This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf repo-rpki.idnic.net/repo/c1f7c25b-410b-482a-9436-221ab079d368/0/121FC37C40B5B0AFD8F88B57216FD43E29D11E1C.mft
File:                     121FC37C40B5B0AFD8F88B57216FD43E29D11E1C.mft (raw, json)
Hash identifier:          Toi1gqR/NHIIlQx77RO+KdwSSda/gg5eacXKZLE1/ck=
Subject key identifier:   E8:67:AB:E9:2B:F3:29:C1:53:58:52:ED:9D:15:12:C9:5B:D1:74:E3
Authority key identifier: 12:1F:C3:7C:40:B5:B0:AF:D8:F8:8B:57:21:6F:D4:3E:29:D1:1E:1C
Certificate issuer:       /CN=121FC37C40B5B0AFD8F88B57216FD43E29D11E1C
Certificate serial:       2CAE1D6C94539FE6FABEB51DD77D98C4511D94B0
Authority info access:    rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/121FC37C40B5B0AFD8F88B57216FD43E29D11E1C.cer
Subject info access:      rsync://repo-rpki.idnic.net/repo/c1f7c25b-410b-482a-9436-221ab079d368/0/121FC37C40B5B0AFD8F88B57216FD43E29D11E1C.mft
Manifest number:          0172
Signing time:             Sun 01 Feb 2026 04:50:57 +0000
Manifest this update:     Sun 01 Feb 2026 04:45:57 +0000
Manifest next update:     Wed 04 Feb 2026 14:19:57 +0000
Files and hashes:         1: 34352e3132362e34332e302f32342d3234203d3e20313531353932.roa (hash: ewEeaR7DMfnT3bww9hZJ32z3VJCiqclbtnfFQ/sT7f4=)
                          2: 3130332e35322e3231322e302f32342d3234203d3e20313531353932.roa (hash: 9JDBXYlD9SqW2BMyADf7uhmLucs+uFWH56a3wjHsOJc=)
                          3: 121FC37C40B5B0AFD8F88B57216FD43E29D11E1C.crl (hash: DWFJjY+xht5Vh7CUB6v1ycpi67Xq9TJmaCaRd7vmNeg=)
Validation:               OK
Signature path:           rsync://repo-rpki.idnic.net/repo/c1f7c25b-410b-482a-9436-221ab079d368/0/121FC37C40B5B0AFD8F88B57216FD43E29D11E1C.crl
                          rsync://repo-rpki.idnic.net/repo/c1f7c25b-410b-482a-9436-221ab079d368/0/121FC37C40B5B0AFD8F88B57216FD43E29D11E1C.mft
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/121FC37C40B5B0AFD8F88B57216FD43E29D11E1C.cer
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Wed 04 Feb 2026 14:19:57 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            2c:ae:1d:6c:94:53:9f:e6:fa:be:b5:1d:d7:7d:98:c4:51:1d:94:b0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=121FC37C40B5B0AFD8F88B57216FD43E29D11E1C
        Validity
            Not Before: Feb  1 04:45:57 2026 GMT
            Not After : Feb  4 14:19:57 2026 GMT
        Subject: CN=E867ABE92BF329C1535852ED9D1512C95BD174E3
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c0:7b:2b:de:eb:e8:78:7f:d4:ab:5e:e3:4f:70:
                    d6:e3:93:2e:71:47:30:e9:c8:e4:21:1f:ee:14:2d:
                    94:77:e9:cb:e7:a7:ad:83:d6:8e:41:67:c4:a4:25:
                    f2:6e:39:8d:0b:f4:4c:e4:c3:b6:13:9a:46:0f:60:
                    3d:69:29:5f:fa:69:cd:b9:1d:37:df:91:1d:18:fa:
                    76:bb:95:f1:39:53:df:ab:a6:36:aa:76:02:34:d0:
                    de:2f:af:1a:6c:e1:4e:13:3e:26:eb:b6:a0:47:b5:
                    84:cf:d7:14:56:69:41:cf:91:e2:f3:88:dc:f6:08:
                    34:97:65:b4:ef:79:08:45:48:97:19:79:d7:64:6b:
                    c2:6c:e8:17:41:80:89:e9:ae:09:32:6c:5a:35:91:
                    c1:bd:98:71:2d:fe:80:7b:6f:16:1d:80:18:d8:99:
                    e5:2d:e3:2e:b8:35:ea:9b:80:46:ed:42:b0:3b:14:
                    42:8a:0f:fa:6e:d4:2a:fc:42:49:ab:93:84:96:11:
                    c8:ac:d0:76:f7:64:cc:c9:3b:f7:95:9c:26:47:24:
                    fe:a9:fa:9a:07:53:a7:ea:af:74:3e:16:3c:01:0a:
                    4d:36:6c:75:58:27:83:1c:9f:1e:93:48:44:18:f1:
                    ad:3b:da:18:a4:84:35:b3:24:ec:10:63:24:7c:1a:
                    21:0f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E8:67:AB:E9:2B:F3:29:C1:53:58:52:ED:9D:15:12:C9:5B:D1:74:E3
            X509v3 Authority Key Identifier:
                keyid:12:1F:C3:7C:40:B5:B0:AF:D8:F8:8B:57:21:6F:D4:3E:29:D1:1E:1C

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repo-rpki.idnic.net/repo/c1f7c25b-410b-482a-9436-221ab079d368/0/121FC37C40B5B0AFD8F88B57216FD43E29D11E1C.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/121FC37C40B5B0AFD8F88B57216FD43E29D11E1C.cer

            Subject Information Access:
                Signed Object - URI:rsync://repo-rpki.idnic.net/repo/c1f7c25b-410b-482a-9436-221ab079d368/0/121FC37C40B5B0AFD8F88B57216FD43E29D11E1C.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         6e:57:7c:67:7c:fa:73:86:3c:bf:f1:bc:22:ca:03:b7:e4:18:
         6c:44:6f:67:c2:51:7b:8a:99:44:3d:7a:d9:71:57:77:4c:8e:
         b5:83:69:fa:8d:ba:4e:08:4f:3b:e3:53:c1:d6:bd:5d:d5:e4:
         07:32:8d:a8:82:bd:97:9a:60:28:e2:7a:fc:e3:eb:31:63:0a:
         b6:44:58:c3:73:c1:f7:f1:6a:e3:8b:71:46:6c:8a:7d:3d:64:
         e7:62:91:2f:ac:02:47:51:b6:b6:3d:ce:5a:ef:ba:15:74:df:
         52:f8:9a:c8:38:c1:41:9c:ae:de:86:59:5e:fe:c3:64:79:16:
         17:8f:58:42:a0:35:18:63:9d:bd:88:87:ff:51:74:f1:02:05:
         ac:ee:77:ee:58:61:fe:1a:38:fd:63:1a:3a:e3:1a:71:f1:80:
         7f:c8:26:27:1e:25:71:6c:a3:9d:6f:b5:41:25:4c:23:a7:d9:
         df:2e:f2:a7:88:d8:7a:bd:f0:67:5c:d9:40:a9:4c:e7:04:26:
         1e:bd:67:fa:2c:92:7a:c8:30:86:9a:23:ff:91:36:a0:1f:ce:
         19:d8:8f:14:c7:69:98:9e:d7:d4:4a:d7:0e:41:2b:20:d7:4e:
         56:d1:05:c5:c3:c8:92:e0:15:d0:54:11:7c:5d:a3:49:24:4d:
         3e:d5:47:54
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Feb 2 12:50:39 2026 by rpki-client