This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf repo-rpki.idnic.net/repo/a6e3dd95-2a85-439e-84f2-972a23e3271e/0/27992B841C717A90B3FDBD81B476F3FF9045212D.mft File: 27992B841C717A90B3FDBD81B476F3FF9045212D.mft (raw, json) Hash identifier: tuKhgi9SbvDSe0UgDkJ7qZN4dDy5/PhrPzklNvLeDNA= Subject key identifier: 44:A9:B9:D9:50:E8:09:FC:B7:AF:28:F8:E2:70:19:17:9B:E2:81:FF Authority key identifier: 27:99:2B:84:1C:71:7A:90:B3:FD:BD:81:B4:76:F3:FF:90:45:21:2D Certificate issuer: /CN=27992B841C717A90B3FDBD81B476F3FF9045212D Certificate serial: 7BDB80D89989D50E0F8801FCF95BB45C86E76ED5 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/27992B841C717A90B3FDBD81B476F3FF9045212D.cer Subject info access: rsync://repo-rpki.idnic.net/repo/a6e3dd95-2a85-439e-84f2-972a23e3271e/0/27992B841C717A90B3FDBD81B476F3FF9045212D.mft Manifest number: 0149 Signing time: Mon 15 Dec 2025 06:10:04 +0000 Manifest this update: Mon 15 Dec 2025 06:05:04 +0000 Manifest next update: Thu 18 Dec 2025 17:07:04 +0000 Files and hashes: 1: 3130332e35352e3232372e302f32342d3234203d3e20313334363538.roa (hash: 2fll4NIrlBtRmSI1B/XfRZt07eji5vB7yU1I6L4xwaU=) 2: 3130332e35352e3232362e302f32342d3234203d3e20313334363538.roa (hash: zJ4dPhpKTwfxjBM9r05t0oUe6ezn1Aa8OjhsYGhldqw=) 3: 3130332e35352e3232362e302f32342d3234203d3e20313530343839.roa (hash: Ox4ZTFR07e7JY/PWDRkVjaGrsYWVREjNDM/zRhbDUOE=) 4: 27992B841C717A90B3FDBD81B476F3FF9045212D.crl (hash: IIu6npUbU0uyJ4vT70Wh3csfZV1fdAISuWelCol1X74=) 5: 3130332e35352e3232372e302f32342d3234203d3e20313530343839.roa (hash: VwvC8FnFaqPY+qV2Yf8a0j5PamatjQpNJvumx1aC9c4=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/a6e3dd95-2a85-439e-84f2-972a23e3271e/0/27992B841C717A90B3FDBD81B476F3FF9045212D.crl rsync://repo-rpki.idnic.net/repo/a6e3dd95-2a85-439e-84f2-972a23e3271e/0/27992B841C717A90B3FDBD81B476F3FF9045212D.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/27992B841C717A90B3FDBD81B476F3FF9045212D.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 18 Dec 2025 09:17:03 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 7b:db:80:d8:99:89:d5:0e:0f:88:01:fc:f9:5b:b4:5c:86:e7:6e:d5 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=27992B841C717A90B3FDBD81B476F3FF9045212D Validity Not Before: Dec 15 06:05:04 2025 GMT Not After : Dec 18 17:07:04 2025 GMT Subject: CN=44A9B9D950E809FCB7AF28F8E27019179BE281FF Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d7:3e:6d:fd:18:04:be:06:a8:52:b0:8e:d0:c0: 24:5d:9a:93:c3:11:b8:90:58:7e:af:c9:86:de:9c: cf:39:04:63:42:d3:a5:be:f4:c8:21:83:70:d3:9e: a2:08:03:95:b7:e8:f0:52:fe:28:23:99:5c:39:60: d3:a8:6d:01:e0:45:be:01:69:f5:f9:22:98:a4:17: 66:90:e7:52:34:e6:a0:4e:38:c7:99:f1:9b:2a:d8: 3c:51:a7:10:53:8a:3e:05:5d:fb:ee:41:df:8b:6a: a5:f5:6d:a7:47:58:34:e1:6b:94:0a:22:c5:00:73: dd:2b:49:e9:c5:15:49:17:67:e7:42:dc:e9:b9:c9: 6e:5c:5d:f0:56:9f:69:19:0c:ed:0d:06:9c:6d:6b: 9c:69:7d:95:57:f3:8a:4c:a1:d5:e1:b2:a3:98:8f: 80:14:fa:eb:6a:c2:ac:b7:03:ba:85:27:09:18:13: d4:78:bf:16:55:7a:77:10:69:d4:d1:d3:f8:ef:17: 13:e8:41:00:6a:cc:a6:2c:ea:a6:ea:51:43:92:ff: 8d:9a:3c:00:30:0f:9e:22:be:35:f5:4d:cc:58:8d: 2e:bd:a5:e9:a4:a6:60:01:27:de:36:88:55:1d:ba: 53:b3:03:fb:49:16:8e:99:f6:6b:e9:c8:4d:d4:f5: 6b:fd Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 44:A9:B9:D9:50:E8:09:FC:B7:AF:28:F8:E2:70:19:17:9B:E2:81:FF X509v3 Authority Key Identifier: keyid:27:99:2B:84:1C:71:7A:90:B3:FD:BD:81:B4:76:F3:FF:90:45:21:2D X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/a6e3dd95-2a85-439e-84f2-972a23e3271e/0/27992B841C717A90B3FDBD81B476F3FF9045212D.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/27992B841C717A90B3FDBD81B476F3FF9045212D.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/a6e3dd95-2a85-439e-84f2-972a23e3271e/0/27992B841C717A90B3FDBD81B476F3FF9045212D.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 8a:ed:89:14:66:5f:69:a0:48:92:2a:b5:a9:09:aa:b0:b1:ee: ec:39:f2:fd:b8:25:39:f2:36:ef:01:59:a9:e1:9b:7c:5b:17: 2a:c7:c8:33:84:fa:db:14:5d:ab:50:2d:a8:d8:cd:43:84:87: 20:b0:94:e2:c8:44:b5:60:2b:94:0e:cd:15:a6:a2:92:3f:d1: 11:30:b2:17:13:dd:cb:6e:1b:c4:d3:dd:e7:0e:8a:13:4f:41: b7:26:c8:21:b5:e8:eb:ed:f4:9c:41:56:3f:87:85:21:10:6e: 60:c4:b0:ab:fc:8e:10:ae:5c:92:e6:e5:9f:68:bd:28:db:4f: 82:b0:c1:0e:e7:19:45:7a:a9:a5:48:81:1f:35:ca:88:81:f0: 53:49:2e:a8:d0:19:6d:c5:58:a7:9d:25:94:be:a2:95:11:6b: a3:ba:90:87:84:2f:25:48:99:ec:ac:03:5e:ff:c4:f8:93:16: 9b:f1:7b:0d:7d:01:02:f0:65:9c:0f:85:6b:4a:32:f7:b1:67: 68:8a:3e:9a:9a:38:a1:5d:d4:69:26:85:4c:9e:95:96:05:46: 39:a6:5f:da:ac:6d:47:9d:ae:a2:9c:aa:a8:7a:37:74:a8:c0: aa:7d:31:94:c1:20:a5:88:e6:d1:66:f1:db:65:4e:14:73:3c: 95:fb:e5:79 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUe9uA2JmJ1Q4PiAH8+Vu0XIbnbtUwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMjc5OTJCODQxQzcxN0E5MEIzRkRCRDgxQjQ3NkYzRkY5 MDQ1MjEyRDAeFw0yNTEyMTUwNjA1MDRaFw0yNTEyMTgxNzA3MDRaMDMxMTAvBgNV BAMTKDQ0QTlCOUQ5NTBFODA5RkNCN0FGMjhGOEUyNzAxOTE3OUJFMjgxRkYwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDXPm39GAS+BqhSsI7QwCRdmpPD EbiQWH6vyYbenM85BGNC06W+9Mghg3DTnqIIA5W36PBS/igjmVw5YNOobQHgRb4B afX5IpikF2aQ51I05qBOOMeZ8Zsq2DxRpxBTij4FXfvuQd+LaqX1badHWDTha5QK IsUAc90rSenFFUkXZ+dC3Om5yW5cXfBWn2kZDO0NBpxta5xpfZVX84pModXhsqOY j4AU+utqwqy3A7qFJwkYE9R4vxZVencQadTR0/jvFxPoQQBqzKYs6qbqUUOS/42a PAAwD54ivjX1TcxYjS69pemkpmABJ942iFUdulOzA/tJFo6Z9mvpyE3U9Wv9AgMB AAGjggI8MIICODAdBgNVHQ4EFgQURKm52VDoCfy3ryj44nAZF5vigf8wHwYDVR0j BBgwFoAUJ5krhBxxepCz/b2BtHbz/5BFIS0wDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby9h NmUzZGQ5NS0yYTg1LTQzOWUtODRmMi05NzJhMjNlMzI3MWUvMC8yNzk5MkI4NDFD NzE3QTkwQjNGREJEODFCNDc2RjNGRjkwNDUyMTJELmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvMjc5OTJCODQxQzcxN0E5MEIzRkRCRDgxQjQ3NkYzRkY5MDQ1 MjEyRC5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vYTZlM2RkOTUtMmE4NS00MzllLTg0 ZjItOTcyYTIzZTMyNzFlLzAvMjc5OTJCODQxQzcxN0E5MEIzRkRCRDgxQjQ3NkYz RkY5MDQ1MjEyRC5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAIrtiRRmX2mgSJIqtakJqrCx7uw58v24JTny Nu8BWanhm3xbFyrHyDOE+tsUXatQLajYzUOEhyCwlOLIRLVgK5QOzRWmopI/0REw shcT3ctuG8TT3ecOihNPQbcmyCG16Ovt9JxBVj+HhSEQbmDEsKv8jhCuXJLm5Z9o vSjbT4KwwQ7nGUV6qaVIgR81yoiB8FNJLqjQGW3FWKedJZS+opURa6O6kIeELyVI meysA17/xPiTFpvxew19AQLwZZwPhWtKMvexZ2iKPpqaOKFd1GkmhUyelZYFRjmm X9qsbUedrqKcqqh6N3SowKp9MZTBIKWI5tFm8dtlThRzPJX75Xk= -----END CERTIFICATE-----Generated at Mon Dec 15 12:03:14 2025 by rpki-client