This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf repo-rpki.idnic.net/repo/ec6b597c-9547-4c1e-ac87-3a434a300a67/0/27575AEBC443417C31FDF4A1DDFE016557A835F4.mft File: 27575AEBC443417C31FDF4A1DDFE016557A835F4.mft (raw, json) Hash identifier: EApGfyxn8GyKCeK39qQ32/se/Ut7QiW6Kwn2IfTgzyc= Subject key identifier: B9:2D:3F:4B:DE:2F:79:29:58:67:EF:92:FF:87:A4:AE:F0:B9:D5:59 Authority key identifier: 27:57:5A:EB:C4:43:41:7C:31:FD:F4:A1:DD:FE:01:65:57:A8:35:F4 Certificate issuer: /CN=27575AEBC443417C31FDF4A1DDFE016557A835F4 Certificate serial: 72BEF5376DE5C13200B0B4C8AA281A2F4B0B0991 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/27575AEBC443417C31FDF4A1DDFE016557A835F4.cer Subject info access: rsync://repo-rpki.idnic.net/repo/ec6b597c-9547-4c1e-ac87-3a434a300a67/0/27575AEBC443417C31FDF4A1DDFE016557A835F4.mft Manifest number: 01F2 Signing time: Mon 01 Dec 2025 15:01:38 +0000 Manifest this update: Mon 01 Dec 2025 14:56:38 +0000 Manifest next update: Thu 04 Dec 2025 19:27:38 +0000 Files and hashes: 1: 3130332e3138392e3133392e302f32342d3234203d3e20313439373532.roa (hash: iVmYuqrywXHq070b2b6b1AVyJeKdilvifyJRDNtlsDw=) 2: 3130332e3138392e3133382e302f32342d3234203d3e20313439373532.roa (hash: 11KNXlbV6XDV6e1jADYaW+1r6VvI4ginelDqZNH0poo=) 3: 27575AEBC443417C31FDF4A1DDFE016557A835F4.crl (hash: ApqAKF0z66ZVaulaSrFGgEfHzbTdFixvQhrnUTPBSkk=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/ec6b597c-9547-4c1e-ac87-3a434a300a67/0/27575AEBC443417C31FDF4A1DDFE016557A835F4.crl rsync://repo-rpki.idnic.net/repo/ec6b597c-9547-4c1e-ac87-3a434a300a67/0/27575AEBC443417C31FDF4A1DDFE016557A835F4.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/27575AEBC443417C31FDF4A1DDFE016557A835F4.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 04 Dec 2025 19:27:38 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 72:be:f5:37:6d:e5:c1:32:00:b0:b4:c8:aa:28:1a:2f:4b:0b:09:91 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=27575AEBC443417C31FDF4A1DDFE016557A835F4 Validity Not Before: Dec 1 14:56:38 2025 GMT Not After : Dec 4 19:27:38 2025 GMT Subject: CN=B92D3F4BDE2F79295867EF92FF87A4AEF0B9D559 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a4:5b:cb:0c:73:86:48:e0:5f:e5:eb:e2:7b:71: 29:c4:59:25:6b:8f:59:0b:7f:76:1b:67:b9:7d:a7: 6c:6a:c4:40:19:10:59:7a:de:d2:6d:04:54:9e:8b: 1e:05:fd:8e:8e:8d:d3:9c:40:b6:e7:7a:b9:89:5d: d3:89:e8:1f:6a:aa:98:fb:32:ef:7e:4a:27:62:14: 36:46:72:68:b5:04:4a:46:be:80:07:bd:c9:dc:2c: 97:ea:7a:7c:05:ce:2e:2b:14:39:7f:22:9f:a3:ea: 4c:3f:6b:ef:f0:d3:30:59:b7:e0:9e:07:a6:93:16: 13:ff:7a:ce:c1:5d:46:22:34:cd:61:be:e8:61:86: b5:a2:8f:df:4c:57:a4:08:c3:6f:20:3e:f1:62:4b: 8e:29:6b:86:80:46:58:e4:e8:4f:6a:c5:39:da:da: 26:d9:f7:d6:ad:1a:ff:1e:37:73:65:2f:ec:43:20: 1f:d7:f2:ec:c7:8b:fd:c8:ac:63:02:db:15:4e:77: 1e:0b:00:68:ec:a6:da:c9:8c:73:55:b8:ee:56:46: f0:f9:8c:ae:bc:84:47:f8:13:dd:9a:55:a2:35:84: 7a:c7:7c:be:7d:d7:52:b0:37:04:b5:ae:f3:60:b1: c9:23:31:32:c5:56:70:fc:b2:73:b1:a2:f9:b8:2d: 84:39 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: B9:2D:3F:4B:DE:2F:79:29:58:67:EF:92:FF:87:A4:AE:F0:B9:D5:59 X509v3 Authority Key Identifier: keyid:27:57:5A:EB:C4:43:41:7C:31:FD:F4:A1:DD:FE:01:65:57:A8:35:F4 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/ec6b597c-9547-4c1e-ac87-3a434a300a67/0/27575AEBC443417C31FDF4A1DDFE016557A835F4.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/27575AEBC443417C31FDF4A1DDFE016557A835F4.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/ec6b597c-9547-4c1e-ac87-3a434a300a67/0/27575AEBC443417C31FDF4A1DDFE016557A835F4.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 2a:7b:22:f4:6d:b6:16:b1:e6:32:36:a5:7d:ee:75:8b:98:43: b5:ca:fa:84:18:37:79:c8:7d:d6:f6:8a:b0:0b:55:98:ef:d7: 9b:52:f4:aa:00:a3:91:90:7a:d4:08:96:fb:b9:2e:bc:a3:79: 64:a9:0b:f2:bc:18:8c:20:96:71:34:5c:0c:84:b0:22:21:d3: 0e:48:a7:8a:75:96:e7:d3:c0:ab:a9:8b:b3:b3:ed:45:d7:d1: ef:38:7c:0d:58:a6:e0:bd:0f:88:b3:15:e9:73:cb:a4:82:73: d5:74:41:99:86:46:6c:da:ee:d9:a1:04:79:ee:cd:f2:a3:39: 2d:2f:97:1c:50:1e:8a:20:90:37:e7:ca:88:5e:71:b8:1d:33: e7:94:15:69:8c:92:39:59:8b:f6:df:a3:8f:b0:45:18:4a:cb: 7c:b5:b9:e8:e2:31:27:71:a5:8e:21:7c:2c:51:9f:62:d9:41: b3:c8:ef:4c:e5:af:0d:e9:56:5e:38:c1:93:5d:53:a5:bc:67: c7:3b:e5:57:d7:d7:15:78:fe:6e:c0:f1:39:c9:ec:0d:d6:05: ac:c6:fc:76:a8:f9:cd:e2:a7:45:06:05:0b:d3:46:63:f6:1d: 4a:7a:47:ac:47:95:bd:d6:c3:65:ba:91:84:93:cd:fe:4c:54: 64:d3:48:e7 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUcr71N23lwTIAsLTIqigaL0sLCZEwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMjc1NzVBRUJDNDQzNDE3QzMxRkRGNEExRERGRTAxNjU1 N0E4MzVGNDAeFw0yNTEyMDExNDU2MzhaFw0yNTEyMDQxOTI3MzhaMDMxMTAvBgNV BAMTKEI5MkQzRjRCREUyRjc5Mjk1ODY3RUY5MkZGODdBNEFFRjBCOUQ1NTkwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCkW8sMc4ZI4F/l6+J7cSnEWSVr j1kLf3YbZ7l9p2xqxEAZEFl63tJtBFSeix4F/Y6OjdOcQLbnermJXdOJ6B9qqpj7 Mu9+SidiFDZGcmi1BEpGvoAHvcncLJfqenwFzi4rFDl/Ip+j6kw/a+/w0zBZt+Ce B6aTFhP/es7BXUYiNM1hvuhhhrWij99MV6QIw28gPvFiS44pa4aARljk6E9qxTna 2ibZ99atGv8eN3NlL+xDIB/X8uzHi/3IrGMC2xVOdx4LAGjsptrJjHNVuO5WRvD5 jK68hEf4E92aVaI1hHrHfL5911KwNwS1rvNgsckjMTLFVnD8snOxovm4LYQ5AgMB AAGjggI8MIICODAdBgNVHQ4EFgQUuS0/S94veSlYZ++S/4ekrvC51VkwHwYDVR0j BBgwFoAUJ1da68RDQXwx/fSh3f4BZVeoNfQwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby9l YzZiNTk3Yy05NTQ3LTRjMWUtYWM4Ny0zYTQzNGEzMDBhNjcvMC8yNzU3NUFFQkM0 NDM0MTdDMzFGREY0QTFEREZFMDE2NTU3QTgzNUY0LmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvMjc1NzVBRUJDNDQzNDE3QzMxRkRGNEExRERGRTAxNjU1N0E4 MzVGNC5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vZWM2YjU5N2MtOTU0Ny00YzFlLWFj ODctM2E0MzRhMzAwYTY3LzAvMjc1NzVBRUJDNDQzNDE3QzMxRkRGNEExRERGRTAx NjU1N0E4MzVGNC5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBACp7IvRtthax5jI2pX3udYuYQ7XK+oQYN3nI fdb2irALVZjv15tS9KoAo5GQetQIlvu5LryjeWSpC/K8GIwglnE0XAyEsCIh0w5I p4p1lufTwKupi7Oz7UXX0e84fA1YpuC9D4izFelzy6SCc9V0QZmGRmza7tmhBHnu zfKjOS0vlxxQHoogkDfnyohecbgdM+eUFWmMkjlZi/bfo4+wRRhKy3y1uejiMSdx pY4hfCxRn2LZQbPI70zlrw3pVl44wZNdU6W8Z8c75VfX1xV4/m7A8TnJ7A3WBazG /Hao+c3ip0UGBQvTRmP2HUp6R6xHlb3Ww2W6kYSTzf5MVGTTSOc= -----END CERTIFICATE-----Generated at Wed Dec 3 16:18:32 2025 by rpki-client