This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf repo-rpki.idnic.net/repo/5c219259-ed1a-4d18-bd92-94b60672e6a1/0/51122991EB0981E672637F95671E74F6E59AAC7B.mft
File:                     51122991EB0981E672637F95671E74F6E59AAC7B.mft (raw, json)
Hash identifier:          b7qiuOtutFk+lHxB1MIEgVRKB6Q/lO+0u5L9uGaw0LI=
Subject key identifier:   03:39:9C:C6:F7:01:BF:B7:6C:C9:E0:17:90:1D:6F:BC:6E:EA:B5:91
Authority key identifier: 51:12:29:91:EB:09:81:E6:72:63:7F:95:67:1E:74:F6:E5:9A:AC:7B
Certificate issuer:       /CN=51122991EB0981E672637F95671E74F6E59AAC7B
Certificate serial:       04615E8899D6100F94F4EEBA5E6D617AFA9B1D6C
Authority info access:    rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/51122991EB0981E672637F95671E74F6E59AAC7B.cer
Subject info access:      rsync://repo-rpki.idnic.net/repo/5c219259-ed1a-4d18-bd92-94b60672e6a1/0/51122991EB0981E672637F95671E74F6E59AAC7B.mft
Manifest number:          0542
Signing time:             Fri 23 Jan 2026 11:31:54 +0000
Manifest this update:     Fri 23 Jan 2026 11:26:54 +0000
Manifest next update:     Mon 26 Jan 2026 22:40:54 +0000
Files and hashes:         1: 3130332e3233382e3133382e302f32332d3234203d3e20313333333539.roa (hash: PVUcJRXcrGReJjyFsEOd8td3KR/jeVkGCBjn3FaVrZw=)
                          2: 51122991EB0981E672637F95671E74F6E59AAC7B.crl (hash: /wiJbYgZPQ3CMvZoQsRnhk/UK0Wot5bOmk4tyJHy76Y=)
Validation:               OK
Signature path:           rsync://repo-rpki.idnic.net/repo/5c219259-ed1a-4d18-bd92-94b60672e6a1/0/51122991EB0981E672637F95671E74F6E59AAC7B.crl
                          rsync://repo-rpki.idnic.net/repo/5c219259-ed1a-4d18-bd92-94b60672e6a1/0/51122991EB0981E672637F95671E74F6E59AAC7B.mft
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/51122991EB0981E672637F95671E74F6E59AAC7B.cer
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Mon 26 Jan 2026 22:40:54 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            04:61:5e:88:99:d6:10:0f:94:f4:ee:ba:5e:6d:61:7a:fa:9b:1d:6c
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=51122991EB0981E672637F95671E74F6E59AAC7B
        Validity
            Not Before: Jan 23 11:26:54 2026 GMT
            Not After : Jan 26 22:40:54 2026 GMT
        Subject: CN=03399CC6F701BFB76CC9E017901D6FBC6EEAB591
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9e:5e:20:72:a1:2b:32:29:c9:de:82:70:8c:7c:
                    f1:18:17:0c:33:da:27:95:05:44:5f:3a:a4:f6:7e:
                    92:80:f6:71:67:73:f2:29:a1:74:49:50:64:c8:d9:
                    0b:d8:a7:ec:bb:ea:cd:3e:cc:e3:d8:d1:7f:9f:43:
                    a1:2c:84:15:04:18:f1:f1:43:86:5c:41:cb:4d:34:
                    65:66:dc:bc:02:cb:98:33:f8:44:91:8d:49:9d:bb:
                    c3:8e:8d:31:ac:f3:01:33:fc:72:3c:e9:8a:20:35:
                    54:a0:1d:a4:d8:3e:8e:4f:61:e7:55:65:89:df:65:
                    d1:87:b4:5a:d0:d9:21:71:21:47:b4:bc:3f:8f:ed:
                    33:51:4b:15:78:c6:b8:58:3e:83:0b:a6:71:ae:b7:
                    24:d0:1c:7d:bf:89:88:03:1a:0e:18:06:cb:15:32:
                    f3:fa:97:74:88:17:b7:2b:fc:cd:59:a5:c3:4d:d9:
                    d0:fb:d2:c1:2e:23:7d:3e:1e:63:9f:8b:4d:e4:66:
                    40:b2:ee:88:61:e4:7c:bb:3c:de:58:b5:47:24:fe:
                    9c:e7:14:16:31:74:ab:00:f8:09:ef:4a:b6:33:78:
                    7d:a5:0f:0a:45:f8:4a:1c:75:88:46:a9:ff:ed:fc:
                    bc:24:04:8c:89:f7:09:a2:bf:be:ab:40:95:56:44:
                    b0:cd
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                03:39:9C:C6:F7:01:BF:B7:6C:C9:E0:17:90:1D:6F:BC:6E:EA:B5:91
            X509v3 Authority Key Identifier:
                keyid:51:12:29:91:EB:09:81:E6:72:63:7F:95:67:1E:74:F6:E5:9A:AC:7B

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repo-rpki.idnic.net/repo/5c219259-ed1a-4d18-bd92-94b60672e6a1/0/51122991EB0981E672637F95671E74F6E59AAC7B.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/51122991EB0981E672637F95671E74F6E59AAC7B.cer

            Subject Information Access:
                Signed Object - URI:rsync://repo-rpki.idnic.net/repo/5c219259-ed1a-4d18-bd92-94b60672e6a1/0/51122991EB0981E672637F95671E74F6E59AAC7B.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         4e:c0:5c:9b:3d:e5:76:02:d3:a9:c7:bb:c2:c9:2f:a6:86:67:
         43:2a:e9:d7:70:58:67:65:3f:09:ce:cc:a0:4f:ee:45:f2:5d:
         f1:9c:b4:87:33:11:75:57:70:78:1f:2a:4a:1c:58:0a:73:f9:
         b5:11:e6:28:6b:dd:bb:b7:12:fd:21:8e:b9:b8:bc:a6:d5:2b:
         6d:eb:4c:dd:7c:0c:8f:b8:8c:61:34:2c:80:cb:e9:f6:6e:4c:
         db:98:4d:b9:92:7c:15:7f:1b:ca:ce:e0:6b:e7:be:31:61:ae:
         f5:c2:25:ff:ff:d5:dc:80:a4:72:3d:f7:f7:18:0a:0e:0a:08:
         98:ec:4c:a1:ca:ee:ae:ac:12:1a:00:cf:f1:1e:38:ae:ab:50:
         cd:95:2c:20:42:a0:f8:16:a4:38:dd:e8:a4:e6:5b:f4:a6:02:
         4a:57:07:69:45:ab:c6:50:44:9a:cd:f9:4b:3e:02:07:7c:ea:
         ee:9d:35:8f:11:58:dc:10:03:09:10:47:09:19:73:a5:b1:65:
         03:47:2e:22:c4:1c:a1:61:82:a9:87:53:31:81:24:53:25:7d:
         8f:ea:d3:34:e8:74:26:82:3d:e2:6b:8a:35:72:83:e4:b4:29:
         d6:fd:9e:9f:c9:21:97:39:fb:bc:98:0c:bf:be:d5:42:75:ba:
         a7:0e:9d:da
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jan 25 18:49:02 2026 by rpki-client