This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

$ rpki-client -vvf repo-rpki.idnic.net/repo/a6e3dd95-2a85-439e-84f2-972a23e3271e/0/27992B841C717A90B3FDBD81B476F3FF9045212D.mft
File: 27992B841C717A90B3FDBD81B476F3FF9045212D.mft (raw, json)
Hash identifier: G5AJrbsi/GWI9c3TxbigABMK61wgRdZfJY85tsX+9jk=
Subject key identifier: D7:46:49:B9:4D:E1:3F:0D:EE:87:6C:EA:E9:8B:4A:DD:B5:E0:B7:08
Authority key identifier: 27:99:2B:84:1C:71:7A:90:B3:FD:BD:81:B4:76:F3:FF:90:45:21:2D
Certificate issuer: /CN=27992B841C717A90B3FDBD81B476F3FF9045212D
Certificate serial: 496D6CC10A64F934DE0154830A5A76D115393E82
Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/27992B841C717A90B3FDBD81B476F3FF9045212D.cer
Subject info access: rsync://repo-rpki.idnic.net/repo/a6e3dd95-2a85-439e-84f2-972a23e3271e/0/27992B841C717A90B3FDBD81B476F3FF9045212D.mft
Manifest number: 015F
Signing time: Mon 02 Feb 2026 04:00:04 +0000
Manifest this update: Mon 02 Feb 2026 03:55:04 +0000
Manifest next update: Thu 05 Feb 2026 09:49:04 +0000
Files and hashes: 1: 27992B841C717A90B3FDBD81B476F3FF9045212D.crl (hash: MZPmIsR+lXw0HPO8bjgiumb909Ey2PkcliqSrSrDg3I=)
2: 3130332e35352e3232362e302f32342d3234203d3e20313334363538.roa (hash: zJ4dPhpKTwfxjBM9r05t0oUe6ezn1Aa8OjhsYGhldqw=)
3: 3130332e35352e3232372e302f32342d3234203d3e20313530343839.roa (hash: VwvC8FnFaqPY+qV2Yf8a0j5PamatjQpNJvumx1aC9c4=)
4: 3130332e35352e3232362e302f32342d3234203d3e20313530343839.roa (hash: Ox4ZTFR07e7JY/PWDRkVjaGrsYWVREjNDM/zRhbDUOE=)
5: 3130332e35352e3232372e302f32342d3234203d3e20313334363538.roa (hash: 2fll4NIrlBtRmSI1B/XfRZt07eji5vB7yU1I6L4xwaU=)
Validation: OK
Signature path: rsync://repo-rpki.idnic.net/repo/a6e3dd95-2a85-439e-84f2-972a23e3271e/0/27992B841C717A90B3FDBD81B476F3FF9045212D.crl
rsync://repo-rpki.idnic.net/repo/a6e3dd95-2a85-439e-84f2-972a23e3271e/0/27992B841C717A90B3FDBD81B476F3FF9045212D.mft
rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/27992B841C717A90B3FDBD81B476F3FF9045212D.cer
rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl
rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Thu 05 Feb 2026 05:24:03 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
49:6d:6c:c1:0a:64:f9:34:de:01:54:83:0a:5a:76:d1:15:39:3e:82
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=27992B841C717A90B3FDBD81B476F3FF9045212D
Validity
Not Before: Feb 2 03:55:04 2026 GMT
Not After : Feb 5 09:49:04 2026 GMT
Subject: CN=D74649B94DE13F0DEE876CEAE98B4ADDB5E0B708
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d7:7b:83:9c:11:de:6f:28:3b:93:ad:ab:0a:68:
92:f1:c3:7c:c6:e2:b4:7a:2a:2b:fe:e5:f9:7b:8d:
ae:c1:00:4b:a6:b3:51:6c:11:ee:34:d1:95:a4:69:
99:b5:95:40:dc:3c:35:7a:61:96:34:9a:e1:75:27:
13:80:7a:a1:a7:9e:ca:55:ad:0e:ad:bf:d4:1a:64:
98:b5:a7:33:76:05:73:5d:5b:ca:92:e0:1b:ce:c8:
64:59:fb:2d:5a:82:6a:9a:21:de:b1:75:7b:58:b2:
45:ce:2d:02:93:ab:58:3b:49:0d:64:2f:6d:d7:13:
d9:86:f9:24:1d:ba:ad:a9:29:4c:bb:32:f8:93:cb:
f2:22:a4:1f:9a:85:5a:17:98:f0:19:7a:04:bf:ca:
64:57:ff:11:f2:aa:82:a0:8c:38:6a:ce:ba:f0:fe:
25:3a:67:27:cc:67:35:a7:d7:9a:3f:8e:b0:8f:69:
9e:b6:93:f2:f5:d1:ea:95:9d:83:90:37:25:b5:a1:
04:c3:21:3d:5c:20:a0:b8:6d:b8:79:ab:a6:7b:56:
a7:94:18:cd:8e:95:ca:26:f8:89:3a:6d:23:8a:d2:
ba:d2:ac:27:e9:db:83:17:c0:c3:b8:7e:91:43:84:
23:2b:3e:0f:e2:b2:9c:fb:88:3a:da:41:e0:f5:39:
d7:9d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D7:46:49:B9:4D:E1:3F:0D:EE:87:6C:EA:E9:8B:4A:DD:B5:E0:B7:08
X509v3 Authority Key Identifier:
keyid:27:99:2B:84:1C:71:7A:90:B3:FD:BD:81:B4:76:F3:FF:90:45:21:2D
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://repo-rpki.idnic.net/repo/a6e3dd95-2a85-439e-84f2-972a23e3271e/0/27992B841C717A90B3FDBD81B476F3FF9045212D.crl
Authority Information Access:
CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/27992B841C717A90B3FDBD81B476F3FF9045212D.cer
Subject Information Access:
Signed Object - URI:rsync://repo-rpki.idnic.net/repo/a6e3dd95-2a85-439e-84f2-972a23e3271e/0/27992B841C717A90B3FDBD81B476F3FF9045212D.mft
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
49:ce:21:db:d1:0f:c8:ef:b4:64:4b:ed:7b:0f:e6:c7:39:33:
36:2c:87:54:9a:ae:0c:b5:f4:ab:df:06:2d:8f:5b:85:08:22:
d1:c6:e1:4d:c9:fe:b5:0b:ad:94:44:82:ad:75:4e:31:24:c7:
00:5a:97:c0:31:19:17:a7:e1:28:64:65:67:e7:bc:4b:4e:3c:
d8:ef:51:57:c7:b8:fb:f1:e2:fd:89:a9:18:9a:8b:a9:57:a7:
4b:30:18:a8:b6:da:68:29:23:19:0e:37:3f:71:fc:f5:66:9b:
4e:b7:14:63:4a:41:e1:03:a9:d7:a5:e1:8a:eb:61:4f:68:cb:
52:c9:25:95:fc:0e:12:c5:35:e0:7b:dd:b4:dd:4c:88:b5:e8:
fa:5f:ab:4d:77:f4:a2:a5:37:7a:26:e2:42:72:b4:85:ba:70:
2e:98:07:f9:f6:b4:e1:fe:eb:f4:fa:50:cf:84:c9:cc:a7:32:
aa:00:d2:28:98:38:8f:b1:cb:11:c9:b7:89:8e:04:fa:49:e0:
46:46:d3:6d:cc:ea:81:fd:54:f8:f2:09:46:f0:1e:16:0d:b4:
a7:2c:95:69:58:f3:5c:f6:9f:20:4b:39:9a:8d:43:94:80:08:
de:a9:7d:13:7d:f5:7e:14:b1:9b:47:3a:b3:3f:8a:25:db:a2:
19:9a:d8:7d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Feb 2 09:44:10 2026 by rpki-client