This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf repo-rpki.idnic.net/repo/d6df2691-db62-43b9-8a57-0e06da1acc64/0/F027F0676E31F5D61FFCB99138BA71A6A6C2A888.mft File: F027F0676E31F5D61FFCB99138BA71A6A6C2A888.mft (raw, json) Hash identifier: tC4R1xk9qbmBPe414ZDa1OUiIAGR6N5TJwe/1r73D9M= Subject key identifier: AF:34:3F:31:AA:2A:CD:A5:79:63:86:45:DC:DE:53:78:2D:46:52:C4 Authority key identifier: F0:27:F0:67:6E:31:F5:D6:1F:FC:B9:91:38:BA:71:A6:A6:C2:A8:88 Certificate issuer: /CN=F027F0676E31F5D61FFCB99138BA71A6A6C2A888 Certificate serial: 279E0E02F8F62F4FCE5B293965134549A67E76DB Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/F027F0676E31F5D61FFCB99138BA71A6A6C2A888.cer Subject info access: rsync://repo-rpki.idnic.net/repo/d6df2691-db62-43b9-8a57-0e06da1acc64/0/F027F0676E31F5D61FFCB99138BA71A6A6C2A888.mft Manifest number: 01D6 Signing time: Tue 16 Dec 2025 22:11:44 +0000 Manifest this update: Tue 16 Dec 2025 22:06:44 +0000 Manifest next update: Sat 20 Dec 2025 09:14:44 +0000 Files and hashes: 1: 3130332e37392e3233392e302f32342d3234203d3e20313336383431.roa (hash: tiiZ5XR5qtoVKRiJyK/ZbstHJPK9DYWkRihRcxcZHeQ=) 2: F027F0676E31F5D61FFCB99138BA71A6A6C2A888.crl (hash: HvfihA19PdWWXVCd49apArrgHlWQjTRfIeps3bh7/+A=) 3: 3130332e37392e3233382e302f32342d3234203d3e20313336383431.roa (hash: S3rj42K3zgcLtAy4zNzKlACfc7OoExWsWn2P6hM2xiU=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/d6df2691-db62-43b9-8a57-0e06da1acc64/0/F027F0676E31F5D61FFCB99138BA71A6A6C2A888.crl rsync://repo-rpki.idnic.net/repo/d6df2691-db62-43b9-8a57-0e06da1acc64/0/F027F0676E31F5D61FFCB99138BA71A6A6C2A888.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/F027F0676E31F5D61FFCB99138BA71A6A6C2A888.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 20 Dec 2025 09:14:44 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 27:9e:0e:02:f8:f6:2f:4f:ce:5b:29:39:65:13:45:49:a6:7e:76:db Signature Algorithm: sha256WithRSAEncryption Issuer: CN=F027F0676E31F5D61FFCB99138BA71A6A6C2A888 Validity Not Before: Dec 16 22:06:44 2025 GMT Not After : Dec 20 09:14:44 2025 GMT Subject: CN=AF343F31AA2ACDA579638645DCDE53782D4652C4 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bb:eb:fb:45:0d:0c:9b:fd:e8:85:20:d4:40:87: fe:a8:b1:dc:7a:c3:e2:78:48:36:03:1f:b6:4d:62: 5d:db:d1:81:13:9a:bf:77:23:3c:19:c9:3d:72:8a: 84:9b:74:a5:0b:da:47:52:d2:79:5f:12:06:27:8b: ef:59:2d:1b:f4:62:ba:d9:98:11:f6:ae:54:6e:2f: 32:13:08:da:29:41:0b:14:c2:67:49:fb:2e:1b:bf: c1:98:55:33:70:5a:ad:38:89:97:40:90:1d:df:1e: a4:bd:ba:98:81:6d:8f:fc:8a:39:93:76:00:8d:95: 2b:a9:b2:b4:f5:5f:7d:df:a2:6f:74:9c:6b:65:bd: c9:56:d2:53:04:a5:aa:b6:23:97:e5:c5:d0:a3:2e: 10:75:fe:59:d1:43:9f:56:79:44:72:c0:a3:af:99: 6f:4b:3f:e8:ad:67:d1:cb:f2:2f:78:f5:0e:ac:8e: 52:17:c2:2a:26:01:03:3c:a5:f3:16:3c:89:39:3f: 14:ce:3d:d9:3b:1e:97:98:28:23:29:24:c3:34:0e: 81:23:5b:6d:72:6f:e6:70:4e:a4:1c:3f:e9:4b:be: 81:69:34:49:00:f7:b4:1f:5d:91:e6:75:39:eb:38: f9:a3:5c:15:f6:9f:ed:fe:d1:58:49:3c:22:2b:56: 07:a9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: AF:34:3F:31:AA:2A:CD:A5:79:63:86:45:DC:DE:53:78:2D:46:52:C4 X509v3 Authority Key Identifier: keyid:F0:27:F0:67:6E:31:F5:D6:1F:FC:B9:91:38:BA:71:A6:A6:C2:A8:88 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/d6df2691-db62-43b9-8a57-0e06da1acc64/0/F027F0676E31F5D61FFCB99138BA71A6A6C2A888.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/F027F0676E31F5D61FFCB99138BA71A6A6C2A888.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/d6df2691-db62-43b9-8a57-0e06da1acc64/0/F027F0676E31F5D61FFCB99138BA71A6A6C2A888.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 75:e6:a8:48:4d:64:9a:14:f0:33:1e:29:7f:52:8d:ad:c1:cb: 03:c1:51:0d:d3:e5:66:4c:c5:52:62:83:b1:4a:d2:ef:0e:ba: 55:5e:11:87:41:0c:fc:0e:67:a3:8e:c7:c0:bf:59:3c:cf:46: 76:a5:25:f4:f1:80:41:8c:16:23:78:a6:c8:93:a9:2c:3f:6a: dd:df:9d:90:da:02:ec:4d:9d:0b:36:f2:14:ba:39:23:86:e7: 02:47:6a:aa:27:bc:dc:36:88:6b:27:47:d6:c6:da:85:d2:6b: 34:7d:3b:ff:61:83:17:7e:a3:0c:7c:b2:3b:e0:0e:fb:97:fe: 80:2a:0d:50:6a:df:b3:ba:f0:bf:fe:31:bd:89:59:f1:f0:4f: 44:1a:a9:39:c6:49:8d:c6:74:52:fa:db:a6:a6:1b:3a:7d:3b: b5:75:b5:91:3d:22:c8:b7:cb:6d:41:4c:18:6a:5d:86:64:ca: 8b:09:42:0d:5c:92:c6:65:33:ac:4a:97:15:d2:18:18:37:f8: 46:ff:e3:c4:16:c2:e8:b5:87:c8:16:ce:63:23:32:71:47:05: d4:bc:bf:0e:56:d0:09:f7:42:22:aa:c5:d1:30:b2:3e:a8:cb: cb:8e:f0:44:5e:d6:b4:aa:d9:4d:bd:bc:dc:ca:b4:54:ea:a4: 06:32:e1:c3 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUJ54OAvj2L0/OWyk5ZRNFSaZ+dtswDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoRjAyN0YwNjc2RTMxRjVENjFGRkNCOTkxMzhCQTcxQTZB NkMyQTg4ODAeFw0yNTEyMTYyMjA2NDRaFw0yNTEyMjAwOTE0NDRaMDMxMTAvBgNV BAMTKEFGMzQzRjMxQUEyQUNEQTU3OTYzODY0NURDREU1Mzc4MkQ0NjUyQzQwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC76/tFDQyb/eiFINRAh/6osdx6 w+J4SDYDH7ZNYl3b0YETmr93IzwZyT1yioSbdKUL2kdS0nlfEgYni+9ZLRv0YrrZ mBH2rlRuLzITCNopQQsUwmdJ+y4bv8GYVTNwWq04iZdAkB3fHqS9upiBbY/8ijmT dgCNlSupsrT1X33fom90nGtlvclW0lMEpaq2I5flxdCjLhB1/lnRQ59WeURywKOv mW9LP+itZ9HL8i949Q6sjlIXwiomAQM8pfMWPIk5PxTOPdk7HpeYKCMpJMM0DoEj W21yb+ZwTqQcP+lLvoFpNEkA97QfXZHmdTnrOPmjXBX2n+3+0VhJPCIrVgepAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUrzQ/MaoqzaV5Y4ZF3N5TeC1GUsQwHwYDVR0j BBgwFoAU8CfwZ24x9dYf/LmROLpxpqbCqIgwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby9k NmRmMjY5MS1kYjYyLTQzYjktOGE1Ny0wZTA2ZGExYWNjNjQvMC9GMDI3RjA2NzZF MzFGNUQ2MUZGQ0I5OTEzOEJBNzFBNkE2QzJBODg4LmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvRjAyN0YwNjc2RTMxRjVENjFGRkNCOTkxMzhCQTcxQTZBNkMy QTg4OC5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vZDZkZjI2OTEtZGI2Mi00M2I5LThh NTctMGUwNmRhMWFjYzY0LzAvRjAyN0YwNjc2RTMxRjVENjFGRkNCOTkxMzhCQTcx QTZBNkMyQTg4OC5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAHXmqEhNZJoU8DMeKX9Sja3BywPBUQ3T5WZM xVJig7FK0u8OulVeEYdBDPwOZ6OOx8C/WTzPRnalJfTxgEGMFiN4psiTqSw/at3f nZDaAuxNnQs28hS6OSOG5wJHaqonvNw2iGsnR9bG2oXSazR9O/9hgxd+owx8sjvg DvuX/oAqDVBq37O68L/+Mb2JWfHwT0QaqTnGSY3GdFL626amGzp9O7V1tZE9Isi3 y21BTBhqXYZkyosJQg1cksZlM6xKlxXSGBg3+Eb/48QWwui1h8gWzmMjMnFHBdS8 vw5W0An3QiKqxdEwsj6oy8uO8ERe1rSq2U29vNzKtFTqpAYy4cM= -----END CERTIFICATE-----Generated at Thu Dec 18 16:14:53 2025 by rpki-client