This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

$ rpki-client -vvf repo-rpki.idnic.net/repo/9e30ac64-0f13-4162-968f-afe5cc714cf6/0/27C6A8841764185192D3B7E3FC6D1ABD2D137D51.mft
File: 27C6A8841764185192D3B7E3FC6D1ABD2D137D51.mft (raw, json)
Hash identifier: ahyZOko7rRko465ThgzGOdcexwr10NUNbNPdmU65JbQ=
Subject key identifier: D3:D5:7B:BE:A4:D6:04:11:1D:E9:B3:5F:BA:E3:70:6F:DB:3F:45:BE
Authority key identifier: 27:C6:A8:84:17:64:18:51:92:D3:B7:E3:FC:6D:1A:BD:2D:13:7D:51
Certificate issuer: /CN=27C6A8841764185192D3B7E3FC6D1ABD2D137D51
Certificate serial: 13DB8FC73AB8CB44243AA54000A028B438A549A9
Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/27C6A8841764185192D3B7E3FC6D1ABD2D137D51.cer
Subject info access: rsync://repo-rpki.idnic.net/repo/9e30ac64-0f13-4162-968f-afe5cc714cf6/0/27C6A8841764185192D3B7E3FC6D1ABD2D137D51.mft
Manifest number: 0198
Signing time: Fri 05 Dec 2025 12:11:24 +0000
Manifest this update: Fri 05 Dec 2025 12:06:24 +0000
Manifest next update: Mon 08 Dec 2025 17:56:24 +0000
Files and hashes: 1: 27C6A8841764185192D3B7E3FC6D1ABD2D137D51.crl (hash: cNwTt6kL49MCr3vUe7hxH5dyNwgsAD35vUxvlamiPhY=)
2: 3130332e3138392e3136362e302f32332d3233203d3e20313439383835.roa (hash: 6LXlbR4cNb7e/a5cj5XOa29IvaWvdwclgoGKyPVr99g=)
Validation: OK
Signature path: rsync://repo-rpki.idnic.net/repo/9e30ac64-0f13-4162-968f-afe5cc714cf6/0/27C6A8841764185192D3B7E3FC6D1ABD2D137D51.crl
rsync://repo-rpki.idnic.net/repo/9e30ac64-0f13-4162-968f-afe5cc714cf6/0/27C6A8841764185192D3B7E3FC6D1ABD2D137D51.mft
rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/27C6A8841764185192D3B7E3FC6D1ABD2D137D51.cer
rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl
rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Mon 08 Dec 2025 17:56:24 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
13:db:8f:c7:3a:b8:cb:44:24:3a:a5:40:00:a0:28:b4:38:a5:49:a9
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=27C6A8841764185192D3B7E3FC6D1ABD2D137D51
Validity
Not Before: Dec 5 12:06:24 2025 GMT
Not After : Dec 8 17:56:24 2025 GMT
Subject: CN=D3D57BBEA4D604111DE9B35FBAE3706FDB3F45BE
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:be:f2:d3:32:35:50:5f:1d:97:33:ce:43:63:7c:
1a:7e:a8:af:35:68:09:84:45:e8:06:d9:a3:1e:b6:
21:18:db:b8:0d:89:e5:79:16:b4:5a:f0:7c:b4:fa:
89:72:c7:c8:05:41:a6:a3:72:30:d6:31:f0:2a:f9:
44:41:d6:ad:93:c8:cc:0d:fe:27:d1:20:fe:a8:3b:
73:e2:cf:27:00:d8:ec:ce:20:3b:60:50:de:73:96:
60:d6:84:64:00:6c:7b:3a:22:48:83:54:da:05:60:
23:ed:d2:33:84:70:69:6b:38:82:3d:e1:77:a4:0e:
d6:9d:b4:e3:f1:9f:4d:34:43:ba:85:0d:c0:ad:35:
fa:c5:59:dc:28:7a:fb:d8:b9:a8:da:f6:5c:fa:c3:
4f:39:ed:1c:c7:0a:96:88:60:3b:84:c7:25:fb:92:
63:77:2a:f5:3a:e0:5e:ec:ff:91:f4:67:e1:cf:cd:
53:ba:b9:1f:6d:8d:f6:bc:35:e3:2d:70:9b:26:18:
18:fd:34:c9:bd:b7:19:67:b0:7c:67:96:65:56:d7:
4d:09:69:33:d0:03:52:66:a4:4a:1d:b2:bf:d4:4b:
5b:e1:29:c9:4d:9d:99:cf:2a:98:92:44:5b:b4:ca:
3c:d8:92:59:c7:84:36:7c:bb:55:c8:65:6d:50:87:
6b:ad
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D3:D5:7B:BE:A4:D6:04:11:1D:E9:B3:5F:BA:E3:70:6F:DB:3F:45:BE
X509v3 Authority Key Identifier:
keyid:27:C6:A8:84:17:64:18:51:92:D3:B7:E3:FC:6D:1A:BD:2D:13:7D:51
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://repo-rpki.idnic.net/repo/9e30ac64-0f13-4162-968f-afe5cc714cf6/0/27C6A8841764185192D3B7E3FC6D1ABD2D137D51.crl
Authority Information Access:
CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/27C6A8841764185192D3B7E3FC6D1ABD2D137D51.cer
Subject Information Access:
Signed Object - URI:rsync://repo-rpki.idnic.net/repo/9e30ac64-0f13-4162-968f-afe5cc714cf6/0/27C6A8841764185192D3B7E3FC6D1ABD2D137D51.mft
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
a1:56:f8:29:27:18:85:f8:c3:b1:24:71:1f:08:d8:c7:c0:a0:
55:e2:6b:e9:06:9f:30:a7:9e:a2:cd:cf:b2:91:71:49:c1:02:
58:0c:45:68:bf:dd:08:b9:f4:3f:1a:ed:9e:fa:d1:28:64:b8:
a6:2f:a5:c8:b2:2f:ac:2a:26:53:3c:b0:49:33:dc:69:74:99:
1e:48:5c:ad:b7:99:f4:93:97:08:ac:46:fe:f6:c6:bd:de:31:
59:d8:d0:59:2a:51:86:70:17:a1:c8:12:3d:a3:60:d9:2e:0d:
61:4c:f7:e1:ef:43:0d:7b:df:71:aa:6b:f3:69:11:b7:d1:9a:
83:4e:c8:3d:df:c3:c8:83:98:6f:07:15:03:a6:0f:e7:ff:3c:
f3:c4:0a:53:82:e1:01:29:5b:97:06:84:5d:d7:d2:77:ff:94:
6e:08:58:88:00:e6:11:7e:60:8a:63:65:b4:df:ed:78:6a:10:
f5:47:0b:48:e1:cc:b3:be:13:ac:85:50:b3:ed:ab:75:8f:1e:
6f:a1:c9:51:cc:ef:00:89:6e:de:b0:e9:86:8d:b6:42:f2:f0:
fc:0b:4e:96:19:a3:84:78:28:2f:17:9a:0f:7d:dd:ff:66:a3:
f6:e9:90:be:78:1b:67:70:83:d0:17:f3:0a:25:23:49:b0:97:
4d:1f:3d:52
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Dec 7 01:42:49 2025 by rpki-client