:c6:97:88:d7: 54:ae:3d:f6:bc:26:fd:7d:c3:db:51:f7:86:cb:1d: 99:42:1b:2c:9c:1e:01:d4:e3:43:92:19:29:1d:7f: bf:80:a9:c6:1c:12:2a:b0:47:6f:df:27:c5:ec:50: 9b:27:90:5a:fd:ba:fc:87:4e:af:7d:ed:37:8c:a0: 85:99:d2:10:ee:e6:24:25:6b:7e:7e:e4:bb:fc:59: 30:03 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 1F:2B:B1:88:05:4A:A0:A5:E9:56:B6:19:B5:E2:91:49:F7:40:D0:B1 X509v3 Authority Key Identifier: keyid:71:E5:1A:9B:65:D8:A1:23:51:3A:35:0F:0D:99:F9:8D:6C:9B:72:E2 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/dd48bd04-f787-414a-a501-5138a6d6b3e1/0/71E51A9B65D8A123513A350F0D99F98D6C9B72E2.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/71E51A9B65D8A123513A350F0D99F98D6C9B72E2.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/dd48bd04-f787-414a-a501-5138a6d6b3e1/0/71E51A9B65D8A123513A350F0D99F98D6C9B72E2.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 76:78:87:fb:6a:ce:fe:0a:29:67:e9:85:18:84:e5:c1:84:18: da:d6:02:01:b3:ab:8a:fb:a3:01:10:6e:6b:5c:9e:f2:dc:3b: 87:e6:bf:8a:22:7f:86:46:96:99:ea:8e:9f:e4:26:8b:e2:33: 1e:44:bf:22:19:97:84:a4:45:b5:7e:06:3a:65:51:a8:b1:cf: 07:6e:1a:6c:ac:e4:fd:e0:a8:0a:79:10:50:c4:7b:bc:ea:1f: bd:54:cd:da:ee:9c:8d:61:45:cb:28:af:79:54:ef:f3:90:d1: 8d:2a:90:60:68:82:d4:c2:cb:2f:86:cc:c9:ad:1f:99:68:82: b3:ab:6b:be:01:42:e3:bd:52:dc:e3:1e:18:5c:25:51:6d:25: 10:d0:04:a3:0a:d3:25:7e:23:cc:a8:1b:dd:25:f5:28:0a:a9: 80:8c:8a:12:a9:7f:f5:1c:31:98:84:43:a0:4d:fa:90:44:3e: a1:49:93:08:4c:cf:82:cf:9a:04:2c:ed:32:34:9d:da:97:66: 92:9d:c8:18:de:de:8e:c7:8b:96:b2:5b:e8:50:84:78:35:a4: 0c:a2:34:97:33:ad:6b:7f:ca:6e:66:30:c2:e0:81:4f:4d:6e: 4a:fb:cf:74:55:aa:35:6f:ac:97:4e:13:65:95:30:39:fb:73: f8:4c:a4:ef -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUesWx9pWIUt+4wiWIheUN/mYhRawwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoNzFFNTFBOUI2NUQ4QTEyMzUxM0EzNTBGMEQ5OUY5OEQ2 QzlCNzJFMjAeFw0yNjAxMjQwMTM2MTlaFw0yNjAxMjcwNzIzMTlaMDMxMTAvBgNV BAMTKDFGMkJCMTg4MDU0QUEwQTVFOTU2QjYxOUI1RTI5MTQ5Rjc0MEQwQjEwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC8Fk0bYmBnE3z/GemtDbH4tMSg kCDPZo+StNkmQ53ftw/iIU1rjuuUI6YlUD0cX9RG2NuRBtUQdDZ3txNFjlvk1VED w3AXI79VA6wC7yWhnIghvT9e7NkVB1Gx4lyBVBZTNKNjShm6bpXS61YOXqMfJ/Kc 8COHSD1a3btravZq31Vhyi3LJygbV+YUSkr6ox7my1f/pk9pRl8grAXbxkzBkEnY J34zauSxcm0cvi6axpeI11SuPfa8Jv19w9tR94bLHZlCGyycHgHU40OSGSkdf7+A qcYcEiqwR2/fJ8XsUJsnkFr9uvyHTq997TeMoIWZ0hDu5iQla35+5Lv8WTADAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUHyuxiAVKoKXpVrYZteKRSfdA0LEwHwYDVR0j BBgwFoAUceUam2XYoSNROjUPDZn5jWybcuIwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby9k ZDQ4YmQwNC1mNzg3LTQxNGEtYTUwMS01MTM4YTZkNmIzZTEvMC83MUU1MUE5QjY1 RDhBMTIzNTEzQTM1MEYwRDk5Rjk4RDZDOUI3MkUyLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvNzFFNTFBOUI2NUQ4QTEyMzUxM0EzNTBGMEQ5OUY5OEQ2QzlC NzJFMi5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vZGQ0OGJkMDQtZjc4Ny00MTRhLWE1 MDEtNTEzOGE2ZDZiM2UxLzAvNzFFNTFBOUI2NUQ4QTEyMzUxM0EzNTBGMEQ5OUY5 OEQ2QzlCNzJFMi5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAHZ4h/tqzv4KKWfphRiE5cGEGNrWAgGzq4r7 owEQbmtcnvLcO4fmv4oif4ZGlpnqjp/kJoviMx5EvyIZl4SkRbV+BjplUaixzwdu Gmys5P3gqAp5EFDEe7zqH71UzdrunI1hRcsor3lU7/OQ0Y0qkGBogtTCyy+GzMmt H5logrOra74BQuO9UtzjHhhcJVFtJRDQBKMK0yV+I8yoG90l9SgKqYCMihKpf/Uc MZiEQ6BN+pBEPqFJkwhMz4LPmgQs7TI0ndqXZpKdyBje3o7Hi5ayW+hQhHg1pAyi NJczrWt/ym5mMMLggU9Nbkr7z3RVqjVvrJdOE2WVMDn7c/hMpO8= -----END CERTIFICATE-----Generated at Mon Jan 26 02:48:03 2026 by rpki-client