This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf repo-rpki.idnic.net/repo/4544e951-3d08-458a-a44a-529d387d26b1/0/27A3131BB606D93657151019C1A9735DF861C9D4.mft File: 27A3131BB606D93657151019C1A9735DF861C9D4.mft (raw, json) Hash identifier: faM9lP7YXCDJ4uIpz8S/QWfiFFu5SPRBd2Xx/BxOh0k= Subject key identifier: 37:E1:62:A8:0B:FE:2A:D3:73:EC:47:56:66:AD:C6:EB:41:7C:13:CE Authority key identifier: 27:A3:13:1B:B6:06:D9:36:57:15:10:19:C1:A9:73:5D:F8:61:C9:D4 Certificate issuer: /CN=27A3131BB606D93657151019C1A9735DF861C9D4 Certificate serial: 3D53A05EA3245D86F1182961859F774A4F98F5B9 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/27A3131BB606D93657151019C1A9735DF861C9D4.cer Subject info access: rsync://repo-rpki.idnic.net/repo/4544e951-3d08-458a-a44a-529d387d26b1/0/27A3131BB606D93657151019C1A9735DF861C9D4.mft Manifest number: 0315 Signing time: Tue 02 Dec 2025 12:11:06 +0000 Manifest this update: Tue 02 Dec 2025 12:06:06 +0000 Manifest next update: Fri 05 Dec 2025 15:14:06 +0000 Files and hashes: 1: 3130332e3133312e32392e302f32342d3234203d3e20313338303834.roa (hash: encpHXfOglU+n5zC00TevMjvjDMOpcW1MtPZsrVdOCI=) 2: 27A3131BB606D93657151019C1A9735DF861C9D4.crl (hash: 3i2vRBnxOpp8w+Xr/Ng90DBAbRtMq47MuVpN6dtFa8A=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/4544e951-3d08-458a-a44a-529d387d26b1/0/27A3131BB606D93657151019C1A9735DF861C9D4.crl rsync://repo-rpki.idnic.net/repo/4544e951-3d08-458a-a44a-529d387d26b1/0/27A3131BB606D93657151019C1A9735DF861C9D4.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/27A3131BB606D93657151019C1A9735DF861C9D4.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 05 Dec 2025 15:14:06 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 3d:53:a0:5e:a3:24:5d:86:f1:18:29:61:85:9f:77:4a:4f:98:f5:b9 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=27A3131BB606D93657151019C1A9735DF861C9D4 Validity Not Before: Dec 2 12:06:06 2025 GMT Not After : Dec 5 15:14:06 2025 GMT Subject: CN=37E162A80BFE2AD373EC475666ADC6EB417C13CE Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:db:09:f6:1a:01:8c:c0:5a:81:68:7a:b7:1e:b6: 82:30:2b:6d:d9:7f:17:81:b4:28:8d:10:8a:71:ac: 12:be:c6:29:0b:cd:10:66:89:76:41:ef:8b:57:ec: c9:c6:bf:6c:ca:f5:c0:b1:73:87:b3:25:a6:ef:50: b3:1d:31:0a:9a:0a:4a:2b:c5:9f:76:01:a6:d4:04: f5:ed:1e:99:e3:26:c8:07:08:2b:64:05:e5:04:39: df:48:9b:fc:4c:8a:62:64:77:5c:e0:b3:94:f1:f7: 0f:be:cc:5f:d3:66:15:dc:d6:68:fa:ae:8f:ea:64: 53:cb:27:1e:4a:2d:08:0f:60:6b:30:ca:ac:56:0e: ac:1b:38:23:b6:35:39:a4:07:83:f6:2a:a8:8f:8e: 3f:43:15:92:ea:f3:74:43:cc:63:98:33:12:5a:04: a8:ff:2b:32:10:6a:2d:c1:66:61:fa:26:40:0d:d8: 98:9a:5d:b8:f4:e8:f6:76:a8:37:a3:3a:d3:7e:8b: b3:24:a1:d3:8a:4a:06:54:08:eb:69:40:84:5d:b9: 76:9d:50:5b:35:76:ad:ab:76:dd:c3:92:e4:07:b0: 98:fa:ad:9a:d3:30:d0:04:ee:e5:ab:cf:e1:8e:78: 7b:21:f3:44:83:bb:ba:0d:05:24:2c:91:fd:e4:cc: ec:85 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 37:E1:62:A8:0B:FE:2A:D3:73:EC:47:56:66:AD:C6:EB:41:7C:13:CE X509v3 Authority Key Identifier: keyid:27:A3:13:1B:B6:06:D9:36:57:15:10:19:C1:A9:73:5D:F8:61:C9:D4 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/4544e951-3d08-458a-a44a-529d387d26b1/0/27A3131BB606D93657151019C1A9735DF861C9D4.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/27A3131BB606D93657151019C1A9735DF861C9D4.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/4544e951-3d08-458a-a44a-529d387d26b1/0/27A3131BB606D93657151019C1A9735DF861C9D4.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 00:30:ea:85:84:65:80:9f:af:34:cd:c6:9f:00:55:dd:5e:3f: 1f:c5:a4:92:b5:aa:87:77:0b:aa:d6:b5:51:82:0c:e1:07:a4: 9c:ad:80:62:3d:42:98:e4:0d:0a:9a:b6:56:a5:39:ef:32:71: 2f:fd:7f:3b:ba:ec:61:2a:40:8d:91:13:ae:21:a7:01:4c:f4: 39:d7:02:40:6b:ee:34:ad:f3:4d:59:14:cc:33:01:4b:4d:48: 1a:72:70:94:c8:3f:39:d5:d4:45:0a:c7:15:77:23:80:08:8c: b9:99:3f:d8:5c:83:44:2c:07:a6:48:4b:5b:01:e2:b2:41:0a: d2:20:cd:fc:71:2e:e9:19:89:07:58:86:54:85:d0:66:1b:da: 91:76:58:4c:05:75:19:63:8a:d8:a0:bb:54:5f:76:fb:85:5a: 93:6d:14:7f:34:eb:f9:b9:64:71:89:76:9c:3b:4e:bc:7b:90: 34:e4:f1:9a:a4:e9:2f:51:c9:18:dd:1a:3a:aa:15:7a:51:e6: 20:84:25:2c:3e:5b:86:84:c7:36:97:02:bf:43:fd:1d:8d:d7: 02:9a:94:d8:03:b5:d8:b5:26:ea:22:e0:45:6e:e5:60:d8:12: 15:67:79:2d:0d:6d:ab:75:95:a4:08:ae:8e:37:1a:10:4d:91: cd:30:7f:48 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUPVOgXqMkXYbxGClhhZ93Sk+Y9bkwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMjdBMzEzMUJCNjA2RDkzNjU3MTUxMDE5QzFBOTczNURG ODYxQzlENDAeFw0yNTEyMDIxMjA2MDZaFw0yNTEyMDUxNTE0MDZaMDMxMTAvBgNV BAMTKDM3RTE2MkE4MEJGRTJBRDM3M0VDNDc1NjY2QURDNkVCNDE3QzEzQ0UwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDbCfYaAYzAWoFoercetoIwK23Z fxeBtCiNEIpxrBK+xikLzRBmiXZB74tX7MnGv2zK9cCxc4ezJabvULMdMQqaCkor xZ92AabUBPXtHpnjJsgHCCtkBeUEOd9Im/xMimJkd1zgs5Tx9w++zF/TZhXc1mj6 ro/qZFPLJx5KLQgPYGswyqxWDqwbOCO2NTmkB4P2KqiPjj9DFZLq83RDzGOYMxJa BKj/KzIQai3BZmH6JkAN2JiaXbj06PZ2qDejOtN+i7MkodOKSgZUCOtpQIRduXad UFs1dq2rdt3DkuQHsJj6rZrTMNAE7uWrz+GOeHsh80SDu7oNBSQskf3kzOyFAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUN+FiqAv+KtNz7EdWZq3G60F8E84wHwYDVR0j BBgwFoAUJ6MTG7YG2TZXFRAZwalzXfhhydQwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby80 NTQ0ZTk1MS0zZDA4LTQ1OGEtYTQ0YS01MjlkMzg3ZDI2YjEvMC8yN0EzMTMxQkI2 MDZEOTM2NTcxNTEwMTlDMUE5NzM1REY4NjFDOUQ0LmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvMjdBMzEzMUJCNjA2RDkzNjU3MTUxMDE5QzFBOTczNURGODYx QzlENC5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vNDU0NGU5NTEtM2QwOC00NThhLWE0 NGEtNTI5ZDM4N2QyNmIxLzAvMjdBMzEzMUJCNjA2RDkzNjU3MTUxMDE5QzFBOTcz NURGODYxQzlENC5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAAAw6oWEZYCfrzTNxp8AVd1ePx/FpJK1qod3 C6rWtVGCDOEHpJytgGI9QpjkDQqatlalOe8ycS/9fzu67GEqQI2RE64hpwFM9DnX AkBr7jSt801ZFMwzAUtNSBpycJTIPznV1EUKxxV3I4AIjLmZP9hcg0QsB6ZIS1sB 4rJBCtIgzfxxLukZiQdYhlSF0GYb2pF2WEwFdRljitigu1RfdvuFWpNtFH806/m5 ZHGJdpw7Trx7kDTk8Zqk6S9RyRjdGjqqFXpR5iCEJSw+W4aExzaXAr9D/R2N1wKa lNgDtdi1Juoi4EVu5WDYEhVneS0Nbat1laQIro43GhBNkc0wf0g= -----END CERTIFICATE-----Generated at Wed Dec 3 15:30:03 2025 by rpki-client