This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf repo-rpki.idnic.net/repo/55511a8a-30da-4670-a010-7926d7cd510b/0/27B2CE96FAE8E1763A3C30DB33C3BBD8F051838B.mft
File:                     27B2CE96FAE8E1763A3C30DB33C3BBD8F051838B.mft (raw, json)
Hash identifier:          /cpjBMo3KmPDtrnfmDwdvk+Z6XNbUUjWGXbK5/1QBd8=
Subject key identifier:   F0:88:78:FB:F3:CD:A2:5B:32:A2:62:26:F9:A4:1A:BD:B9:B3:60:2E
Authority key identifier: 27:B2:CE:96:FA:E8:E1:76:3A:3C:30:DB:33:C3:BB:D8:F0:51:83:8B
Certificate issuer:       /CN=27B2CE96FAE8E1763A3C30DB33C3BBD8F051838B
Certificate serial:       28F5F321C9C1087723E667CDB1AEDC9534C5B063
Authority info access:    rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/27B2CE96FAE8E1763A3C30DB33C3BBD8F051838B.cer
Subject info access:      rsync://repo-rpki.idnic.net/repo/55511a8a-30da-4670-a010-7926d7cd510b/0/27B2CE96FAE8E1763A3C30DB33C3BBD8F051838B.mft
Manifest number:          015B
Signing time:             Wed 24 Dec 2025 01:51:17 +0000
Manifest this update:     Wed 24 Dec 2025 01:46:17 +0000
Manifest next update:     Sat 27 Dec 2025 09:18:17 +0000
Files and hashes:         1: 27B2CE96FAE8E1763A3C30DB33C3BBD8F051838B.crl (hash: qrpVRZC4lIvRxJIvJgWgueF5jpfLCaUShkESSXG/6P4=)
                          2: 3137352e3131312e39362e302f32342d3234203d3e20313531393935.roa (hash: xQP0pjDgC0pPyWEl2qOcCOaX00jzJQQKAN2sTOVKJqE=)
Validation:               OK
Signature path:           rsync://repo-rpki.idnic.net/repo/55511a8a-30da-4670-a010-7926d7cd510b/0/27B2CE96FAE8E1763A3C30DB33C3BBD8F051838B.crl
                          rsync://repo-rpki.idnic.net/repo/55511a8a-30da-4670-a010-7926d7cd510b/0/27B2CE96FAE8E1763A3C30DB33C3BBD8F051838B.mft
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/27B2CE96FAE8E1763A3C30DB33C3BBD8F051838B.cer
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sat 27 Dec 2025 09:18:17 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            28:f5:f3:21:c9:c1:08:77:23:e6:67:cd:b1:ae:dc:95:34:c5:b0:63
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=27B2CE96FAE8E1763A3C30DB33C3BBD8F051838B
        Validity
            Not Before: Dec 24 01:46:17 2025 GMT
            Not After : Dec 27 09:18:17 2025 GMT
        Subject: CN=F08878FBF3CDA25B32A26226F9A41ABDB9B3602E
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d8:f1:21:1b:f7:82:23:0f:50:12:b2:69:ef:00:
                    3a:00:92:e9:ef:6e:c4:bd:e9:ed:6d:bb:d0:5c:ad:
                    64:22:30:67:7f:92:fa:fe:8b:7a:e3:a9:e5:c1:f9:
                    49:ba:c4:d1:36:af:4c:82:8a:b2:a5:58:0b:bc:c1:
                    9d:b8:9c:53:02:9d:71:b7:9e:e4:9e:8b:ae:e4:67:
                    e6:dc:71:4d:bd:b2:63:04:89:54:3b:6b:d3:7e:65:
                    c5:ff:1f:d8:10:3e:dc:26:5b:7e:a3:26:d8:b2:8d:
                    44:5c:ae:c5:09:67:39:9f:62:99:cb:97:30:54:86:
                    12:10:c7:98:f4:1c:4e:08:cc:9b:33:20:ed:9f:19:
                    92:da:dd:46:a5:bc:0f:72:c3:f5:a9:53:61:a8:31:
                    bf:3c:1d:9e:6e:d6:14:84:15:2a:45:62:48:1f:71:
                    98:27:81:1e:34:f2:36:e8:b2:8e:8b:2c:32:2e:38:
                    9d:a4:39:86:db:b3:4f:2b:12:a7:f6:f9:5d:68:7f:
                    ef:00:56:59:d0:af:94:5d:04:94:ed:72:7f:bd:f3:
                    0a:50:48:d1:a1:63:6e:66:ed:b2:be:2a:12:86:90:
                    95:1b:9f:9b:fd:57:d6:98:52:b7:15:ef:22:4c:0a:
                    b2:42:96:ec:60:cb:a2:1e:60:01:4a:3b:77:5e:49:
                    19:3f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F0:88:78:FB:F3:CD:A2:5B:32:A2:62:26:F9:A4:1A:BD:B9:B3:60:2E
            X509v3 Authority Key Identifier:
                keyid:27:B2:CE:96:FA:E8:E1:76:3A:3C:30:DB:33:C3:BB:D8:F0:51:83:8B

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repo-rpki.idnic.net/repo/55511a8a-30da-4670-a010-7926d7cd510b/0/27B2CE96FAE8E1763A3C30DB33C3BBD8F051838B.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/27B2CE96FAE8E1763A3C30DB33C3BBD8F051838B.cer

            Subject Information Access:
                Signed Object - URI:rsync://repo-rpki.idnic.net/repo/55511a8a-30da-4670-a010-7926d7cd510b/0/27B2CE96FAE8E1763A3C30DB33C3BBD8F051838B.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         8e:f1:0e:1b:5e:5c:b5:a2:93:3b:a7:4a:9a:7b:f7:cf:64:a2:
         c0:42:d8:2e:ce:67:15:0d:93:41:40:e0:dd:49:bf:cb:c3:67:
         80:a7:f4:16:a8:bd:56:f1:ab:46:ca:68:89:82:d6:14:1d:1f:
         30:a6:7a:bc:99:ef:1e:f8:8d:d0:18:06:9a:c0:1f:4e:66:91:
         05:10:21:d5:d3:2f:bd:94:48:fb:21:e7:ce:74:0d:59:23:5e:
         eb:01:a8:31:cd:58:ac:33:ce:c1:cd:33:95:f6:84:bc:59:86:
         dc:10:f3:50:b1:a2:16:59:b1:df:e7:58:0d:0a:38:03:52:76:
         6b:4a:a7:2b:e7:f3:28:0a:a4:08:6f:73:ed:0d:1d:a0:8e:62:
         27:1f:85:2d:87:8a:96:43:d2:3d:3e:0e:34:8b:1b:4d:bb:d6:
         2e:a7:4d:56:bf:3d:2c:03:08:73:42:17:86:14:47:fb:93:86:
         05:26:ad:5f:f1:b4:a9:25:87:eb:08:d5:3b:33:73:03:32:29:
         57:c8:0e:8a:33:3a:dc:84:6b:77:6d:6e:42:b0:10:35:1f:17:
         3d:72:a7:1d:72:00:26:f1:d0:21:d3:75:9a:66:48:25:05:5a:
         cd:fb:6d:b0:c9:b9:57:e0:0c:02:b8:de:2d:8d:c3:19:55:e4:
         d1:48:60:da
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Dec 25 00:39:54 2025 by rpki-client