This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf repo-rpki.idnic.net/repo/ec6b597c-9547-4c1e-ac87-3a434a300a67/0/27575AEBC443417C31FDF4A1DDFE016557A835F4.mft File: 27575AEBC443417C31FDF4A1DDFE016557A835F4.mft (raw, json) Hash identifier: PvK5i+YoKJZRJ0TMrJdDpVWmDYs1GwWigptK46B0FYo= Subject key identifier: DC:7D:3D:16:D6:88:47:40:83:F1:78:4A:A7:9F:C7:F8:3B:A3:EA:87 Authority key identifier: 27:57:5A:EB:C4:43:41:7C:31:FD:F4:A1:DD:FE:01:65:57:A8:35:F4 Certificate issuer: /CN=27575AEBC443417C31FDF4A1DDFE016557A835F4 Certificate serial: 16FED9560B90343052DC76E2A3BEA2688D04E655 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/27575AEBC443417C31FDF4A1DDFE016557A835F4.cer Subject info access: rsync://repo-rpki.idnic.net/repo/ec6b597c-9547-4c1e-ac87-3a434a300a67/0/27575AEBC443417C31FDF4A1DDFE016557A835F4.mft Manifest number: 020A Signing time: Sun 25 Jan 2026 04:01:37 +0000 Manifest this update: Sun 25 Jan 2026 03:56:37 +0000 Manifest next update: Wed 28 Jan 2026 07:50:37 +0000 Files and hashes: 1: 27575AEBC443417C31FDF4A1DDFE016557A835F4.crl (hash: spJcUK+/P61AUdpYwEmi0Hb6PXqtkmZl3tM8XxrKoKU=) 2: 3130332e3138392e3133382e302f32342d3234203d3e20313439373532.roa (hash: 11KNXlbV6XDV6e1jADYaW+1r6VvI4ginelDqZNH0poo=) 3: 3130332e3138392e3133392e302f32342d3234203d3e20313439373532.roa (hash: iVmYuqrywXHq070b2b6b1AVyJeKdilvifyJRDNtlsDw=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/ec6b597c-9547-4c1e-ac87-3a434a300a67/0/27575AEBC443417C31FDF4A1DDFE016557A835F4.crl rsync://repo-rpki.idnic.net/repo/ec6b597c-9547-4c1e-ac87-3a434a300a67/0/27575AEBC443417C31FDF4A1DDFE016557A835F4.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/27575AEBC443417C31FDF4A1DDFE016557A835F4.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 28 Jan 2026 07:50:37 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 16:fe:d9:56:0b:90:34:30:52:dc:76:e2:a3:be:a2:68:8d:04:e6:55 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=27575AEBC443417C31FDF4A1DDFE016557A835F4 Validity Not Before: Jan 25 03:56:37 2026 GMT Not After : Jan 28 07:50:37 2026 GMT Subject: CN=DC7D3D16D688474083F1784AA79FC7F83BA3EA87 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d0:9b:be:93:f7:ea:02:db:97:98:a7:04:8e:9e: 6c:8f:55:f5:f2:1e:f9:90:7e:c7:70:e3:3e:30:59: 38:12:98:24:d9:37:c7:03:57:14:55:c0:34:36:13: 1f:45:fd:dc:7f:5c:fe:c0:7d:c6:25:ba:a9:9a:5c: 89:b2:cf:07:f9:16:9a:fc:87:5e:f9:32:0a:74:7e: 32:96:83:34:67:c0:e3:e5:13:5b:88:4f:8b:cb:d8: f7:8f:04:d1:cb:11:4e:a6:96:81:46:56:f3:5d:ef: c8:d5:0d:8d:b4:60:51:39:63:10:b1:dd:78:8e:a2: 96:27:14:39:1a:46:8a:57:9f:8b:09:a5:35:28:5f: 57:e7:98:bf:ac:a3:9b:f1:0c:23:b0:70:ba:0e:bd: 54:b0:91:bb:3b:46:c4:d2:3c:16:3c:db:5e:ea:e9: d9:e2:b9:8c:60:cc:ec:0b:a7:bf:9d:dd:fa:bd:b9: 39:0a:c7:fd:54:ef:c8:00:e8:30:da:ef:e7:a6:40: 47:f4:ae:7c:56:2a:01:3c:67:83:f9:b9:35:06:d3: b7:fb:bc:1c:69:7e:a0:d0:ba:c1:fe:b3:f2:e8:03: 40:a4:61:4e:29:a7:74:b3:15:ce:b5:fa:e1:2b:b2: c1:19:01:30:41:ff:a9:3b:58:0a:99:3b:01:35:41: 02:49 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: DC:7D:3D:16:D6:88:47:40:83:F1:78:4A:A7:9F:C7:F8:3B:A3:EA:87 X509v3 Authority Key Identifier: keyid:27:57:5A:EB:C4:43:41:7C:31:FD:F4:A1:DD:FE:01:65:57:A8:35:F4 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/ec6b597c-9547-4c1e-ac87-3a434a300a67/0/27575AEBC443417C31FDF4A1DDFE016557A835F4.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/27575AEBC443417C31FDF4A1DDFE016557A835F4.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/ec6b597c-9547-4c1e-ac87-3a434a300a67/0/27575AEBC443417C31FDF4A1DDFE016557A835F4.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 53:5d:9d:34:b6:a0:f8:35:a4:03:38:c6:c2:8c:a0:79:3c:e1: e0:1a:ab:bd:5e:50:ab:7c:a4:3f:b8:76:58:76:f9:37:fe:ec: d0:f4:f3:c3:c4:26:4a:36:ab:e5:c4:2b:8c:d1:47:a7:4f:9e: 90:2b:12:32:46:3d:55:6e:c9:8c:87:89:d5:30:b3:3f:fc:4f: 4e:96:f6:94:67:18:ac:ba:2f:1a:59:4f:ea:b0:9b:99:bc:a4: ab:99:20:7f:f8:4e:33:3f:42:54:45:5c:aa:05:ec:20:83:bb: 57:51:65:f9:a5:f5:e4:62:00:5d:ee:8f:17:5c:7e:99:98:e0: 56:d0:2a:f8:50:f8:ea:92:52:14:5f:e9:4b:7f:15:f3:e4:50: 67:70:99:e3:ee:b5:df:6c:79:64:da:f8:51:cc:f8:3d:fd:4d: 36:bf:ef:cb:f3:95:1d:d2:8b:e0:07:6d:d0:85:a3:49:34:80: 6e:85:a0:34:f2:04:80:e9:d6:4e:87:42:80:a2:00:7b:da:4e: 63:2f:c9:05:4a:d0:d9:76:3b:04:b8:fb:9c:b4:76:a1:4e:e2: 2f:aa:37:4e:98:f5:22:1a:8a:cd:e7:4e:5b:3b:5b:14:77:c7: 64:19:71:95:13:e0:2d:72:f2:8c:e0:e7:c1:d0:3b:fb:57:30: ba:fe:2d:f9 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUFv7ZVguQNDBS3Hbio76iaI0E5lUwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMjc1NzVBRUJDNDQzNDE3QzMxRkRGNEExRERGRTAxNjU1 N0E4MzVGNDAeFw0yNjAxMjUwMzU2MzdaFw0yNjAxMjgwNzUwMzdaMDMxMTAvBgNV BAMTKERDN0QzRDE2RDY4ODQ3NDA4M0YxNzg0QUE3OUZDN0Y4M0JBM0VBODcwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDQm76T9+oC25eYpwSOnmyPVfXy HvmQfsdw4z4wWTgSmCTZN8cDVxRVwDQ2Ex9F/dx/XP7AfcYluqmaXImyzwf5Fpr8 h175Mgp0fjKWgzRnwOPlE1uIT4vL2PePBNHLEU6mloFGVvNd78jVDY20YFE5YxCx 3XiOopYnFDkaRopXn4sJpTUoX1fnmL+so5vxDCOwcLoOvVSwkbs7RsTSPBY8217q 6dniuYxgzOwLp7+d3fq9uTkKx/1U78gA6DDa7+emQEf0rnxWKgE8Z4P5uTUG07f7 vBxpfqDQusH+s/LoA0CkYU4pp3SzFc61+uErssEZATBB/6k7WAqZOwE1QQJJAgMB AAGjggI8MIICODAdBgNVHQ4EFgQU3H09FtaIR0CD8XhKp5/H+Duj6ocwHwYDVR0j BBgwFoAUJ1da68RDQXwx/fSh3f4BZVeoNfQwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby9l YzZiNTk3Yy05NTQ3LTRjMWUtYWM4Ny0zYTQzNGEzMDBhNjcvMC8yNzU3NUFFQkM0 NDM0MTdDMzFGREY0QTFEREZFMDE2NTU3QTgzNUY0LmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvMjc1NzVBRUJDNDQzNDE3QzMxRkRGNEExRERGRTAxNjU1N0E4 MzVGNC5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vZWM2YjU5N2MtOTU0Ny00YzFlLWFj ODctM2E0MzRhMzAwYTY3LzAvMjc1NzVBRUJDNDQzNDE3QzMxRkRGNEExRERGRTAx NjU1N0E4MzVGNC5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAFNdnTS2oPg1pAM4xsKMoHk84eAaq71eUKt8 pD+4dlh2+Tf+7ND088PEJko2q+XEK4zRR6dPnpArEjJGPVVuyYyHidUwsz/8T06W 9pRnGKy6LxpZT+qwm5m8pKuZIH/4TjM/QlRFXKoF7CCDu1dRZfml9eRiAF3ujxdc fpmY4FbQKvhQ+OqSUhRf6Ut/FfPkUGdwmePutd9seWTa+FHM+D39TTa/78vzlR3S i+AHbdCFo0k0gG6FoDTyBIDp1k6HQoCiAHvaTmMvyQVK0Nl2OwS4+5y0dqFO4i+q N06Y9SIais3nTls7WxR3x2QZcZUT4C1y8ozg58HQO/tXMLr+Lfk= -----END CERTIFICATE-----Generated at Sun Jan 25 20:39:52 2026 by rpki-client