This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf repo-rpki.idnic.net/repo/8ff09584-9110-4b0d-8f6d-2ce5258e846b/0/2C27A0D9DD2531EBEF1E2EC56ACBCBCEB21C498E.mft File: 2C27A0D9DD2531EBEF1E2EC56ACBCBCEB21C498E.mft (raw, json) Hash identifier: iRsmnpN2dx9kQOXCDeWVXQSk2OJlgR80VzZQzxCXU0Q= Subject key identifier: 8C:70:6B:38:E2:B5:10:8E:F8:05:F2:83:1D:0B:50:43:97:47:20:46 Authority key identifier: 2C:27:A0:D9:DD:25:31:EB:EF:1E:2E:C5:6A:CB:CB:CE:B2:1C:49:8E Certificate issuer: /CN=2C27A0D9DD2531EBEF1E2EC56ACBCBCEB21C498E Certificate serial: 61C1B12C6187DC12F631496D3270246896ED9AC3 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/2C27A0D9DD2531EBEF1E2EC56ACBCBCEB21C498E.cer Subject info access: rsync://repo-rpki.idnic.net/repo/8ff09584-9110-4b0d-8f6d-2ce5258e846b/0/2C27A0D9DD2531EBEF1E2EC56ACBCBCEB21C498E.mft Manifest number: 5C Signing time: Sat 24 Jan 2026 10:32:02 +0000 Manifest this update: Sat 24 Jan 2026 10:27:02 +0000 Manifest next update: Tue 27 Jan 2026 10:36:02 +0000 Files and hashes: 1: 3130332e3136362e3232362e302f32332d3234203d3e20313431393539.roa (hash: 4LokQzzFwf4xC5LYRIdk1nOZ26P5gcvOND0Okjnr1uo=) 2: 2C27A0D9DD2531EBEF1E2EC56ACBCBCEB21C498E.crl (hash: ymMjFqlcP82t+716HV3yc6jpU3CAy84D2sgslUicTfE=) 3: 3130332e3136362e3232362e302f32342d3234203d3e20313431393539.roa (hash: 6F2YD7bfpsvy9ZCzb1NRXMUO3qP13tF9eyDHsH0IzEg=) 4: 3130332e3136362e3232372e302f32342d3234203d3e20313431393539.roa (hash: 745SbMdhMmIVd9+YwllDATXoMHy8b7XWNJsce0BNxUE=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/8ff09584-9110-4b0d-8f6d-2ce5258e846b/0/2C27A0D9DD2531EBEF1E2EC56ACBCBCEB21C498E.crl rsync://repo-rpki.idnic.net/repo/8ff09584-9110-4b0d-8f6d-2ce5258e846b/0/2C27A0D9DD2531EBEF1E2EC56ACBCBCEB21C498E.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/2C27A0D9DD2531EBEF1E2EC56ACBCBCEB21C498E.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 27 Jan 2026 10:36:02 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 61:c1:b1:2c:61:87:dc:12:f6:31:49:6d:32:70:24:68:96:ed:9a:c3 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2C27A0D9DD2531EBEF1E2EC56ACBCBCEB21C498E Validity Not Before: Jan 24 10:27:02 2026 GMT Not After : Jan 27 10:36:02 2026 GMT Subject: CN=8C706B38E2B5108EF805F2831D0B504397472046 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bb:f1:bc:ff:79:18:49:7b:39:f2:2c:b8:df:2b: 54:4a:e7:e3:92:49:9f:ed:bd:c8:e1:e6:8f:e9:39: 0d:ac:97:e9:89:de:20:c4:7b:81:4a:78:08:89:44: 23:ab:64:f0:70:37:30:9e:9e:3d:a0:18:53:f1:a1: fc:e8:b0:ce:2e:fb:28:62:04:3e:e0:10:cd:02:a1: af:ae:91:fb:63:3a:75:27:08:04:27:8c:5d:8e:b8: d5:2e:17:82:74:27:da:42:0c:0a:f9:7b:d4:45:ad: df:93:7b:4f:9a:86:ec:8a:70:ce:a4:28:dc:e5:9c: 23:a7:e2:9c:86:9e:b1:6a:df:6c:08:28:42:1f:cf: ce:ce:31:65:21:1f:3d:8e:ce:08:0c:a3:bc:e1:45: 4c:a0:b0:e6:b4:d3:ea:86:8c:24:a7:6f:48:eb:e0: cd:00:37:ff:9b:6f:3f:99:1e:23:f6:59:31:3f:62: 26:55:90:eb:70:b7:ad:e4:32:57:d3:a3:76:cf:4f: be:ae:1f:74:a3:c3:79:4b:a0:4b:c2:95:e9:db:d7: 23:e2:4c:03:f8:68:5c:fe:44:4c:90:ee:30:f6:24: 73:31:4a:1f:1d:4a:df:99:ef:46:b2:3e:31:33:3c: f8:5f:6e:d1:b6:5a:43:f7:15:48:b3:55:28:50:42: 05:3d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 8C:70:6B:38:E2:B5:10:8E:F8:05:F2:83:1D:0B:50:43:97:47:20:46 X509v3 Authority Key Identifier: keyid:2C:27:A0:D9:DD:25:31:EB:EF:1E:2E:C5:6A:CB:CB:CE:B2:1C:49:8E X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/8ff09584-9110-4b0d-8f6d-2ce5258e846b/0/2C27A0D9DD2531EBEF1E2EC56ACBCBCEB21C498E.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/2C27A0D9DD2531EBEF1E2EC56ACBCBCEB21C498E.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/8ff09584-9110-4b0d-8f6d-2ce5258e846b/0/2C27A0D9DD2531EBEF1E2EC56ACBCBCEB21C498E.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 41:4f:4a:e8:43:d4:0e:41:06:25:a5:37:fe:48:ce:1a:55:7b: 76:d7:9a:3b:82:be:5c:63:0d:88:65:b4:ab:20:6f:d3:36:5d: 4f:4e:f7:c5:18:0e:3d:6d:0c:29:7b:71:8f:04:f0:5e:30:1c: e6:6f:93:de:a1:50:c1:0c:14:a8:c0:7e:2c:4d:70:b6:55:aa: 6c:5d:57:67:61:f0:b4:b8:f6:b7:65:21:e0:51:cf:9a:0c:51: 34:5f:87:61:45:91:21:6c:c2:e1:ef:41:4a:a0:e8:c7:cd:1e: f8:0f:0d:d1:a1:26:ed:6e:62:2a:6b:4e:e4:0e:5f:cb:97:7c: 36:37:f5:b7:ad:62:9b:32:ae:73:29:85:c8:62:39:f0:8f:23: e1:3c:d6:0d:d1:d1:c6:81:93:74:d9:d4:be:d3:9e:e8:b3:17: b8:fe:0b:1c:c9:5b:3a:0f:12:4d:bf:46:b6:83:bb:6f:af:af: 7c:f5:8d:2e:ec:e6:b1:d8:21:f8:e3:69:39:0b:2f:ab:82:cd: 2e:47:4a:81:a3:c5:56:de:c3:a9:e4:16:27:7a:df:82:15:75: 1d:a8:fa:42:65:8a:ed:76:71:19:6b:55:2c:54:a5:8a:35:81: 9c:e2:82:6a:8a:19:02:7e:71:67:2f:4a:14:96:d8:81:c1:80: ff:40:3e:6f -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUYcGxLGGH3BL2MUltMnAkaJbtmsMwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMkMyN0EwRDlERDI1MzFFQkVGMUUyRUM1NkFDQkNCQ0VC MjFDNDk4RTAeFw0yNjAxMjQxMDI3MDJaFw0yNjAxMjcxMDM2MDJaMDMxMTAvBgNV BAMTKDhDNzA2QjM4RTJCNTEwOEVGODA1RjI4MzFEMEI1MDQzOTc0NzIwNDYwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC78bz/eRhJeznyLLjfK1RK5+OS SZ/tvcjh5o/pOQ2sl+mJ3iDEe4FKeAiJRCOrZPBwNzCenj2gGFPxofzosM4u+yhi BD7gEM0Coa+ukftjOnUnCAQnjF2OuNUuF4J0J9pCDAr5e9RFrd+Te0+ahuyKcM6k KNzlnCOn4pyGnrFq32wIKEIfz87OMWUhHz2OzggMo7zhRUygsOa00+qGjCSnb0jr 4M0AN/+bbz+ZHiP2WTE/YiZVkOtwt63kMlfTo3bPT76uH3Sjw3lLoEvClenb1yPi TAP4aFz+REyQ7jD2JHMxSh8dSt+Z70ayPjEzPPhfbtG2WkP3FUizVShQQgU9AgMB AAGjggI8MIICODAdBgNVHQ4EFgQUjHBrOOK1EI74BfKDHQtQQ5dHIEYwHwYDVR0j BBgwFoAULCeg2d0lMevvHi7FasvLzrIcSY4wDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby84 ZmYwOTU4NC05MTEwLTRiMGQtOGY2ZC0yY2U1MjU4ZTg0NmIvMC8yQzI3QTBEOURE MjUzMUVCRUYxRTJFQzU2QUNCQ0JDRUIyMUM0OThFLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvMkMyN0EwRDlERDI1MzFFQkVGMUUyRUM1NkFDQkNCQ0VCMjFD NDk4RS5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vOGZmMDk1ODQtOTExMC00YjBkLThm NmQtMmNlNTI1OGU4NDZiLzAvMkMyN0EwRDlERDI1MzFFQkVGMUUyRUM1NkFDQkNC Q0VCMjFDNDk4RS5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAEFPSuhD1A5BBiWlN/5IzhpVe3bXmjuCvlxj DYhltKsgb9M2XU9O98UYDj1tDCl7cY8E8F4wHOZvk96hUMEMFKjAfixNcLZVqmxd V2dh8LS49rdlIeBRz5oMUTRfh2FFkSFswuHvQUqg6MfNHvgPDdGhJu1uYiprTuQO X8uXfDY39betYpsyrnMphchiOfCPI+E81g3R0caBk3TZ1L7TnuizF7j+CxzJWzoP Ek2/RraDu2+vr3z1jS7s5rHYIfjjaTkLL6uCzS5HSoGjxVbew6nkFid634IVdR2o +kJliu12cRlrVSxUpYo1gZzigmqKGQJ+cWcvShSW2IHBgP9APm8= -----END CERTIFICATE-----Generated at Sun Jan 25 23:35:59 2026 by rpki-client