This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf repo-rpki.idnic.net/repo/e5c8b9e3-b44f-490b-bf51-99f2dd2a1364/0/27114CFC585C5DB2E0AC5DA74F04C66C319492F1.mft File: 27114CFC585C5DB2E0AC5DA74F04C66C319492F1.mft (raw, json) Hash identifier: PSNKz+bW1t2BoWkqaRVVn6uEy6phIkTWH9br3M/h8tI= Subject key identifier: 5D:65:1E:E9:0F:5A:B8:E6:E8:2E:5C:2D:A1:9A:59:E3:C6:D1:21:E1 Authority key identifier: 27:11:4C:FC:58:5C:5D:B2:E0:AC:5D:A7:4F:04:C6:6C:31:94:92:F1 Certificate issuer: /CN=27114CFC585C5DB2E0AC5DA74F04C66C319492F1 Certificate serial: 34A87699ABE10DCEA69723399ACCE9566089D400 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/27114CFC585C5DB2E0AC5DA74F04C66C319492F1.cer Subject info access: rsync://repo-rpki.idnic.net/repo/e5c8b9e3-b44f-490b-bf51-99f2dd2a1364/0/27114CFC585C5DB2E0AC5DA74F04C66C319492F1.mft Manifest number: 01F7 Signing time: Sat 24 Jan 2026 19:01:06 +0000 Manifest this update: Sat 24 Jan 2026 18:56:06 +0000 Manifest next update: Wed 28 Jan 2026 04:29:06 +0000 Files and hashes: 1: 3130332e37392e3132392e302f32342d3234203d3e20313339393531.roa (hash: KEbEalVEafBDzV3MLE/Git/FoIDPkOruC23YgT8hoVA=) 2: 3130332e37392e3132382e302f32342d3234203d3e20313339393531.roa (hash: f2QS2bkCAnvcHZRI/qOVoXk+1PJl2qNtEtgN6wxB1DM=) 3: 3130332e37392e3132382e302f32332d3234203d3e20313339393531.roa (hash: ZL34hhxgSVm8YMiIofnGZ8eIEEK0rTf5wpsCzmwT6wA=) 4: 27114CFC585C5DB2E0AC5DA74F04C66C319492F1.crl (hash: vc5k8K2KSQRv+HLbUqd240fJP5bwTuxByzdYcuawAiM=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/e5c8b9e3-b44f-490b-bf51-99f2dd2a1364/0/27114CFC585C5DB2E0AC5DA74F04C66C319492F1.crl rsync://repo-rpki.idnic.net/repo/e5c8b9e3-b44f-490b-bf51-99f2dd2a1364/0/27114CFC585C5DB2E0AC5DA74F04C66C319492F1.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/27114CFC585C5DB2E0AC5DA74F04C66C319492F1.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 28 Jan 2026 04:29:06 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 34:a8:76:99:ab:e1:0d:ce:a6:97:23:39:9a:cc:e9:56:60:89:d4:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=27114CFC585C5DB2E0AC5DA74F04C66C319492F1 Validity Not Before: Jan 24 18:56:06 2026 GMT Not After : Jan 28 04:29:06 2026 GMT Subject: CN=5D651EE90F5AB8E6E82E5C2DA19A59E3C6D121E1 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d2:4c:0c:de:fa:5f:db:b5:b5:ea:69:7d:05:aa: ed:0f:82:de:3d:e4:28:16:92:9b:ae:2a:1f:f0:7b: e4:b7:9d:f6:d6:2c:45:32:23:b8:a1:8e:01:64:21: 35:72:b6:99:96:e3:62:e1:4c:35:ad:11:be:a0:aa: da:7b:56:cb:10:e6:cf:dd:2d:19:d7:56:e3:5f:48: de:b1:30:bc:62:15:de:77:01:07:9d:41:68:88:48: d1:9b:2c:20:8e:74:81:fb:fd:ea:5c:d5:bb:04:ad: 21:d3:9e:da:d1:4b:27:6a:af:36:57:48:84:fb:52: 99:6a:a7:c2:c2:5f:c8:94:d1:d5:98:c8:26:2d:86: f2:d1:70:0e:7c:9b:b1:d9:49:3c:39:90:6a:0f:da: 47:ed:84:e1:88:21:2c:b0:96:13:8d:83:d8:a1:1f: 9b:59:89:92:60:ca:2a:6b:f5:65:6a:80:c2:b6:15: 86:f2:03:5b:9a:3b:5d:08:b3:f9:3d:6c:82:61:61: b7:bc:0c:62:c0:c7:54:95:be:ef:68:e7:7a:75:87: a2:30:c5:5d:d1:41:05:2a:ba:a3:55:7e:70:cd:4e: 01:d5:e9:8d:a2:29:1c:f9:aa:bc:19:7e:22:59:fb: e1:73:57:1f:eb:32:fa:c8:27:6e:c4:01:98:59:35: 26:19 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 5D:65:1E:E9:0F:5A:B8:E6:E8:2E:5C:2D:A1:9A:59:E3:C6:D1:21:E1 X509v3 Authority Key Identifier: keyid:27:11:4C:FC:58:5C:5D:B2:E0:AC:5D:A7:4F:04:C6:6C:31:94:92:F1 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/e5c8b9e3-b44f-490b-bf51-99f2dd2a1364/0/27114CFC585C5DB2E0AC5DA74F04C66C319492F1.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/27114CFC585C5DB2E0AC5DA74F04C66C319492F1.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/e5c8b9e3-b44f-490b-bf51-99f2dd2a1364/0/27114CFC585C5DB2E0AC5DA74F04C66C319492F1.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 9c:23:49:83:38:4c:12:82:e3:d8:e0:1b:e8:0b:92:77:a3:81: 36:00:ad:6e:89:d7:86:96:54:2d:c1:5a:41:86:ff:9f:27:e3: 23:02:8e:b1:ad:6e:dd:9f:fc:81:ae:1b:b7:53:ca:c7:9f:86: 5f:7f:98:a5:fe:34:b5:ba:26:8a:a5:de:a2:b0:20:5c:c7:93: e0:5f:4d:e3:25:89:74:dc:39:2b:ef:2b:2e:03:e4:1d:37:92: 49:52:93:6f:85:ca:b1:7f:15:d9:2c:83:75:29:10:d5:a8:dd: 28:48:de:c4:82:85:53:49:09:80:63:e9:db:15:b5:a1:fb:b0: 4f:07:df:69:41:d2:a7:a6:c1:7a:4b:7a:73:36:86:a7:6a:d3: 80:39:f7:bc:06:1a:6a:01:05:e6:be:b3:cc:f0:6c:28:01:74: 35:1f:a1:2f:29:8d:32:33:4b:22:e3:f5:14:86:66:a4:c6:89: 3b:56:78:d8:15:ca:21:92:b2:a4:56:d0:b7:d6:cf:3f:9e:ff: 7b:f2:8c:6d:73:e3:0c:5c:e2:4f:3c:89:eb:38:ea:8e:0d:a6: 8a:50:3d:66:d7:5a:04:3b:9a:12:b9:90:15:ec:5c:b7:6e:4f: 8f:e8:0e:83:d8:7c:d9:b9:b6:5a:21:6c:12:69:b7:ce:18:96: 35:28:ec:1f -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUNKh2mavhDc6mlyM5mszpVmCJ1AAwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMjcxMTRDRkM1ODVDNURCMkUwQUM1REE3NEYwNEM2NkMz MTk0OTJGMTAeFw0yNjAxMjQxODU2MDZaFw0yNjAxMjgwNDI5MDZaMDMxMTAvBgNV BAMTKDVENjUxRUU5MEY1QUI4RTZFODJFNUMyREExOUE1OUUzQzZEMTIxRTEwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDSTAze+l/btbXqaX0Fqu0Pgt49 5CgWkpuuKh/we+S3nfbWLEUyI7ihjgFkITVytpmW42LhTDWtEb6gqtp7VssQ5s/d LRnXVuNfSN6xMLxiFd53AQedQWiISNGbLCCOdIH7/epc1bsErSHTntrRSydqrzZX SIT7Uplqp8LCX8iU0dWYyCYthvLRcA58m7HZSTw5kGoP2kfthOGIISywlhONg9ih H5tZiZJgyipr9WVqgMK2FYbyA1uaO10Is/k9bIJhYbe8DGLAx1SVvu9o53p1h6Iw xV3RQQUquqNVfnDNTgHV6Y2iKRz5qrwZfiJZ++FzVx/rMvrIJ27EAZhZNSYZAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUXWUe6Q9auOboLlwtoZpZ48bRIeEwHwYDVR0j BBgwFoAUJxFM/FhcXbLgrF2nTwTGbDGUkvEwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby9l NWM4YjllMy1iNDRmLTQ5MGItYmY1MS05OWYyZGQyYTEzNjQvMC8yNzExNENGQzU4 NUM1REIyRTBBQzVEQTc0RjA0QzY2QzMxOTQ5MkYxLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvMjcxMTRDRkM1ODVDNURCMkUwQUM1REE3NEYwNEM2NkMzMTk0 OTJGMS5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vZTVjOGI5ZTMtYjQ0Zi00OTBiLWJm NTEtOTlmMmRkMmExMzY0LzAvMjcxMTRDRkM1ODVDNURCMkUwQUM1REE3NEYwNEM2 NkMzMTk0OTJGMS5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAJwjSYM4TBKC49jgG+gLknejgTYArW6J14aW VC3BWkGG/58n4yMCjrGtbt2f/IGuG7dTysefhl9/mKX+NLW6Joql3qKwIFzHk+Bf TeMliXTcOSvvKy4D5B03kklSk2+FyrF/Fdksg3UpENWo3ShI3sSChVNJCYBj6dsV taH7sE8H32lB0qemwXpLenM2hqdq04A597wGGmoBBea+s8zwbCgBdDUfoS8pjTIz SyLj9RSGZqTGiTtWeNgVyiGSsqRW0LfWzz+e/3vyjG1z4wxc4k88ies46o4NpopQ PWbXWgQ7mhK5kBXsXLduT4/oDoPYfNm5tlohbBJpt84YljUo7B8= -----END CERTIFICATE-----Generated at Sun Jan 25 22:00:43 2026 by rpki-client