This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf repo-rpki.idnic.net/repo/ec6b597c-9547-4c1e-ac87-3a434a300a67/0/27575AEBC443417C31FDF4A1DDFE016557A835F4.mft File: 27575AEBC443417C31FDF4A1DDFE016557A835F4.mft (raw, json) Hash identifier: 192+nCoQgTpBLwkkA3llPY/P4MtbJ5NPAv9LCpSxoCI= Subject key identifier: 4F:18:53:84:0B:0F:81:B3:B4:15:3C:38:86:10:4A:5F:47:79:20:BE Authority key identifier: 27:57:5A:EB:C4:43:41:7C:31:FD:F4:A1:DD:FE:01:65:57:A8:35:F4 Certificate issuer: /CN=27575AEBC443417C31FDF4A1DDFE016557A835F4 Certificate serial: 385C41C3A882F5F4D6AD14CE5D3B4A8EC4F8EC47 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/27575AEBC443417C31FDF4A1DDFE016557A835F4.cer Subject info access: rsync://repo-rpki.idnic.net/repo/ec6b597c-9547-4c1e-ac87-3a434a300a67/0/27575AEBC443417C31FDF4A1DDFE016557A835F4.mft Manifest number: 020D Signing time: Sun 01 Feb 2026 00:21:40 +0000 Manifest this update: Sun 01 Feb 2026 00:16:40 +0000 Manifest next update: Wed 04 Feb 2026 03:09:40 +0000 Files and hashes: 1: 3130332e3138392e3133382e302f32342d3234203d3e20313439373532.roa (hash: 11KNXlbV6XDV6e1jADYaW+1r6VvI4ginelDqZNH0poo=) 2: 3130332e3138392e3133392e302f32342d3234203d3e20313439373532.roa (hash: iVmYuqrywXHq070b2b6b1AVyJeKdilvifyJRDNtlsDw=) 3: 27575AEBC443417C31FDF4A1DDFE016557A835F4.crl (hash: GCkUCImluCwvrkIyUBq6m5HsmPUWbQvgeGu1W/FgEBw=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/ec6b597c-9547-4c1e-ac87-3a434a300a67/0/27575AEBC443417C31FDF4A1DDFE016557A835F4.crl rsync://repo-rpki.idnic.net/repo/ec6b597c-9547-4c1e-ac87-3a434a300a67/0/27575AEBC443417C31FDF4A1DDFE016557A835F4.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/27575AEBC443417C31FDF4A1DDFE016557A835F4.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 04 Feb 2026 03:09:40 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 38:5c:41:c3:a8:82:f5:f4:d6:ad:14:ce:5d:3b:4a:8e:c4:f8:ec:47 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=27575AEBC443417C31FDF4A1DDFE016557A835F4 Validity Not Before: Feb 1 00:16:40 2026 GMT Not After : Feb 4 03:09:40 2026 GMT Subject: CN=4F1853840B0F81B3B4153C3886104A5F477920BE Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d7:e9:7b:de:81:a6:f2:3b:19:56:51:c2:37:4a: 47:7f:af:f2:26:1c:84:be:84:93:28:fb:6f:63:ac: d0:90:a5:63:e7:14:28:c4:f9:f2:4e:02:da:b8:de: 70:30:c8:8f:97:c6:3f:23:aa:4c:b9:c4:24:cf:1b: 32:db:12:44:ee:af:06:7c:17:ed:b8:0a:64:95:cb: 67:30:26:3a:ea:71:07:4d:79:b2:5c:78:ae:85:7e: 77:65:ed:a3:e1:26:13:50:55:d5:0f:e2:27:0e:b9: d9:3b:8b:03:3e:e5:3e:8f:7b:59:bb:ba:01:1e:c3: 85:99:15:a7:f7:07:64:55:99:f8:ee:cc:98:9e:20: a7:5a:0f:0b:22:ad:a4:2b:20:62:28:3d:cb:31:4f: 91:18:dd:a4:f6:46:0f:77:9f:1a:c0:08:f1:52:ff: d5:5e:63:dc:04:79:4e:51:95:bf:69:0d:0b:68:32: 99:ab:dc:8f:78:da:6a:06:30:8b:ba:59:f5:e1:42: 92:7b:4a:7a:8c:30:81:7b:fd:57:2e:ca:26:68:7e: 34:6a:c7:16:34:c9:2f:9f:fa:4f:59:e7:87:37:de: 4a:92:33:30:da:0c:3a:e5:60:2d:e4:20:83:3b:23: 0e:5e:dd:3e:f5:8d:b8:d2:9d:2e:0d:99:9c:ee:78: 4c:91 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 4F:18:53:84:0B:0F:81:B3:B4:15:3C:38:86:10:4A:5F:47:79:20:BE X509v3 Authority Key Identifier: keyid:27:57:5A:EB:C4:43:41:7C:31:FD:F4:A1:DD:FE:01:65:57:A8:35:F4 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/ec6b597c-9547-4c1e-ac87-3a434a300a67/0/27575AEBC443417C31FDF4A1DDFE016557A835F4.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/27575AEBC443417C31FDF4A1DDFE016557A835F4.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/ec6b597c-9547-4c1e-ac87-3a434a300a67/0/27575AEBC443417C31FDF4A1DDFE016557A835F4.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 90:8e:b8:94:ef:f5:34:cb:c9:3e:2a:ee:e1:d9:9f:ff:0c:a5: 3a:81:a4:d4:1e:fb:c0:50:7d:52:45:dd:0a:7a:16:43:f9:f4: 77:9d:50:fd:da:16:41:79:5e:88:bc:c1:e4:4d:ef:83:e8:48: 08:cf:18:55:23:1a:78:45:fa:b9:93:a3:b3:7a:d5:66:21:22: fa:c6:61:f2:ee:38:f5:cb:2a:70:2a:8e:a9:5d:e7:af:fb:30: a5:a5:f2:1b:2e:05:d7:e7:8c:d4:08:b5:20:b0:52:99:86:13: 45:e2:67:32:a8:1d:17:e4:7a:2e:4d:8f:59:12:6d:69:34:d6: 12:85:25:65:e9:9b:f6:f3:7a:ed:e5:3e:ad:61:7a:a3:e8:5f: ca:7b:31:55:bd:16:88:e9:de:49:1e:57:f5:27:0f:65:40:a4: 8f:72:65:1b:64:79:63:fd:79:ad:fe:33:37:b3:d9:37:7f:e6: 48:e2:11:f2:c0:54:ef:67:e6:9d:ab:07:bc:61:be:9b:7b:ea: 3b:3e:e5:ee:7f:9c:6b:7c:a2:d3:83:00:e2:ec:6f:54:39:71: 67:c2:56:82:49:83:af:2f:ed:5e:8a:a7:c2:c7:bc:f0:39:10: 93:29:79:df:72:47:4a:40:50:b5:d4:06:12:46:fc:e5:62:f6: 8e:16:e7:12 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUOFxBw6iC9fTWrRTOXTtKjsT47EcwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMjc1NzVBRUJDNDQzNDE3QzMxRkRGNEExRERGRTAxNjU1 N0E4MzVGNDAeFw0yNjAyMDEwMDE2NDBaFw0yNjAyMDQwMzA5NDBaMDMxMTAvBgNV BAMTKDRGMTg1Mzg0MEIwRjgxQjNCNDE1M0MzODg2MTA0QTVGNDc3OTIwQkUwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDX6XvegabyOxlWUcI3Skd/r/Im HIS+hJMo+29jrNCQpWPnFCjE+fJOAtq43nAwyI+Xxj8jqky5xCTPGzLbEkTurwZ8 F+24CmSVy2cwJjrqcQdNebJceK6Ffndl7aPhJhNQVdUP4icOudk7iwM+5T6Pe1m7 ugEew4WZFaf3B2RVmfjuzJieIKdaDwsiraQrIGIoPcsxT5EY3aT2Rg93nxrACPFS /9VeY9wEeU5Rlb9pDQtoMpmr3I942moGMIu6WfXhQpJ7SnqMMIF7/VcuyiZofjRq xxY0yS+f+k9Z54c33kqSMzDaDDrlYC3kIIM7Iw5e3T71jbjSnS4NmZzueEyRAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUTxhThAsPgbO0FTw4hhBKX0d5IL4wHwYDVR0j BBgwFoAUJ1da68RDQXwx/fSh3f4BZVeoNfQwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby9l YzZiNTk3Yy05NTQ3LTRjMWUtYWM4Ny0zYTQzNGEzMDBhNjcvMC8yNzU3NUFFQkM0 NDM0MTdDMzFGREY0QTFEREZFMDE2NTU3QTgzNUY0LmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvMjc1NzVBRUJDNDQzNDE3QzMxRkRGNEExRERGRTAxNjU1N0E4 MzVGNC5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vZWM2YjU5N2MtOTU0Ny00YzFlLWFj ODctM2E0MzRhMzAwYTY3LzAvMjc1NzVBRUJDNDQzNDE3QzMxRkRGNEExRERGRTAx NjU1N0E4MzVGNC5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAJCOuJTv9TTLyT4q7uHZn/8MpTqBpNQe+8BQ fVJF3Qp6FkP59HedUP3aFkF5Xoi8weRN74PoSAjPGFUjGnhF+rmTo7N61WYhIvrG YfLuOPXLKnAqjqld56/7MKWl8hsuBdfnjNQItSCwUpmGE0XiZzKoHRfkei5Nj1kS bWk01hKFJWXpm/bzeu3lPq1heqPoX8p7MVW9Fojp3kkeV/UnD2VApI9yZRtkeWP9 ea3+Mzez2Td/5kjiEfLAVO9n5p2rB7xhvpt76js+5e5/nGt8otODAOLsb1Q5cWfC VoJJg68v7V6Kp8LHvPA5EJMped9yR0pAULXUBhJG/OVi9o4W5xI= -----END CERTIFICATE-----Generated at Mon Feb 2 09:44:01 2026 by rpki-client