This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf repo-rpki.idnic.net/repo/074f214a-bf55-4048-845d-20675fb5f2a4/0/027DBEC91021154263BB0CF1565833705023D987.mft File: 027DBEC91021154263BB0CF1565833705023D987.mft (raw, json) Hash identifier: iItBl7MJ7C9nhfzND2kEkztHbBry9oosvnqsxejfd40= Subject key identifier: 90:F6:04:D8:90:1B:19:13:A7:8C:29:63:EF:69:6C:56:4E:1B:55:0B Authority key identifier: 02:7D:BE:C9:10:21:15:42:63:BB:0C:F1:56:58:33:70:50:23:D9:87 Certificate issuer: /CN=027DBEC91021154263BB0CF1565833705023D987 Certificate serial: 5D2B2886D4972B6AA9F08572ADF1D5F27596F0BD Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/027DBEC91021154263BB0CF1565833705023D987.cer Subject info access: rsync://repo-rpki.idnic.net/repo/074f214a-bf55-4048-845d-20675fb5f2a4/0/027DBEC91021154263BB0CF1565833705023D987.mft Manifest number: 01B0 Signing time: Sat 06 Dec 2025 12:11:38 +0000 Manifest this update: Sat 06 Dec 2025 12:06:38 +0000 Manifest next update: Tue 09 Dec 2025 22:09:38 +0000 Files and hashes: 1: 323430333a653338303a313030333a3a2f34382d3438203d3e20313334363337.roa (hash: +8j/+dJRSTef74GymJkmGO/MtwJTWy9qHlKrlCS2oR4=) 2: 3230322e3136302e3133392e302f32342d3234203d3e20313334363337.roa (hash: yivIGajIGBwCERemZ/qApItbcLMFzhrw+o0muoO7pyo=) 3: 323430333a653338303a313030323a3a2f34382d3438203d3e20313334363337.roa (hash: 2BQG0lP9Zs1EjExB89HW6Zq7y6r/wXETmMZ3S/1VixI=) 4: 323430333a653338303a3a2f33322d3332203d3e20313334363337.roa (hash: U7L8CMVLZEavXmnK/mp5PFEjMg9cgSL8vuQSoK3hk4M=) 5: 027DBEC91021154263BB0CF1565833705023D987.crl (hash: EoDdgrp5LHHntOGtarWcKHTQdK+aQyj5MN+CXHGgoF8=) 6: 323430333a653338303a313030313a3a2f34382d3438203d3e20313334363337.roa (hash: r6mE1hwqe5AJWkOHIz2I388PWuZTnmkeKpmw8+YPM38=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/074f214a-bf55-4048-845d-20675fb5f2a4/0/027DBEC91021154263BB0CF1565833705023D987.crl rsync://repo-rpki.idnic.net/repo/074f214a-bf55-4048-845d-20675fb5f2a4/0/027DBEC91021154263BB0CF1565833705023D987.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/027DBEC91021154263BB0CF1565833705023D987.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 09 Dec 2025 15:57:52 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 5d:2b:28:86:d4:97:2b:6a:a9:f0:85:72:ad:f1:d5:f2:75:96:f0:bd Signature Algorithm: sha256WithRSAEncryption Issuer: CN=027DBEC91021154263BB0CF1565833705023D987 Validity Not Before: Dec 6 12:06:38 2025 GMT Not After : Dec 9 22:09:38 2025 GMT Subject: CN=90F604D8901B1913A78C2963EF696C564E1B550B Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bb:7c:e1:fc:a0:54:a7:95:4c:3e:c1:67:b0:53: e6:6b:9a:79:6c:75:c0:dc:b0:5f:4d:19:2a:89:8a: 80:a9:ad:63:88:04:77:18:b8:de:74:6a:56:21:40: b0:f4:2b:b1:ef:69:2e:e6:e9:60:60:55:a7:5d:0c: ba:e4:61:3f:34:ce:f6:42:be:a7:cc:ee:ec:8f:07: 54:aa:b7:81:76:14:ea:ba:ad:97:2e:c3:04:a0:5e: c9:83:57:bc:92:5d:ff:58:d2:13:b0:c4:70:cc:35: 2d:60:a2:31:0b:bc:3d:23:ef:8c:36:4c:fa:25:8f: c2:d7:b4:4e:7b:74:07:2f:e1:cd:59:2b:fd:2b:47: 4d:54:4a:29:6c:e4:30:92:18:b9:38:e6:69:64:29: d7:0d:86:a1:84:ce:01:c0:7c:f6:17:aa:a3:f6:93: f9:47:62:b4:1c:9e:47:45:78:69:0c:a4:bc:83:09: b2:bc:7a:14:5f:db:bf:9e:3d:0b:2f:66:b4:30:3e: 4e:b0:0c:f5:f5:84:e6:fa:27:12:8c:69:23:54:58: f1:e7:79:98:fb:ac:a1:23:8f:53:b3:10:1b:2c:89: fc:b1:44:fe:93:71:8b:44:71:ae:a7:0c:52:0a:0d: 82:f1:f5:8c:42:1b:ea:79:22:23:38:29:07:7f:5d: c1:89 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 90:F6:04:D8:90:1B:19:13:A7:8C:29:63:EF:69:6C:56:4E:1B:55:0B X509v3 Authority Key Identifier: keyid:02:7D:BE:C9:10:21:15:42:63:BB:0C:F1:56:58:33:70:50:23:D9:87 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/074f214a-bf55-4048-845d-20675fb5f2a4/0/027DBEC91021154263BB0CF1565833705023D987.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/027DBEC91021154263BB0CF1565833705023D987.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/074f214a-bf55-4048-845d-20675fb5f2a4/0/027DBEC91021154263BB0CF1565833705023D987.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption a0:ab:83:6d:86:9a:21:06:08:c3:a0:1f:bf:09:c8:a2:bf:62: 80:eb:a7:32:14:ef:9e:6a:cc:24:51:bc:7a:66:fa:b2:53:2a: 95:72:28:95:2f:4c:65:7c:28:1e:87:96:f6:f3:97:07:aa:dc: 45:5f:25:be:5d:8f:75:d8:43:14:8f:17:a9:e0:64:70:21:44: da:1f:8b:2d:c3:e3:c8:30:6c:ac:0c:1f:da:5b:da:55:14:b4: a2:55:93:92:7a:95:3d:3b:ea:c4:44:e5:0c:3d:c8:02:f3:38: dd:38:1f:50:52:5e:4f:18:55:f6:13:a0:9a:ad:64:de:84:bb: 0d:64:59:d4:c6:39:96:18:93:ac:5e:e5:c3:aa:63:1e:41:02: 61:4e:16:ce:84:9d:21:32:4b:0d:66:ea:19:ea:9e:12:29:a8: 6c:2d:f4:ff:06:0d:ce:36:81:03:35:de:d4:a6:24:d8:32:c2: 20:fe:05:da:7d:33:05:15:23:70:0d:79:a0:9a:ac:87:0b:0c: 75:73:ef:c0:8f:ff:e9:5e:aa:fe:3d:4f:0d:bd:7c:8a:00:8e: fd:87:4d:8f:98:60:d1:97:a3:ea:b8:f6:2f:b6:6f:f7:1f:eb: 35:ad:3e:17:ee:b3:06:82:18:73:43:70:62:f5:87:fd:c2:00: f9:9a:db:ff -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUXSsohtSXK2qp8IVyrfHV8nWW8L0wDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMDI3REJFQzkxMDIxMTU0MjYzQkIwQ0YxNTY1ODMzNzA1 MDIzRDk4NzAeFw0yNTEyMDYxMjA2MzhaFw0yNTEyMDkyMjA5MzhaMDMxMTAvBgNV BAMTKDkwRjYwNEQ4OTAxQjE5MTNBNzhDMjk2M0VGNjk2QzU2NEUxQjU1MEIwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC7fOH8oFSnlUw+wWewU+Zrmnls dcDcsF9NGSqJioCprWOIBHcYuN50alYhQLD0K7HvaS7m6WBgVaddDLrkYT80zvZC vqfM7uyPB1Sqt4F2FOq6rZcuwwSgXsmDV7ySXf9Y0hOwxHDMNS1gojELvD0j74w2 TPolj8LXtE57dAcv4c1ZK/0rR01USils5DCSGLk45mlkKdcNhqGEzgHAfPYXqqP2 k/lHYrQcnkdFeGkMpLyDCbK8ehRf27+ePQsvZrQwPk6wDPX1hOb6JxKMaSNUWPHn eZj7rKEjj1OzEBssifyxRP6TcYtEca6nDFIKDYLx9YxCG+p5IiM4KQd/XcGJAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUkPYE2JAbGROnjClj72lsVk4bVQswHwYDVR0j BBgwFoAUAn2+yRAhFUJjuwzxVlgzcFAj2YcwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby8w NzRmMjE0YS1iZjU1LTQwNDgtODQ1ZC0yMDY3NWZiNWYyYTQvMC8wMjdEQkVDOTEw MjExNTQyNjNCQjBDRjE1NjU4MzM3MDUwMjNEOTg3LmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvMDI3REJFQzkxMDIxMTU0MjYzQkIwQ0YxNTY1ODMzNzA1MDIz RDk4Ny5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vMDc0ZjIxNGEtYmY1NS00MDQ4LTg0 NWQtMjA2NzVmYjVmMmE0LzAvMDI3REJFQzkxMDIxMTU0MjYzQkIwQ0YxNTY1ODMz NzA1MDIzRDk4Ny5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAKCrg22GmiEGCMOgH78JyKK/YoDrpzIU755q zCRRvHpm+rJTKpVyKJUvTGV8KB6Hlvbzlweq3EVfJb5dj3XYQxSPF6ngZHAhRNof iy3D48gwbKwMH9pb2lUUtKJVk5J6lT076sRE5Qw9yALzON04H1BSXk8YVfYToJqt ZN6Euw1kWdTGOZYYk6xe5cOqYx5BAmFOFs6EnSEySw1m6hnqnhIpqGwt9P8GDc42 gQM13tSmJNgywiD+Bdp9MwUVI3ANeaCarIcLDHVz78CP/+leqv49Tw29fIoAjv2H TY+YYNGXo+q49i+2b/cf6zWtPhfuswaCGHNDcGL1h/3CAPma2/8= -----END CERTIFICATE-----Generated at Sun Dec 7 01:10:24 2025 by rpki-client