This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf repo-rpki.idnic.net/repo/05eab442-7480-4581-81dd-23a200614382/0/71C1EFD5DFDE20418A49070671B01D675F9A8917.mft
File:                     71C1EFD5DFDE20418A49070671B01D675F9A8917.mft (raw, json)
Hash identifier:          r96Dij+K4qBE4vq7dXQW+HFBcUbMU3pW5OiM91K3OeQ=
Subject key identifier:   5E:BE:C6:C9:64:B8:0F:0A:6F:A9:27:17:0B:5D:E2:83:01:A0:E9:60
Authority key identifier: 71:C1:EF:D5:DF:DE:20:41:8A:49:07:06:71:B0:1D:67:5F:9A:89:17
Certificate issuer:       /CN=71C1EFD5DFDE20418A49070671B01D675F9A8917
Certificate serial:       25D83C13475B1A8F77EF47D96C3A9763917F56F6
Authority info access:    rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/71C1EFD5DFDE20418A49070671B01D675F9A8917.cer
Subject info access:      rsync://repo-rpki.idnic.net/repo/05eab442-7480-4581-81dd-23a200614382/0/71C1EFD5DFDE20418A49070671B01D675F9A8917.mft
Manifest number:          02CB
Signing time:             Sat 31 Jan 2026 08:41:49 +0000
Manifest this update:     Sat 31 Jan 2026 08:36:49 +0000
Manifest next update:     Tue 03 Feb 2026 20:19:49 +0000
Files and hashes:         1: 71C1EFD5DFDE20418A49070671B01D675F9A8917.crl (hash: FIraUo2FtQAucf0QFIHM/Taqf4IsQj2Yt3ofFYHkFBs=)
                          2: 3130332e3137392e3231362e302f32332d3234203d3e20313339343439.roa (hash: 5sf8re0mhnirNB/CVBjr3dugWUOEZnIAdNv5SsfjaIQ=)
Validation:               OK
Signature path:           rsync://repo-rpki.idnic.net/repo/05eab442-7480-4581-81dd-23a200614382/0/71C1EFD5DFDE20418A49070671B01D675F9A8917.crl
                          rsync://repo-rpki.idnic.net/repo/05eab442-7480-4581-81dd-23a200614382/0/71C1EFD5DFDE20418A49070671B01D675F9A8917.mft
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/71C1EFD5DFDE20418A49070671B01D675F9A8917.cer
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Tue 03 Feb 2026 20:19:49 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            25:d8:3c:13:47:5b:1a:8f:77:ef:47:d9:6c:3a:97:63:91:7f:56:f6
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=71C1EFD5DFDE20418A49070671B01D675F9A8917
        Validity
            Not Before: Jan 31 08:36:49 2026 GMT
            Not After : Feb  3 20:19:49 2026 GMT
        Subject: CN=5EBEC6C964B80F0A6FA927170B5DE28301A0E960
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c5:07:f5:03:a9:b3:a6:a7:24:5c:e2:4d:4c:8b:
                    ce:85:5d:0b:5c:14:0b:3c:80:d9:e9:e8:30:fc:c7:
                    a6:c8:d4:4f:eb:05:af:66:78:d9:e1:db:4e:ec:eb:
                    32:14:e9:e8:fa:65:83:6f:ab:66:cf:7d:28:21:4e:
                    d5:b6:bd:36:c5:e7:9d:2e:51:0c:87:dd:e8:1a:eb:
                    a2:3c:e4:53:00:63:92:81:fe:70:9b:cb:04:70:c0:
                    41:df:c6:55:c4:0d:c0:8a:02:78:c4:58:25:1b:23:
                    d4:48:46:5b:d6:37:98:08:76:e2:1f:3f:e4:13:ed:
                    f3:e7:11:12:b0:0d:73:c7:f5:1d:b7:8b:1c:f0:ac:
                    4d:2b:7d:a7:2f:ed:12:41:45:8b:c8:e2:54:a7:dd:
                    3a:e1:d4:d6:ed:1c:fc:7e:0e:70:0a:5e:13:80:43:
                    ff:03:d9:ca:60:1c:71:87:f5:4b:98:69:a7:d9:d4:
                    68:13:8a:b6:73:ea:74:73:5b:13:bc:98:f8:e1:82:
                    58:aa:91:40:c3:d1:d2:c8:a2:22:e9:7d:26:53:b2:
                    56:e0:d2:fd:c7:f7:5b:0e:0c:ac:fb:2e:10:37:f7:
                    6f:33:0e:3f:6b:df:04:1c:61:68:55:72:f7:69:51:
                    10:cb:5e:ad:88:4b:64:57:ae:bf:13:d3:54:4c:e5:
                    fa:4b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                5E:BE:C6:C9:64:B8:0F:0A:6F:A9:27:17:0B:5D:E2:83:01:A0:E9:60
            X509v3 Authority Key Identifier:
                keyid:71:C1:EF:D5:DF:DE:20:41:8A:49:07:06:71:B0:1D:67:5F:9A:89:17

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repo-rpki.idnic.net/repo/05eab442-7480-4581-81dd-23a200614382/0/71C1EFD5DFDE20418A49070671B01D675F9A8917.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/71C1EFD5DFDE20418A49070671B01D675F9A8917.cer

            Subject Information Access:
                Signed Object - URI:rsync://repo-rpki.idnic.net/repo/05eab442-7480-4581-81dd-23a200614382/0/71C1EFD5DFDE20418A49070671B01D675F9A8917.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         c2:ba:aa:b7:5a:73:52:53:75:1e:9a:2f:74:ec:f9:1f:f2:37:
         08:e7:f5:01:37:cd:5c:00:a3:9d:d1:62:18:b3:19:fb:97:79:
         3f:b6:3e:72:59:96:04:d1:0c:3a:71:e4:89:2f:d4:5b:e6:ed:
         8f:78:05:2f:ab:2e:96:73:dc:95:16:f6:e7:c0:cb:32:f3:62:
         b1:db:c5:7b:19:74:5e:74:b7:53:4c:f8:ff:a7:c7:8d:28:d0:
         e6:9c:fd:13:ea:9e:d5:58:5b:c2:1e:be:2d:f6:9c:1d:02:ae:
         ba:ad:13:02:27:9e:5d:bc:62:1e:88:71:3c:b9:c3:d9:a7:b8:
         d7:9b:f4:35:c9:42:24:42:89:58:09:44:83:b6:b1:c8:09:d8:
         9b:40:9b:77:3d:c4:1e:d5:46:47:e2:50:d4:95:00:fb:36:a3:
         f2:01:80:56:a2:cc:c4:dc:bb:29:87:5d:8a:8b:0b:ab:75:3f:
         72:bc:8d:d3:82:f7:bd:d7:f3:73:a6:bc:89:2b:69:a5:c0:01:
         d1:24:3d:24:cf:f1:28:51:08:d2:ef:5f:95:08:95:d7:c8:5d:
         ae:da:a6:f9:ad:fa:d7:0e:36:3d:1c:09:3c:90:ba:3b:cc:09:
         b5:16:8c:cb:c4:3c:4b:1c:ed:c2:fa:20:c6:dc:b3:db:23:d0:
         67:64:31:c7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Feb 2 12:56:40 2026 by rpki-client