This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf repo-rpki.idnic.net/repo/074f214a-bf55-4048-845d-20675fb5f2a4/0/027DBEC91021154263BB0CF1565833705023D987.mft File: 027DBEC91021154263BB0CF1565833705023D987.mft (raw, json) Hash identifier: 7kuHSToAw5xVTrQa48puQboA04ktnmyTBYRz5er1jEU= Subject key identifier: 1A:68:44:17:69:E8:AC:53:DD:EF:12:31:0B:E3:C7:25:F2:F3:59:41 Authority key identifier: 02:7D:BE:C9:10:21:15:42:63:BB:0C:F1:56:58:33:70:50:23:D9:87 Certificate issuer: /CN=027DBEC91021154263BB0CF1565833705023D987 Certificate serial: 0FC2DC4B197591485627B05A90F709D3F8FFA7AD Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/027DBEC91021154263BB0CF1565833705023D987.cer Subject info access: rsync://repo-rpki.idnic.net/repo/074f214a-bf55-4048-845d-20675fb5f2a4/0/027DBEC91021154263BB0CF1565833705023D987.mft Manifest number: 01C7 Signing time: Sat 24 Jan 2026 17:11:42 +0000 Manifest this update: Sat 24 Jan 2026 17:06:42 +0000 Manifest next update: Tue 27 Jan 2026 18:40:42 +0000 Files and hashes: 1: 3230322e3136302e3133392e302f32342d3234203d3e20313334363337.roa (hash: Dy8ExdBDCazkLbBU32B3uDoVBgJ8u3u/JGua8KBnuWI=) 2: 323430333a653338303a313030323a3a2f34382d3438203d3e20313334363337.roa (hash: s/T+u3GrpHQpQDGLIfB4y2ZCiVIu1xhOCpqXzOx++a0=) 3: 323430333a653338303a313030313a3a2f34382d3438203d3e20313334363337.roa (hash: /MzkpIvO+yJRIuUE7RrJH9MKdqO6vJCFLNiCFBSLu6w=) 4: 323430333a653338303a3a2f33322d3332203d3e20313334363337.roa (hash: vAyuSzG3C8SpiGpFIcSs/HWsw07B00gA01NjZSkVNoY=) 5: 027DBEC91021154263BB0CF1565833705023D987.crl (hash: rBmBvVuP+h6oisizhDl2jIavp6Z01A93zJKsYHFJjIc=) 6: 323430333a653338303a313030333a3a2f34382d3438203d3e20313334363337.roa (hash: D7a9H/JOzAAiQzJdPmUlyrWBu9LgMUu1qrNfoBeQLxo=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/074f214a-bf55-4048-845d-20675fb5f2a4/0/027DBEC91021154263BB0CF1565833705023D987.crl rsync://repo-rpki.idnic.net/repo/074f214a-bf55-4048-845d-20675fb5f2a4/0/027DBEC91021154263BB0CF1565833705023D987.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/027DBEC91021154263BB0CF1565833705023D987.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 27 Jan 2026 18:40:42 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 0f:c2:dc:4b:19:75:91:48:56:27:b0:5a:90:f7:09:d3:f8:ff:a7:ad Signature Algorithm: sha256WithRSAEncryption Issuer: CN=027DBEC91021154263BB0CF1565833705023D987 Validity Not Before: Jan 24 17:06:42 2026 GMT Not After : Jan 27 18:40:42 2026 GMT Subject: CN=1A68441769E8AC53DDEF12310BE3C725F2F35941 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:91:76:ed:af:ac:39:d0:1b:1e:76:5b:85:0f:28: b9:6d:20:c8:cf:80:95:cd:98:96:22:33:21:86:dd: cf:9a:8c:b0:b3:bd:d0:51:ce:de:6a:a7:a0:e6:4b: f2:61:52:35:db:77:6b:45:00:da:ff:0c:6a:a5:b3: 22:34:c0:b3:6d:fb:96:80:f6:05:62:83:b5:a6:58: 14:ec:9b:b0:a3:f3:0d:20:a2:7b:8a:5f:3d:a5:72: 5c:08:9a:c6:3a:6c:a5:5f:f6:56:ec:f2:bc:77:61: 83:6d:87:e8:1a:b9:51:ce:c0:22:34:12:e8:78:03: 71:c2:f6:81:10:b0:3b:79:fa:d0:98:b4:d2:2e:4c: 4f:42:af:f1:a8:df:33:7f:c1:ff:48:d9:09:ad:ac: 44:63:c6:54:69:0e:77:ad:b1:00:67:fa:a5:bc:9b: 26:3d:dd:55:5f:62:dc:be:6c:cd:aa:62:e5:04:cc: be:44:3b:ad:d9:29:f6:e1:ee:25:05:17:0b:97:5d: 14:97:6a:b4:f4:5a:21:38:3a:67:59:1d:32:ed:22: 2f:ca:3c:35:b1:96:02:6f:c6:0c:45:e5:b1:c0:bf: 1f:f5:61:f5:22:7f:b4:ff:df:ef:f6:24:16:32:3f: 31:a4:b4:48:4f:8b:fe:f7:c5:c4:dc:30:39:f1:f5: 10:55 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 1A:68:44:17:69:E8:AC:53:DD:EF:12:31:0B:E3:C7:25:F2:F3:59:41 X509v3 Authority Key Identifier: keyid:02:7D:BE:C9:10:21:15:42:63:BB:0C:F1:56:58:33:70:50:23:D9:87 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/074f214a-bf55-4048-845d-20675fb5f2a4/0/027DBEC91021154263BB0CF1565833705023D987.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/027DBEC91021154263BB0CF1565833705023D987.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/074f214a-bf55-4048-845d-20675fb5f2a4/0/027DBEC91021154263BB0CF1565833705023D987.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 4f:03:35:04:2a:34:82:f7:4a:23:d0:8c:40:c2:8e:b4:3d:fc: 46:7b:7e:90:f1:e1:6d:40:eb:03:f3:45:49:b2:9a:a0:6c:73: ce:e6:6f:4b:e2:a5:e8:cb:80:21:06:c5:5b:d4:d1:8a:ae:ea: 7d:b5:53:86:d6:11:1f:45:3b:3c:5c:29:58:36:e5:a8:08:ef: 69:26:d6:9c:60:b2:7b:dc:7c:1c:7d:e6:64:ad:ce:14:6c:9f: e0:d4:66:64:fd:35:8f:c6:02:7a:f6:27:97:3d:7d:34:86:53: e2:f1:1c:91:a2:67:ce:49:47:1f:14:da:89:68:00:95:ef:e2: c5:ae:24:73:3a:00:1b:57:fc:f7:86:9e:c9:ce:a7:1c:f8:cb: 5f:5b:16:1c:d5:52:14:87:fe:db:3c:7b:15:9d:04:16:f3:57: 3e:af:b5:3d:f6:40:aa:32:57:32:7d:36:25:71:51:8b:1c:27: 37:18:98:4b:8c:db:f7:35:02:3f:69:4a:e5:8c:c5:ae:01:66: 94:ec:b2:f7:e7:49:d4:78:68:47:e8:ea:18:ae:b4:db:fe:a3: 49:e0:bf:c1:1b:2c:a8:82:4b:cb:65:a7:90:d0:5d:13:a4:8b: bc:ab:49:2f:da:8e:1b:f6:82:67:e0:0f:3a:18:4d:b3:49:2c: 5d:99:f3:77 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUD8LcSxl1kUhWJ7BakPcJ0/j/p60wDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMDI3REJFQzkxMDIxMTU0MjYzQkIwQ0YxNTY1ODMzNzA1 MDIzRDk4NzAeFw0yNjAxMjQxNzA2NDJaFw0yNjAxMjcxODQwNDJaMDMxMTAvBgNV BAMTKDFBNjg0NDE3NjlFOEFDNTNEREVGMTIzMTBCRTNDNzI1RjJGMzU5NDEwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCRdu2vrDnQGx52W4UPKLltIMjP gJXNmJYiMyGG3c+ajLCzvdBRzt5qp6DmS/JhUjXbd2tFANr/DGqlsyI0wLNt+5aA 9gVig7WmWBTsm7Cj8w0gonuKXz2lclwImsY6bKVf9lbs8rx3YYNth+gauVHOwCI0 Euh4A3HC9oEQsDt5+tCYtNIuTE9Cr/Go3zN/wf9I2QmtrERjxlRpDnetsQBn+qW8 myY93VVfYty+bM2qYuUEzL5EO63ZKfbh7iUFFwuXXRSXarT0WiE4OmdZHTLtIi/K PDWxlgJvxgxF5bHAvx/1YfUif7T/3+/2JBYyPzGktEhPi/73xcTcMDnx9RBVAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUGmhEF2norFPd7xIxC+PHJfLzWUEwHwYDVR0j BBgwFoAUAn2+yRAhFUJjuwzxVlgzcFAj2YcwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby8w NzRmMjE0YS1iZjU1LTQwNDgtODQ1ZC0yMDY3NWZiNWYyYTQvMC8wMjdEQkVDOTEw MjExNTQyNjNCQjBDRjE1NjU4MzM3MDUwMjNEOTg3LmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvMDI3REJFQzkxMDIxMTU0MjYzQkIwQ0YxNTY1ODMzNzA1MDIz RDk4Ny5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vMDc0ZjIxNGEtYmY1NS00MDQ4LTg0 NWQtMjA2NzVmYjVmMmE0LzAvMDI3REJFQzkxMDIxMTU0MjYzQkIwQ0YxNTY1ODMz NzA1MDIzRDk4Ny5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAE8DNQQqNIL3SiPQjEDCjrQ9/EZ7fpDx4W1A 6wPzRUmymqBsc87mb0vipejLgCEGxVvU0Yqu6n21U4bWER9FOzxcKVg25agI72km 1pxgsnvcfBx95mStzhRsn+DUZmT9NY/GAnr2J5c9fTSGU+LxHJGiZ85JRx8U2olo AJXv4sWuJHM6ABtX/PeGnsnOpxz4y19bFhzVUhSH/ts8exWdBBbzVz6vtT32QKoy VzJ9NiVxUYscJzcYmEuM2/c1Aj9pSuWMxa4BZpTssvfnSdR4aEfo6hiutNv+o0ng v8EbLKiCS8tlp5DQXROki7yrSS/ajhv2gmfgDzoYTbNJLF2Z83c= -----END CERTIFICATE-----Generated at Sun Jan 25 23:19:42 2026 by rpki-client