This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

$ rpki-client -vvf repo-rpki.idnic.net/repo/05eab442-7480-4581-81dd-23a200614382/0/71C1EFD5DFDE20418A49070671B01D675F9A8917.mft
File: 71C1EFD5DFDE20418A49070671B01D675F9A8917.mft (raw, json)
Hash identifier: r96Dij+K4qBE4vq7dXQW+HFBcUbMU3pW5OiM91K3OeQ=
Subject key identifier: 5E:BE:C6:C9:64:B8:0F:0A:6F:A9:27:17:0B:5D:E2:83:01:A0:E9:60
Authority key identifier: 71:C1:EF:D5:DF:DE:20:41:8A:49:07:06:71:B0:1D:67:5F:9A:89:17
Certificate issuer: /CN=71C1EFD5DFDE20418A49070671B01D675F9A8917
Certificate serial: 25D83C13475B1A8F77EF47D96C3A9763917F56F6
Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/71C1EFD5DFDE20418A49070671B01D675F9A8917.cer
Subject info access: rsync://repo-rpki.idnic.net/repo/05eab442-7480-4581-81dd-23a200614382/0/71C1EFD5DFDE20418A49070671B01D675F9A8917.mft
Manifest number: 02CB
Signing time: Sat 31 Jan 2026 08:41:49 +0000
Manifest this update: Sat 31 Jan 2026 08:36:49 +0000
Manifest next update: Tue 03 Feb 2026 20:19:49 +0000
Files and hashes: 1: 71C1EFD5DFDE20418A49070671B01D675F9A8917.crl (hash: FIraUo2FtQAucf0QFIHM/Taqf4IsQj2Yt3ofFYHkFBs=)
2: 3130332e3137392e3231362e302f32332d3234203d3e20313339343439.roa (hash: 5sf8re0mhnirNB/CVBjr3dugWUOEZnIAdNv5SsfjaIQ=)
Validation: OK
Signature path: rsync://repo-rpki.idnic.net/repo/05eab442-7480-4581-81dd-23a200614382/0/71C1EFD5DFDE20418A49070671B01D675F9A8917.crl
rsync://repo-rpki.idnic.net/repo/05eab442-7480-4581-81dd-23a200614382/0/71C1EFD5DFDE20418A49070671B01D675F9A8917.mft
rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/71C1EFD5DFDE20418A49070671B01D675F9A8917.cer
rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl
rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Tue 03 Feb 2026 20:19:49 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
25:d8:3c:13:47:5b:1a:8f:77:ef:47:d9:6c:3a:97:63:91:7f:56:f6
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=71C1EFD5DFDE20418A49070671B01D675F9A8917
Validity
Not Before: Jan 31 08:36:49 2026 GMT
Not After : Feb 3 20:19:49 2026 GMT
Subject: CN=5EBEC6C964B80F0A6FA927170B5DE28301A0E960
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c5:07:f5:03:a9:b3:a6:a7:24:5c:e2:4d:4c:8b:
ce:85:5d:0b:5c:14:0b:3c:80:d9:e9:e8:30:fc:c7:
a6:c8:d4:4f:eb:05:af:66:78:d9:e1:db:4e:ec:eb:
32:14:e9:e8:fa:65:83:6f:ab:66:cf:7d:28:21:4e:
d5:b6:bd:36:c5:e7:9d:2e:51:0c:87:dd:e8:1a:eb:
a2:3c:e4:53:00:63:92:81:fe:70:9b:cb:04:70:c0:
41:df:c6:55:c4:0d:c0:8a:02:78:c4:58:25:1b:23:
d4:48:46:5b:d6:37:98:08:76:e2:1f:3f:e4:13:ed:
f3:e7:11:12:b0:0d:73:c7:f5:1d:b7:8b:1c:f0:ac:
4d:2b:7d:a7:2f:ed:12:41:45:8b:c8:e2:54:a7:dd:
3a:e1:d4:d6:ed:1c:fc:7e:0e:70:0a:5e:13:80:43:
ff:03:d9:ca:60:1c:71:87:f5:4b:98:69:a7:d9:d4:
68:13:8a:b6:73:ea:74:73:5b:13:bc:98:f8:e1:82:
58:aa:91:40:c3:d1:d2:c8:a2:22:e9:7d:26:53:b2:
56:e0:d2:fd:c7:f7:5b:0e:0c:ac:fb:2e:10:37:f7:
6f:33:0e:3f:6b:df:04:1c:61:68:55:72:f7:69:51:
10:cb:5e:ad:88:4b:64:57:ae:bf:13:d3:54:4c:e5:
fa:4b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
5E:BE:C6:C9:64:B8:0F:0A:6F:A9:27:17:0B:5D:E2:83:01:A0:E9:60
X509v3 Authority Key Identifier:
keyid:71:C1:EF:D5:DF:DE:20:41:8A:49:07:06:71:B0:1D:67:5F:9A:89:17
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://repo-rpki.idnic.net/repo/05eab442-7480-4581-81dd-23a200614382/0/71C1EFD5DFDE20418A49070671B01D675F9A8917.crl
Authority Information Access:
CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/71C1EFD5DFDE20418A49070671B01D675F9A8917.cer
Subject Information Access:
Signed Object - URI:rsync://repo-rpki.idnic.net/repo/05eab442-7480-4581-81dd-23a200614382/0/71C1EFD5DFDE20418A49070671B01D675F9A8917.mft
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
c2:ba:aa:b7:5a:73:52:53:75:1e:9a:2f:74:ec:f9:1f:f2:37:
08:e7:f5:01:37:cd:5c:00:a3:9d:d1:62:18:b3:19:fb:97:79:
3f:b6:3e:72:59:96:04:d1:0c:3a:71:e4:89:2f:d4:5b:e6:ed:
8f:78:05:2f:ab:2e:96:73:dc:95:16:f6:e7:c0:cb:32:f3:62:
b1:db:c5:7b:19:74:5e:74:b7:53:4c:f8:ff:a7:c7:8d:28:d0:
e6:9c:fd:13:ea:9e:d5:58:5b:c2:1e:be:2d:f6:9c:1d:02:ae:
ba:ad:13:02:27:9e:5d:bc:62:1e:88:71:3c:b9:c3:d9:a7:b8:
d7:9b:f4:35:c9:42:24:42:89:58:09:44:83:b6:b1:c8:09:d8:
9b:40:9b:77:3d:c4:1e:d5:46:47:e2:50:d4:95:00:fb:36:a3:
f2:01:80:56:a2:cc:c4:dc:bb:29:87:5d:8a:8b:0b:ab:75:3f:
72:bc:8d:d3:82:f7:bd:d7:f3:73:a6:bc:89:2b:69:a5:c0:01:
d1:24:3d:24:cf:f1:28:51:08:d2:ef:5f:95:08:95:d7:c8:5d:
ae:da:a6:f9:ad:fa:d7:0e:36:3d:1c:09:3c:90:ba:3b:cc:09:
b5:16:8c:cb:c4:3c:4b:1c:ed:c2:fa:20:c6:dc:b3:db:23:d0:
67:64:31:c7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Feb 2 12:56:40 2026 by rpki-client