This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf repo-rpki.idnic.net/repo/8ff09584-9110-4b0d-8f6d-2ce5258e846b/0/2C27A0D9DD2531EBEF1E2EC56ACBCBCEB21C498E.mft File: 2C27A0D9DD2531EBEF1E2EC56ACBCBCEB21C498E.mft (raw, json) Hash identifier: ksd3Sk3Y0w8CGluOILhMRaNXrHM3eNaBFlC8ESN5OpA= Subject key identifier: 48:78:B0:06:EE:2B:20:9A:F8:92:95:5C:14:87:A3:A5:C4:FC:BB:08 Authority key identifier: 2C:27:A0:D9:DD:25:31:EB:EF:1E:2E:C5:6A:CB:CB:CE:B2:1C:49:8E Certificate issuer: /CN=2C27A0D9DD2531EBEF1E2EC56ACBCBCEB21C498E Certificate serial: 5F642ECDD3439AF887CDB4BA41FE0D2A74B3942F Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/2C27A0D9DD2531EBEF1E2EC56ACBCBCEB21C498E.cer Subject info access: rsync://repo-rpki.idnic.net/repo/8ff09584-9110-4b0d-8f6d-2ce5258e846b/0/2C27A0D9DD2531EBEF1E2EC56ACBCBCEB21C498E.mft Manifest number: 60 Signing time: Mon 02 Feb 2026 07:22:03 +0000 Manifest this update: Mon 02 Feb 2026 07:17:03 +0000 Manifest next update: Thu 05 Feb 2026 09:57:03 +0000 Files and hashes: 1: 3130332e3136362e3232362e302f32332d3234203d3e20313431393539.roa (hash: 4LokQzzFwf4xC5LYRIdk1nOZ26P5gcvOND0Okjnr1uo=) 2: 3130332e3136362e3232362e302f32342d3234203d3e20313431393539.roa (hash: 6F2YD7bfpsvy9ZCzb1NRXMUO3qP13tF9eyDHsH0IzEg=) 3: 2C27A0D9DD2531EBEF1E2EC56ACBCBCEB21C498E.crl (hash: cfzDaHxIgYpZLpJH6WPXDqqlb5RJiq3oNTDSoJc6vag=) 4: 3130332e3136362e3232372e302f32342d3234203d3e20313431393539.roa (hash: 745SbMdhMmIVd9+YwllDATXoMHy8b7XWNJsce0BNxUE=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/8ff09584-9110-4b0d-8f6d-2ce5258e846b/0/2C27A0D9DD2531EBEF1E2EC56ACBCBCEB21C498E.crl rsync://repo-rpki.idnic.net/repo/8ff09584-9110-4b0d-8f6d-2ce5258e846b/0/2C27A0D9DD2531EBEF1E2EC56ACBCBCEB21C498E.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/2C27A0D9DD2531EBEF1E2EC56ACBCBCEB21C498E.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 05 Feb 2026 05:24:03 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 5f:64:2e:cd:d3:43:9a:f8:87:cd:b4:ba:41:fe:0d:2a:74:b3:94:2f Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2C27A0D9DD2531EBEF1E2EC56ACBCBCEB21C498E Validity Not Before: Feb 2 07:17:03 2026 GMT Not After : Feb 5 09:57:03 2026 GMT Subject: CN=4878B006EE2B209AF892955C1487A3A5C4FCBB08 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:f1:29:c3:69:ff:33:c0:b0:9d:b6:81:cf:db:50: 0d:c5:82:a2:0c:cd:72:02:36:43:03:6c:7a:cd:d9: 57:6b:19:7a:a7:2c:61:7b:ca:2f:33:f2:a3:de:aa: f7:ea:8c:5f:54:79:26:0c:4c:47:f6:0a:4b:89:af: 48:e8:6c:50:59:a0:e3:1f:6c:ab:ca:b9:47:d1:7d: ee:e0:45:72:88:17:22:08:77:95:7c:ef:a1:4e:dd: 7e:78:ce:7c:1a:92:c5:04:c7:7b:97:9f:b9:72:32: 06:31:2a:e2:02:72:cc:8d:d4:9f:59:d2:66:15:c0: d4:92:3e:b0:75:9b:5a:7b:08:c8:5d:94:fb:6c:af: 67:48:e7:18:2f:a8:c2:f6:ac:55:17:f2:59:4a:44: 70:cd:1d:ba:24:e4:52:3e:b7:f9:2b:8a:96:d8:9b: 07:3d:71:ee:8d:01:3d:fb:f1:c6:d4:3f:0d:5f:47: e5:e1:32:97:c5:60:1f:37:09:4d:01:ee:8b:1a:b1: 25:9f:78:37:01:81:f2:0e:97:f9:62:27:fe:a2:07: 57:06:a4:25:08:ef:63:d5:43:bc:59:f5:a0:fd:8e: e8:6c:a5:94:cc:ac:54:a0:a8:f4:1d:d0:1d:9e:45: 3c:d7:a0:d2:f1:d8:36:68:c4:73:e8:bd:b1:11:f3: 53:13 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 48:78:B0:06:EE:2B:20:9A:F8:92:95:5C:14:87:A3:A5:C4:FC:BB:08 X509v3 Authority Key Identifier: keyid:2C:27:A0:D9:DD:25:31:EB:EF:1E:2E:C5:6A:CB:CB:CE:B2:1C:49:8E X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/8ff09584-9110-4b0d-8f6d-2ce5258e846b/0/2C27A0D9DD2531EBEF1E2EC56ACBCBCEB21C498E.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/2C27A0D9DD2531EBEF1E2EC56ACBCBCEB21C498E.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/8ff09584-9110-4b0d-8f6d-2ce5258e846b/0/2C27A0D9DD2531EBEF1E2EC56ACBCBCEB21C498E.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 1b:94:d8:41:6f:3a:2d:59:50:3a:1f:95:2f:40:30:b3:40:8e: 98:0b:a3:b1:50:52:0f:cc:00:88:9f:0c:99:6f:cb:b2:dd:7e: 4d:3a:5b:b7:c3:8a:55:5d:a9:ea:31:fd:a2:06:b6:61:4c:1e: 39:f7:30:2b:83:00:93:ae:e5:e7:bf:63:2f:bb:68:c7:0f:47: 2a:8a:de:0b:21:45:e4:1a:f0:a7:33:ee:e9:92:ad:3c:d3:04: 2d:03:f0:44:cd:e6:05:f8:58:82:13:ee:e7:4d:34:ca:9b:78: 39:d6:83:1c:32:c2:e4:d8:cc:f8:65:0d:59:11:d4:b3:fa:7c: 12:8d:44:c9:c9:05:96:c8:4d:6b:7a:c6:a8:95:54:3d:c8:1f: 71:8b:d4:fa:ee:c0:86:cb:f0:05:a0:ac:db:a5:6f:35:e1:5b: 5e:8a:18:46:a3:bd:e7:40:ef:3a:eb:e2:4f:99:cf:e8:a8:c5: e7:5a:48:30:09:fe:e2:00:0b:4f:5c:eb:e3:d7:2e:88:92:53: 68:5f:6d:7a:41:b3:81:46:c4:42:a1:16:1a:0b:43:8f:b6:ed: e9:79:ae:c3:b5:f4:87:6c:55:ca:c9:1e:11:b3:0b:77:fb:aa: 42:b6:4a:5d:00:30:bd:63:55:06:ac:37:d5:d5:79:2a:68:fc: c7:73:3d:4d -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUX2QuzdNDmviHzbS6Qf4NKnSzlC8wDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMkMyN0EwRDlERDI1MzFFQkVGMUUyRUM1NkFDQkNCQ0VC MjFDNDk4RTAeFw0yNjAyMDIwNzE3MDNaFw0yNjAyMDUwOTU3MDNaMDMxMTAvBgNV BAMTKDQ4NzhCMDA2RUUyQjIwOUFGODkyOTU1QzE0ODdBM0E1QzRGQ0JCMDgwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDxKcNp/zPAsJ22gc/bUA3FgqIM zXICNkMDbHrN2VdrGXqnLGF7yi8z8qPeqvfqjF9UeSYMTEf2CkuJr0jobFBZoOMf bKvKuUfRfe7gRXKIFyIId5V876FO3X54znwaksUEx3uXn7lyMgYxKuICcsyN1J9Z 0mYVwNSSPrB1m1p7CMhdlPtsr2dI5xgvqML2rFUX8llKRHDNHbok5FI+t/kripbY mwc9ce6NAT378cbUPw1fR+XhMpfFYB83CU0B7osasSWfeDcBgfIOl/liJ/6iB1cG pCUI72PVQ7xZ9aD9juhspZTMrFSgqPQd0B2eRTzXoNLx2DZoxHPovbER81MTAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUSHiwBu4rIJr4kpVcFIejpcT8uwgwHwYDVR0j BBgwFoAULCeg2d0lMevvHi7FasvLzrIcSY4wDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby84 ZmYwOTU4NC05MTEwLTRiMGQtOGY2ZC0yY2U1MjU4ZTg0NmIvMC8yQzI3QTBEOURE MjUzMUVCRUYxRTJFQzU2QUNCQ0JDRUIyMUM0OThFLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvMkMyN0EwRDlERDI1MzFFQkVGMUUyRUM1NkFDQkNCQ0VCMjFD NDk4RS5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vOGZmMDk1ODQtOTExMC00YjBkLThm NmQtMmNlNTI1OGU4NDZiLzAvMkMyN0EwRDlERDI1MzFFQkVGMUUyRUM1NkFDQkNC Q0VCMjFDNDk4RS5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBABuU2EFvOi1ZUDoflS9AMLNAjpgLo7FQUg/M AIifDJlvy7Ldfk06W7fDilVdqeox/aIGtmFMHjn3MCuDAJOu5ee/Yy+7aMcPRyqK 3gshReQa8Kcz7umSrTzTBC0D8ETN5gX4WIIT7udNNMqbeDnWgxwywuTYzPhlDVkR 1LP6fBKNRMnJBZbITWt6xqiVVD3IH3GL1PruwIbL8AWgrNulbzXhW16KGEajvedA 7zrr4k+Zz+ioxedaSDAJ/uIAC09c6+PXLoiSU2hfbXpBs4FGxEKhFhoLQ4+27el5 rsO19IdsVcrJHhGzC3f7qkK2Sl0AML1jVQasN9XVeSpo/MdzPU0= -----END CERTIFICATE-----Generated at Mon Feb 2 12:48:59 2026 by rpki-client