This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

$ rpki-client -vvf repo-rpki.idnic.net/repo/dd48bd04-f787-414a-a501-5138a6d6b3e1/0/71E51A9B65D8A123513A350F0D99F98D6C9B72E2.mft
File: 71E51A9B65D8A123513A350F0D99F98D6C9B72E2.mft (raw, json)
Hash identifier: rOv/m7PlA311J8IQDGUxFdSyD0trPkV2Cnf0JeAM4I8=
Subject key identifier: E4:DE:87:9D:5C:A2:AA:E9:A9:38:39:F9:65:95:23:72:01:DD:27:83
Authority key identifier: 71:E5:1A:9B:65:D8:A1:23:51:3A:35:0F:0D:99:F9:8D:6C:9B:72:E2
Certificate issuer: /CN=71E51A9B65D8A123513A350F0D99F98D6C9B72E2
Certificate serial: 37F920AF0643FF2BA315BEA63281E2394DA225C0
Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/71E51A9B65D8A123513A350F0D99F98D6C9B72E2.cer
Subject info access: rsync://repo-rpki.idnic.net/repo/dd48bd04-f787-414a-a501-5138a6d6b3e1/0/71E51A9B65D8A123513A350F0D99F98D6C9B72E2.mft
Manifest number: 0402
Signing time: Sun 01 Feb 2026 13:11:16 +0000
Manifest this update: Sun 01 Feb 2026 13:06:16 +0000
Manifest next update: Wed 04 Feb 2026 16:56:16 +0000
Files and hashes: 1: 3130332e3130372e3138372e302f32342d3234203d3e20313337333030.roa (hash: qbGMe4OJOUlVBBlNS/T+BUhcFyXomn3ouFjeMKM/9vg=)
2: 71E51A9B65D8A123513A350F0D99F98D6C9B72E2.crl (hash: IQwZgn0t+dvwGhqjse7Tnk/R03x4r4xsB78TB5gFm94=)
Validation: OK
Signature path: rsync://repo-rpki.idnic.net/repo/dd48bd04-f787-414a-a501-5138a6d6b3e1/0/71E51A9B65D8A123513A350F0D99F98D6C9B72E2.crl
rsync://repo-rpki.idnic.net/repo/dd48bd04-f787-414a-a501-5138a6d6b3e1/0/71E51A9B65D8A123513A350F0D99F98D6C9B72E2.mft
rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/71E51A9B65D8A123513A350F0D99F98D6C9B72E2.cer
rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl
rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Wed 04 Feb 2026 16:56:16 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
37:f9:20:af:06:43:ff:2b:a3:15:be:a6:32:81:e2:39:4d:a2:25:c0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=71E51A9B65D8A123513A350F0D99F98D6C9B72E2
Validity
Not Before: Feb 1 13:06:16 2026 GMT
Not After : Feb 4 16:56:16 2026 GMT
Subject: CN=E4DE879D5CA2AAE9A93839F96595237201DD2783
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:fa:0a:85:22:89:00:57:9b:f2:28:0f:42:cb:ad:
ef:61:e8:2c:4a:11:69:58:31:d0:1d:04:c0:60:f0:
62:f2:3f:5d:53:d2:55:d4:16:11:92:b4:a8:4e:38:
71:2f:1d:66:81:1d:e5:0a:a6:f5:44:f8:57:01:66:
bc:1b:5f:d8:ba:1d:2d:eb:21:32:54:f5:95:7e:5f:
5f:de:d5:10:20:46:84:20:9d:ab:7f:be:a3:00:c5:
a1:cb:a7:9f:21:26:27:a2:20:c4:3b:dd:01:64:e0:
3f:6d:6a:5c:a5:65:a6:86:20:a8:1b:db:40:74:cf:
77:21:f6:a0:95:a5:66:68:b3:bc:26:93:88:9e:93:
13:06:f8:65:69:45:5f:b3:28:8e:9a:30:41:89:96:
f6:8e:47:8e:88:28:00:90:58:2b:71:16:fb:bb:17:
2a:e6:aa:5c:ba:71:04:2e:53:aa:96:2a:8e:c8:0d:
73:e0:8f:c7:99:dd:8e:cc:8e:54:21:0a:fd:a9:a5:
a1:ec:07:cc:85:f1:70:9d:5e:ec:24:90:7b:e9:a0:
b8:e6:9b:e5:67:ef:34:cb:48:be:3d:61:55:e2:d8:
01:65:55:b2:de:8d:84:dd:0b:8c:ef:03:d7:7c:db:
d8:21:15:d3:5f:c9:be:d0:9e:04:69:fd:ea:a9:68:
e4:b3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E4:DE:87:9D:5C:A2:AA:E9:A9:38:39:F9:65:95:23:72:01:DD:27:83
X509v3 Authority Key Identifier:
keyid:71:E5:1A:9B:65:D8:A1:23:51:3A:35:0F:0D:99:F9:8D:6C:9B:72:E2
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://repo-rpki.idnic.net/repo/dd48bd04-f787-414a-a501-5138a6d6b3e1/0/71E51A9B65D8A123513A350F0D99F98D6C9B72E2.crl
Authority Information Access:
CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/71E51A9B65D8A123513A350F0D99F98D6C9B72E2.cer
Subject Information Access:
Signed Object - URI:rsync://repo-rpki.idnic.net/repo/dd48bd04-f787-414a-a501-5138a6d6b3e1/0/71E51A9B65D8A123513A350F0D99F98D6C9B72E2.mft
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
9f:63:71:39:59:44:a3:de:4a:c8:b6:ba:85:d0:21:37:5c:8b:
59:04:00:90:eb:1f:c8:9a:a4:7f:00:5a:44:39:33:48:b2:19:
ab:88:dd:88:fc:cf:35:dc:2d:ae:e1:65:e7:e0:d8:0e:05:03:
c0:82:09:2d:31:99:7e:a8:f5:7a:34:b4:fd:75:bd:ff:0e:f2:
03:0a:b9:f3:09:3d:f4:5f:b4:9e:5f:f6:1c:93:7b:81:25:9d:
90:74:87:f7:aa:fa:25:c5:4b:dc:eb:c1:ed:61:6d:28:62:c1:
ed:c2:fe:8f:e2:da:6a:09:a0:ac:2c:e8:aa:22:ee:cc:69:78:
e5:bd:6c:91:0f:96:4c:d6:17:90:bd:62:f9:1e:c9:ae:7f:61:
4a:2e:27:da:a4:64:fb:38:06:89:17:be:49:b5:c7:a9:e4:a1:
1f:d3:46:b2:78:66:d8:98:b1:74:00:23:73:d9:fe:af:ec:e9:
38:ba:f6:01:b0:fc:b5:7d:83:e6:f4:28:31:ee:70:5f:e2:64:
99:5f:e2:e4:d5:bf:4c:aa:76:9f:3c:5e:7d:8c:4d:4c:74:17:
4f:45:9c:2c:5c:74:b9:ea:89:56:ef:64:94:97:6b:bf:4f:15:
5d:0b:d5:b9:63:5c:2b:c2:bc:0f:e7:b6:ff:07:fe:1d:a1:84:
25:e0:a8:56
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Feb 2 10:06:34 2026 by rpki-client