This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf repo-rpki.idnic.net/repo/11828067-e7c1-4964-8428-599033d74296/0/12A8210E6A91A93DDB92F594D7E47728131BC2DA.mft
File:                     12A8210E6A91A93DDB92F594D7E47728131BC2DA.mft (raw, json)
Hash identifier:          kCeYQKtdZZ54XHwNXRa7RiUGdJeMBRj9kSO2q+NQprs=
Subject key identifier:   63:6E:71:01:E9:3C:2E:29:6E:3A:E2:A9:57:A7:F5:71:5A:AF:5E:2C
Authority key identifier: 12:A8:21:0E:6A:91:A9:3D:DB:92:F5:94:D7:E4:77:28:13:1B:C2:DA
Certificate issuer:       /CN=12A8210E6A91A93DDB92F594D7E47728131BC2DA
Certificate serial:       53BD240328A1D8D60A1DF9179EBF1067AF0E803B
Authority info access:    rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/12A8210E6A91A93DDB92F594D7E47728131BC2DA.cer
Subject info access:      rsync://repo-rpki.idnic.net/repo/11828067-e7c1-4964-8428-599033d74296/0/12A8210E6A91A93DDB92F594D7E47728131BC2DA.mft
Manifest number:          012C
Signing time:             Sun 25 Jan 2026 03:51:59 +0000
Manifest this update:     Sun 25 Jan 2026 03:46:59 +0000
Manifest next update:     Wed 28 Jan 2026 07:39:59 +0000
Files and hashes:         1: 34352e3132332e3134332e302f32342d3234203d3e20343532303233.roa (hash: yFHqmwqtGwRHNbaKxqLyAMp6goM/26DKgEUgRO5CpWs=)
                          2: 12A8210E6A91A93DDB92F594D7E47728131BC2DA.crl (hash: sSlwLVNtfIIQ32HrBeHQj9WgbuXpUkA6WoZT8Mxn1Ao=)
Validation:               OK
Signature path:           rsync://repo-rpki.idnic.net/repo/11828067-e7c1-4964-8428-599033d74296/0/12A8210E6A91A93DDB92F594D7E47728131BC2DA.crl
                          rsync://repo-rpki.idnic.net/repo/11828067-e7c1-4964-8428-599033d74296/0/12A8210E6A91A93DDB92F594D7E47728131BC2DA.mft
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/12A8210E6A91A93DDB92F594D7E47728131BC2DA.cer
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Wed 28 Jan 2026 07:39:59 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            53:bd:24:03:28:a1:d8:d6:0a:1d:f9:17:9e:bf:10:67:af:0e:80:3b
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=12A8210E6A91A93DDB92F594D7E47728131BC2DA
        Validity
            Not Before: Jan 25 03:46:59 2026 GMT
            Not After : Jan 28 07:39:59 2026 GMT
        Subject: CN=636E7101E93C2E296E3AE2A957A7F5715AAF5E2C
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:98:b8:de:f6:d3:20:77:d9:ff:6c:71:d7:71:27:
                    0d:f6:e7:18:d9:fe:8d:ef:0a:6e:39:63:c0:d3:ad:
                    d5:3e:51:db:a9:db:a1:31:f8:fd:4b:c1:51:8d:3d:
                    6b:ed:ea:ae:b0:26:1b:4b:23:c9:24:86:ee:0d:ca:
                    d7:a0:6d:76:83:59:ac:0f:8a:b4:2b:e1:3a:51:02:
                    42:90:0e:f9:9e:86:a6:c4:37:91:ab:1c:1c:fc:91:
                    22:fd:5f:61:ae:17:35:42:d0:7c:a5:84:9e:06:1e:
                    eb:96:2a:49:1e:a2:1e:4a:4c:45:f7:26:74:53:65:
                    68:28:19:4e:c3:f8:a2:72:c8:b9:c2:7c:d7:ca:c3:
                    af:b7:d8:ec:8d:74:8c:79:13:f1:b7:9c:a0:ae:ee:
                    8e:35:b3:50:6b:1f:99:a3:c8:a1:ff:ef:70:22:6c:
                    6a:3d:d8:63:ea:f9:9d:34:25:0b:f8:d9:ee:f4:d1:
                    1c:3c:d1:cd:07:13:a0:20:66:2a:e5:ba:1b:64:24:
                    c2:a1:c4:ac:c6:92:a0:fe:79:f8:5a:3a:4d:d8:f3:
                    7e:cf:57:d8:41:60:bd:5a:17:07:4b:30:58:d8:79:
                    90:e7:76:dc:c3:a4:93:44:52:66:ac:39:a8:8d:49:
                    bf:b9:96:ae:b3:86:e6:54:9f:5b:e8:b3:3f:45:3e:
                    6b:1f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                63:6E:71:01:E9:3C:2E:29:6E:3A:E2:A9:57:A7:F5:71:5A:AF:5E:2C
            X509v3 Authority Key Identifier:
                keyid:12:A8:21:0E:6A:91:A9:3D:DB:92:F5:94:D7:E4:77:28:13:1B:C2:DA

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repo-rpki.idnic.net/repo/11828067-e7c1-4964-8428-599033d74296/0/12A8210E6A91A93DDB92F594D7E47728131BC2DA.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/12A8210E6A91A93DDB92F594D7E47728131BC2DA.cer

            Subject Information Access:
                Signed Object - URI:rsync://repo-rpki.idnic.net/repo/11828067-e7c1-4964-8428-599033d74296/0/12A8210E6A91A93DDB92F594D7E47728131BC2DA.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         89:e3:3e:12:2f:0b:6e:b6:0d:ed:60:50:5c:02:33:26:6d:ff:
         18:e4:3e:ad:0c:bd:71:94:cc:48:a4:04:a2:66:e0:d9:4c:17:
         8b:e6:85:4b:94:04:e6:7d:62:49:35:19:f0:ba:a8:c2:c8:e2:
         b9:d1:46:35:41:cb:e1:ac:63:39:30:f5:37:ae:25:85:54:d9:
         d3:83:a3:2f:56:26:6f:5e:66:a3:9b:59:b5:02:9a:4d:82:38:
         71:89:97:42:32:9b:b9:fb:93:83:cc:a2:94:2b:91:a8:76:87:
         1e:2f:44:c8:e5:9f:78:66:c2:c7:98:18:05:91:2e:6e:20:d1:
         48:96:cb:66:8b:ee:a6:78:e3:63:31:9b:ba:f4:f6:75:93:ce:
         f5:17:4a:4a:64:09:33:68:e7:e4:b8:33:32:fe:ef:e4:79:30:
         8c:58:c6:ed:d3:a5:6c:2b:ef:99:ad:b1:df:6f:e5:39:5d:46:
         fe:86:ac:5b:9f:e3:26:78:a9:37:bc:22:98:cb:a8:d3:77:f8:
         81:7f:c5:dc:95:77:c0:e3:2f:49:9e:b4:06:f0:aa:bb:31:f1:
         92:ec:53:3b:dd:4a:0a:92:60:6a:0c:72:6b:2b:c3:40:b1:c5:
         58:9d:0f:c1:8c:85:d3:54:fd:23:09:bb:7b:51:bf:11:85:0f:
         56:4e:88:bc
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jan 25 18:57:29 2026 by rpki-client