This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf repo-rpki.idnic.net/repo/4544e951-3d08-458a-a44a-529d387d26b1/0/27A3131BB606D93657151019C1A9735DF861C9D4.mft File: 27A3131BB606D93657151019C1A9735DF861C9D4.mft (raw, json) Hash identifier: 3PPAMK0ybaQbjMMaNEwEZEPL0qNeOWS/0gqsbsEJHcA= Subject key identifier: 3E:4B:C7:EC:82:BA:FE:40:D6:BB:AE:92:8C:79:84:14:6D:AB:9A:61 Authority key identifier: 27:A3:13:1B:B6:06:D9:36:57:15:10:19:C1:A9:73:5D:F8:61:C9:D4 Certificate issuer: /CN=27A3131BB606D93657151019C1A9735DF861C9D4 Certificate serial: 20DE206401F926DB2688D7AE4E3ADE45E0C5A936 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/27A3131BB606D93657151019C1A9735DF861C9D4.cer Subject info access: rsync://repo-rpki.idnic.net/repo/4544e951-3d08-458a-a44a-529d387d26b1/0/27A3131BB606D93657151019C1A9735DF861C9D4.mft Manifest number: 031D Signing time: Sat 20 Dec 2025 12:11:39 +0000 Manifest this update: Sat 20 Dec 2025 12:06:39 +0000 Manifest next update: Tue 23 Dec 2025 19:29:39 +0000 Files and hashes: 1: 27A3131BB606D93657151019C1A9735DF861C9D4.crl (hash: agLwLzbpDgmQ/+pnND5D1vgdT5TsWSF1IU5a2ErafxE=) 2: 3130332e3133312e32392e302f32342d3234203d3e20313338303834.roa (hash: encpHXfOglU+n5zC00TevMjvjDMOpcW1MtPZsrVdOCI=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/4544e951-3d08-458a-a44a-529d387d26b1/0/27A3131BB606D93657151019C1A9735DF861C9D4.crl rsync://repo-rpki.idnic.net/repo/4544e951-3d08-458a-a44a-529d387d26b1/0/27A3131BB606D93657151019C1A9735DF861C9D4.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/27A3131BB606D93657151019C1A9735DF861C9D4.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 23 Dec 2025 19:29:39 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 20:de:20:64:01:f9:26:db:26:88:d7:ae:4e:3a:de:45:e0:c5:a9:36 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=27A3131BB606D93657151019C1A9735DF861C9D4 Validity Not Before: Dec 20 12:06:39 2025 GMT Not After : Dec 23 19:29:39 2025 GMT Subject: CN=3E4BC7EC82BAFE40D6BBAE928C7984146DAB9A61 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ba:85:3b:99:17:89:3a:5d:ac:af:51:be:5c:17: 77:02:41:c9:3f:44:be:36:ba:c2:46:62:87:c3:4b: 28:e5:38:c4:81:9f:64:4b:86:a4:6f:dd:72:4a:9c: 3d:f8:b3:44:2f:41:23:f2:7c:4d:b8:8c:12:59:5c: 09:5b:5f:25:18:1c:68:f2:c3:ae:0a:6b:99:90:2b: 9b:26:e7:82:b8:4c:01:a8:dd:23:bd:a3:23:0a:1c: 21:2b:c3:d9:84:b4:a8:22:7e:4e:21:c5:7a:38:18: 33:44:38:5d:00:3f:8d:90:17:af:cc:04:ce:04:3b: 0b:34:41:66:6a:a3:29:85:ac:46:42:91:65:47:5d: 33:f9:4b:6d:50:e6:fa:28:ae:30:5f:ff:41:34:5c: f0:6d:a3:b2:8b:67:5f:e4:04:08:55:e4:b1:06:a9: 60:80:0f:b2:f9:92:91:c3:0c:b9:58:26:04:59:1f: 35:8f:08:37:df:7f:e6:02:a4:82:6d:ba:c0:dd:f9: 04:d4:14:78:6c:7c:c5:4c:e3:7b:78:85:a3:4c:8d: 82:59:8a:d0:fa:99:6f:97:01:cc:d3:b1:0e:58:4d: 57:64:0f:10:32:75:a1:f5:66:f3:62:48:33:b6:bf: 58:46:9e:42:6b:9c:ce:74:67:72:d4:b4:6b:dc:19: fb:11 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 3E:4B:C7:EC:82:BA:FE:40:D6:BB:AE:92:8C:79:84:14:6D:AB:9A:61 X509v3 Authority Key Identifier: keyid:27:A3:13:1B:B6:06:D9:36:57:15:10:19:C1:A9:73:5D:F8:61:C9:D4 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/4544e951-3d08-458a-a44a-529d387d26b1/0/27A3131BB606D93657151019C1A9735DF861C9D4.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/27A3131BB606D93657151019C1A9735DF861C9D4.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/4544e951-3d08-458a-a44a-529d387d26b1/0/27A3131BB606D93657151019C1A9735DF861C9D4.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption a7:7d:5e:7c:b4:98:1e:18:5b:69:04:17:b7:f4:3c:4b:7d:5e: 4f:4c:41:49:0b:9e:fd:98:9b:23:de:79:69:57:6e:05:86:37: bd:07:35:7e:01:32:87:f3:59:73:9f:c3:92:80:0f:0d:77:1d: 13:ae:de:3c:87:1b:ef:f0:a3:5e:5d:e1:0b:5f:f5:4b:5d:aa: 24:8e:2d:88:68:b9:1c:8a:6b:5a:fb:14:1a:67:94:e2:f6:94: 16:1f:e0:6f:df:48:56:01:2d:1c:97:1a:ae:65:3b:83:d5:bb: c7:9e:c3:4a:de:6f:b7:5f:2f:f2:05:df:ff:3d:88:cf:75:27: 56:0c:9e:7a:b4:c5:94:c0:e3:64:3d:6e:97:4b:41:43:ad:81: 19:a8:35:1e:4e:7e:49:38:9c:1b:34:15:ea:c1:8f:03:19:65: e5:53:41:9c:61:35:4f:8d:61:4b:a3:64:29:37:06:8d:da:6b: 27:00:f7:6b:b0:69:57:7c:57:c4:91:b7:87:96:53:19:75:25: 15:01:77:a3:fe:4c:73:9e:c8:b0:ef:83:d7:d1:b6:4b:5e:2c: 20:38:5d:8f:4d:ae:2f:91:77:49:55:92:2a:4f:9f:e3:45:b9: 49:4d:cd:52:67:8f:ca:4d:a9:32:97:90:ba:79:7f:9e:ab:e1: 0c:af:e4:e5 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUIN4gZAH5JtsmiNeuTjreReDFqTYwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMjdBMzEzMUJCNjA2RDkzNjU3MTUxMDE5QzFBOTczNURG ODYxQzlENDAeFw0yNTEyMjAxMjA2MzlaFw0yNTEyMjMxOTI5MzlaMDMxMTAvBgNV BAMTKDNFNEJDN0VDODJCQUZFNDBENkJCQUU5MjhDNzk4NDE0NkRBQjlBNjEwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC6hTuZF4k6XayvUb5cF3cCQck/ RL42usJGYofDSyjlOMSBn2RLhqRv3XJKnD34s0QvQSPyfE24jBJZXAlbXyUYHGjy w64Ka5mQK5sm54K4TAGo3SO9oyMKHCErw9mEtKgifk4hxXo4GDNEOF0AP42QF6/M BM4EOws0QWZqoymFrEZCkWVHXTP5S21Q5voorjBf/0E0XPBto7KLZ1/kBAhV5LEG qWCAD7L5kpHDDLlYJgRZHzWPCDfff+YCpIJtusDd+QTUFHhsfMVM43t4haNMjYJZ itD6mW+XAczTsQ5YTVdkDxAydaH1ZvNiSDO2v1hGnkJrnM50Z3LUtGvcGfsRAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUPkvH7IK6/kDWu66SjHmEFG2rmmEwHwYDVR0j BBgwFoAUJ6MTG7YG2TZXFRAZwalzXfhhydQwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby80 NTQ0ZTk1MS0zZDA4LTQ1OGEtYTQ0YS01MjlkMzg3ZDI2YjEvMC8yN0EzMTMxQkI2 MDZEOTM2NTcxNTEwMTlDMUE5NzM1REY4NjFDOUQ0LmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvMjdBMzEzMUJCNjA2RDkzNjU3MTUxMDE5QzFBOTczNURGODYx QzlENC5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vNDU0NGU5NTEtM2QwOC00NThhLWE0 NGEtNTI5ZDM4N2QyNmIxLzAvMjdBMzEzMUJCNjA2RDkzNjU3MTUxMDE5QzFBOTcz NURGODYxQzlENC5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAKd9Xny0mB4YW2kEF7f0PEt9Xk9MQUkLnv2Y myPeeWlXbgWGN70HNX4BMofzWXOfw5KADw13HROu3jyHG+/wo15d4Qtf9UtdqiSO LYhouRyKa1r7FBpnlOL2lBYf4G/fSFYBLRyXGq5lO4PVu8eew0reb7dfL/IF3/89 iM91J1YMnnq0xZTA42Q9bpdLQUOtgRmoNR5Ofkk4nBs0FerBjwMZZeVTQZxhNU+N YUujZCk3Bo3aaycA92uwaVd8V8SRt4eWUxl1JRUBd6P+THOeyLDvg9fRtkteLCA4 XY9Nri+Rd0lVkipPn+NFuUlNzVJnj8pNqTKXkLp5f56r4Qyv5OU= -----END CERTIFICATE-----Generated at Sun Dec 21 23:14:31 2025 by rpki-client