This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf repo-rpki.idnic.net/repo/074f214a-bf55-4048-845d-20675fb5f2a4/0/027DBEC91021154263BB0CF1565833705023D987.mft File: 027DBEC91021154263BB0CF1565833705023D987.mft (raw, json) Hash identifier: M9MhL+8IEXsHuCWNLqiynCFvHJ+jJ/cLkA8e+K8zhTI= Subject key identifier: C2:04:CB:FE:2B:88:8E:00:E9:5D:51:D3:0D:B0:5F:34:82:2F:42:17 Authority key identifier: 02:7D:BE:C9:10:21:15:42:63:BB:0C:F1:56:58:33:70:50:23:D9:87 Certificate issuer: /CN=027DBEC91021154263BB0CF1565833705023D987 Certificate serial: 680535E87C5ED3A424552B7DCFAA63A8B8DEA03D Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/027DBEC91021154263BB0CF1565833705023D987.cer Subject info access: rsync://repo-rpki.idnic.net/repo/074f214a-bf55-4048-845d-20675fb5f2a4/0/027DBEC91021154263BB0CF1565833705023D987.mft Manifest number: 01B5 Signing time: Thu 18 Dec 2025 05:11:39 +0000 Manifest this update: Thu 18 Dec 2025 05:06:39 +0000 Manifest next update: Sun 21 Dec 2025 06:25:39 +0000 Files and hashes: 1: 3230322e3136302e3133392e302f32342d3234203d3e20313334363337.roa (hash: yivIGajIGBwCERemZ/qApItbcLMFzhrw+o0muoO7pyo=) 2: 323430333a653338303a3a2f33322d3332203d3e20313334363337.roa (hash: U7L8CMVLZEavXmnK/mp5PFEjMg9cgSL8vuQSoK3hk4M=) 3: 323430333a653338303a313030313a3a2f34382d3438203d3e20313334363337.roa (hash: r6mE1hwqe5AJWkOHIz2I388PWuZTnmkeKpmw8+YPM38=) 4: 323430333a653338303a313030333a3a2f34382d3438203d3e20313334363337.roa (hash: +8j/+dJRSTef74GymJkmGO/MtwJTWy9qHlKrlCS2oR4=) 5: 027DBEC91021154263BB0CF1565833705023D987.crl (hash: tCJsnltQ26KAfsObOT81HFXIbi7ssDzS4cR8bkgmGTQ=) 6: 323430333a653338303a313030323a3a2f34382d3438203d3e20313334363337.roa (hash: 2BQG0lP9Zs1EjExB89HW6Zq7y6r/wXETmMZ3S/1VixI=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/074f214a-bf55-4048-845d-20675fb5f2a4/0/027DBEC91021154263BB0CF1565833705023D987.crl rsync://repo-rpki.idnic.net/repo/074f214a-bf55-4048-845d-20675fb5f2a4/0/027DBEC91021154263BB0CF1565833705023D987.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/027DBEC91021154263BB0CF1565833705023D987.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 21 Dec 2025 06:25:39 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 68:05:35:e8:7c:5e:d3:a4:24:55:2b:7d:cf:aa:63:a8:b8:de:a0:3d Signature Algorithm: sha256WithRSAEncryption Issuer: CN=027DBEC91021154263BB0CF1565833705023D987 Validity Not Before: Dec 18 05:06:39 2025 GMT Not After : Dec 21 06:25:39 2025 GMT Subject: CN=C204CBFE2B888E00E95D51D30DB05F34822F4217 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:f0:4c:b9:75:76:55:e9:db:9d:95:70:83:3f:89: 36:42:2b:77:b2:0a:b8:75:ae:01:be:6d:15:c3:ff: 41:97:b6:42:6b:9b:db:7a:26:72:a3:42:ca:62:81: 5d:68:10:ed:3c:26:f6:29:38:39:75:33:aa:09:31: 73:bb:1b:8c:a5:89:08:e7:af:5d:75:fc:ca:89:d7: fd:d6:60:03:b1:a6:aa:58:cf:af:52:75:27:83:b0: 1a:6c:cf:c0:71:38:2f:b8:2c:56:52:9a:61:80:49: bb:83:03:e1:f3:1d:24:8a:51:18:97:d8:b6:e0:55: be:07:c9:70:aa:50:03:00:8a:a4:ec:ba:12:86:42: 27:85:42:bf:c3:48:33:d0:1f:de:10:ba:61:69:50: 58:1b:65:2a:7d:9c:3d:8f:2d:5c:31:1d:45:29:9d: 10:65:fd:72:52:e1:d9:37:38:d3:51:68:93:5d:c6: 34:56:e8:9f:0e:d0:8e:5c:61:e7:7b:26:9d:2f:1b: dd:56:c8:6b:f1:45:ec:72:37:06:06:bc:a7:1e:9a: bd:61:3b:84:e3:2f:50:67:2a:6c:7b:fc:7e:9b:8e: d9:f3:94:8a:e7:ae:18:bd:7f:14:5e:d9:27:28:1a: 65:be:53:08:3d:28:c3:2e:54:20:9d:59:47:de:e3: b6:ef Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: C2:04:CB:FE:2B:88:8E:00:E9:5D:51:D3:0D:B0:5F:34:82:2F:42:17 X509v3 Authority Key Identifier: keyid:02:7D:BE:C9:10:21:15:42:63:BB:0C:F1:56:58:33:70:50:23:D9:87 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/074f214a-bf55-4048-845d-20675fb5f2a4/0/027DBEC91021154263BB0CF1565833705023D987.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/027DBEC91021154263BB0CF1565833705023D987.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/074f214a-bf55-4048-845d-20675fb5f2a4/0/027DBEC91021154263BB0CF1565833705023D987.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 74:c1:03:5d:d5:16:08:ba:3a:3f:3f:53:ca:c9:22:14:85:89: 7b:79:df:d1:40:23:bb:88:52:f5:b6:b2:60:cb:0f:c1:43:09: 9f:22:d4:05:0f:e1:f4:9a:c9:d3:55:c7:e7:12:8a:55:db:9f: 0b:62:6a:de:6a:85:11:72:a9:e3:8d:d0:40:db:8a:20:b7:8a: 30:c3:f5:19:6b:bd:17:72:03:07:c3:e1:14:9c:4d:70:11:1b: 66:15:7e:15:f6:0e:65:68:b6:0b:d4:5e:e7:95:0e:d0:eb:bd: 3c:7e:d1:82:49:27:6e:eb:32:e6:d9:46:5a:46:52:1f:e5:6b: 9e:d0:81:1b:f6:f3:e0:c8:be:e2:1e:52:ee:0c:2b:ff:9b:6c: ae:e1:6b:89:2e:d7:9b:a8:d4:9d:f2:93:d9:b5:2b:84:3e:7b: 17:0b:c9:e4:2a:12:a2:ca:10:81:99:f3:f3:6d:06:2b:56:21: 84:68:a1:d3:47:28:7f:26:af:cd:92:83:d8:aa:68:2d:cf:cd: fb:6a:c7:ad:eb:8d:0f:35:3c:78:fc:15:44:5e:08:5b:d8:a5: 57:a0:ba:52:f9:e6:b3:37:44:a6:47:92:1c:c4:09:b2:2c:7e: 79:42:36:8f:b6:f6:0a:48:6b:03:0c:b8:18:ac:fd:9a:68:2a: af:11:fa:22 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUaAU16Hxe06QkVSt9z6pjqLjeoD0wDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMDI3REJFQzkxMDIxMTU0MjYzQkIwQ0YxNTY1ODMzNzA1 MDIzRDk4NzAeFw0yNTEyMTgwNTA2MzlaFw0yNTEyMjEwNjI1MzlaMDMxMTAvBgNV BAMTKEMyMDRDQkZFMkI4ODhFMDBFOTVENTFEMzBEQjA1RjM0ODIyRjQyMTcwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDwTLl1dlXp252VcIM/iTZCK3ey Crh1rgG+bRXD/0GXtkJrm9t6JnKjQspigV1oEO08JvYpODl1M6oJMXO7G4yliQjn r111/MqJ1/3WYAOxpqpYz69SdSeDsBpsz8BxOC+4LFZSmmGASbuDA+HzHSSKURiX 2LbgVb4HyXCqUAMAiqTsuhKGQieFQr/DSDPQH94QumFpUFgbZSp9nD2PLVwxHUUp nRBl/XJS4dk3ONNRaJNdxjRW6J8O0I5cYed7Jp0vG91WyGvxRexyNwYGvKcemr1h O4TjL1BnKmx7/H6bjtnzlIrnrhi9fxRe2ScoGmW+Uwg9KMMuVCCdWUfe47bvAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUwgTL/iuIjgDpXVHTDbBfNIIvQhcwHwYDVR0j BBgwFoAUAn2+yRAhFUJjuwzxVlgzcFAj2YcwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby8w NzRmMjE0YS1iZjU1LTQwNDgtODQ1ZC0yMDY3NWZiNWYyYTQvMC8wMjdEQkVDOTEw MjExNTQyNjNCQjBDRjE1NjU4MzM3MDUwMjNEOTg3LmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvMDI3REJFQzkxMDIxMTU0MjYzQkIwQ0YxNTY1ODMzNzA1MDIz RDk4Ny5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vMDc0ZjIxNGEtYmY1NS00MDQ4LTg0 NWQtMjA2NzVmYjVmMmE0LzAvMDI3REJFQzkxMDIxMTU0MjYzQkIwQ0YxNTY1ODMz NzA1MDIzRDk4Ny5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAHTBA13VFgi6Oj8/U8rJIhSFiXt539FAI7uI UvW2smDLD8FDCZ8i1AUP4fSaydNVx+cSilXbnwtiat5qhRFyqeON0EDbiiC3ijDD 9RlrvRdyAwfD4RScTXARG2YVfhX2DmVotgvUXueVDtDrvTx+0YJJJ27rMubZRlpG Uh/la57QgRv28+DIvuIeUu4MK/+bbK7ha4ku15uo1J3yk9m1K4Q+excLyeQqEqLK EIGZ8/NtBitWIYRoodNHKH8mr82Sg9iqaC3Pzftqx63rjQ81PHj8FUReCFvYpVeg ulL55rM3RKZHkhzECbIsfnlCNo+29gpIawMMuBis/ZpoKq8R+iI= -----END CERTIFICATE-----Generated at Fri Dec 19 20:28:33 2025 by rpki-client