This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf repo-rpki.idnic.net/repo/1ffa3b64-3c61-48d5-ab0c-d63b4824d00e/0/1C427FBF1A649B90BD89B0EA83871003D9045925.mft File: 1C427FBF1A649B90BD89B0EA83871003D9045925.mft (raw, json) Hash identifier: jIzi0EWe/EgnUTBYHiWSM3KCiqo22WT1fje6Sx1CHjc= Subject key identifier: FD:08:C8:0C:48:42:9F:4E:6A:C0:E0:5D:8F:7A:3A:8B:AD:2F:0C:05 Authority key identifier: 1C:42:7F:BF:1A:64:9B:90:BD:89:B0:EA:83:87:10:03:D9:04:59:25 Certificate issuer: /CN=1C427FBF1A649B90BD89B0EA83871003D9045925 Certificate serial: 7FC9519A9D5DF21539D9295ED2B3F1D32AF049F5 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/1C427FBF1A649B90BD89B0EA83871003D9045925.cer Subject info access: rsync://repo-rpki.idnic.net/repo/1ffa3b64-3c61-48d5-ab0c-d63b4824d00e/0/1C427FBF1A649B90BD89B0EA83871003D9045925.mft Manifest number: 027C Signing time: Sun 25 Jan 2026 08:31:44 +0000 Manifest this update: Sun 25 Jan 2026 08:26:44 +0000 Manifest next update: Wed 28 Jan 2026 20:11:44 +0000 Files and hashes: 1: 1C427FBF1A649B90BD89B0EA83871003D9045925.crl (hash: 5oOEm7mqHZp3SmtSy6ALykuqgyLBRS3X/GUAWnwH8T0=) 2: 3130332e3138322e302e302f32342d3234203d3e2039333431.roa (hash: D3+VPean7D1EYCu/31sceMfjTlNNJfKyOQfz7pihzoU=) 3: 3130332e3138322e312e302f32342d3234203d3e2039333431.roa (hash: cBkGG+I0fKOsMSDWDVv2R09AQ7o+qWoi+Szb7iMxrC8=) 4: 3130332e3138322e302e302f32332d3233203d3e2039333431.roa (hash: nPXN7jiM3pyEkrdy+/m6LPxlqXOvK01rGWZj8klP7xs=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/1ffa3b64-3c61-48d5-ab0c-d63b4824d00e/0/1C427FBF1A649B90BD89B0EA83871003D9045925.crl rsync://repo-rpki.idnic.net/repo/1ffa3b64-3c61-48d5-ab0c-d63b4824d00e/0/1C427FBF1A649B90BD89B0EA83871003D9045925.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/1C427FBF1A649B90BD89B0EA83871003D9045925.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 28 Jan 2026 14:00:57 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 7f:c9:51:9a:9d:5d:f2:15:39:d9:29:5e:d2:b3:f1:d3:2a:f0:49:f5 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=1C427FBF1A649B90BD89B0EA83871003D9045925 Validity Not Before: Jan 25 08:26:44 2026 GMT Not After : Jan 28 20:11:44 2026 GMT Subject: CN=FD08C80C48429F4E6AC0E05D8F7A3A8BAD2F0C05 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e6:bd:fa:f2:65:e3:16:56:26:3c:28:55:30:45: 91:36:16:ff:5e:36:47:71:ae:16:47:14:bd:11:bd: 2c:0a:32:11:23:49:62:aa:1a:ba:3a:01:b7:8f:9d: 5b:0b:15:cc:d0:13:71:5f:42:48:b2:ef:06:20:2c: f7:50:ee:f0:fd:42:c5:d3:15:d1:69:9c:4d:9d:8f: b1:ac:25:05:1b:89:15:21:8c:56:8c:c5:29:7f:fd: 32:af:c7:0a:10:f3:c0:0c:72:23:36:f6:7c:75:c6: df:0e:0d:83:3f:f3:8b:92:6f:7d:d0:85:81:5b:d0: 17:c0:be:ef:31:76:d0:a8:56:98:09:72:1c:1e:79: 98:b3:18:0b:3b:8d:05:ce:7b:40:5e:8b:3e:57:14: 19:e6:94:24:f5:28:de:b7:9c:7d:48:40:9c:dc:9c: 98:ce:1e:4d:15:25:04:b6:8d:49:91:f1:b1:52:bf: f3:c3:6a:dc:88:80:50:d6:ae:49:6e:8f:a7:0f:72: e3:11:fd:b1:71:35:6c:18:17:b8:bc:95:fd:68:84: 5e:f7:d2:5e:8b:7f:91:84:c5:e2:2a:c1:46:34:fc: db:1f:28:bb:ba:c3:fa:83:67:2b:eb:74:a0:c9:5b: 4c:83:f0:a1:1e:3b:d4:cf:40:dd:f4:b8:e8:2b:4b: ae:f3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: FD:08:C8:0C:48:42:9F:4E:6A:C0:E0:5D:8F:7A:3A:8B:AD:2F:0C:05 X509v3 Authority Key Identifier: keyid:1C:42:7F:BF:1A:64:9B:90:BD:89:B0:EA:83:87:10:03:D9:04:59:25 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/1ffa3b64-3c61-48d5-ab0c-d63b4824d00e/0/1C427FBF1A649B90BD89B0EA83871003D9045925.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/1C427FBF1A649B90BD89B0EA83871003D9045925.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/1ffa3b64-3c61-48d5-ab0c-d63b4824d00e/0/1C427FBF1A649B90BD89B0EA83871003D9045925.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption c0:fc:e2:d1:a0:a1:3d:3b:ed:23:d5:eb:dd:e1:94:b9:4d:e5: 79:a3:7b:b9:89:ce:0a:59:05:89:1e:8d:bf:28:9a:28:e7:c4: 83:c8:b2:cb:80:cf:25:64:8e:e0:aa:28:1e:47:8f:8c:70:75: 49:b9:0f:a6:0c:8d:1b:61:f4:e9:57:8e:14:ff:a3:d0:96:09: 8f:c6:ed:db:84:76:bd:84:62:7f:4f:9f:ef:70:d8:43:de:23: 1f:59:0f:d6:b5:6f:dc:99:aa:70:13:85:1c:e7:f4:fc:89:89: 4a:21:d8:21:34:1b:46:05:13:53:c3:79:d6:e9:7d:66:19:8b: 4a:99:4a:b5:52:e6:f1:c9:c7:48:dc:18:a9:d9:6e:24:a9:52: 6a:89:8a:ef:1a:c0:1d:24:9a:ab:95:3b:8f:aa:bf:6b:0a:11: 27:f5:81:77:dd:16:b4:27:00:c3:0c:87:16:98:9a:2a:80:87: 07:fe:ca:ad:cd:55:97:63:21:d9:da:7d:db:d2:32:0a:c6:37: 06:eb:7d:23:17:7d:9f:07:92:b5:6a:53:ac:55:74:f4:6c:b1: dc:56:01:8d:3e:d3:75:92:40:ad:11:bc:41:fc:da:85:76:f5: ad:47:70:a2:0c:8b:d8:34:5c:48:ce:9d:fc:00:58:6f:a4:26: 0a:5c:ff:20 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUf8lRmp1d8hU52Sle0rPx0yrwSfUwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMUM0MjdGQkYxQTY0OUI5MEJEODlCMEVBODM4NzEwMDNE OTA0NTkyNTAeFw0yNjAxMjUwODI2NDRaFw0yNjAxMjgyMDExNDRaMDMxMTAvBgNV BAMTKEZEMDhDODBDNDg0MjlGNEU2QUMwRTA1RDhGN0EzQThCQUQyRjBDMDUwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDmvfryZeMWViY8KFUwRZE2Fv9e NkdxrhZHFL0RvSwKMhEjSWKqGro6AbePnVsLFczQE3FfQkiy7wYgLPdQ7vD9QsXT FdFpnE2dj7GsJQUbiRUhjFaMxSl//TKvxwoQ88AMciM29nx1xt8ODYM/84uSb33Q hYFb0BfAvu8xdtCoVpgJchweeZizGAs7jQXOe0Beiz5XFBnmlCT1KN63nH1IQJzc nJjOHk0VJQS2jUmR8bFSv/PDatyIgFDWrkluj6cPcuMR/bFxNWwYF7i8lf1ohF73 0l6Lf5GExeIqwUY0/NsfKLu6w/qDZyvrdKDJW0yD8KEeO9TPQN30uOgrS67zAgMB AAGjggI8MIICODAdBgNVHQ4EFgQU/QjIDEhCn05qwOBdj3o6i60vDAUwHwYDVR0j BBgwFoAUHEJ/vxpkm5C9ibDqg4cQA9kEWSUwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby8x ZmZhM2I2NC0zYzYxLTQ4ZDUtYWIwYy1kNjNiNDgyNGQwMGUvMC8xQzQyN0ZCRjFB NjQ5QjkwQkQ4OUIwRUE4Mzg3MTAwM0Q5MDQ1OTI1LmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvMUM0MjdGQkYxQTY0OUI5MEJEODlCMEVBODM4NzEwMDNEOTA0 NTkyNS5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vMWZmYTNiNjQtM2M2MS00OGQ1LWFi MGMtZDYzYjQ4MjRkMDBlLzAvMUM0MjdGQkYxQTY0OUI5MEJEODlCMEVBODM4NzEw MDNEOTA0NTkyNS5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAMD84tGgoT077SPV693hlLlN5Xmje7mJzgpZ BYkejb8omijnxIPIssuAzyVkjuCqKB5Hj4xwdUm5D6YMjRth9OlXjhT/o9CWCY/G 7duEdr2EYn9Pn+9w2EPeIx9ZD9a1b9yZqnAThRzn9PyJiUoh2CE0G0YFE1PDedbp fWYZi0qZSrVS5vHJx0jcGKnZbiSpUmqJiu8awB0kmquVO4+qv2sKESf1gXfdFrQn AMMMhxaYmiqAhwf+yq3NVZdjIdnafdvSMgrGNwbrfSMXfZ8HkrVqU6xVdPRssdxW AY0+03WSQK0RvEH82oV29a1HcKIMi9g0XEjOnfwAWG+kJgpc/yA= -----END CERTIFICATE-----Generated at Sun Jan 25 21:52:18 2026 by rpki-client