This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

$ rpki-client -vvf repo-rpki.idnic.net/repo/4544e951-3d08-458a-a44a-529d387d26b1/0/27A3131BB606D93657151019C1A9735DF861C9D4.mft
File: 27A3131BB606D93657151019C1A9735DF861C9D4.mft (raw, json)
Hash identifier: wnPgpj/0P+FG5AtVXNlAhiGQ2Qv5GUmFSm8aDHvBwo4=
Subject key identifier: 90:E3:21:61:7F:85:51:B5:BF:81:9D:BE:86:1B:86:90:6B:4C:0E:4B
Authority key identifier: 27:A3:13:1B:B6:06:D9:36:57:15:10:19:C1:A9:73:5D:F8:61:C9:D4
Certificate issuer: /CN=27A3131BB606D93657151019C1A9735DF861C9D4
Certificate serial: 4F0C4BD48C04BEB0E9D084CFF5B8C4E4A894CABB
Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/27A3131BB606D93657151019C1A9735DF861C9D4.cer
Subject info access: rsync://repo-rpki.idnic.net/repo/4544e951-3d08-458a-a44a-529d387d26b1/0/27A3131BB606D93657151019C1A9735DF861C9D4.mft
Manifest number: 032C
Signing time: Fri 23 Jan 2026 22:41:07 +0000
Manifest this update: Fri 23 Jan 2026 22:36:07 +0000
Manifest next update: Tue 27 Jan 2026 10:25:07 +0000
Files and hashes: 1: 3130332e3133312e32392e302f32342d3234203d3e20313338303834.roa (hash: encpHXfOglU+n5zC00TevMjvjDMOpcW1MtPZsrVdOCI=)
2: 27A3131BB606D93657151019C1A9735DF861C9D4.crl (hash: TdvDz0R90IGqO11ZWQEZJebgQhUAjdiVuCrqum7rlE0=)
Validation: OK
Signature path: rsync://repo-rpki.idnic.net/repo/4544e951-3d08-458a-a44a-529d387d26b1/0/27A3131BB606D93657151019C1A9735DF861C9D4.crl
rsync://repo-rpki.idnic.net/repo/4544e951-3d08-458a-a44a-529d387d26b1/0/27A3131BB606D93657151019C1A9735DF861C9D4.mft
rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/27A3131BB606D93657151019C1A9735DF861C9D4.cer
rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl
rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Tue 27 Jan 2026 10:25:07 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
4f:0c:4b:d4:8c:04:be:b0:e9:d0:84:cf:f5:b8:c4:e4:a8:94:ca:bb
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=27A3131BB606D93657151019C1A9735DF861C9D4
Validity
Not Before: Jan 23 22:36:07 2026 GMT
Not After : Jan 27 10:25:07 2026 GMT
Subject: CN=90E321617F8551B5BF819DBE861B86906B4C0E4B
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d2:c1:e3:0a:f1:5e:db:47:9a:2a:c9:5a:44:85:
22:53:83:22:af:8d:d8:8f:db:79:98:75:53:35:27:
4d:e9:5b:f8:15:87:da:31:80:8f:e0:62:dc:b8:2e:
a9:18:ed:33:1a:e2:7a:c1:0e:92:1c:b9:c0:19:ea:
bb:c4:1d:90:c1:60:36:d5:a6:03:9c:ce:4d:4d:61:
57:ba:56:53:db:e3:70:0e:d2:a6:4d:db:fd:43:e0:
a6:80:ff:e6:1a:62:3c:05:0b:b4:99:4b:aa:ec:bc:
50:7e:90:7f:ca:87:56:4b:07:02:ad:f2:d3:13:eb:
82:f3:a2:e5:38:98:37:02:dd:f9:5a:3c:84:c7:5a:
d1:c5:8b:4e:47:d4:3f:5c:9c:aa:2c:9e:2c:d1:1e:
c1:28:77:94:64:a9:8a:f4:c7:aa:75:06:34:d6:b9:
cf:9d:db:dd:21:03:30:41:cd:08:61:3f:d6:2b:df:
35:e7:ba:52:e3:a5:0c:b4:27:ce:be:d7:2e:c9:f1:
19:c7:f9:39:0c:41:91:f4:fb:b8:9a:2d:4a:2f:c4:
2e:45:b3:e3:8d:48:67:bf:f4:6f:e0:f3:80:e2:ca:
57:13:66:0c:a5:cc:af:93:4a:4a:3f:60:6b:b8:78:
1d:ec:49:f7:11:e2:bb:28:24:6e:81:79:20:9e:dd:
bd:f9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
90:E3:21:61:7F:85:51:B5:BF:81:9D:BE:86:1B:86:90:6B:4C:0E:4B
X509v3 Authority Key Identifier:
keyid:27:A3:13:1B:B6:06:D9:36:57:15:10:19:C1:A9:73:5D:F8:61:C9:D4
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://repo-rpki.idnic.net/repo/4544e951-3d08-458a-a44a-529d387d26b1/0/27A3131BB606D93657151019C1A9735DF861C9D4.crl
Authority Information Access:
CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/27A3131BB606D93657151019C1A9735DF861C9D4.cer
Subject Information Access:
Signed Object - URI:rsync://repo-rpki.idnic.net/repo/4544e951-3d08-458a-a44a-529d387d26b1/0/27A3131BB606D93657151019C1A9735DF861C9D4.mft
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
84:1f:5f:91:67:54:fc:a0:3b:9b:7a:62:8d:9e:fd:af:48:1a:
ec:6c:52:ce:cf:e8:48:4e:54:32:bd:a8:70:f5:b8:19:59:2c:
18:cc:b1:50:32:a2:07:4a:f6:85:de:70:e8:e6:82:74:17:db:
ea:34:87:8c:69:b6:52:24:1d:d3:8a:bf:f5:f8:38:d8:6b:ff:
02:33:f1:3f:85:a3:20:d7:3a:f1:7d:9f:ea:80:72:71:d2:7f:
e2:2b:52:79:de:00:6b:d2:e4:c1:df:f4:4e:d2:68:79:f9:34:
56:5b:0a:bf:7b:c4:d7:a8:c9:15:3f:11:00:a1:6a:33:67:1d:
2c:76:29:94:67:fb:bd:40:d5:21:20:b9:f3:79:a6:5c:2b:b0:
09:a5:12:e8:a1:b4:22:da:a3:b5:87:7f:31:02:84:68:32:db:
ad:98:60:e5:bf:46:5e:e5:23:bd:df:39:a2:fe:cd:8e:3e:88:
db:56:6d:e9:69:52:41:cb:6e:b1:1c:20:42:f3:a3:7b:6e:55:
19:e8:65:d0:52:bc:68:3c:97:3b:e7:1d:32:5c:e1:f0:bc:ea:
09:89:05:22:ff:d4:1b:f6:d0:f1:95:f0:06:2b:d0:76:a1:a4:
d7:c8:d7:29:da:fc:b7:00:c3:be:22:b0:1e:09:58:04:2c:ea:
52:c5:b6:01
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jan 26 02:48:38 2026 by rpki-client