This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

$ rpki-client -vvf repo-rpki.idnic.net/repo/ec6b597c-9547-4c1e-ac87-3a434a300a67/0/27575AEBC443417C31FDF4A1DDFE016557A835F4.mft
File: 27575AEBC443417C31FDF4A1DDFE016557A835F4.mft (raw, json)
Hash identifier: 737sFR3v48xJ9OafcG07OEW7tZDP/AwNPuLgIVDYubo=
Subject key identifier: 47:C5:30:64:81:E0:7F:60:80:98:12:A5:E8:1D:83:DA:57:64:91:43
Authority key identifier: 27:57:5A:EB:C4:43:41:7C:31:FD:F4:A1:DD:FE:01:65:57:A8:35:F4
Certificate issuer: /CN=27575AEBC443417C31FDF4A1DDFE016557A835F4
Certificate serial: 0C63609ECE9790D71927786545D465EF568E3D1C
Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/27575AEBC443417C31FDF4A1DDFE016557A835F4.cer
Subject info access: rsync://repo-rpki.idnic.net/repo/ec6b597c-9547-4c1e-ac87-3a434a300a67/0/27575AEBC443417C31FDF4A1DDFE016557A835F4.mft
Manifest number: 01F4
Signing time: Sat 06 Dec 2025 02:41:40 +0000
Manifest this update: Sat 06 Dec 2025 02:36:40 +0000
Manifest next update: Tue 09 Dec 2025 07:47:40 +0000
Files and hashes: 1: 3130332e3138392e3133382e302f32342d3234203d3e20313439373532.roa (hash: 11KNXlbV6XDV6e1jADYaW+1r6VvI4ginelDqZNH0poo=)
2: 27575AEBC443417C31FDF4A1DDFE016557A835F4.crl (hash: d8EbVrfgsqZaWoO5JXsKs0MMQJqJQfIzYtI1g+fhC5g=)
3: 3130332e3138392e3133392e302f32342d3234203d3e20313439373532.roa (hash: iVmYuqrywXHq070b2b6b1AVyJeKdilvifyJRDNtlsDw=)
Validation: OK
Signature path: rsync://repo-rpki.idnic.net/repo/ec6b597c-9547-4c1e-ac87-3a434a300a67/0/27575AEBC443417C31FDF4A1DDFE016557A835F4.crl
rsync://repo-rpki.idnic.net/repo/ec6b597c-9547-4c1e-ac87-3a434a300a67/0/27575AEBC443417C31FDF4A1DDFE016557A835F4.mft
rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/27575AEBC443417C31FDF4A1DDFE016557A835F4.cer
rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl
rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Tue 09 Dec 2025 07:47:40 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
0c:63:60:9e:ce:97:90:d7:19:27:78:65:45:d4:65:ef:56:8e:3d:1c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=27575AEBC443417C31FDF4A1DDFE016557A835F4
Validity
Not Before: Dec 6 02:36:40 2025 GMT
Not After : Dec 9 07:47:40 2025 GMT
Subject: CN=47C5306481E07F60809812A5E81D83DA57649143
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:dc:00:f0:14:42:45:70:90:4c:a9:43:61:0b:71:
ae:56:5a:40:55:c5:5c:6e:3c:31:70:d5:3c:86:79:
ca:b0:64:74:34:b4:9d:b7:c9:c3:c1:8e:bf:e9:cf:
75:c6:09:f5:be:6b:2e:b1:f3:a4:1c:b5:96:5a:30:
de:bd:75:66:c4:88:21:01:3f:fe:85:00:29:05:5f:
e4:b5:8a:93:b9:b1:d3:28:40:0a:1f:23:d4:0d:f6:
b2:fb:58:45:83:56:5f:a4:79:c8:2a:a3:df:ff:f9:
77:54:4f:9d:d4:11:5f:2a:09:26:87:5f:71:bf:3d:
8b:61:1d:a9:af:58:e4:4e:ee:12:9d:45:bb:cd:a4:
60:6d:a3:fd:60:c2:75:0e:72:ef:70:9d:d0:82:bf:
04:1e:03:d1:c4:eb:cb:cc:b8:43:75:55:b4:d6:7f:
e5:43:2b:b6:ef:46:51:d6:a2:b2:45:a9:3f:db:fe:
1e:82:9f:67:5f:36:47:55:2d:ad:cb:7d:dc:27:8b:
0f:a8:d5:3e:07:5a:23:98:87:ce:72:1a:8a:63:a7:
d3:01:d8:82:1d:3b:b0:6f:08:3e:36:34:88:23:15:
28:b2:64:92:40:60:25:c9:d5:37:f1:88:5f:c9:30:
16:d6:06:6b:8d:3a:66:b3:1e:be:66:aa:e8:47:10:
cb:b7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
47:C5:30:64:81:E0:7F:60:80:98:12:A5:E8:1D:83:DA:57:64:91:43
X509v3 Authority Key Identifier:
keyid:27:57:5A:EB:C4:43:41:7C:31:FD:F4:A1:DD:FE:01:65:57:A8:35:F4
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://repo-rpki.idnic.net/repo/ec6b597c-9547-4c1e-ac87-3a434a300a67/0/27575AEBC443417C31FDF4A1DDFE016557A835F4.crl
Authority Information Access:
CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/27575AEBC443417C31FDF4A1DDFE016557A835F4.cer
Subject Information Access:
Signed Object - URI:rsync://repo-rpki.idnic.net/repo/ec6b597c-9547-4c1e-ac87-3a434a300a67/0/27575AEBC443417C31FDF4A1DDFE016557A835F4.mft
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
34:9d:0b:a3:dd:94:75:09:d8:f3:d1:ed:08:8f:d7:a2:1e:77:
1a:ad:61:e0:a6:b4:e8:8b:43:01:fb:fc:9c:1b:c0:55:30:ee:
1d:fe:83:83:ec:f7:cd:ef:34:c3:cd:65:8d:35:3b:f1:b1:9a:
e1:1a:89:55:c3:4f:f9:8d:26:d1:6e:d7:be:60:3f:23:49:09:
ba:da:61:b3:67:02:2e:53:f7:68:60:ab:2c:cc:0d:e6:20:e0:
3e:20:11:f0:bc:51:49:fd:1d:2e:0a:04:da:e5:7d:cd:83:06:
18:0b:ad:ab:7b:9a:99:2d:13:2b:46:42:60:dd:82:e1:b9:a8:
81:56:d8:51:d4:f9:60:f7:01:99:54:e7:d6:4d:00:e7:95:fd:
1b:47:a4:29:61:61:8d:cc:48:e8:ab:d9:c6:72:6f:cd:4e:45:
fd:7b:8e:b8:a6:4c:3e:4d:87:ca:8e:58:e0:36:4c:44:dd:39:
3e:c5:62:a9:a4:d3:31:5b:65:32:dd:be:c8:35:a6:62:84:f5:
21:8b:1e:71:2a:ee:9a:43:19:8d:5e:d4:f5:2b:c1:a1:47:18:
b8:eb:ed:22:aa:e1:99:60:96:9a:84:24:5c:8b:d3:ea:cf:d8:
83:3f:4a:98:7f:f8:22:2c:04:3d:b0:c6:1e:08:3b:65:95:7b:
fd:4a:53:fa
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Dec 6 23:52:35 2025 by rpki-client