This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf repo-rpki.idnic.net/repo/a6e3dd95-2a85-439e-84f2-972a23e3271e/0/27992B841C717A90B3FDBD81B476F3FF9045212D.mft
File:                     27992B841C717A90B3FDBD81B476F3FF9045212D.mft (raw, json)
Hash identifier:          4VU3BdOEbHkC3iUNpRnz3NBbwv3fDbsHjZecBHzh5c8=
Subject key identifier:   38:63:F0:A5:73:A8:9D:75:DF:11:DE:F7:9E:6B:63:BD:5D:D4:3E:63
Authority key identifier: 27:99:2B:84:1C:71:7A:90:B3:FD:BD:81:B4:76:F3:FF:90:45:21:2D
Certificate issuer:       /CN=27992B841C717A90B3FDBD81B476F3FF9045212D
Certificate serial:       657718864DF272029227F9A22F8678F27BAC08DF
Authority info access:    rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/27992B841C717A90B3FDBD81B476F3FF9045212D.cer
Subject info access:      rsync://repo-rpki.idnic.net/repo/a6e3dd95-2a85-439e-84f2-972a23e3271e/0/27992B841C717A90B3FDBD81B476F3FF9045212D.mft
Manifest number:          015B
Signing time:             Sat 24 Jan 2026 11:30:04 +0000
Manifest this update:     Sat 24 Jan 2026 11:25:04 +0000
Manifest next update:     Tue 27 Jan 2026 12:14:04 +0000
Files and hashes:         1: 3130332e35352e3232372e302f32342d3234203d3e20313334363538.roa (hash: 2fll4NIrlBtRmSI1B/XfRZt07eji5vB7yU1I6L4xwaU=)
                          2: 27992B841C717A90B3FDBD81B476F3FF9045212D.crl (hash: O1mXudmZ+kXbZN7DCrUj96QmAcEFmrJGMWma9hycsw8=)
                          3: 3130332e35352e3232372e302f32342d3234203d3e20313530343839.roa (hash: VwvC8FnFaqPY+qV2Yf8a0j5PamatjQpNJvumx1aC9c4=)
                          4: 3130332e35352e3232362e302f32342d3234203d3e20313334363538.roa (hash: zJ4dPhpKTwfxjBM9r05t0oUe6ezn1Aa8OjhsYGhldqw=)
                          5: 3130332e35352e3232362e302f32342d3234203d3e20313530343839.roa (hash: Ox4ZTFR07e7JY/PWDRkVjaGrsYWVREjNDM/zRhbDUOE=)
Validation:               OK
Signature path:           rsync://repo-rpki.idnic.net/repo/a6e3dd95-2a85-439e-84f2-972a23e3271e/0/27992B841C717A90B3FDBD81B476F3FF9045212D.crl
                          rsync://repo-rpki.idnic.net/repo/a6e3dd95-2a85-439e-84f2-972a23e3271e/0/27992B841C717A90B3FDBD81B476F3FF9045212D.mft
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/27992B841C717A90B3FDBD81B476F3FF9045212D.cer
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Tue 27 Jan 2026 12:14:04 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            65:77:18:86:4d:f2:72:02:92:27:f9:a2:2f:86:78:f2:7b:ac:08:df
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=27992B841C717A90B3FDBD81B476F3FF9045212D
        Validity
            Not Before: Jan 24 11:25:04 2026 GMT
            Not After : Jan 27 12:14:04 2026 GMT
        Subject: CN=3863F0A573A89D75DF11DEF79E6B63BD5DD43E63
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e8:41:7b:35:9f:1a:e0:c5:96:46:7f:09:9b:18:
                    55:13:1b:8e:7d:94:8e:f8:d9:e6:bb:cb:05:35:34:
                    29:9f:82:37:d4:39:a4:a8:ad:2b:6a:3f:22:33:4b:
                    81:bb:c5:c6:ca:98:be:ff:a2:a1:fd:2c:13:43:27:
                    92:dd:3a:93:1e:47:b0:13:ff:f2:f1:30:3d:9b:f3:
                    11:0b:e1:eb:de:8b:09:8e:2f:02:79:7f:fd:40:a3:
                    41:01:ad:2d:05:f6:8b:dd:71:ee:8e:88:f2:c9:c3:
                    30:e2:72:2b:b8:fd:7e:03:6b:ce:50:24:de:ff:b4:
                    1c:10:7c:31:dd:b4:b1:fa:62:ce:2d:c3:bf:d5:a8:
                    3d:2c:9c:75:eb:c1:67:2a:f8:52:b9:bf:90:86:bd:
                    bb:de:52:ac:ab:c9:e5:20:3b:a8:2c:02:90:e0:93:
                    d8:82:59:ce:ed:4a:a4:fe:cc:8b:8a:3d:3d:b1:94:
                    15:4c:26:6f:23:21:bd:1f:89:be:2d:dc:4f:fc:c2:
                    02:c2:31:83:f2:f1:fa:fa:e3:db:ee:80:50:21:34:
                    93:12:0f:12:eb:9f:b3:a5:21:79:31:81:7b:db:16:
                    03:83:44:62:77:02:16:d0:37:4b:65:18:d1:e2:18:
                    83:f5:d2:2b:6e:e0:83:39:d9:5f:d6:22:f9:38:bb:
                    b0:09
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                38:63:F0:A5:73:A8:9D:75:DF:11:DE:F7:9E:6B:63:BD:5D:D4:3E:63
            X509v3 Authority Key Identifier:
                keyid:27:99:2B:84:1C:71:7A:90:B3:FD:BD:81:B4:76:F3:FF:90:45:21:2D

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repo-rpki.idnic.net/repo/a6e3dd95-2a85-439e-84f2-972a23e3271e/0/27992B841C717A90B3FDBD81B476F3FF9045212D.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/27992B841C717A90B3FDBD81B476F3FF9045212D.cer

            Subject Information Access:
                Signed Object - URI:rsync://repo-rpki.idnic.net/repo/a6e3dd95-2a85-439e-84f2-972a23e3271e/0/27992B841C717A90B3FDBD81B476F3FF9045212D.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         0c:6f:9a:39:1a:cb:39:37:f2:e7:e4:36:5a:2d:b7:f1:9d:db:
         91:95:ee:d3:d8:9e:f0:3f:8a:4d:af:0d:3c:78:bb:d4:f0:0b:
         74:33:85:8d:c0:50:17:42:e4:58:48:b9:d2:36:30:2c:a7:f4:
         9e:86:ca:3d:b4:02:26:e0:42:ee:b5:00:9b:79:fb:d1:04:84:
         a8:95:52:1d:ea:91:74:86:6c:bb:a7:fc:30:1a:70:ab:6c:3c:
         5b:c5:58:02:8a:a7:47:5b:dd:5d:00:9c:d4:aa:90:cf:95:39:
         ec:7a:10:da:b9:4d:91:25:b6:36:98:41:68:6e:4b:b3:d2:16:
         96:f0:35:86:d1:38:70:a0:fe:e8:0c:14:2f:79:eb:cb:0c:be:
         c5:41:8e:80:35:14:da:a6:03:5b:83:97:98:ee:d0:8f:66:cc:
         a4:ef:a9:d7:98:1b:e8:bd:64:e7:ec:57:20:65:60:1b:66:9d:
         a5:6b:b9:c2:2b:c6:83:35:3f:44:b3:68:c0:df:8b:42:08:25:
         97:10:ea:f6:f9:b5:88:a0:2e:64:46:55:1d:a8:91:5c:8f:1c:
         e8:1c:71:35:df:dd:43:be:1f:f2:98:46:bb:e2:88:65:36:bb:
         89:a3:cf:0f:db:e8:da:bf:13:aa:7e:05:6b:96:eb:65:96:0b:
         41:53:d1:c8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jan 25 23:38:34 2026 by rpki-client