This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf repo-rpki.idnic.net/repo/86f4d4f1-b36c-4a46-8844-4e6c7a3c97d9/0/27B773A173E0400FBC0D7FEDFCFF7809B53695FC.mft File: 27B773A173E0400FBC0D7FEDFCFF7809B53695FC.mft (raw, json) Hash identifier: 5IZ6BV7i0yz9/tVGtDQmn5/Ucu2BO6bwBR6zxdUrcJs= Subject key identifier: 21:60:A7:1A:8C:95:85:42:E9:F0:EF:7F:29:6A:DC:4E:B7:D9:E8:A9 Authority key identifier: 27:B7:73:A1:73:E0:40:0F:BC:0D:7F:ED:FC:FF:78:09:B5:36:95:FC Certificate issuer: /CN=27B773A173E0400FBC0D7FEDFCFF7809B53695FC Certificate serial: 0E32DB32ECE7D42D049A7B3B86986233CF9DF499 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/27B773A173E0400FBC0D7FEDFCFF7809B53695FC.cer Subject info access: rsync://repo-rpki.idnic.net/repo/86f4d4f1-b36c-4a46-8844-4e6c7a3c97d9/0/27B773A173E0400FBC0D7FEDFCFF7809B53695FC.mft Manifest number: 01B6 Signing time: Mon 01 Dec 2025 19:51:24 +0000 Manifest this update: Mon 01 Dec 2025 19:46:24 +0000 Manifest next update: Fri 05 Dec 2025 02:16:24 +0000 Files and hashes: 1: 3130332e37302e31362e302f32342d3234203d3e20313335343632.roa (hash: JiNsqLJvEYFIyhrR6R0JR1hrj3KWiaaB75HG9L5QPcg=) 2: 3130332e37302e31382e302f32342d3234203d3e20313335343632.roa (hash: Q3xxSdQXC23vXFGFdHyLQV020HZB9BgH6IL3S5vtQAA=) 3: 27B773A173E0400FBC0D7FEDFCFF7809B53695FC.crl (hash: w4+50HFBbykg0UwGFeWMesn0o0Lookt/7ej4G/lGlxw=) 4: 3130332e37302e31392e302f32342d3234203d3e20313335343632.roa (hash: 6N2J2kg+Zlk+0sQHWC1BIhfECV5xjbZiRhQRFmUUNag=) 5: 3130332e37302e31372e302f32342d3234203d3e20313335343632.roa (hash: 6gVzJ3lnoTzbRecAFAnRC8x24kDXXXW3lAWqPBdz2dw=) 6: 3130332e37302e31362e302f32322d3232203d3e20313335343632.roa (hash: 1f4e1XEuXG9su40zHvwmNI+q39l2fKb22IFThBoIE0Y=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/86f4d4f1-b36c-4a46-8844-4e6c7a3c97d9/0/27B773A173E0400FBC0D7FEDFCFF7809B53695FC.crl rsync://repo-rpki.idnic.net/repo/86f4d4f1-b36c-4a46-8844-4e6c7a3c97d9/0/27B773A173E0400FBC0D7FEDFCFF7809B53695FC.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/27B773A173E0400FBC0D7FEDFCFF7809B53695FC.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 05 Dec 2025 02:16:24 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 0e:32:db:32:ec:e7:d4:2d:04:9a:7b:3b:86:98:62:33:cf:9d:f4:99 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=27B773A173E0400FBC0D7FEDFCFF7809B53695FC Validity Not Before: Dec 1 19:46:24 2025 GMT Not After : Dec 5 02:16:24 2025 GMT Subject: CN=2160A71A8C958542E9F0EF7F296ADC4EB7D9E8A9 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bc:9f:a9:3d:8b:df:35:c2:83:3c:01:7a:45:0c: ae:7c:dd:1c:a4:02:76:36:63:fc:a4:6a:a1:52:84: 7f:59:ec:b8:50:40:80:06:74:28:77:40:25:5c:1f: 42:6e:af:c6:38:cd:e9:66:4f:cd:ee:fc:7c:92:76: 1e:c3:58:d4:29:a0:c1:18:30:85:f2:f9:d4:ba:1f: ac:08:ef:75:6c:ca:06:ef:d1:5d:7a:9e:74:8d:3a: ca:cb:b3:23:64:a4:17:7b:33:49:89:5c:7d:db:09: b9:14:f7:27:73:52:28:e8:75:6e:b1:f4:81:d1:59: bd:10:a6:06:2f:db:c6:9e:25:9e:4c:7f:d4:5f:ef: 5d:d0:79:3e:15:df:80:c6:16:bb:33:e5:be:5d:60: 52:3b:e2:e8:35:64:4f:e2:30:83:f5:8d:c8:87:af: 71:c1:bb:f6:17:d9:2b:07:da:3c:56:44:79:d4:cd: 39:51:a4:80:f4:78:e5:a4:86:08:48:85:1d:70:0f: b4:be:f5:a6:e3:d6:30:d3:04:d7:9f:60:73:6e:40: f4:39:54:6f:51:99:92:f7:18:80:52:00:20:8f:fc: 59:e0:7b:81:22:34:ef:a2:e1:3c:e4:6b:c6:94:d5: 0b:81:02:65:8a:d0:2b:3f:bb:a9:72:d7:33:b0:77: d9:e7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 21:60:A7:1A:8C:95:85:42:E9:F0:EF:7F:29:6A:DC:4E:B7:D9:E8:A9 X509v3 Authority Key Identifier: keyid:27:B7:73:A1:73:E0:40:0F:BC:0D:7F:ED:FC:FF:78:09:B5:36:95:FC X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/86f4d4f1-b36c-4a46-8844-4e6c7a3c97d9/0/27B773A173E0400FBC0D7FEDFCFF7809B53695FC.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/27B773A173E0400FBC0D7FEDFCFF7809B53695FC.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/86f4d4f1-b36c-4a46-8844-4e6c7a3c97d9/0/27B773A173E0400FBC0D7FEDFCFF7809B53695FC.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 31:a2:cf:eb:8d:70:da:cf:15:3b:05:9d:f3:be:cb:24:e1:cb: 65:37:2b:ed:49:8b:f9:35:99:f9:09:5e:7b:55:4b:ea:fd:42: e0:f4:8d:34:b3:8a:43:ff:d1:54:9b:b3:99:71:42:c9:72:c6: e7:c4:86:2d:6f:d3:5c:56:f3:c7:77:d1:ba:15:d9:80:c0:e8: 1c:8c:e7:7e:c7:d1:b7:50:e8:2a:41:36:ef:6b:2f:0e:b1:00: da:ad:8e:a1:9c:bc:d6:cf:3c:42:3a:f6:78:b0:44:c6:1e:f5: 6d:1d:7c:94:d2:8d:3b:3b:ef:fd:5c:32:f4:dc:f1:40:37:f0: 72:d0:3e:09:5f:3f:4c:0f:5e:71:4f:63:04:ee:b1:5e:94:40: 3b:e3:74:e3:44:21:9d:da:e4:00:e5:97:c1:1a:b1:b2:d5:51: 58:7e:40:da:5b:0e:f0:37:48:ae:d7:4c:e8:78:ef:30:af:b1: 2c:a6:c4:78:96:c9:2d:9e:e1:48:34:3c:b5:92:d1:08:47:d4: dc:fa:58:f8:d2:4c:c4:c5:c0:b0:61:95:6a:f8:92:77:66:f6: 03:f0:99:fa:4f:b8:33:c7:8b:f2:fc:8c:a5:e6:df:0b:6b:d5: 5d:a7:f3:ba:91:cb:36:56:40:af:12:73:62:9f:19:ef:4c:d1: ff:86:ab:09 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUDjLbMuzn1C0Emns7hphiM8+d9JkwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMjdCNzczQTE3M0UwNDAwRkJDMEQ3RkVERkNGRjc4MDlC NTM2OTVGQzAeFw0yNTEyMDExOTQ2MjRaFw0yNTEyMDUwMjE2MjRaMDMxMTAvBgNV BAMTKDIxNjBBNzFBOEM5NTg1NDJFOUYwRUY3RjI5NkFEQzRFQjdEOUU4QTkwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC8n6k9i981woM8AXpFDK583Ryk AnY2Y/ykaqFShH9Z7LhQQIAGdCh3QCVcH0Jur8Y4zelmT83u/HySdh7DWNQpoMEY MIXy+dS6H6wI73Vsygbv0V16nnSNOsrLsyNkpBd7M0mJXH3bCbkU9ydzUijodW6x 9IHRWb0QpgYv28aeJZ5Mf9Rf713QeT4V34DGFrsz5b5dYFI74ug1ZE/iMIP1jciH r3HBu/YX2SsH2jxWRHnUzTlRpID0eOWkhghIhR1wD7S+9abj1jDTBNefYHNuQPQ5 VG9RmZL3GIBSACCP/Fnge4EiNO+i4Tzka8aU1QuBAmWK0Cs/u6ly1zOwd9nnAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUIWCnGoyVhULp8O9/KWrcTrfZ6KkwHwYDVR0j BBgwFoAUJ7dzoXPgQA+8DX/t/P94CbU2lfwwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby84 NmY0ZDRmMS1iMzZjLTRhNDYtODg0NC00ZTZjN2EzYzk3ZDkvMC8yN0I3NzNBMTcz RTA0MDBGQkMwRDdGRURGQ0ZGNzgwOUI1MzY5NUZDLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvMjdCNzczQTE3M0UwNDAwRkJDMEQ3RkVERkNGRjc4MDlCNTM2 OTVGQy5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vODZmNGQ0ZjEtYjM2Yy00YTQ2LTg4 NDQtNGU2YzdhM2M5N2Q5LzAvMjdCNzczQTE3M0UwNDAwRkJDMEQ3RkVERkNGRjc4 MDlCNTM2OTVGQy5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBADGiz+uNcNrPFTsFnfO+yyThy2U3K+1Ji/k1 mfkJXntVS+r9QuD0jTSzikP/0VSbs5lxQslyxufEhi1v01xW88d30boV2YDA6ByM 537H0bdQ6CpBNu9rLw6xANqtjqGcvNbPPEI69niwRMYe9W0dfJTSjTs77/1cMvTc 8UA38HLQPglfP0wPXnFPYwTusV6UQDvjdONEIZ3a5ADll8EasbLVUVh+QNpbDvA3 SK7XTOh47zCvsSymxHiWyS2e4Ug0PLWS0QhH1Nz6WPjSTMTFwLBhlWr4kndm9gPw mfpPuDPHi/L8jKXm3wtr1V2n87qRyzZWQK8Sc2KfGe9M0f+Gqwk= -----END CERTIFICATE-----Generated at Wed Dec 3 14:44:17 2025 by rpki-client