This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf repo-rpki.idnic.net/repo/dd48bd04-f787-414a-a501-5138a6d6b3e1/0/71E51A9B65D8A123513A350F0D99F98D6C9B72E2.mft
File:                     71E51A9B65D8A123513A350F0D99F98D6C9B72E2.mft (raw, json)
Hash identifier:          rOv/m7PlA311J8IQDGUxFdSyD0trPkV2Cnf0JeAM4I8=
Subject key identifier:   E4:DE:87:9D:5C:A2:AA:E9:A9:38:39:F9:65:95:23:72:01:DD:27:83
Authority key identifier: 71:E5:1A:9B:65:D8:A1:23:51:3A:35:0F:0D:99:F9:8D:6C:9B:72:E2
Certificate issuer:       /CN=71E51A9B65D8A123513A350F0D99F98D6C9B72E2
Certificate serial:       37F920AF0643FF2BA315BEA63281E2394DA225C0
Authority info access:    rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/71E51A9B65D8A123513A350F0D99F98D6C9B72E2.cer
Subject info access:      rsync://repo-rpki.idnic.net/repo/dd48bd04-f787-414a-a501-5138a6d6b3e1/0/71E51A9B65D8A123513A350F0D99F98D6C9B72E2.mft
Manifest number:          0402
Signing time:             Sun 01 Feb 2026 13:11:16 +0000
Manifest this update:     Sun 01 Feb 2026 13:06:16 +0000
Manifest next update:     Wed 04 Feb 2026 16:56:16 +0000
Files and hashes:         1: 3130332e3130372e3138372e302f32342d3234203d3e20313337333030.roa (hash: qbGMe4OJOUlVBBlNS/T+BUhcFyXomn3ouFjeMKM/9vg=)
                          2: 71E51A9B65D8A123513A350F0D99F98D6C9B72E2.crl (hash: IQwZgn0t+dvwGhqjse7Tnk/R03x4r4xsB78TB5gFm94=)
Validation:               OK
Signature path:           rsync://repo-rpki.idnic.net/repo/dd48bd04-f787-414a-a501-5138a6d6b3e1/0/71E51A9B65D8A123513A350F0D99F98D6C9B72E2.crl
                          rsync://repo-rpki.idnic.net/repo/dd48bd04-f787-414a-a501-5138a6d6b3e1/0/71E51A9B65D8A123513A350F0D99F98D6C9B72E2.mft
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/71E51A9B65D8A123513A350F0D99F98D6C9B72E2.cer
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Wed 04 Feb 2026 16:56:16 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            37:f9:20:af:06:43:ff:2b:a3:15:be:a6:32:81:e2:39:4d:a2:25:c0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=71E51A9B65D8A123513A350F0D99F98D6C9B72E2
        Validity
            Not Before: Feb  1 13:06:16 2026 GMT
            Not After : Feb  4 16:56:16 2026 GMT
        Subject: CN=E4DE879D5CA2AAE9A93839F96595237201DD2783
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:fa:0a:85:22:89:00:57:9b:f2:28:0f:42:cb:ad:
                    ef:61:e8:2c:4a:11:69:58:31:d0:1d:04:c0:60:f0:
                    62:f2:3f:5d:53:d2:55:d4:16:11:92:b4:a8:4e:38:
                    71:2f:1d:66:81:1d:e5:0a:a6:f5:44:f8:57:01:66:
                    bc:1b:5f:d8:ba:1d:2d:eb:21:32:54:f5:95:7e:5f:
                    5f:de:d5:10:20:46:84:20:9d:ab:7f:be:a3:00:c5:
                    a1:cb:a7:9f:21:26:27:a2:20:c4:3b:dd:01:64:e0:
                    3f:6d:6a:5c:a5:65:a6:86:20:a8:1b:db:40:74:cf:
                    77:21:f6:a0:95:a5:66:68:b3:bc:26:93:88:9e:93:
                    13:06:f8:65:69:45:5f:b3:28:8e:9a:30:41:89:96:
                    f6:8e:47:8e:88:28:00:90:58:2b:71:16:fb:bb:17:
                    2a:e6:aa:5c:ba:71:04:2e:53:aa:96:2a:8e:c8:0d:
                    73:e0:8f:c7:99:dd:8e:cc:8e:54:21:0a:fd:a9:a5:
                    a1:ec:07:cc:85:f1:70:9d:5e:ec:24:90:7b:e9:a0:
                    b8:e6:9b:e5:67:ef:34:cb:48:be:3d:61:55:e2:d8:
                    01:65:55:b2:de:8d:84:dd:0b:8c:ef:03:d7:7c:db:
                    d8:21:15:d3:5f:c9:be:d0:9e:04:69:fd:ea:a9:68:
                    e4:b3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E4:DE:87:9D:5C:A2:AA:E9:A9:38:39:F9:65:95:23:72:01:DD:27:83
            X509v3 Authority Key Identifier:
                keyid:71:E5:1A:9B:65:D8:A1:23:51:3A:35:0F:0D:99:F9:8D:6C:9B:72:E2

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repo-rpki.idnic.net/repo/dd48bd04-f787-414a-a501-5138a6d6b3e1/0/71E51A9B65D8A123513A350F0D99F98D6C9B72E2.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/71E51A9B65D8A123513A350F0D99F98D6C9B72E2.cer

            Subject Information Access:
                Signed Object - URI:rsync://repo-rpki.idnic.net/repo/dd48bd04-f787-414a-a501-5138a6d6b3e1/0/71E51A9B65D8A123513A350F0D99F98D6C9B72E2.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         9f:63:71:39:59:44:a3:de:4a:c8:b6:ba:85:d0:21:37:5c:8b:
         59:04:00:90:eb:1f:c8:9a:a4:7f:00:5a:44:39:33:48:b2:19:
         ab:88:dd:88:fc:cf:35:dc:2d:ae:e1:65:e7:e0:d8:0e:05:03:
         c0:82:09:2d:31:99:7e:a8:f5:7a:34:b4:fd:75:bd:ff:0e:f2:
         03:0a:b9:f3:09:3d:f4:5f:b4:9e:5f:f6:1c:93:7b:81:25:9d:
         90:74:87:f7:aa:fa:25:c5:4b:dc:eb:c1:ed:61:6d:28:62:c1:
         ed:c2:fe:8f:e2:da:6a:09:a0:ac:2c:e8:aa:22:ee:cc:69:78:
         e5:bd:6c:91:0f:96:4c:d6:17:90:bd:62:f9:1e:c9:ae:7f:61:
         4a:2e:27:da:a4:64:fb:38:06:89:17:be:49:b5:c7:a9:e4:a1:
         1f:d3:46:b2:78:66:d8:98:b1:74:00:23:73:d9:fe:af:ec:e9:
         38:ba:f6:01:b0:fc:b5:7d:83:e6:f4:28:31:ee:70:5f:e2:64:
         99:5f:e2:e4:d5:bf:4c:aa:76:9f:3c:5e:7d:8c:4d:4c:74:17:
         4f:45:9c:2c:5c:74:b9:ea:89:56:ef:64:94:97:6b:bf:4f:15:
         5d:0b:d5:b9:63:5c:2b:c2:bc:0f:e7:b6:ff:07:fe:1d:a1:84:
         25:e0:a8:56
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Feb 2 10:06:34 2026 by rpki-client