This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf repo-rpki.idnic.net/repo/e5c8b9e3-b44f-490b-bf51-99f2dd2a1364/0/27114CFC585C5DB2E0AC5DA74F04C66C319492F1.mft File: 27114CFC585C5DB2E0AC5DA74F04C66C319492F1.mft (raw, json) Hash identifier: 1C+nwkNazLwNJYIUeqD0W20NijYAyroxvGJZb+3J52w= Subject key identifier: 13:33:58:F5:AD:FB:62:8F:40:CC:D8:2B:91:08:EA:7E:FA:F9:FD:A1 Authority key identifier: 27:11:4C:FC:58:5C:5D:B2:E0:AC:5D:A7:4F:04:C6:6C:31:94:92:F1 Certificate issuer: /CN=27114CFC585C5DB2E0AC5DA74F04C66C319492F1 Certificate serial: 7CAD4F22DE4C89DCAAF85963A3A086EAE1CA656E Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/27114CFC585C5DB2E0AC5DA74F04C66C319492F1.cer Subject info access: rsync://repo-rpki.idnic.net/repo/e5c8b9e3-b44f-490b-bf51-99f2dd2a1364/0/27114CFC585C5DB2E0AC5DA74F04C66C319492F1.mft Manifest number: 01E1 Signing time: Sat 06 Dec 2025 10:51:06 +0000 Manifest this update: Sat 06 Dec 2025 10:46:05 +0000 Manifest next update: Tue 09 Dec 2025 18:58:05 +0000 Files and hashes: 1: 3130332e37392e3132382e302f32342d3234203d3e20313339393531.roa (hash: f2QS2bkCAnvcHZRI/qOVoXk+1PJl2qNtEtgN6wxB1DM=) 2: 3130332e37392e3132382e302f32332d3234203d3e20313339393531.roa (hash: ZL34hhxgSVm8YMiIofnGZ8eIEEK0rTf5wpsCzmwT6wA=) 3: 3130332e37392e3132392e302f32342d3234203d3e20313339393531.roa (hash: KEbEalVEafBDzV3MLE/Git/FoIDPkOruC23YgT8hoVA=) 4: 27114CFC585C5DB2E0AC5DA74F04C66C319492F1.crl (hash: cFzrZoHKZpZyFwzTFsXLlIBaryD44gFKapgjSlhiino=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/e5c8b9e3-b44f-490b-bf51-99f2dd2a1364/0/27114CFC585C5DB2E0AC5DA74F04C66C319492F1.crl rsync://repo-rpki.idnic.net/repo/e5c8b9e3-b44f-490b-bf51-99f2dd2a1364/0/27114CFC585C5DB2E0AC5DA74F04C66C319492F1.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/27114CFC585C5DB2E0AC5DA74F04C66C319492F1.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 09 Dec 2025 15:57:52 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 7c:ad:4f:22:de:4c:89:dc:aa:f8:59:63:a3:a0:86:ea:e1:ca:65:6e Signature Algorithm: sha256WithRSAEncryption Issuer: CN=27114CFC585C5DB2E0AC5DA74F04C66C319492F1 Validity Not Before: Dec 6 10:46:05 2025 GMT Not After : Dec 9 18:58:05 2025 GMT Subject: CN=133358F5ADFB628F40CCD82B9108EA7EFAF9FDA1 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b7:05:58:53:6e:df:31:1e:0b:f4:ff:fc:ea:c4: cd:4d:fb:9f:57:c1:a3:34:b9:f7:6e:0b:2f:c3:4b: cb:4b:64:80:81:a0:da:96:6b:d5:f9:48:83:7d:67: e2:55:a6:24:62:34:fd:fd:9c:d3:91:1c:d5:60:4a: 81:be:28:53:2a:6b:97:06:54:b8:eb:6f:cf:e7:0f: 5f:4b:e1:23:fb:4a:2a:5e:d7:2f:98:ba:df:03:d2: 36:d4:ec:a8:ee:c9:20:75:fe:27:68:e5:3d:cd:a6: a5:39:a7:12:51:ec:b8:8b:13:71:00:df:57:14:29: 8a:1b:79:66:d4:b6:a8:64:af:d2:08:13:f3:ce:2f: c4:0a:cd:18:c4:46:c9:52:13:c3:0a:7b:f0:e6:14: 66:0b:7a:51:69:74:b7:05:e4:3c:a9:2b:09:ef:06: 5f:79:9f:c5:13:1f:82:cd:20:9b:f2:e9:c4:c6:8c: 34:18:56:b0:1c:9d:51:c9:f3:28:fd:11:75:6a:17: c4:0e:e0:22:2d:f1:c0:36:02:88:e8:02:dd:df:40: d1:ad:f5:7c:97:cd:0d:5b:9d:1c:af:da:e2:89:f3: c3:c9:e1:9f:7c:ad:60:27:0f:3b:ab:fd:99:b4:46: b0:37:de:6e:8b:b5:cf:ed:a0:74:42:8d:9d:a2:5a: af:11 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 13:33:58:F5:AD:FB:62:8F:40:CC:D8:2B:91:08:EA:7E:FA:F9:FD:A1 X509v3 Authority Key Identifier: keyid:27:11:4C:FC:58:5C:5D:B2:E0:AC:5D:A7:4F:04:C6:6C:31:94:92:F1 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/e5c8b9e3-b44f-490b-bf51-99f2dd2a1364/0/27114CFC585C5DB2E0AC5DA74F04C66C319492F1.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/27114CFC585C5DB2E0AC5DA74F04C66C319492F1.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/e5c8b9e3-b44f-490b-bf51-99f2dd2a1364/0/27114CFC585C5DB2E0AC5DA74F04C66C319492F1.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 01:6c:cf:88:72:fa:3d:0c:a3:da:1b:42:08:74:c4:8d:c8:c6: 37:10:f6:66:9f:57:80:ef:0c:cd:1c:a8:7c:7b:7c:68:9c:1a: f5:28:ce:6f:e4:ef:9b:61:24:fd:b8:4c:8d:bc:71:f3:3e:26: 6e:68:54:03:5e:23:e9:9c:a7:5f:61:b4:b7:0a:8e:30:df:47: fd:f1:8a:ca:8d:ae:82:f8:f0:c6:de:f5:ea:da:3b:f1:bf:5b: d9:0f:06:6f:f0:ba:e2:a1:3e:bb:ae:81:90:ed:c6:25:e3:33: c9:3b:0d:d5:12:3b:50:97:86:15:a8:29:d3:e4:b9:45:83:07: 1d:b6:93:6b:08:b4:77:57:db:a6:b1:66:ed:f5:2d:51:06:0f: 6c:19:93:de:d7:05:26:79:ea:d1:9e:41:4a:24:eb:63:f5:bf: e9:87:c4:a5:73:66:97:ba:70:1a:d9:d1:d0:02:23:d1:ca:39: ca:09:76:c2:57:b8:e4:d4:7b:12:e1:79:ba:61:d7:87:ac:41: 9c:eb:3e:4b:7e:ce:49:00:75:e0:6f:ba:be:2b:b1:5b:88:af: ee:f8:5e:ed:91:c1:cc:66:83:84:91:17:08:0b:15:4e:92:d4: 90:13:1a:29:2a:ea:46:cf:fe:a0:51:bc:8a:ba:05:3c:2e:52: da:63:27:24 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUfK1PIt5Midyq+Fljo6CG6uHKZW4wDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMjcxMTRDRkM1ODVDNURCMkUwQUM1REE3NEYwNEM2NkMz MTk0OTJGMTAeFw0yNTEyMDYxMDQ2MDVaFw0yNTEyMDkxODU4MDVaMDMxMTAvBgNV BAMTKDEzMzM1OEY1QURGQjYyOEY0MENDRDgyQjkxMDhFQTdFRkFGOUZEQTEwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC3BVhTbt8xHgv0//zqxM1N+59X waM0ufduCy/DS8tLZICBoNqWa9X5SIN9Z+JVpiRiNP39nNORHNVgSoG+KFMqa5cG VLjrb8/nD19L4SP7Sipe1y+Yut8D0jbU7KjuySB1/ido5T3NpqU5pxJR7LiLE3EA 31cUKYobeWbUtqhkr9IIE/POL8QKzRjERslSE8MKe/DmFGYLelFpdLcF5DypKwnv Bl95n8UTH4LNIJvy6cTGjDQYVrAcnVHJ8yj9EXVqF8QO4CIt8cA2AojoAt3fQNGt 9XyXzQ1bnRyv2uKJ88PJ4Z98rWAnDzur/Zm0RrA33m6Ltc/toHRCjZ2iWq8RAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUEzNY9a37Yo9AzNgrkQjqfvr5/aEwHwYDVR0j BBgwFoAUJxFM/FhcXbLgrF2nTwTGbDGUkvEwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby9l NWM4YjllMy1iNDRmLTQ5MGItYmY1MS05OWYyZGQyYTEzNjQvMC8yNzExNENGQzU4 NUM1REIyRTBBQzVEQTc0RjA0QzY2QzMxOTQ5MkYxLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvMjcxMTRDRkM1ODVDNURCMkUwQUM1REE3NEYwNEM2NkMzMTk0 OTJGMS5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vZTVjOGI5ZTMtYjQ0Zi00OTBiLWJm NTEtOTlmMmRkMmExMzY0LzAvMjcxMTRDRkM1ODVDNURCMkUwQUM1REE3NEYwNEM2 NkMzMTk0OTJGMS5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAAFsz4hy+j0Mo9obQgh0xI3IxjcQ9mafV4Dv DM0cqHx7fGicGvUozm/k75thJP24TI28cfM+Jm5oVANeI+mcp19htLcKjjDfR/3x isqNroL48Mbe9eraO/G/W9kPBm/wuuKhPruugZDtxiXjM8k7DdUSO1CXhhWoKdPk uUWDBx22k2sItHdX26axZu31LVEGD2wZk97XBSZ56tGeQUok62P1v+mHxKVzZpe6 cBrZ0dACI9HKOcoJdsJXuOTUexLhebph14esQZzrPkt+zkkAdeBvur4rsVuIr+74 Xu2Rwcxmg4SRFwgLFU6S1JATGikq6kbP/qBRvIq6BTwuUtpjJyQ= -----END CERTIFICATE-----Generated at Sun Dec 7 03:05:22 2025 by rpki-client