This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf repo-rpki.idnic.net/repo/c1f7c25b-410b-482a-9436-221ab079d368/0/121FC37C40B5B0AFD8F88B57216FD43E29D11E1C.mft File: 121FC37C40B5B0AFD8F88B57216FD43E29D11E1C.mft (raw, json) Hash identifier: HhH1w1K24iFSvtzDXwVCyy4kB+IkmviK8S+Nqba3SeA= Subject key identifier: 0F:80:CB:89:A0:0C:41:E5:30:9A:C5:31:1F:06:59:B2:9B:FA:89:75 Authority key identifier: 12:1F:C3:7C:40:B5:B0:AF:D8:F8:8B:57:21:6F:D4:3E:29:D1:1E:1C Certificate issuer: /CN=121FC37C40B5B0AFD8F88B57216FD43E29D11E1C Certificate serial: 60996A7B9EEAFD3347DDB66A8B8C16F12F860D96 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/121FC37C40B5B0AFD8F88B57216FD43E29D11E1C.cer Subject info access: rsync://repo-rpki.idnic.net/repo/c1f7c25b-410b-482a-9436-221ab079d368/0/121FC37C40B5B0AFD8F88B57216FD43E29D11E1C.mft Manifest number: 016F Signing time: Sun 25 Jan 2026 03:30:56 +0000 Manifest this update: Sun 25 Jan 2026 03:25:56 +0000 Manifest next update: Wed 28 Jan 2026 14:57:56 +0000 Files and hashes: 1: 3130332e35322e3231322e302f32342d3234203d3e20313531353932.roa (hash: 9JDBXYlD9SqW2BMyADf7uhmLucs+uFWH56a3wjHsOJc=) 2: 121FC37C40B5B0AFD8F88B57216FD43E29D11E1C.crl (hash: b5mTJe8MZRdtS3QhGkMHJagdJ+F8YFjT/EOckWOG5WI=) 3: 34352e3132362e34332e302f32342d3234203d3e20313531353932.roa (hash: ewEeaR7DMfnT3bww9hZJ32z3VJCiqclbtnfFQ/sT7f4=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/c1f7c25b-410b-482a-9436-221ab079d368/0/121FC37C40B5B0AFD8F88B57216FD43E29D11E1C.crl rsync://repo-rpki.idnic.net/repo/c1f7c25b-410b-482a-9436-221ab079d368/0/121FC37C40B5B0AFD8F88B57216FD43E29D11E1C.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/121FC37C40B5B0AFD8F88B57216FD43E29D11E1C.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 28 Jan 2026 14:00:57 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 60:99:6a:7b:9e:ea:fd:33:47:dd:b6:6a:8b:8c:16:f1:2f:86:0d:96 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=121FC37C40B5B0AFD8F88B57216FD43E29D11E1C Validity Not Before: Jan 25 03:25:56 2026 GMT Not After : Jan 28 14:57:56 2026 GMT Subject: CN=0F80CB89A00C41E5309AC5311F0659B29BFA8975 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e3:a9:f8:7d:e5:c0:6c:22:a8:72:27:27:3a:6d: eb:42:ba:15:c6:4f:4f:d6:4a:1a:6b:e6:b6:4c:f8: b6:3e:40:6b:44:88:24:bf:07:ea:b5:85:06:b9:de: e9:5f:06:2b:84:c1:dd:5a:66:ca:1f:c3:69:ed:21: f4:ff:ea:06:82:f2:f7:55:14:75:e1:67:cb:64:62: 4c:cf:9d:de:48:12:ea:f0:13:39:8c:d6:ac:30:c8: 7f:e5:77:da:a7:ac:05:f8:35:2a:f8:f9:04:17:0b: f0:7e:fb:13:26:b3:5d:7d:44:77:33:9b:69:1c:36: 77:c2:20:45:34:3c:3a:b3:15:10:5b:a0:d8:c0:71: e9:00:ac:16:1c:80:b4:d8:43:3c:63:e3:9a:d2:55: b0:24:a0:d0:be:15:28:9a:0d:35:ba:1b:72:92:e7: 96:00:c7:9b:1a:20:8e:b3:c0:eb:bf:4a:3e:a2:c4: 7f:aa:eb:06:df:34:c6:18:94:d2:e6:13:eb:30:41: f4:23:2d:76:9d:b1:b1:98:0d:84:38:e0:cf:bc:6c: 70:58:da:45:04:76:3a:f9:0e:10:48:fd:7b:15:d8: 9e:4b:fe:71:f4:d9:4e:5c:7d:34:5a:35:f6:1c:eb: 69:fb:3d:3c:0b:21:f6:85:55:08:66:7a:a3:75:55: 76:11 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 0F:80:CB:89:A0:0C:41:E5:30:9A:C5:31:1F:06:59:B2:9B:FA:89:75 X509v3 Authority Key Identifier: keyid:12:1F:C3:7C:40:B5:B0:AF:D8:F8:8B:57:21:6F:D4:3E:29:D1:1E:1C X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/c1f7c25b-410b-482a-9436-221ab079d368/0/121FC37C40B5B0AFD8F88B57216FD43E29D11E1C.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/121FC37C40B5B0AFD8F88B57216FD43E29D11E1C.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/c1f7c25b-410b-482a-9436-221ab079d368/0/121FC37C40B5B0AFD8F88B57216FD43E29D11E1C.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 56:d4:c6:c9:98:8c:09:5c:79:71:9f:2a:00:6b:ad:0f:a8:21: 3d:0a:d1:0b:ff:a5:eb:15:cc:06:5c:b6:12:9f:d5:c4:b6:46: be:ac:03:42:bd:a9:3c:da:7c:d6:f4:4d:cc:8e:33:8a:f9:9d: 7c:4c:4a:55:b7:04:75:cf:42:f8:4f:2d:b3:bd:95:74:80:e1: 56:c1:3d:cb:43:0c:b9:1c:26:5d:f3:64:a7:ef:54:62:10:d6: c7:36:f8:c1:39:2c:55:74:46:68:c9:23:93:25:12:3f:b7:0c: 9d:22:49:db:6e:63:2d:41:f2:d4:86:6e:2f:a4:fa:bc:2b:b2: 6e:db:27:1b:f1:da:70:20:da:80:3c:eb:c2:db:e0:6e:cb:de: 28:86:bb:2d:15:2b:d0:04:31:e9:7c:c4:9d:8c:c1:55:90:76: 07:a6:e3:fe:c5:8d:d0:4e:8d:3c:dd:9d:52:9d:1f:2c:86:5a: 46:18:16:bd:70:94:f7:8d:db:dc:37:ee:28:17:5b:2e:00:97: f7:f6:9c:b4:cd:2b:ff:21:d3:d5:b4:7a:b6:62:ef:43:96:03: 26:e5:92:3e:b7:db:d4:f2:49:68:b7:fb:dd:30:ce:54:5f:17: ab:60:b1:dc:f5:70:be:2c:60:ac:a5:3f:40:c5:1f:71:d3:b8: e1:0f:0a:97 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUYJlqe57q/TNH3bZqi4wW8S+GDZYwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMTIxRkMzN0M0MEI1QjBBRkQ4Rjg4QjU3MjE2RkQ0M0Uy OUQxMUUxQzAeFw0yNjAxMjUwMzI1NTZaFw0yNjAxMjgxNDU3NTZaMDMxMTAvBgNV BAMTKDBGODBDQjg5QTAwQzQxRTUzMDlBQzUzMTFGMDY1OUIyOUJGQTg5NzUwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDjqfh95cBsIqhyJyc6betCuhXG T0/WShpr5rZM+LY+QGtEiCS/B+q1hQa53ulfBiuEwd1aZsofw2ntIfT/6gaC8vdV FHXhZ8tkYkzPnd5IEurwEzmM1qwwyH/ld9qnrAX4NSr4+QQXC/B++xMms119RHcz m2kcNnfCIEU0PDqzFRBboNjAcekArBYcgLTYQzxj45rSVbAkoNC+FSiaDTW6G3KS 55YAx5saII6zwOu/Sj6ixH+q6wbfNMYYlNLmE+swQfQjLXadsbGYDYQ44M+8bHBY 2kUEdjr5DhBI/XsV2J5L/nH02U5cfTRaNfYc62n7PTwLIfaFVQhmeqN1VXYRAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUD4DLiaAMQeUwmsUxHwZZspv6iXUwHwYDVR0j BBgwFoAUEh/DfEC1sK/Y+ItXIW/UPinRHhwwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby9j MWY3YzI1Yi00MTBiLTQ4MmEtOTQzNi0yMjFhYjA3OWQzNjgvMC8xMjFGQzM3QzQw QjVCMEFGRDhGODhCNTcyMTZGRDQzRTI5RDExRTFDLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvMTIxRkMzN0M0MEI1QjBBRkQ4Rjg4QjU3MjE2RkQ0M0UyOUQx MUUxQy5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vYzFmN2MyNWItNDEwYi00ODJhLTk0 MzYtMjIxYWIwNzlkMzY4LzAvMTIxRkMzN0M0MEI1QjBBRkQ4Rjg4QjU3MjE2RkQ0 M0UyOUQxMUUxQy5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAFbUxsmYjAlceXGfKgBrrQ+oIT0K0Qv/pesV zAZcthKf1cS2Rr6sA0K9qTzafNb0TcyOM4r5nXxMSlW3BHXPQvhPLbO9lXSA4VbB PctDDLkcJl3zZKfvVGIQ1sc2+ME5LFV0RmjJI5MlEj+3DJ0iSdtuYy1B8tSGbi+k +rwrsm7bJxvx2nAg2oA868Lb4G7L3iiGuy0VK9AEMel8xJ2MwVWQdgem4/7FjdBO jTzdnVKdHyyGWkYYFr1wlPeN29w37igXWy4Al/f2nLTNK/8h09W0erZi70OWAybl kj6329TySWi3+90wzlRfF6tgsdz1cL4sYKylP0DFH3HTuOEPCpc= -----END CERTIFICATE-----Generated at Sun Jan 25 20:54:06 2026 by rpki-client