This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf repo-rpki.idnic.net/repo/55511a8a-30da-4670-a010-7926d7cd510b/0/27B2CE96FAE8E1763A3C30DB33C3BBD8F051838B.mft
File:                     27B2CE96FAE8E1763A3C30DB33C3BBD8F051838B.mft (raw, json)
Hash identifier:          b2gl2yEirjhneaAy/LOwd0pImHIyarFQENU2NxvdVPs=
Subject key identifier:   BB:C0:03:20:06:2E:BD:64:AC:CC:37:18:13:81:F9:A8:83:D4:07:AC
Authority key identifier: 27:B2:CE:96:FA:E8:E1:76:3A:3C:30:DB:33:C3:BB:D8:F0:51:83:8B
Certificate issuer:       /CN=27B2CE96FAE8E1763A3C30DB33C3BBD8F051838B
Certificate serial:       208935C74FF4F40ED509E37A38BFFB56BA115AE0
Authority info access:    rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/27B2CE96FAE8E1763A3C30DB33C3BBD8F051838B.cer
Subject info access:      rsync://repo-rpki.idnic.net/repo/55511a8a-30da-4670-a010-7926d7cd510b/0/27B2CE96FAE8E1763A3C30DB33C3BBD8F051838B.mft
Manifest number:          0169
Signing time:             Sat 24 Jan 2026 05:50:44 +0000
Manifest this update:     Sat 24 Jan 2026 05:45:44 +0000
Manifest next update:     Tue 27 Jan 2026 11:01:44 +0000
Files and hashes:         1: 27B2CE96FAE8E1763A3C30DB33C3BBD8F051838B.crl (hash: A9+L8/bOi4gv4ejgcJOo3sHVPkrWag3x37qyKBjkMhg=)
                          2: 3137352e3131312e39362e302f32342d3234203d3e20313531393935.roa (hash: xQP0pjDgC0pPyWEl2qOcCOaX00jzJQQKAN2sTOVKJqE=)
Validation:               OK
Signature path:           rsync://repo-rpki.idnic.net/repo/55511a8a-30da-4670-a010-7926d7cd510b/0/27B2CE96FAE8E1763A3C30DB33C3BBD8F051838B.crl
                          rsync://repo-rpki.idnic.net/repo/55511a8a-30da-4670-a010-7926d7cd510b/0/27B2CE96FAE8E1763A3C30DB33C3BBD8F051838B.mft
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/27B2CE96FAE8E1763A3C30DB33C3BBD8F051838B.cer
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Tue 27 Jan 2026 11:01:44 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            20:89:35:c7:4f:f4:f4:0e:d5:09:e3:7a:38:bf:fb:56:ba:11:5a:e0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=27B2CE96FAE8E1763A3C30DB33C3BBD8F051838B
        Validity
            Not Before: Jan 24 05:45:44 2026 GMT
            Not After : Jan 27 11:01:44 2026 GMT
        Subject: CN=BBC00320062EBD64ACCC37181381F9A883D407AC
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bd:d3:a4:fd:48:7d:a3:08:af:b3:ac:e1:e8:1f:
                    08:a3:07:ce:c3:13:26:97:d7:1a:25:81:2b:a5:da:
                    54:8c:b6:ec:e7:75:fc:c6:a4:96:99:79:d4:3c:e7:
                    e0:11:02:16:d2:94:66:21:ba:08:3a:66:96:e8:a6:
                    e4:e2:91:f0:11:f1:41:a2:ff:b7:10:0c:5f:17:b0:
                    3a:30:00:a1:f9:c1:66:de:18:ca:45:23:eb:3f:6a:
                    ea:76:53:9f:05:85:b4:ee:db:49:01:a7:7c:a6:85:
                    86:ef:8f:4a:a9:85:0d:a0:e7:12:4d:93:63:82:85:
                    d7:2d:41:ec:25:3d:b4:1a:5d:25:b4:01:a6:f9:52:
                    f6:27:b3:13:9f:bd:44:52:4b:0a:6c:5e:15:4c:af:
                    7b:a0:b9:ba:24:fb:5a:b2:9a:9b:4b:e2:8d:36:21:
                    2a:e2:0b:13:b1:56:17:e3:3c:15:73:a4:56:55:6f:
                    01:50:87:91:ee:a6:5b:a7:a2:e0:48:a8:34:53:14:
                    16:22:b4:5a:81:82:20:c8:9a:eb:48:39:26:d5:cc:
                    46:6c:5c:d6:f2:68:20:5b:59:99:db:19:9a:2d:61:
                    8e:67:9e:f7:b0:57:fe:e4:a9:22:45:b2:86:22:67:
                    cd:36:0c:b9:ff:aa:1e:a6:4b:b3:8a:45:52:54:1f:
                    4e:51
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                BB:C0:03:20:06:2E:BD:64:AC:CC:37:18:13:81:F9:A8:83:D4:07:AC
            X509v3 Authority Key Identifier:
                keyid:27:B2:CE:96:FA:E8:E1:76:3A:3C:30:DB:33:C3:BB:D8:F0:51:83:8B

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repo-rpki.idnic.net/repo/55511a8a-30da-4670-a010-7926d7cd510b/0/27B2CE96FAE8E1763A3C30DB33C3BBD8F051838B.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/27B2CE96FAE8E1763A3C30DB33C3BBD8F051838B.cer

            Subject Information Access:
                Signed Object - URI:rsync://repo-rpki.idnic.net/repo/55511a8a-30da-4670-a010-7926d7cd510b/0/27B2CE96FAE8E1763A3C30DB33C3BBD8F051838B.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         34:51:51:8d:96:14:2e:ce:80:6d:c6:0f:e6:51:59:e3:a9:eb:
         49:f6:57:41:61:e3:24:3f:66:db:de:0d:d6:73:2e:d8:b8:94:
         43:12:9c:a9:1f:75:a1:1e:e5:a7:5a:0f:32:2f:30:58:d7:aa:
         72:97:a9:ba:b9:87:99:52:77:a4:dd:e3:74:07:18:ab:82:67:
         49:c3:a8:12:da:d9:42:cc:a9:f4:f4:39:04:65:a4:0e:13:e0:
         c1:f2:45:09:be:7b:0f:f0:fc:dd:0a:5c:5c:04:5e:d2:e9:d9:
         32:fd:39:33:5c:97:86:b4:8b:e0:e6:ae:ba:88:ee:f5:29:0e:
         1e:ee:df:f5:48:7d:ea:c8:fc:3a:6d:33:86:28:1f:b5:46:6c:
         25:bb:39:21:af:12:44:9f:74:c4:67:90:89:99:97:68:f6:b5:
         f0:c4:63:8d:ec:f8:59:90:99:ba:db:ac:73:32:35:df:27:47:
         61:19:5b:01:3b:8a:a4:17:65:12:df:13:94:69:b3:37:fc:ad:
         65:1b:f6:6c:91:e5:08:5a:87:8a:80:ca:8f:4f:fd:93:58:f5:
         0f:bf:37:0e:66:8c:bf:8e:f3:47:7a:1b:9f:64:86:64:49:b0:
         24:64:c8:df:76:a6:c0:15:7e:8a:f3:0c:5f:db:6e:fd:b9:57:
         78:fc:1a:1c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jan 25 18:36:43 2026 by rpki-client