This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf repo-rpki.idnic.net/repo/a6e3dd95-2a85-439e-84f2-972a23e3271e/0/27992B841C717A90B3FDBD81B476F3FF9045212D.mft File: 27992B841C717A90B3FDBD81B476F3FF9045212D.mft (raw, json) Hash identifier: NRwizwa7gKtj+IoK7WmBnBWonWKkscbpTbPSqmHFXfw= Subject key identifier: 84:78:19:1B:1C:C0:67:A1:97:A4:69:32:FD:2D:01:29:58:E6:D6:5B Authority key identifier: 27:99:2B:84:1C:71:7A:90:B3:FD:BD:81:B4:76:F3:FF:90:45:21:2D Certificate issuer: /CN=27992B841C717A90B3FDBD81B476F3FF9045212D Certificate serial: 3FE3042F42CADF07386EFE6DBF640E675B945850 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/27992B841C717A90B3FDBD81B476F3FF9045212D.cer Subject info access: rsync://repo-rpki.idnic.net/repo/a6e3dd95-2a85-439e-84f2-972a23e3271e/0/27992B841C717A90B3FDBD81B476F3FF9045212D.mft Manifest number: 0143 Signing time: Mon 01 Dec 2025 16:50:04 +0000 Manifest this update: Mon 01 Dec 2025 16:45:04 +0000 Manifest next update: Fri 05 Dec 2025 00:40:04 +0000 Files and hashes: 1: 3130332e35352e3232362e302f32342d3234203d3e20313530343839.roa (hash: Ox4ZTFR07e7JY/PWDRkVjaGrsYWVREjNDM/zRhbDUOE=) 2: 3130332e35352e3232362e302f32342d3234203d3e20313334363538.roa (hash: zJ4dPhpKTwfxjBM9r05t0oUe6ezn1Aa8OjhsYGhldqw=) 3: 27992B841C717A90B3FDBD81B476F3FF9045212D.crl (hash: 1tJWRDdn9w1N5BezkaxiFAOYK0dYQRERdDUkdkPemNg=) 4: 3130332e35352e3232372e302f32342d3234203d3e20313530343839.roa (hash: VwvC8FnFaqPY+qV2Yf8a0j5PamatjQpNJvumx1aC9c4=) 5: 3130332e35352e3232372e302f32342d3234203d3e20313334363538.roa (hash: 2fll4NIrlBtRmSI1B/XfRZt07eji5vB7yU1I6L4xwaU=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/a6e3dd95-2a85-439e-84f2-972a23e3271e/0/27992B841C717A90B3FDBD81B476F3FF9045212D.crl rsync://repo-rpki.idnic.net/repo/a6e3dd95-2a85-439e-84f2-972a23e3271e/0/27992B841C717A90B3FDBD81B476F3FF9045212D.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/27992B841C717A90B3FDBD81B476F3FF9045212D.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 05 Dec 2025 00:40:04 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 3f:e3:04:2f:42:ca:df:07:38:6e:fe:6d:bf:64:0e:67:5b:94:58:50 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=27992B841C717A90B3FDBD81B476F3FF9045212D Validity Not Before: Dec 1 16:45:04 2025 GMT Not After : Dec 5 00:40:04 2025 GMT Subject: CN=8478191B1CC067A197A46932FD2D012958E6D65B Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ae:50:b1:50:1b:87:16:73:82:82:9e:5a:0e:92: e6:bc:93:15:da:d9:64:5f:56:54:6b:ac:65:2e:cb: 77:9b:f0:10:b5:2d:ad:08:84:ee:f3:73:4d:b1:30: f8:ca:64:81:94:f2:4b:31:95:61:7b:b6:70:5d:2f: 8e:95:86:c5:98:25:b8:54:e4:e3:e5:d4:43:b1:4d: af:9e:04:08:39:42:b5:78:d4:f0:06:78:64:48:09: d6:47:5b:64:48:cc:db:ef:dc:2f:45:12:56:35:e2: 40:45:fe:55:0e:15:60:8e:2d:06:d4:fa:e1:2e:67: 33:2d:8a:13:74:c4:72:23:15:99:72:ef:38:cc:c7: ca:e4:d8:84:76:e7:72:7d:b9:4c:9f:33:06:73:51: 0f:6c:93:cc:87:fa:94:6a:fe:51:4a:b0:10:5a:ba: 29:57:ec:06:80:07:0b:24:89:bf:e9:d8:75:40:c0: 52:7b:3d:23:d5:0b:1e:fe:df:bb:91:47:bd:d5:a9: e4:4e:99:8d:27:de:6c:80:21:67:1e:63:64:26:5e: a5:00:e5:b0:c1:21:df:39:66:28:b6:a3:5f:21:e4: 89:22:62:5d:58:d6:7a:69:8d:db:2f:47:d4:2f:2f: 0c:e6:92:2a:47:87:53:d7:5c:bc:96:ea:b1:2f:77: 5c:b9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 84:78:19:1B:1C:C0:67:A1:97:A4:69:32:FD:2D:01:29:58:E6:D6:5B X509v3 Authority Key Identifier: keyid:27:99:2B:84:1C:71:7A:90:B3:FD:BD:81:B4:76:F3:FF:90:45:21:2D X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/a6e3dd95-2a85-439e-84f2-972a23e3271e/0/27992B841C717A90B3FDBD81B476F3FF9045212D.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/27992B841C717A90B3FDBD81B476F3FF9045212D.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/a6e3dd95-2a85-439e-84f2-972a23e3271e/0/27992B841C717A90B3FDBD81B476F3FF9045212D.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 32:1a:92:40:f2:e7:a1:1d:48:12:50:30:a4:13:70:bf:e6:a5: 7c:1f:e0:98:f3:dc:cb:b0:3b:12:3b:a0:61:84:9d:4c:34:b5: e5:9d:23:49:1a:29:27:0d:b2:e7:51:9d:00:1e:7d:55:3f:43: a9:c0:5a:dc:e8:74:62:bc:ca:53:84:2e:e5:91:65:07:be:e8: e5:33:d2:44:90:b6:5a:40:3c:b0:c0:fb:39:c4:c0:44:af:63: 0b:2a:1d:c8:7a:29:be:05:a7:8d:18:c3:bb:bf:61:4a:c6:2d: 98:9e:e0:19:47:47:0d:a2:63:e3:ed:3e:15:16:63:74:aa:3e: f5:84:70:eb:e3:95:07:5a:71:e9:cb:76:4a:4c:5e:cb:f5:e2: 0c:51:86:f3:bb:a3:b1:d3:0e:ee:a3:ad:69:45:54:41:36:33: 57:ad:78:fd:f8:10:e6:a3:21:2a:b7:4e:9e:b9:b9:fe:91:3d: c0:5a:a7:8a:56:72:07:91:82:3e:f5:09:43:12:df:f1:41:e0: 62:d1:ea:b8:b8:5a:82:a0:39:96:5f:4c:01:41:79:e3:ce:b8: d7:8a:a0:87:db:72:cf:af:a7:c9:44:92:82:ac:b8:35:45:0b: be:8c:43:69:7a:28:11:f3:fb:c5:b6:ca:ee:29:b6:71:10:e3: 7a:51:59:1b -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUP+MEL0LK3wc4bv5tv2QOZ1uUWFAwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMjc5OTJCODQxQzcxN0E5MEIzRkRCRDgxQjQ3NkYzRkY5 MDQ1MjEyRDAeFw0yNTEyMDExNjQ1MDRaFw0yNTEyMDUwMDQwMDRaMDMxMTAvBgNV BAMTKDg0NzgxOTFCMUNDMDY3QTE5N0E0NjkzMkZEMkQwMTI5NThFNkQ2NUIwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCuULFQG4cWc4KCnloOkua8kxXa 2WRfVlRrrGUuy3eb8BC1La0IhO7zc02xMPjKZIGU8ksxlWF7tnBdL46VhsWYJbhU 5OPl1EOxTa+eBAg5QrV41PAGeGRICdZHW2RIzNvv3C9FElY14kBF/lUOFWCOLQbU +uEuZzMtihN0xHIjFZly7zjMx8rk2IR253J9uUyfMwZzUQ9sk8yH+pRq/lFKsBBa uilX7AaABwskib/p2HVAwFJ7PSPVCx7+37uRR73VqeROmY0n3myAIWceY2QmXqUA 5bDBId85Zii2o18h5IkiYl1Y1nppjdsvR9QvLwzmkipHh1PXXLyW6rEvd1y5AgMB AAGjggI8MIICODAdBgNVHQ4EFgQUhHgZGxzAZ6GXpGky/S0BKVjm1lswHwYDVR0j BBgwFoAUJ5krhBxxepCz/b2BtHbz/5BFIS0wDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby9h NmUzZGQ5NS0yYTg1LTQzOWUtODRmMi05NzJhMjNlMzI3MWUvMC8yNzk5MkI4NDFD NzE3QTkwQjNGREJEODFCNDc2RjNGRjkwNDUyMTJELmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvMjc5OTJCODQxQzcxN0E5MEIzRkRCRDgxQjQ3NkYzRkY5MDQ1 MjEyRC5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vYTZlM2RkOTUtMmE4NS00MzllLTg0 ZjItOTcyYTIzZTMyNzFlLzAvMjc5OTJCODQxQzcxN0E5MEIzRkRCRDgxQjQ3NkYz RkY5MDQ1MjEyRC5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBADIakkDy56EdSBJQMKQTcL/mpXwf4Jjz3Muw OxI7oGGEnUw0teWdI0kaKScNsudRnQAefVU/Q6nAWtzodGK8ylOELuWRZQe+6OUz 0kSQtlpAPLDA+znEwESvYwsqHch6Kb4Fp40Yw7u/YUrGLZie4BlHRw2iY+PtPhUW Y3SqPvWEcOvjlQdacenLdkpMXsv14gxRhvO7o7HTDu6jrWlFVEE2M1eteP34EOaj ISq3Tp65uf6RPcBap4pWcgeRgj71CUMS3/FB4GLR6ri4WoKgOZZfTAFBeePOuNeK oIfbcs+vp8lEkoKsuDVFC76MQ2l6KBHz+8W2yu4ptnEQ43pRWRs= -----END CERTIFICATE-----Generated at Wed Dec 3 14:44:10 2025 by rpki-client