This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf repo-rpki.idnic.net/repo/8ff09584-9110-4b0d-8f6d-2ce5258e846b/0/2C27A0D9DD2531EBEF1E2EC56ACBCBCEB21C498E.mft File: 2C27A0D9DD2531EBEF1E2EC56ACBCBCEB21C498E.mft (raw, json) Hash identifier: uxss5X0uDZDFKw4rY6C7K9Cum54cHLS1+cONkHJHItU= Subject key identifier: C9:2B:3F:92:73:BE:53:E5:E3:FD:02:95:38:46:1F:B7:0C:EF:3C:A9 Authority key identifier: 2C:27:A0:D9:DD:25:31:EB:EF:1E:2E:C5:6A:CB:CB:CE:B2:1C:49:8E Certificate issuer: /CN=2C27A0D9DD2531EBEF1E2EC56ACBCBCEB21C498E Certificate serial: 5947A4DA7E8EF3AB250E474D5DC07B1B8AF22060 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/2C27A0D9DD2531EBEF1E2EC56ACBCBCEB21C498E.cer Subject info access: rsync://repo-rpki.idnic.net/repo/8ff09584-9110-4b0d-8f6d-2ce5258e846b/0/2C27A0D9DD2531EBEF1E2EC56ACBCBCEB21C498E.mft Manifest number: 44 Signing time: Mon 01 Dec 2025 14:12:03 +0000 Manifest this update: Mon 01 Dec 2025 14:07:03 +0000 Manifest next update: Thu 04 Dec 2025 16:04:03 +0000 Files and hashes: 1: 3130332e3136362e3232362e302f32342d3234203d3e20313431393539.roa (hash: 6F2YD7bfpsvy9ZCzb1NRXMUO3qP13tF9eyDHsH0IzEg=) 2: 3130332e3136362e3232362e302f32332d3234203d3e20313431393539.roa (hash: 4LokQzzFwf4xC5LYRIdk1nOZ26P5gcvOND0Okjnr1uo=) 3: 3130332e3136362e3232372e302f32342d3234203d3e20313431393539.roa (hash: 745SbMdhMmIVd9+YwllDATXoMHy8b7XWNJsce0BNxUE=) 4: 2C27A0D9DD2531EBEF1E2EC56ACBCBCEB21C498E.crl (hash: k/8Q/mp32KpV3F5XiJljgcDRRg/5h+kD//5NB2dqesg=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/8ff09584-9110-4b0d-8f6d-2ce5258e846b/0/2C27A0D9DD2531EBEF1E2EC56ACBCBCEB21C498E.crl rsync://repo-rpki.idnic.net/repo/8ff09584-9110-4b0d-8f6d-2ce5258e846b/0/2C27A0D9DD2531EBEF1E2EC56ACBCBCEB21C498E.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/2C27A0D9DD2531EBEF1E2EC56ACBCBCEB21C498E.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 04 Dec 2025 16:04:03 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 59:47:a4:da:7e:8e:f3:ab:25:0e:47:4d:5d:c0:7b:1b:8a:f2:20:60 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2C27A0D9DD2531EBEF1E2EC56ACBCBCEB21C498E Validity Not Before: Dec 1 14:07:03 2025 GMT Not After : Dec 4 16:04:03 2025 GMT Subject: CN=C92B3F9273BE53E5E3FD029538461FB70CEF3CA9 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:dc:c2:d5:43:a9:05:76:a5:de:6d:39:ba:2f:bd: 73:65:53:78:ea:2a:9a:8c:90:83:7d:0f:59:df:51: 52:98:ca:f2:ec:64:07:c1:ae:2a:c1:ec:ea:39:28: 86:66:7f:5c:d0:02:30:52:54:4c:d9:48:c5:0a:db: bb:bd:16:8d:bf:69:90:d2:3a:80:62:13:27:f1:e6: 7c:98:8e:f8:8f:ba:cc:7c:90:e1:bd:86:68:1f:ef: 5c:7d:23:92:74:5e:db:74:00:01:41:01:28:43:d5: f2:cf:fb:4a:4e:df:08:85:ba:ba:17:45:ce:3b:e7: 7b:91:db:bb:0a:0e:33:a9:29:88:ea:bf:7c:82:85: 2d:b0:04:7c:31:d1:6b:fb:3d:fd:18:f4:04:31:53: 1f:4f:0d:24:2a:96:6f:f9:2d:bf:22:3a:da:91:a0: 50:48:3b:69:23:6c:d9:26:2e:98:95:59:74:2a:85: 42:1d:b5:5e:53:dc:29:81:42:64:56:fa:87:f6:4c: bd:83:d1:48:4d:ac:1c:b2:04:d8:c7:4d:9d:75:08: 9a:f9:b1:1f:94:76:11:31:81:d2:68:7f:7a:7c:88: 6a:38:46:2d:22:f5:ba:8c:d6:46:c1:e0:c0:8e:79: 89:b5:c7:b3:57:1b:1d:f5:f3:1f:82:db:4a:c4:6b: ca:27 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: C9:2B:3F:92:73:BE:53:E5:E3:FD:02:95:38:46:1F:B7:0C:EF:3C:A9 X509v3 Authority Key Identifier: keyid:2C:27:A0:D9:DD:25:31:EB:EF:1E:2E:C5:6A:CB:CB:CE:B2:1C:49:8E X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/8ff09584-9110-4b0d-8f6d-2ce5258e846b/0/2C27A0D9DD2531EBEF1E2EC56ACBCBCEB21C498E.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/2C27A0D9DD2531EBEF1E2EC56ACBCBCEB21C498E.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/8ff09584-9110-4b0d-8f6d-2ce5258e846b/0/2C27A0D9DD2531EBEF1E2EC56ACBCBCEB21C498E.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption b7:5b:98:48:09:24:5b:21:cb:d6:73:53:0d:cf:f0:c9:48:89: 54:b4:93:df:29:1f:1d:42:9d:58:d4:3a:f4:eb:20:53:bb:e6: 49:08:70:b0:33:7e:de:85:a1:f0:38:d8:1b:7a:f8:0a:fb:a8: 3a:5d:9a:57:50:48:0a:27:da:2e:67:d2:c6:34:64:89:bd:4c: 29:75:80:58:42:c7:d1:23:f1:6f:79:21:3c:bc:ea:4d:39:6e: f7:88:91:89:c2:89:27:cd:05:62:b0:a5:68:35:76:db:45:74: 4f:b7:7a:9c:21:0e:2d:7c:ef:64:6d:ec:c3:51:08:ce:22:fa: 52:fd:83:bd:ee:9d:b0:ec:83:a6:f2:56:0d:3e:12:e9:c8:05: 9b:32:75:9d:06:64:27:f8:1a:cb:6b:10:13:b1:eb:26:92:8d: 70:e1:38:70:cc:fb:5a:7b:82:47:ca:33:c1:3d:bc:1c:71:e1: b2:18:74:69:ce:5f:77:52:37:8f:69:b8:79:63:da:bc:9c:ee: da:48:2b:7c:9d:2f:cc:b2:55:ea:bc:12:16:bb:26:41:b2:f4: 6b:5a:d9:f0:f6:f3:3a:f4:62:79:9b:8c:75:a0:ed:66:97:60: fb:1d:5f:d8:7b:15:2b:4b:f0:dc:a5:85:40:49:fa:e4:24:eb: f3:65:38:b3 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUWUek2n6O86slDkdNXcB7G4ryIGAwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMkMyN0EwRDlERDI1MzFFQkVGMUUyRUM1NkFDQkNCQ0VC MjFDNDk4RTAeFw0yNTEyMDExNDA3MDNaFw0yNTEyMDQxNjA0MDNaMDMxMTAvBgNV BAMTKEM5MkIzRjkyNzNCRTUzRTVFM0ZEMDI5NTM4NDYxRkI3MENFRjNDQTkwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDcwtVDqQV2pd5tObovvXNlU3jq KpqMkIN9D1nfUVKYyvLsZAfBrirB7Oo5KIZmf1zQAjBSVEzZSMUK27u9Fo2/aZDS OoBiEyfx5nyYjviPusx8kOG9hmgf71x9I5J0Xtt0AAFBAShD1fLP+0pO3wiFuroX Rc4753uR27sKDjOpKYjqv3yChS2wBHwx0Wv7Pf0Y9AQxUx9PDSQqlm/5Lb8iOtqR oFBIO2kjbNkmLpiVWXQqhUIdtV5T3CmBQmRW+of2TL2D0UhNrByyBNjHTZ11CJr5 sR+UdhExgdJof3p8iGo4Ri0i9bqM1kbB4MCOeYm1x7NXGx318x+C20rEa8onAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUySs/knO+U+Xj/QKVOEYftwzvPKkwHwYDVR0j BBgwFoAULCeg2d0lMevvHi7FasvLzrIcSY4wDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby84 ZmYwOTU4NC05MTEwLTRiMGQtOGY2ZC0yY2U1MjU4ZTg0NmIvMC8yQzI3QTBEOURE MjUzMUVCRUYxRTJFQzU2QUNCQ0JDRUIyMUM0OThFLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvMkMyN0EwRDlERDI1MzFFQkVGMUUyRUM1NkFDQkNCQ0VCMjFD NDk4RS5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vOGZmMDk1ODQtOTExMC00YjBkLThm NmQtMmNlNTI1OGU4NDZiLzAvMkMyN0EwRDlERDI1MzFFQkVGMUUyRUM1NkFDQkNC Q0VCMjFDNDk4RS5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBALdbmEgJJFshy9ZzUw3P8MlIiVS0k98pHx1C nVjUOvTrIFO75kkIcLAzft6FofA42Bt6+Ar7qDpdmldQSAon2i5n0sY0ZIm9TCl1 gFhCx9Ej8W95ITy86k05bveIkYnCiSfNBWKwpWg1dttFdE+3epwhDi1872Rt7MNR CM4i+lL9g73unbDsg6byVg0+EunIBZsydZ0GZCf4GstrEBOx6yaSjXDhOHDM+1p7 gkfKM8E9vBxx4bIYdGnOX3dSN49puHlj2ryc7tpIK3ydL8yyVeq8Eha7JkGy9Gta 2fD28zr0YnmbjHWg7WaXYPsdX9h7FStL8NylhUBJ+uQk6/NlOLM= -----END CERTIFICATE-----Generated at Wed Dec 3 14:13:33 2025 by rpki-client