This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf repo-rpki.idnic.net/repo/d6df2691-db62-43b9-8a57-0e06da1acc64/0/F027F0676E31F5D61FFCB99138BA71A6A6C2A888.mft File: F027F0676E31F5D61FFCB99138BA71A6A6C2A888.mft (raw, json) Hash identifier: Kq2HOvNhsEV6GC4lByBhUL0ICrDlWIEtNADalAPE28g= Subject key identifier: C6:DE:1C:3F:E1:57:FD:E4:E4:FB:AE:F2:5F:1A:79:6B:BC:8E:92:B1 Authority key identifier: F0:27:F0:67:6E:31:F5:D6:1F:FC:B9:91:38:BA:71:A6:A6:C2:A8:88 Certificate issuer: /CN=F027F0676E31F5D61FFCB99138BA71A6A6C2A888 Certificate serial: 37D875089D4C01EADB86BA57737A5EDDDB0E6F37 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/F027F0676E31F5D61FFCB99138BA71A6A6C2A888.cer Subject info access: rsync://repo-rpki.idnic.net/repo/d6df2691-db62-43b9-8a57-0e06da1acc64/0/F027F0676E31F5D61FFCB99138BA71A6A6C2A888.mft Manifest number: 01D0 Signing time: Thu 04 Dec 2025 17:11:44 +0000 Manifest this update: Thu 04 Dec 2025 17:06:44 +0000 Manifest next update: Mon 08 Dec 2025 01:29:44 +0000 Files and hashes: 1: 3130332e37392e3233382e302f32342d3234203d3e20313336383431.roa (hash: MkfPt9TQffXhNKzxQ0JZcLbczDcqfbG61+f4PPOfZmM=) 2: F027F0676E31F5D61FFCB99138BA71A6A6C2A888.crl (hash: lAnZ4J9d4eqQDwp0vYOMp/J4ZW1vU0tMYzoRN4S9CKc=) 3: 3130332e37392e3233392e302f32342d3234203d3e20313336383431.roa (hash: rT8h0ZGLVYrPZ61SPuOGRkw+nbg9/wVNgxfxW7rae5E=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/d6df2691-db62-43b9-8a57-0e06da1acc64/0/F027F0676E31F5D61FFCB99138BA71A6A6C2A888.crl rsync://repo-rpki.idnic.net/repo/d6df2691-db62-43b9-8a57-0e06da1acc64/0/F027F0676E31F5D61FFCB99138BA71A6A6C2A888.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/F027F0676E31F5D61FFCB99138BA71A6A6C2A888.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 08 Dec 2025 01:29:44 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 37:d8:75:08:9d:4c:01:ea:db:86:ba:57:73:7a:5e:dd:db:0e:6f:37 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=F027F0676E31F5D61FFCB99138BA71A6A6C2A888 Validity Not Before: Dec 4 17:06:44 2025 GMT Not After : Dec 8 01:29:44 2025 GMT Subject: CN=C6DE1C3FE157FDE4E4FBAEF25F1A796BBC8E92B1 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c1:17:28:d3:b3:12:3b:96:5f:d6:f8:58:2e:f6: 4b:b7:c7:3a:df:f7:e7:89:4f:19:9c:ac:c1:0d:59: 81:86:96:a7:82:d0:1b:06:a1:79:db:2d:de:82:11: 24:7a:99:35:78:53:7e:1c:a4:85:f6:6b:7a:6f:06: 02:fc:2f:76:6d:1b:c7:4b:57:31:c9:29:04:0f:9b: 90:67:a8:95:cb:e1:f9:59:b8:08:76:ca:f0:06:63: 21:bb:44:53:69:8b:de:76:73:b5:6a:73:a2:9a:ca: c9:af:e5:86:f1:72:de:5e:98:f3:69:05:1b:d1:a5: 94:6a:83:3e:d1:ea:d1:a4:c1:38:dc:c4:f1:a4:59: ca:cd:45:3b:35:fd:26:42:30:b1:b8:7c:98:ce:eb: 14:1e:3c:eb:4c:59:89:ee:ee:af:24:30:15:67:18: 43:76:cc:02:5b:09:f5:6a:8b:80:d9:be:71:fd:79: df:25:b2:a8:b2:c1:07:35:68:1f:5d:44:98:8e:d8: 9c:95:c8:60:d1:63:b7:c8:01:e8:04:d7:f1:31:e7: f4:d3:e6:4b:07:c0:ff:39:ee:ef:1e:28:18:fc:0d: 7a:6f:a5:a3:62:fb:c6:00:a1:e8:c5:92:7d:98:02: e8:b4:30:31:3e:4d:0d:ca:29:3d:61:0f:c5:6c:d5: 9c:99 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: C6:DE:1C:3F:E1:57:FD:E4:E4:FB:AE:F2:5F:1A:79:6B:BC:8E:92:B1 X509v3 Authority Key Identifier: keyid:F0:27:F0:67:6E:31:F5:D6:1F:FC:B9:91:38:BA:71:A6:A6:C2:A8:88 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/d6df2691-db62-43b9-8a57-0e06da1acc64/0/F027F0676E31F5D61FFCB99138BA71A6A6C2A888.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/F027F0676E31F5D61FFCB99138BA71A6A6C2A888.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/d6df2691-db62-43b9-8a57-0e06da1acc64/0/F027F0676E31F5D61FFCB99138BA71A6A6C2A888.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 3e:59:1c:93:ca:4e:c2:b7:f9:f5:a5:8f:bc:31:81:2c:ff:08: ff:c9:f8:64:e1:47:a3:3f:2a:8d:d1:96:cc:ab:0e:94:7d:e9: ba:b4:d9:52:4d:81:08:f9:3e:17:95:a5:b6:78:ee:87:73:8d: f2:b9:20:e4:cc:2a:cd:ba:58:f3:78:5d:6d:0e:e9:af:57:aa: 99:be:e0:c5:28:4f:67:16:73:4f:d9:7c:5a:8f:10:cb:b3:ec: 9a:a7:44:73:9d:3e:31:be:c9:42:c3:83:16:df:8b:0d:03:0a: 6a:6a:ed:ff:8f:c5:20:19:75:b3:70:fc:f8:6f:16:cb:0e:de: a5:c8:cc:a0:d6:b7:b0:1e:c3:bc:84:05:80:5c:b1:62:cd:34: f5:63:da:de:3a:41:95:65:d7:8a:c1:76:89:b4:1d:85:51:d7: 82:d8:42:28:ab:7a:ae:50:f3:0f:80:f2:ba:71:3d:d3:94:4f: d0:e4:19:94:00:c3:69:fe:72:ce:c1:27:97:0c:68:20:c1:44: a0:35:d3:90:8c:a1:20:f5:82:06:29:a3:99:b4:f4:26:d4:ce: 5c:3a:3d:a1:c5:e6:1c:38:b0:cb:4f:a3:69:7b:41:37:5f:ec: 76:04:65:7f:d8:7f:17:bb:a3:f1:3f:88:20:ca:3a:fe:99:e7: e4:12:cb:8c -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUN9h1CJ1MAerbhrpXc3pe3dsObzcwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoRjAyN0YwNjc2RTMxRjVENjFGRkNCOTkxMzhCQTcxQTZB NkMyQTg4ODAeFw0yNTEyMDQxNzA2NDRaFw0yNTEyMDgwMTI5NDRaMDMxMTAvBgNV BAMTKEM2REUxQzNGRTE1N0ZERTRFNEZCQUVGMjVGMUE3OTZCQkM4RTkyQjEwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDBFyjTsxI7ll/W+Fgu9ku3xzrf 9+eJTxmcrMENWYGGlqeC0BsGoXnbLd6CESR6mTV4U34cpIX2a3pvBgL8L3ZtG8dL VzHJKQQPm5BnqJXL4flZuAh2yvAGYyG7RFNpi952c7Vqc6Kaysmv5Ybxct5emPNp BRvRpZRqgz7R6tGkwTjcxPGkWcrNRTs1/SZCMLG4fJjO6xQePOtMWYnu7q8kMBVn GEN2zAJbCfVqi4DZvnH9ed8lsqiywQc1aB9dRJiO2JyVyGDRY7fIAegE1/Ex5/TT 5ksHwP857u8eKBj8DXpvpaNi+8YAoejFkn2YAui0MDE+TQ3KKT1hD8Vs1ZyZAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUxt4cP+FX/eTk+67yXxp5a7yOkrEwHwYDVR0j BBgwFoAU8CfwZ24x9dYf/LmROLpxpqbCqIgwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby9k NmRmMjY5MS1kYjYyLTQzYjktOGE1Ny0wZTA2ZGExYWNjNjQvMC9GMDI3RjA2NzZF MzFGNUQ2MUZGQ0I5OTEzOEJBNzFBNkE2QzJBODg4LmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvRjAyN0YwNjc2RTMxRjVENjFGRkNCOTkxMzhCQTcxQTZBNkMy QTg4OC5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vZDZkZjI2OTEtZGI2Mi00M2I5LThh NTctMGUwNmRhMWFjYzY0LzAvRjAyN0YwNjc2RTMxRjVENjFGRkNCOTkxMzhCQTcx QTZBNkMyQTg4OC5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAD5ZHJPKTsK3+fWlj7wxgSz/CP/J+GThR6M/ Ko3RlsyrDpR96bq02VJNgQj5PheVpbZ47odzjfK5IOTMKs26WPN4XW0O6a9Xqpm+ 4MUoT2cWc0/ZfFqPEMuz7JqnRHOdPjG+yULDgxbfiw0DCmpq7f+PxSAZdbNw/Phv FssO3qXIzKDWt7Aew7yEBYBcsWLNNPVj2t46QZVl14rBdom0HYVR14LYQiireq5Q 8w+A8rpxPdOUT9DkGZQAw2n+cs7BJ5cMaCDBRKA105CMoSD1ggYpo5m09CbUzlw6 PaHF5hw4sMtPo2l7QTdf7HYEZX/Yfxe7o/E/iCDKOv6Z5+QSy4w= -----END CERTIFICATE-----Generated at Sun Dec 7 02:09:02 2025 by rpki-client