This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf repo-rpki.idnic.net/repo/a6e3dd95-2a85-439e-84f2-972a23e3271e/0/27992B841C717A90B3FDBD81B476F3FF9045212D.mft File: 27992B841C717A90B3FDBD81B476F3FF9045212D.mft (raw, json) Hash identifier: OeIwITgikBZqZZ4AClV1YGvzwi1VnmRzni197eoAL60= Subject key identifier: 66:DB:85:D8:41:69:A9:18:AA:72:48:4A:79:93:90:F3:59:D1:04:2C Authority key identifier: 27:99:2B:84:1C:71:7A:90:B3:FD:BD:81:B4:76:F3:FF:90:45:21:2D Certificate issuer: /CN=27992B841C717A90B3FDBD81B476F3FF9045212D Certificate serial: 55B3CEE6FE31C6D6943BA21AF688DFB590520EE8 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/27992B841C717A90B3FDBD81B476F3FF9045212D.cer Subject info access: rsync://repo-rpki.idnic.net/repo/a6e3dd95-2a85-439e-84f2-972a23e3271e/0/27992B841C717A90B3FDBD81B476F3FF9045212D.mft Manifest number: 0145 Signing time: Sat 06 Dec 2025 08:00:05 +0000 Manifest this update: Sat 06 Dec 2025 07:55:05 +0000 Manifest next update: Tue 09 Dec 2025 18:25:05 +0000 Files and hashes: 1: 3130332e35352e3232372e302f32342d3234203d3e20313334363538.roa (hash: 2fll4NIrlBtRmSI1B/XfRZt07eji5vB7yU1I6L4xwaU=) 2: 3130332e35352e3232362e302f32342d3234203d3e20313530343839.roa (hash: Ox4ZTFR07e7JY/PWDRkVjaGrsYWVREjNDM/zRhbDUOE=) 3: 3130332e35352e3232362e302f32342d3234203d3e20313334363538.roa (hash: zJ4dPhpKTwfxjBM9r05t0oUe6ezn1Aa8OjhsYGhldqw=) 4: 3130332e35352e3232372e302f32342d3234203d3e20313530343839.roa (hash: VwvC8FnFaqPY+qV2Yf8a0j5PamatjQpNJvumx1aC9c4=) 5: 27992B841C717A90B3FDBD81B476F3FF9045212D.crl (hash: eRUgYHTOAC64unuQIJGxjzzUs7d2L7duZ671jtsoZmE=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/a6e3dd95-2a85-439e-84f2-972a23e3271e/0/27992B841C717A90B3FDBD81B476F3FF9045212D.crl rsync://repo-rpki.idnic.net/repo/a6e3dd95-2a85-439e-84f2-972a23e3271e/0/27992B841C717A90B3FDBD81B476F3FF9045212D.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/27992B841C717A90B3FDBD81B476F3FF9045212D.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 09 Dec 2025 15:57:52 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 55:b3:ce:e6:fe:31:c6:d6:94:3b:a2:1a:f6:88:df:b5:90:52:0e:e8 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=27992B841C717A90B3FDBD81B476F3FF9045212D Validity Not Before: Dec 6 07:55:05 2025 GMT Not After : Dec 9 18:25:05 2025 GMT Subject: CN=66DB85D84169A918AA72484A799390F359D1042C Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d6:41:98:5c:ec:08:02:35:b6:be:30:82:47:7a: ee:39:b7:57:27:07:70:ec:ba:53:95:b3:95:3e:59: c2:a6:05:37:f0:ff:f9:be:d8:ae:07:f7:3c:ff:4a: b1:2b:3d:46:d2:5f:7a:0e:3b:b7:2f:fc:2c:fb:c1: de:8b:8f:8c:58:35:36:5e:fb:d8:85:7c:94:75:37: 47:70:9c:be:ae:87:dd:ec:09:10:35:d2:51:a7:1a: d7:06:e9:a1:21:14:68:54:10:e2:1f:6d:9d:d7:cf: 8c:b0:4b:34:42:4f:15:6d:fb:80:ee:f3:86:47:aa: 50:ab:dd:e0:28:fa:51:d1:b9:2e:2e:2b:ce:08:5e: b7:08:16:a5:15:0b:62:72:f0:25:7f:5e:88:8a:b8: 7c:4a:2a:8b:f3:6e:b9:66:e5:f9:a1:0e:2a:16:a2: 21:43:f1:2f:55:94:b1:f4:8e:ac:e6:79:84:3d:39: cd:a5:b0:71:32:30:24:b0:28:2b:c6:f2:36:f8:09: e9:ec:34:1b:8f:4a:5e:2e:52:cb:37:4f:38:9f:4a: 01:00:be:1d:33:2f:4d:9f:d8:16:ce:dd:c4:24:a8: f3:7c:04:56:e3:4c:81:8f:a9:c7:ef:4e:80:9d:44: 71:05:26:72:e6:cb:5b:b2:84:e9:fe:28:e0:23:6a: 72:d9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 66:DB:85:D8:41:69:A9:18:AA:72:48:4A:79:93:90:F3:59:D1:04:2C X509v3 Authority Key Identifier: keyid:27:99:2B:84:1C:71:7A:90:B3:FD:BD:81:B4:76:F3:FF:90:45:21:2D X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/a6e3dd95-2a85-439e-84f2-972a23e3271e/0/27992B841C717A90B3FDBD81B476F3FF9045212D.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/27992B841C717A90B3FDBD81B476F3FF9045212D.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/a6e3dd95-2a85-439e-84f2-972a23e3271e/0/27992B841C717A90B3FDBD81B476F3FF9045212D.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 60:18:64:23:0e:94:ae:92:0a:ab:49:93:02:dd:88:b3:c4:01: c9:0f:29:60:d2:a0:11:39:17:b5:13:aa:0c:48:85:34:11:a2: 63:4b:1d:88:b8:d6:ca:87:c4:66:0c:34:3b:2f:7b:82:7b:17: da:3e:a4:f1:0d:1c:cf:2d:b4:dd:c2:5f:19:e5:7c:a0:c9:78: dd:9a:59:52:6b:81:67:44:b3:7d:18:07:ad:bb:13:f1:42:11: d0:cd:2d:e1:24:7a:70:07:7c:d6:9b:d7:6e:74:cb:b0:d5:33: 4f:87:0a:9c:f3:b9:d3:f7:cf:7d:55:1d:6a:98:61:d8:6c:f6: 14:40:ee:36:c5:2c:44:f5:c2:da:ad:14:a0:bc:6a:12:bf:1d: 1c:bb:92:f8:a6:55:73:af:ce:7e:23:50:5a:9c:f3:4c:2e:25: ba:b3:ec:bd:55:f0:92:87:61:d5:d3:1a:bd:d2:d3:94:ef:4f: ea:6b:70:1f:2c:90:c3:52:92:db:45:bf:54:e1:cf:20:60:0c: 07:ff:26:59:12:fa:30:46:92:f3:87:99:1a:8f:9b:20:ef:9f: 84:c3:3c:98:b2:c2:d3:05:6c:97:10:60:bd:08:69:66:47:4c: d6:ee:a8:a9:9d:f1:d6:10:35:2f:bb:b6:a0:25:17:d1:f2:33: b8:40:0c:4e -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUVbPO5v4xxtaUO6Ia9ojftZBSDugwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMjc5OTJCODQxQzcxN0E5MEIzRkRCRDgxQjQ3NkYzRkY5 MDQ1MjEyRDAeFw0yNTEyMDYwNzU1MDVaFw0yNTEyMDkxODI1MDVaMDMxMTAvBgNV BAMTKDY2REI4NUQ4NDE2OUE5MThBQTcyNDg0QTc5OTM5MEYzNTlEMTA0MkMwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDWQZhc7AgCNba+MIJHeu45t1cn B3DsulOVs5U+WcKmBTfw//m+2K4H9zz/SrErPUbSX3oOO7cv/Cz7wd6Lj4xYNTZe +9iFfJR1N0dwnL6uh93sCRA10lGnGtcG6aEhFGhUEOIfbZ3Xz4ywSzRCTxVt+4Du 84ZHqlCr3eAo+lHRuS4uK84IXrcIFqUVC2Jy8CV/XoiKuHxKKovzbrlm5fmhDioW oiFD8S9VlLH0jqzmeYQ9Oc2lsHEyMCSwKCvG8jb4CensNBuPSl4uUss3TzifSgEA vh0zL02f2BbO3cQkqPN8BFbjTIGPqcfvToCdRHEFJnLmy1uyhOn+KOAjanLZAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUZtuF2EFpqRiqckhKeZOQ81nRBCwwHwYDVR0j BBgwFoAUJ5krhBxxepCz/b2BtHbz/5BFIS0wDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby9h NmUzZGQ5NS0yYTg1LTQzOWUtODRmMi05NzJhMjNlMzI3MWUvMC8yNzk5MkI4NDFD NzE3QTkwQjNGREJEODFCNDc2RjNGRjkwNDUyMTJELmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvMjc5OTJCODQxQzcxN0E5MEIzRkRCRDgxQjQ3NkYzRkY5MDQ1 MjEyRC5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vYTZlM2RkOTUtMmE4NS00MzllLTg0 ZjItOTcyYTIzZTMyNzFlLzAvMjc5OTJCODQxQzcxN0E5MEIzRkRCRDgxQjQ3NkYz RkY5MDQ1MjEyRC5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAGAYZCMOlK6SCqtJkwLdiLPEAckPKWDSoBE5 F7UTqgxIhTQRomNLHYi41sqHxGYMNDsve4J7F9o+pPENHM8ttN3CXxnlfKDJeN2a WVJrgWdEs30YB627E/FCEdDNLeEkenAHfNab1250y7DVM0+HCpzzudP3z31VHWqY Ydhs9hRA7jbFLET1wtqtFKC8ahK/HRy7kvimVXOvzn4jUFqc80wuJbqz7L1V8JKH YdXTGr3S05TvT+prcB8skMNSkttFv1ThzyBgDAf/JlkS+jBGkvOHmRqPmyDvn4TD PJiywtMFbJcQYL0IaWZHTNbuqKmd8dYQNS+7tqAlF9HyM7hADE4= -----END CERTIFICATE-----Generated at Sun Dec 7 01:44:10 2025 by rpki-client