This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf repo-rpki.idnic.net/repo/9e30ac64-0f13-4162-968f-afe5cc714cf6/0/27C6A8841764185192D3B7E3FC6D1ABD2D137D51.mft
File:                     27C6A8841764185192D3B7E3FC6D1ABD2D137D51.mft (raw, json)
Hash identifier:          ahyZOko7rRko465ThgzGOdcexwr10NUNbNPdmU65JbQ=
Subject key identifier:   D3:D5:7B:BE:A4:D6:04:11:1D:E9:B3:5F:BA:E3:70:6F:DB:3F:45:BE
Authority key identifier: 27:C6:A8:84:17:64:18:51:92:D3:B7:E3:FC:6D:1A:BD:2D:13:7D:51
Certificate issuer:       /CN=27C6A8841764185192D3B7E3FC6D1ABD2D137D51
Certificate serial:       13DB8FC73AB8CB44243AA54000A028B438A549A9
Authority info access:    rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/27C6A8841764185192D3B7E3FC6D1ABD2D137D51.cer
Subject info access:      rsync://repo-rpki.idnic.net/repo/9e30ac64-0f13-4162-968f-afe5cc714cf6/0/27C6A8841764185192D3B7E3FC6D1ABD2D137D51.mft
Manifest number:          0198
Signing time:             Fri 05 Dec 2025 12:11:24 +0000
Manifest this update:     Fri 05 Dec 2025 12:06:24 +0000
Manifest next update:     Mon 08 Dec 2025 17:56:24 +0000
Files and hashes:         1: 27C6A8841764185192D3B7E3FC6D1ABD2D137D51.crl (hash: cNwTt6kL49MCr3vUe7hxH5dyNwgsAD35vUxvlamiPhY=)
                          2: 3130332e3138392e3136362e302f32332d3233203d3e20313439383835.roa (hash: 6LXlbR4cNb7e/a5cj5XOa29IvaWvdwclgoGKyPVr99g=)
Validation:               OK
Signature path:           rsync://repo-rpki.idnic.net/repo/9e30ac64-0f13-4162-968f-afe5cc714cf6/0/27C6A8841764185192D3B7E3FC6D1ABD2D137D51.crl
                          rsync://repo-rpki.idnic.net/repo/9e30ac64-0f13-4162-968f-afe5cc714cf6/0/27C6A8841764185192D3B7E3FC6D1ABD2D137D51.mft
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/27C6A8841764185192D3B7E3FC6D1ABD2D137D51.cer
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Mon 08 Dec 2025 17:56:24 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            13:db:8f:c7:3a:b8:cb:44:24:3a:a5:40:00:a0:28:b4:38:a5:49:a9
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=27C6A8841764185192D3B7E3FC6D1ABD2D137D51
        Validity
            Not Before: Dec  5 12:06:24 2025 GMT
            Not After : Dec  8 17:56:24 2025 GMT
        Subject: CN=D3D57BBEA4D604111DE9B35FBAE3706FDB3F45BE
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:be:f2:d3:32:35:50:5f:1d:97:33:ce:43:63:7c:
                    1a:7e:a8:af:35:68:09:84:45:e8:06:d9:a3:1e:b6:
                    21:18:db:b8:0d:89:e5:79:16:b4:5a:f0:7c:b4:fa:
                    89:72:c7:c8:05:41:a6:a3:72:30:d6:31:f0:2a:f9:
                    44:41:d6:ad:93:c8:cc:0d:fe:27:d1:20:fe:a8:3b:
                    73:e2:cf:27:00:d8:ec:ce:20:3b:60:50:de:73:96:
                    60:d6:84:64:00:6c:7b:3a:22:48:83:54:da:05:60:
                    23:ed:d2:33:84:70:69:6b:38:82:3d:e1:77:a4:0e:
                    d6:9d:b4:e3:f1:9f:4d:34:43:ba:85:0d:c0:ad:35:
                    fa:c5:59:dc:28:7a:fb:d8:b9:a8:da:f6:5c:fa:c3:
                    4f:39:ed:1c:c7:0a:96:88:60:3b:84:c7:25:fb:92:
                    63:77:2a:f5:3a:e0:5e:ec:ff:91:f4:67:e1:cf:cd:
                    53:ba:b9:1f:6d:8d:f6:bc:35:e3:2d:70:9b:26:18:
                    18:fd:34:c9:bd:b7:19:67:b0:7c:67:96:65:56:d7:
                    4d:09:69:33:d0:03:52:66:a4:4a:1d:b2:bf:d4:4b:
                    5b:e1:29:c9:4d:9d:99:cf:2a:98:92:44:5b:b4:ca:
                    3c:d8:92:59:c7:84:36:7c:bb:55:c8:65:6d:50:87:
                    6b:ad
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D3:D5:7B:BE:A4:D6:04:11:1D:E9:B3:5F:BA:E3:70:6F:DB:3F:45:BE
            X509v3 Authority Key Identifier:
                keyid:27:C6:A8:84:17:64:18:51:92:D3:B7:E3:FC:6D:1A:BD:2D:13:7D:51

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repo-rpki.idnic.net/repo/9e30ac64-0f13-4162-968f-afe5cc714cf6/0/27C6A8841764185192D3B7E3FC6D1ABD2D137D51.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/27C6A8841764185192D3B7E3FC6D1ABD2D137D51.cer

            Subject Information Access:
                Signed Object - URI:rsync://repo-rpki.idnic.net/repo/9e30ac64-0f13-4162-968f-afe5cc714cf6/0/27C6A8841764185192D3B7E3FC6D1ABD2D137D51.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         a1:56:f8:29:27:18:85:f8:c3:b1:24:71:1f:08:d8:c7:c0:a0:
         55:e2:6b:e9:06:9f:30:a7:9e:a2:cd:cf:b2:91:71:49:c1:02:
         58:0c:45:68:bf:dd:08:b9:f4:3f:1a:ed:9e:fa:d1:28:64:b8:
         a6:2f:a5:c8:b2:2f:ac:2a:26:53:3c:b0:49:33:dc:69:74:99:
         1e:48:5c:ad:b7:99:f4:93:97:08:ac:46:fe:f6:c6:bd:de:31:
         59:d8:d0:59:2a:51:86:70:17:a1:c8:12:3d:a3:60:d9:2e:0d:
         61:4c:f7:e1:ef:43:0d:7b:df:71:aa:6b:f3:69:11:b7:d1:9a:
         83:4e:c8:3d:df:c3:c8:83:98:6f:07:15:03:a6:0f:e7:ff:3c:
         f3:c4:0a:53:82:e1:01:29:5b:97:06:84:5d:d7:d2:77:ff:94:
         6e:08:58:88:00:e6:11:7e:60:8a:63:65:b4:df:ed:78:6a:10:
         f5:47:0b:48:e1:cc:b3:be:13:ac:85:50:b3:ed:ab:75:8f:1e:
         6f:a1:c9:51:cc:ef:00:89:6e:de:b0:e9:86:8d:b6:42:f2:f0:
         fc:0b:4e:96:19:a3:84:78:28:2f:17:9a:0f:7d:dd:ff:66:a3:
         f6:e9:90:be:78:1b:67:70:83:d0:17:f3:0a:25:23:49:b0:97:
         4d:1f:3d:52
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Dec 7 01:42:49 2025 by rpki-client