This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

$ rpki-client -vvf repo-rpki.idnic.net/repo/e5c8b9e3-b44f-490b-bf51-99f2dd2a1364/0/27114CFC585C5DB2E0AC5DA74F04C66C319492F1.mft
File: 27114CFC585C5DB2E0AC5DA74F04C66C319492F1.mft (raw, json)
Hash identifier: EnQXB+gIf4wsPMEK3o23pvKMaAlkmhadHv8bWMoVue8=
Subject key identifier: 36:E4:F6:3B:6C:B3:A6:B1:27:0C:B9:45:FB:F2:E9:4A:67:80:E9:9E
Authority key identifier: 27:11:4C:FC:58:5C:5D:B2:E0:AC:5D:A7:4F:04:C6:6C:31:94:92:F1
Certificate issuer: /CN=27114CFC585C5DB2E0AC5DA74F04C66C319492F1
Certificate serial: 721FF2A1D71189B2413F1F2025A3633F7D275F58
Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/27114CFC585C5DB2E0AC5DA74F04C66C319492F1.cer
Subject info access: rsync://repo-rpki.idnic.net/repo/e5c8b9e3-b44f-490b-bf51-99f2dd2a1364/0/27114CFC585C5DB2E0AC5DA74F04C66C319492F1.mft
Manifest number: 01E6
Signing time: Wed 17 Dec 2025 16:51:05 +0000
Manifest this update: Wed 17 Dec 2025 16:46:05 +0000
Manifest next update: Sat 20 Dec 2025 22:57:05 +0000
Files and hashes: 1: 27114CFC585C5DB2E0AC5DA74F04C66C319492F1.crl (hash: Bv3K1YO8ZWSSMo5e7Wwd9l7F9nIOKCyAYI1g7wMGuic=)
2: 3130332e37392e3132382e302f32342d3234203d3e20313339393531.roa (hash: f2QS2bkCAnvcHZRI/qOVoXk+1PJl2qNtEtgN6wxB1DM=)
3: 3130332e37392e3132392e302f32342d3234203d3e20313339393531.roa (hash: KEbEalVEafBDzV3MLE/Git/FoIDPkOruC23YgT8hoVA=)
4: 3130332e37392e3132382e302f32332d3234203d3e20313339393531.roa (hash: ZL34hhxgSVm8YMiIofnGZ8eIEEK0rTf5wpsCzmwT6wA=)
Validation: OK
Signature path: rsync://repo-rpki.idnic.net/repo/e5c8b9e3-b44f-490b-bf51-99f2dd2a1364/0/27114CFC585C5DB2E0AC5DA74F04C66C319492F1.crl
rsync://repo-rpki.idnic.net/repo/e5c8b9e3-b44f-490b-bf51-99f2dd2a1364/0/27114CFC585C5DB2E0AC5DA74F04C66C319492F1.mft
rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/27114CFC585C5DB2E0AC5DA74F04C66C319492F1.cer
rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl
rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Sat 20 Dec 2025 22:57:05 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
72:1f:f2:a1:d7:11:89:b2:41:3f:1f:20:25:a3:63:3f:7d:27:5f:58
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=27114CFC585C5DB2E0AC5DA74F04C66C319492F1
Validity
Not Before: Dec 17 16:46:05 2025 GMT
Not After : Dec 20 22:57:05 2025 GMT
Subject: CN=36E4F63B6CB3A6B1270CB945FBF2E94A6780E99E
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b8:90:e7:da:0e:75:d3:80:7f:f0:b8:d4:d8:76:
06:8f:2c:e2:d5:56:86:85:03:2f:98:48:3c:9f:5d:
2b:35:44:f0:64:4a:7f:95:ce:08:50:dd:e8:f5:cb:
2d:ba:f2:6a:77:80:45:85:08:c4:bf:23:af:a6:78:
9f:b4:ad:8d:82:ed:58:d8:07:c4:68:32:32:5f:8d:
48:55:9a:23:14:00:23:82:a7:2d:a9:b4:07:54:54:
ef:59:dc:2b:06:98:60:09:ac:d5:2d:8c:8a:cf:e9:
b0:46:ca:d9:72:10:d1:63:fa:14:bd:0b:c7:39:c0:
a2:a9:c5:f3:1e:f1:7e:14:82:f2:35:9a:37:fb:fb:
6f:06:b6:21:b1:b9:5d:9b:d2:f0:ee:69:e3:e3:c1:
d3:5d:33:3e:e0:34:36:de:23:96:ca:1b:8f:ed:ce:
fb:35:12:29:19:7b:67:0d:47:6e:b6:6b:7a:60:36:
6b:16:36:f3:14:b5:62:99:90:2b:80:73:d0:af:dd:
e5:cb:3c:b8:ee:cf:26:a6:83:16:e3:35:48:ed:77:
33:0c:c1:32:66:a1:75:52:72:e0:64:9c:ef:31:20:
74:77:12:57:32:fe:91:e5:6a:c9:4e:22:26:26:8e:
8f:9e:b8:88:27:6e:09:1d:77:96:c0:4f:4f:03:c3:
d5:31
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
36:E4:F6:3B:6C:B3:A6:B1:27:0C:B9:45:FB:F2:E9:4A:67:80:E9:9E
X509v3 Authority Key Identifier:
keyid:27:11:4C:FC:58:5C:5D:B2:E0:AC:5D:A7:4F:04:C6:6C:31:94:92:F1
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://repo-rpki.idnic.net/repo/e5c8b9e3-b44f-490b-bf51-99f2dd2a1364/0/27114CFC585C5DB2E0AC5DA74F04C66C319492F1.crl
Authority Information Access:
CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/27114CFC585C5DB2E0AC5DA74F04C66C319492F1.cer
Subject Information Access:
Signed Object - URI:rsync://repo-rpki.idnic.net/repo/e5c8b9e3-b44f-490b-bf51-99f2dd2a1364/0/27114CFC585C5DB2E0AC5DA74F04C66C319492F1.mft
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
80:41:48:0c:a9:61:b1:bd:9c:bc:7a:87:75:15:44:a1:7d:1f:
c9:cb:a9:03:29:11:4a:4b:32:00:74:fa:9b:ac:11:28:7b:d5:
69:52:5b:2c:a7:e8:fc:09:0d:d5:1c:3e:7b:00:20:8e:e9:f1:
22:94:aa:2b:89:89:35:86:1e:ab:bb:89:e9:0b:1a:16:a1:93:
e3:a6:a6:29:a5:82:6e:56:c8:e6:2c:57:9b:56:d9:9a:1a:f5:
69:75:22:1b:94:2f:20:ee:5e:d5:75:7f:69:82:75:29:3b:0a:
2c:88:c1:77:13:a3:3b:c7:f1:f0:b3:65:74:40:36:01:9e:8e:
68:8c:f6:4e:90:4f:62:57:36:3e:7d:09:ea:61:f8:6b:be:79:
6c:5c:ad:6c:b3:ef:29:be:75:5f:a2:ec:71:3b:a1:08:40:70:
03:c3:d1:65:f4:36:e8:a8:d0:61:34:3e:dc:ab:68:3a:8d:ba:
1f:86:b5:7c:3d:66:23:9b:73:27:13:62:1e:bb:bf:98:19:80:
3c:9d:33:bb:29:bc:eb:4b:69:b3:41:27:59:39:e9:36:10:da:
ce:51:97:5c:6b:c7:39:60:0c:cc:ee:ba:c0:06:79:f4:f5:4d:
51:39:1b:77:3c:b2:42:70:b8:66:84:ee:70:10:60:77:ef:88:
52:10:fc:af
-----BEGIN CERTIFICATE-----
MIIFMjCCBBqgAwIBAgIUch/yodcRibJBPx8gJaNjP30nX1gwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoMjcxMTRDRkM1ODVDNURCMkUwQUM1REE3NEYwNEM2NkMz
MTk0OTJGMTAeFw0yNTEyMTcxNjQ2MDVaFw0yNTEyMjAyMjU3MDVaMDMxMTAvBgNV
BAMTKDM2RTRGNjNCNkNCM0E2QjEyNzBDQjk0NUZCRjJFOTRBNjc4MEU5OUUwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC4kOfaDnXTgH/wuNTYdgaPLOLV
VoaFAy+YSDyfXSs1RPBkSn+VzghQ3ej1yy268mp3gEWFCMS/I6+meJ+0rY2C7VjY
B8RoMjJfjUhVmiMUACOCpy2ptAdUVO9Z3CsGmGAJrNUtjIrP6bBGytlyENFj+hS9
C8c5wKKpxfMe8X4UgvI1mjf7+28GtiGxuV2b0vDuaePjwdNdMz7gNDbeI5bKG4/t
zvs1EikZe2cNR262a3pgNmsWNvMUtWKZkCuAc9Cv3eXLPLjuzyamgxbjNUjtdzMM
wTJmoXVScuBknO8xIHR3Elcy/pHlaslOIiYmjo+euIgnbgkdd5bAT08Dw9UxAgMB
AAGjggI8MIICODAdBgNVHQ4EFgQUNuT2O2yzprEnDLlF+/LpSmeA6Z4wHwYDVR0j
BBgwFoAUJxFM/FhcXbLgrF2nTwTGbDGUkvEwDgYDVR0PAQH/BAQDAgeAMIGFBgNV
HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby9l
NWM4YjllMy1iNDRmLTQ5MGItYmY1MS05OWYyZGQyYTEzNjQvMC8yNzExNENGQzU4
NUM1REIyRTBBQzVEQTc0RjA0QzY2QzMxOTQ5MkYxLmNybDB0BggrBgEFBQcBAQRo
MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv
L0lETklDLUlELzIvMjcxMTRDRkM1ODVDNURCMkUwQUM1REE3NEYwNEM2NkMzMTk0
OTJGMS5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6
Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vZTVjOGI5ZTMtYjQ0Zi00OTBiLWJm
NTEtOTlmMmRkMmExMzY0LzAvMjcxMTRDRkM1ODVDNURCMkUwQUM1REE3NEYwNEM2
NkMzMTk0OTJGMS5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF
BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC
BQAwDQYJKoZIhvcNAQELBQADggEBAIBBSAypYbG9nLx6h3UVRKF9H8nLqQMpEUpL
MgB0+pusESh71WlSWyyn6PwJDdUcPnsAII7p8SKUqiuJiTWGHqu7iekLGhahk+Om
pimlgm5WyOYsV5tW2Zoa9Wl1IhuULyDuXtV1f2mCdSk7CiyIwXcTozvH8fCzZXRA
NgGejmiM9k6QT2JXNj59Ceph+Gu+eWxcrWyz7ym+dV+i7HE7oQhAcAPD0WX0Nuio
0GE0PtyraDqNuh+GtXw9ZiObcycTYh67v5gZgDydM7spvOtLabNBJ1k56TYQ2s5R
l1xrxzlgDMzuusAGefT1TVE5G3c8skJwuGaE7nAQYHfviFIQ/K8=
-----END CERTIFICATE-----
Generated at Fri Dec 19 11:17:31 2025 by rpki-client