This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf repo-rpki.idnic.net/repo/a5deca82-89ab-4582-8e82-8ec8a51fec42/0/71876CD3DD087E9543A347F614A4D24A87A40F95.mft File: 71876CD3DD087E9543A347F614A4D24A87A40F95.mft (raw, json) Hash identifier: 3U5P0RxW906HzmxhzZ+DimDkwhI5tvYkyN5lwp8+iVA= Subject key identifier: 7F:0A:95:8D:90:5B:3A:7B:AE:94:A4:D1:52:D5:65:E3:A6:AC:70:8C Authority key identifier: 71:87:6C:D3:DD:08:7E:95:43:A3:47:F6:14:A4:D2:4A:87:A4:0F:95 Certificate issuer: /CN=71876CD3DD087E9543A347F614A4D24A87A40F95 Certificate serial: 2C22EB9F6E32126C68115318A15FB6FD6DBF58F9 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/71876CD3DD087E9543A347F614A4D24A87A40F95.cer Subject info access: rsync://repo-rpki.idnic.net/repo/a5deca82-89ab-4582-8e82-8ec8a51fec42/0/71876CD3DD087E9543A347F614A4D24A87A40F95.mft Manifest number: 01F2 Signing time: Sun 01 Feb 2026 15:50:49 +0000 Manifest this update: Sun 01 Feb 2026 15:45:49 +0000 Manifest next update: Wed 04 Feb 2026 23:55:49 +0000 Files and hashes: 1: 3130332e3135382e3133302e302f32342d3234203d3e20313431313238.roa (hash: InJPaa/K/Tdw95KsetWVBO6eC2FHgWnfV4A1F9baTg0=) 2: 71876CD3DD087E9543A347F614A4D24A87A40F95.crl (hash: Up0nAtd3GliuzitfGPxXnticES3NeDE8KmdtA8tQ9T8=) 3: 3130332e3130372e3230362e302f32342d3234203d3e20313431313238.roa (hash: o+ObFNPOeoy9QHMr9JkuLi0Oplv3Nwb5WNwb7QDMg90=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/a5deca82-89ab-4582-8e82-8ec8a51fec42/0/71876CD3DD087E9543A347F614A4D24A87A40F95.crl rsync://repo-rpki.idnic.net/repo/a5deca82-89ab-4582-8e82-8ec8a51fec42/0/71876CD3DD087E9543A347F614A4D24A87A40F95.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/71876CD3DD087E9543A347F614A4D24A87A40F95.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 04 Feb 2026 23:55:49 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2c:22:eb:9f:6e:32:12:6c:68:11:53:18:a1:5f:b6:fd:6d:bf:58:f9 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=71876CD3DD087E9543A347F614A4D24A87A40F95 Validity Not Before: Feb 1 15:45:49 2026 GMT Not After : Feb 4 23:55:49 2026 GMT Subject: CN=7F0A958D905B3A7BAE94A4D152D565E3A6AC708C Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c6:ff:0e:5f:54:97:49:f9:1a:9f:22:71:d1:7b: 2e:d4:10:2e:ad:46:15:f9:65:88:b6:45:11:5b:ad: 37:54:65:69:9d:95:82:58:92:83:64:e5:f6:53:b9: 12:54:54:5f:2a:11:69:1c:93:3a:40:83:cc:7c:1c: a1:71:91:d0:8e:10:fd:a2:f9:44:03:89:59:77:75: 74:c5:e0:e8:9d:44:01:db:f1:a3:27:13:f2:28:34: 3a:c4:9c:31:f8:11:8d:0d:36:30:42:a4:f5:16:69: 7e:62:70:4d:e9:91:50:25:4c:06:35:dc:68:81:67: e8:d2:71:c3:8c:28:c7:b3:ed:7b:bb:99:d9:71:d0: f9:67:ca:d5:f5:8f:81:72:fc:b8:29:c7:e3:af:75: af:e4:00:0a:08:90:0a:f1:5e:a7:b7:48:6f:07:64: 17:77:14:aa:98:7c:99:24:04:b3:fb:8c:57:be:39: 6d:9d:7c:83:92:82:82:7f:b5:b4:25:11:d1:65:03: 9d:c0:4a:58:92:02:51:0b:c9:40:ec:ea:b8:20:8e: 8f:67:bf:42:a7:41:ea:ec:ca:72:c5:cb:06:4c:8e: 8c:d2:ef:d1:c6:f3:13:06:83:a3:6a:27:c0:e0:0e: de:48:56:f2:26:12:68:f9:4a:dd:8d:38:5f:9e:0a: fd:0f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 7F:0A:95:8D:90:5B:3A:7B:AE:94:A4:D1:52:D5:65:E3:A6:AC:70:8C X509v3 Authority Key Identifier: keyid:71:87:6C:D3:DD:08:7E:95:43:A3:47:F6:14:A4:D2:4A:87:A4:0F:95 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/a5deca82-89ab-4582-8e82-8ec8a51fec42/0/71876CD3DD087E9543A347F614A4D24A87A40F95.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/71876CD3DD087E9543A347F614A4D24A87A40F95.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/a5deca82-89ab-4582-8e82-8ec8a51fec42/0/71876CD3DD087E9543A347F614A4D24A87A40F95.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 08:8f:5e:72:cb:02:e2:e5:46:f0:2b:37:6e:aa:bb:24:69:b0: f3:ee:39:2e:4e:bf:ac:5f:3b:51:84:86:b6:1d:18:09:f9:a4: b7:e4:15:d7:ff:0c:d6:4f:3b:da:ec:16:9f:bb:6d:72:cd:01: 18:b5:00:fe:93:d5:75:fe:8f:50:f4:38:27:60:dc:55:32:22: 87:48:71:ae:c6:74:c8:24:29:5f:fe:2a:fa:e7:28:7b:85:f5: 7d:2d:30:dc:c3:0b:01:2a:7e:21:55:c0:16:58:dc:54:91:68: 4c:30:2b:12:c4:b7:50:e0:9f:c4:26:ed:ac:ef:4f:0c:2e:63: 2f:24:cd:07:0b:b5:e6:6e:9f:2a:8a:59:93:b2:b1:fd:2d:52: ed:5e:35:5b:db:db:98:06:f9:c9:cb:30:3e:9a:7e:c2:1a:c9: 00:7a:ff:03:4b:00:e5:bb:2c:a9:68:f9:e7:08:33:2f:c8:60: c6:73:27:85:f2:6e:86:e4:92:49:e4:85:25:60:5d:4c:47:b1: fc:1b:91:fa:b2:8d:08:25:79:dc:28:6f:a0:2c:62:67:82:da: e5:44:57:69:27:c9:1f:87:18:54:c1:61:de:a8:f9:0b:d2:8f: 1a:26:43:c5:58:e4:3d:64:4f:7a:0d:89:33:9f:a7:3f:1a:38: f4:cc:b5:f3 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIULCLrn24yEmxoEVMYoV+2/W2/WPkwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoNzE4NzZDRDNERDA4N0U5NTQzQTM0N0Y2MTRBNEQyNEE4 N0E0MEY5NTAeFw0yNjAyMDExNTQ1NDlaFw0yNjAyMDQyMzU1NDlaMDMxMTAvBgNV BAMTKDdGMEE5NThEOTA1QjNBN0JBRTk0QTREMTUyRDU2NUUzQTZBQzcwOEMwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDG/w5fVJdJ+RqfInHRey7UEC6t RhX5ZYi2RRFbrTdUZWmdlYJYkoNk5fZTuRJUVF8qEWkckzpAg8x8HKFxkdCOEP2i +UQDiVl3dXTF4OidRAHb8aMnE/IoNDrEnDH4EY0NNjBCpPUWaX5icE3pkVAlTAY1 3GiBZ+jSccOMKMez7Xu7mdlx0PlnytX1j4Fy/Lgpx+Ovda/kAAoIkArxXqe3SG8H ZBd3FKqYfJkkBLP7jFe+OW2dfIOSgoJ/tbQlEdFlA53ASliSAlELyUDs6rggjo9n v0KnQersynLFywZMjozS79HG8xMGg6NqJ8DgDt5IVvImEmj5St2NOF+eCv0PAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUfwqVjZBbOnuulKTRUtVl46ascIwwHwYDVR0j BBgwFoAUcYds090IfpVDo0f2FKTSSoekD5UwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby9h NWRlY2E4Mi04OWFiLTQ1ODItOGU4Mi04ZWM4YTUxZmVjNDIvMC83MTg3NkNEM0RE MDg3RTk1NDNBMzQ3RjYxNEE0RDI0QTg3QTQwRjk1LmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvNzE4NzZDRDNERDA4N0U5NTQzQTM0N0Y2MTRBNEQyNEE4N0E0 MEY5NS5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vYTVkZWNhODItODlhYi00NTgyLThl ODItOGVjOGE1MWZlYzQyLzAvNzE4NzZDRDNERDA4N0U5NTQzQTM0N0Y2MTRBNEQy NEE4N0E0MEY5NS5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAAiPXnLLAuLlRvArN26quyRpsPPuOS5Ov6xf O1GEhrYdGAn5pLfkFdf/DNZPO9rsFp+7bXLNARi1AP6T1XX+j1D0OCdg3FUyIodI ca7GdMgkKV/+KvrnKHuF9X0tMNzDCwEqfiFVwBZY3FSRaEwwKxLEt1Dgn8Qm7azv TwwuYy8kzQcLteZunyqKWZOysf0tUu1eNVvb25gG+cnLMD6afsIayQB6/wNLAOW7 LKlo+ecIMy/IYMZzJ4XybobkkknkhSVgXUxHsfwbkfqyjQgledwob6AsYmeC2uVE V2knyR+HGFTBYd6o+QvSjxomQ8VY5D1kT3oNiTOfpz8aOPTMtfM= -----END CERTIFICATE-----Generated at Mon Feb 2 10:02:55 2026 by rpki-client