This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf repo-rpki.idnic.net/repo/9e30ac64-0f13-4162-968f-afe5cc714cf6/0/27C6A8841764185192D3B7E3FC6D1ABD2D137D51.mft
File:                     27C6A8841764185192D3B7E3FC6D1ABD2D137D51.mft (raw, json)
Hash identifier:          6gMAVD3lxdXeEWx3bgDU6+gzYZmiAR2nTXvANAgM25M=
Subject key identifier:   E3:27:82:EA:04:DA:37:6C:39:3B:4F:38:9D:C6:38:85:B3:B7:45:A0
Authority key identifier: 27:C6:A8:84:17:64:18:51:92:D3:B7:E3:FC:6D:1A:BD:2D:13:7D:51
Certificate issuer:       /CN=27C6A8841764185192D3B7E3FC6D1ABD2D137D51
Certificate serial:       7915038E59DE4227A83F1DB32BC53C89204813BE
Authority info access:    rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/27C6A8841764185192D3B7E3FC6D1ABD2D137D51.cer
Subject info access:      rsync://repo-rpki.idnic.net/repo/9e30ac64-0f13-4162-968f-afe5cc714cf6/0/27C6A8841764185192D3B7E3FC6D1ABD2D137D51.mft
Manifest number:          0197
Signing time:             Wed 03 Dec 2025 08:41:25 +0000
Manifest this update:     Wed 03 Dec 2025 08:36:25 +0000
Manifest next update:     Sat 06 Dec 2025 12:06:25 +0000
Files and hashes:         1: 27C6A8841764185192D3B7E3FC6D1ABD2D137D51.crl (hash: 39Dz+yfsYTu118RetVLz4XnOKGZ2a1KA//DtsPRiHdo=)
                          2: 3130332e3138392e3136362e302f32332d3233203d3e20313439383835.roa (hash: 6LXlbR4cNb7e/a5cj5XOa29IvaWvdwclgoGKyPVr99g=)
Validation:               OK
Signature path:           rsync://repo-rpki.idnic.net/repo/9e30ac64-0f13-4162-968f-afe5cc714cf6/0/27C6A8841764185192D3B7E3FC6D1ABD2D137D51.crl
                          rsync://repo-rpki.idnic.net/repo/9e30ac64-0f13-4162-968f-afe5cc714cf6/0/27C6A8841764185192D3B7E3FC6D1ABD2D137D51.mft
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/27C6A8841764185192D3B7E3FC6D1ABD2D137D51.cer
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sat 06 Dec 2025 12:06:25 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            79:15:03:8e:59:de:42:27:a8:3f:1d:b3:2b:c5:3c:89:20:48:13:be
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=27C6A8841764185192D3B7E3FC6D1ABD2D137D51
        Validity
            Not Before: Dec  3 08:36:25 2025 GMT
            Not After : Dec  6 12:06:25 2025 GMT
        Subject: CN=E32782EA04DA376C393B4F389DC63885B3B745A0
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a8:d5:1f:87:4d:0a:dc:55:95:a7:75:98:c8:12:
                    3d:87:78:b7:e9:76:16:6c:c3:ed:a5:60:24:84:8b:
                    d1:2d:bf:51:50:3f:db:49:c8:9a:fb:e3:7d:06:90:
                    16:9f:8b:cd:be:0d:c1:81:d4:a1:06:5a:21:94:53:
                    4e:bf:c1:87:91:a4:ab:28:46:92:e0:69:68:37:8d:
                    e8:57:5e:5c:a7:c9:38:18:23:32:af:8c:2a:92:92:
                    b4:c1:08:18:27:5d:8c:ed:e9:37:1c:34:63:48:54:
                    14:27:52:b8:c0:87:dc:cb:13:17:e6:eb:3e:ee:94:
                    a0:94:eb:8e:39:b1:af:2c:b3:8b:95:e9:64:05:4c:
                    f2:56:7c:ca:b0:0a:8e:48:3f:cd:7b:d6:81:53:a2:
                    50:3e:6b:2a:e2:99:a8:09:ef:7d:10:66:ca:0d:47:
                    38:4e:8a:2c:72:92:de:de:84:29:cf:9a:aa:77:30:
                    31:64:43:ab:8f:fc:32:3b:b8:3b:7a:75:55:01:e3:
                    ea:96:76:54:a4:88:09:5c:bb:50:7e:b7:d9:29:35:
                    70:6e:0b:5a:81:c0:6f:e0:09:59:73:e1:d9:6a:f7:
                    8d:e9:58:ab:de:35:e7:4a:8d:9d:8d:ec:22:7b:ca:
                    16:d8:ec:7b:23:c4:79:77:6f:f2:fe:76:ea:00:fb:
                    d5:09
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E3:27:82:EA:04:DA:37:6C:39:3B:4F:38:9D:C6:38:85:B3:B7:45:A0
            X509v3 Authority Key Identifier:
                keyid:27:C6:A8:84:17:64:18:51:92:D3:B7:E3:FC:6D:1A:BD:2D:13:7D:51

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repo-rpki.idnic.net/repo/9e30ac64-0f13-4162-968f-afe5cc714cf6/0/27C6A8841764185192D3B7E3FC6D1ABD2D137D51.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/27C6A8841764185192D3B7E3FC6D1ABD2D137D51.cer

            Subject Information Access:
                Signed Object - URI:rsync://repo-rpki.idnic.net/repo/9e30ac64-0f13-4162-968f-afe5cc714cf6/0/27C6A8841764185192D3B7E3FC6D1ABD2D137D51.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         8e:88:77:95:b3:db:1e:a7:b4:c1:38:05:55:cc:c3:48:fc:f9:
         0f:1a:70:41:d9:b0:87:03:a2:c9:fd:05:9d:37:de:68:0b:5d:
         a8:75:d3:00:2e:1a:94:e9:81:ea:af:55:03:55:7d:20:89:04:
         45:04:a0:b6:50:3d:52:9a:d1:7c:45:a8:df:89:bb:1f:6d:b0:
         74:e6:ca:0c:9f:b7:6b:1c:68:37:c9:82:01:83:93:2e:29:39:
         4b:c8:55:be:0e:84:dd:4f:7e:0a:99:3a:d3:b8:1e:01:61:7a:
         64:95:21:e7:69:c0:18:7d:d4:0f:23:8e:bd:94:08:cb:75:12:
         c8:d8:84:f8:18:b0:7f:48:7d:24:03:8a:5e:e1:8b:38:9a:1c:
         a6:f4:0c:b7:f7:60:65:73:e7:2b:64:15:5a:78:9a:ec:95:94:
         6b:04:a6:ba:b2:12:8b:64:e2:62:1c:00:be:33:3c:36:be:3b:
         0f:f3:a6:86:59:f6:01:9f:bb:7a:63:23:b6:89:04:e1:50:2e:
         6c:37:34:a0:51:ac:1b:0f:e0:9b:06:75:2a:86:7c:95:05:1b:
         35:95:8c:b3:74:3b:ca:7c:0a:3b:c7:e5:32:ac:9a:28:41:93:
         57:48:e7:1c:07:3b:bd:6d:43:d7:35:6e:19:8e:81:32:e9:16:
         58:8a:b7:03
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Dec 3 15:28:52 2025 by rpki-client