This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf repo-rpki.idnic.net/repo/86f4d4f1-b36c-4a46-8844-4e6c7a3c97d9/0/27B773A173E0400FBC0D7FEDFCFF7809B53695FC.mft File: 27B773A173E0400FBC0D7FEDFCFF7809B53695FC.mft (raw, json) Hash identifier: T/0qPDBc5NAiBV8rmatT/HX1O0cH1uezM3kvsMQTz20= Subject key identifier: 79:05:25:42:AF:D3:31:92:AC:E9:FA:AC:2E:00:D2:7C:97:E3:F7:53 Authority key identifier: 27:B7:73:A1:73:E0:40:0F:BC:0D:7F:ED:FC:FF:78:09:B5:36:95:FC Certificate issuer: /CN=27B773A173E0400FBC0D7FEDFCFF7809B53695FC Certificate serial: 7FC4A56EDBA10C65CAA4AA32B62FC02F31A8A172 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/27B773A173E0400FBC0D7FEDFCFF7809B53695FC.cer Subject info access: rsync://repo-rpki.idnic.net/repo/86f4d4f1-b36c-4a46-8844-4e6c7a3c97d9/0/27B773A173E0400FBC0D7FEDFCFF7809B53695FC.mft Manifest number: 01D1 Signing time: Sat 31 Jan 2026 05:01:46 +0000 Manifest this update: Sat 31 Jan 2026 04:56:46 +0000 Manifest next update: Tue 03 Feb 2026 11:38:46 +0000 Files and hashes: 1: 3130332e37302e31362e302f32322d3232203d3e20313335343632.roa (hash: 1OEa/bsOORulkyfivOT1LWE6Ar5F7pwDFWbnAlkWMec=) 2: 27B773A173E0400FBC0D7FEDFCFF7809B53695FC.crl (hash: WY2Fx5n44o11fwr/+bh4wUjdmJ2ox83QZiGeItXihSQ=) 3: 3130332e37302e31392e302f32342d3234203d3e20313335343632.roa (hash: AXguxGCyMmqijzUfDJ6sW4bhnWRijiQgcsQ13oNgZs4=) 4: 3130332e37302e31382e302f32342d3234203d3e20313335343632.roa (hash: BDEKh8gnBvlltX9WR1GmG6qKqh+pe65R6Xx0+s/IyP8=) 5: 3130332e37302e31362e302f32342d3234203d3e20313335343632.roa (hash: r8NqRUCsHtvXIJ0/QDdvuNRC6uOu98LXcwUGX23wEMs=) 6: 3130332e37302e31372e302f32342d3234203d3e20313335343632.roa (hash: a77WyK1qTdgIRkUuNKGD5zyWCvIAGB4ZwYU+fJ2Gtpw=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/86f4d4f1-b36c-4a46-8844-4e6c7a3c97d9/0/27B773A173E0400FBC0D7FEDFCFF7809B53695FC.crl rsync://repo-rpki.idnic.net/repo/86f4d4f1-b36c-4a46-8844-4e6c7a3c97d9/0/27B773A173E0400FBC0D7FEDFCFF7809B53695FC.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/27B773A173E0400FBC0D7FEDFCFF7809B53695FC.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 03 Feb 2026 11:38:46 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 7f:c4:a5:6e:db:a1:0c:65:ca:a4:aa:32:b6:2f:c0:2f:31:a8:a1:72 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=27B773A173E0400FBC0D7FEDFCFF7809B53695FC Validity Not Before: Jan 31 04:56:46 2026 GMT Not After : Feb 3 11:38:46 2026 GMT Subject: CN=79052542AFD33192ACE9FAAC2E00D27C97E3F753 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e0:0a:b0:2b:69:2c:24:dd:f2:a9:0f:33:2d:a4: b7:dc:e1:f7:37:31:26:98:8c:a6:f8:a0:1c:79:63: e6:6d:35:c7:d7:0b:b5:b3:a2:6f:3e:31:36:b4:27: 89:cb:cc:03:b5:92:08:d0:8c:b6:97:e0:15:5e:30: c4:44:37:b7:95:a0:7c:30:88:8d:a8:48:6a:77:78: 14:9a:ae:c5:8d:32:19:bd:d4:4b:15:c6:14:31:41: 30:72:62:92:16:81:5f:74:8a:98:28:45:e6:8b:49: 5f:e7:21:24:e8:bc:4f:0c:e8:2b:78:5e:fe:69:17: 97:07:5f:87:2f:80:4b:32:ac:ad:37:87:99:0b:81: af:d0:08:8f:3c:7a:06:20:71:91:a0:07:f2:79:9b: cc:1a:fc:6b:1e:a9:a0:4b:4f:ca:03:69:a0:6c:c2: d9:f3:58:86:8b:d0:62:6c:fb:1e:db:87:8d:7f:ef: 87:18:68:3e:c9:4b:71:df:8f:50:fa:7d:fb:a0:40: a6:c3:ef:48:6c:bc:b2:16:fd:45:89:55:f3:be:08: 88:88:a2:63:05:a2:42:68:27:da:27:70:14:c2:93: 2e:3a:8e:62:db:d6:47:50:fc:01:db:70:16:25:c3: 10:b2:c2:0c:ef:4f:67:0f:d4:07:74:1d:18:25:5b: 23:9f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 79:05:25:42:AF:D3:31:92:AC:E9:FA:AC:2E:00:D2:7C:97:E3:F7:53 X509v3 Authority Key Identifier: keyid:27:B7:73:A1:73:E0:40:0F:BC:0D:7F:ED:FC:FF:78:09:B5:36:95:FC X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/86f4d4f1-b36c-4a46-8844-4e6c7a3c97d9/0/27B773A173E0400FBC0D7FEDFCFF7809B53695FC.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/27B773A173E0400FBC0D7FEDFCFF7809B53695FC.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/86f4d4f1-b36c-4a46-8844-4e6c7a3c97d9/0/27B773A173E0400FBC0D7FEDFCFF7809B53695FC.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 50:bd:08:de:80:ea:8c:72:af:d5:c2:e2:2c:7a:86:96:82:c3: bf:07:83:c1:30:07:b2:b3:ed:e1:91:2e:02:91:3d:3e:dc:6b: 89:6d:25:19:80:8f:c5:6c:68:cd:fc:85:3a:93:5a:13:6f:52: bd:41:b9:07:10:b9:dc:a7:1b:49:ab:b5:34:9a:e6:74:c1:06: 93:82:4d:e4:c7:74:5f:33:5d:21:30:9d:39:64:1e:e6:e4:ae: 60:ef:b0:8a:ac:53:82:7f:de:a0:18:8f:47:85:43:55:af:6c: 80:58:f3:ba:39:b2:8e:b9:84:0f:94:e5:26:0e:ee:2c:57:b0: db:20:90:b5:a2:4c:20:4a:1b:00:10:1f:ff:c5:24:d9:7f:10: 99:6e:db:4e:1d:f4:fd:6c:49:ce:42:20:45:36:42:3b:38:37: dd:51:13:18:7b:92:75:58:e6:3e:ee:d4:d7:21:ff:69:f0:72: 8d:c1:d0:15:94:9a:1e:8f:d8:bc:76:31:52:28:2d:7a:02:7f: 3f:22:5c:0f:10:6c:4c:28:00:4a:e3:82:cb:b1:95:c6:36:3d: 22:67:d9:0f:f2:ae:6b:ae:47:a7:9e:be:3c:c3:3a:5c:af:fb: 41:c6:4f:e3:94:be:c4:3b:e3:47:4a:6d:1f:c6:3e:b3:86:b7: 77:c6:5d:a4 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUf8SlbtuhDGXKpKoyti/ALzGooXIwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMjdCNzczQTE3M0UwNDAwRkJDMEQ3RkVERkNGRjc4MDlC NTM2OTVGQzAeFw0yNjAxMzEwNDU2NDZaFw0yNjAyMDMxMTM4NDZaMDMxMTAvBgNV BAMTKDc5MDUyNTQyQUZEMzMxOTJBQ0U5RkFBQzJFMDBEMjdDOTdFM0Y3NTMwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDgCrAraSwk3fKpDzMtpLfc4fc3 MSaYjKb4oBx5Y+ZtNcfXC7Wzom8+MTa0J4nLzAO1kgjQjLaX4BVeMMREN7eVoHww iI2oSGp3eBSarsWNMhm91EsVxhQxQTByYpIWgV90ipgoReaLSV/nISTovE8M6Ct4 Xv5pF5cHX4cvgEsyrK03h5kLga/QCI88egYgcZGgB/J5m8wa/GseqaBLT8oDaaBs wtnzWIaL0GJs+x7bh41/74cYaD7JS3Hfj1D6ffugQKbD70hsvLIW/UWJVfO+CIiI omMFokJoJ9oncBTCky46jmLb1kdQ/AHbcBYlwxCywgzvT2cP1Ad0HRglWyOfAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUeQUlQq/TMZKs6fqsLgDSfJfj91MwHwYDVR0j BBgwFoAUJ7dzoXPgQA+8DX/t/P94CbU2lfwwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby84 NmY0ZDRmMS1iMzZjLTRhNDYtODg0NC00ZTZjN2EzYzk3ZDkvMC8yN0I3NzNBMTcz RTA0MDBGQkMwRDdGRURGQ0ZGNzgwOUI1MzY5NUZDLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvMjdCNzczQTE3M0UwNDAwRkJDMEQ3RkVERkNGRjc4MDlCNTM2 OTVGQy5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vODZmNGQ0ZjEtYjM2Yy00YTQ2LTg4 NDQtNGU2YzdhM2M5N2Q5LzAvMjdCNzczQTE3M0UwNDAwRkJDMEQ3RkVERkNGRjc4 MDlCNTM2OTVGQy5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAFC9CN6A6oxyr9XC4ix6hpaCw78Hg8EwB7Kz 7eGRLgKRPT7ca4ltJRmAj8VsaM38hTqTWhNvUr1BuQcQudynG0mrtTSa5nTBBpOC TeTHdF8zXSEwnTlkHubkrmDvsIqsU4J/3qAYj0eFQ1WvbIBY87o5so65hA+U5SYO 7ixXsNsgkLWiTCBKGwAQH//FJNl/EJlu204d9P1sSc5CIEU2Qjs4N91RExh7knVY 5j7u1Nch/2nwco3B0BWUmh6P2Lx2MVIoLXoCfz8iXA8QbEwoAErjgsuxlcY2PSJn 2Q/yrmuuR6eevjzDOlyv+0HGT+OUvsQ740dKbR/GPrOGt3fGXaQ= -----END CERTIFICATE-----Generated at Mon Feb 2 09:43:07 2026 by rpki-client