This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf repo-rpki.idnic.net/repo/ec6b597c-9547-4c1e-ac87-3a434a300a67/0/27575AEBC443417C31FDF4A1DDFE016557A835F4.mft File: 27575AEBC443417C31FDF4A1DDFE016557A835F4.mft (raw, json) Hash identifier: 9R5vpLkI8QMcu/uxwNpD+Kp3D41BYcaLvVHFF98H8oQ= Subject key identifier: 9D:93:22:2D:49:65:21:6D:70:B4:8F:3F:1D:23:A5:97:A5:AD:A3:2A Authority key identifier: 27:57:5A:EB:C4:43:41:7C:31:FD:F4:A1:DD:FE:01:65:57:A8:35:F4 Certificate issuer: /CN=27575AEBC443417C31FDF4A1DDFE016557A835F4 Certificate serial: 4264E75C6C83F53A1B6C30BDAB797D6A4A9BDB7F Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/27575AEBC443417C31FDF4A1DDFE016557A835F4.cer Subject info access: rsync://repo-rpki.idnic.net/repo/ec6b597c-9547-4c1e-ac87-3a434a300a67/0/27575AEBC443417C31FDF4A1DDFE016557A835F4.mft Manifest number: 01F9 Signing time: Wed 17 Dec 2025 15:51:37 +0000 Manifest this update: Wed 17 Dec 2025 15:46:37 +0000 Manifest next update: Sun 21 Dec 2025 02:47:37 +0000 Files and hashes: 1: 3130332e3138392e3133392e302f32342d3234203d3e20313439373532.roa (hash: iVmYuqrywXHq070b2b6b1AVyJeKdilvifyJRDNtlsDw=) 2: 27575AEBC443417C31FDF4A1DDFE016557A835F4.crl (hash: 8sEb/XomXolCm5eIv83m3fQwFeLy0FroBIUF+c5vTJw=) 3: 3130332e3138392e3133382e302f32342d3234203d3e20313439373532.roa (hash: 11KNXlbV6XDV6e1jADYaW+1r6VvI4ginelDqZNH0poo=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/ec6b597c-9547-4c1e-ac87-3a434a300a67/0/27575AEBC443417C31FDF4A1DDFE016557A835F4.crl rsync://repo-rpki.idnic.net/repo/ec6b597c-9547-4c1e-ac87-3a434a300a67/0/27575AEBC443417C31FDF4A1DDFE016557A835F4.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/27575AEBC443417C31FDF4A1DDFE016557A835F4.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 21 Dec 2025 02:47:37 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 42:64:e7:5c:6c:83:f5:3a:1b:6c:30:bd:ab:79:7d:6a:4a:9b:db:7f Signature Algorithm: sha256WithRSAEncryption Issuer: CN=27575AEBC443417C31FDF4A1DDFE016557A835F4 Validity Not Before: Dec 17 15:46:37 2025 GMT Not After : Dec 21 02:47:37 2025 GMT Subject: CN=9D93222D4965216D70B48F3F1D23A597A5ADA32A Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d3:49:c8:f2:2d:92:02:5f:09:3f:b5:61:83:7b: 57:0f:85:21:99:a7:89:7f:80:e1:1e:1a:76:68:5d: 3a:2e:b3:f8:04:4a:7d:b3:fa:ac:95:7d:eb:68:4d: 18:2a:22:64:70:47:39:85:92:7e:47:78:5c:03:c3: 79:19:bd:19:19:43:0e:b4:00:7b:76:2d:ee:19:b9: cd:d9:a6:a7:b9:b9:df:87:a3:7c:3b:f6:3e:c1:4c: 74:8b:e1:c1:3d:15:45:34:90:1e:27:91:a9:71:2d: fe:7a:a9:78:13:c8:d8:12:29:76:59:5b:56:1f:52: f9:4c:d7:6a:ab:9e:2c:e0:d1:2f:08:de:bd:53:1f: 0d:49:36:43:84:40:d9:4d:6d:2b:b9:90:19:68:81: 38:38:d4:28:e0:51:b7:2f:e8:87:bb:a2:0d:7f:92: c3:a6:55:9f:4f:d5:71:11:5e:b4:2a:5b:8f:80:c5: 57:ea:50:74:a8:69:3b:0b:ca:6e:15:5d:dc:57:7a: 5b:11:17:7c:08:e9:b4:c0:d6:74:a7:9a:60:de:66: 4e:c1:64:54:fb:70:6b:cb:41:a7:11:27:7b:49:99: b7:33:1e:d5:a5:79:b7:85:06:38:86:a8:9b:78:d3: 9b:07:74:53:5c:21:37:da:ea:86:f6:8f:df:0d:54: 8f:05 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 9D:93:22:2D:49:65:21:6D:70:B4:8F:3F:1D:23:A5:97:A5:AD:A3:2A X509v3 Authority Key Identifier: keyid:27:57:5A:EB:C4:43:41:7C:31:FD:F4:A1:DD:FE:01:65:57:A8:35:F4 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/ec6b597c-9547-4c1e-ac87-3a434a300a67/0/27575AEBC443417C31FDF4A1DDFE016557A835F4.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/27575AEBC443417C31FDF4A1DDFE016557A835F4.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/ec6b597c-9547-4c1e-ac87-3a434a300a67/0/27575AEBC443417C31FDF4A1DDFE016557A835F4.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption b5:95:9d:92:b4:66:6c:f8:ad:eb:6f:b2:62:e4:ee:b4:a3:98: 02:73:fb:85:3e:54:94:f1:61:7c:58:fe:00:03:75:86:e9:ef: ad:ec:c7:75:20:0b:9b:0c:e6:71:e3:2d:52:cd:88:9e:35:5e: 8c:70:7e:41:50:b3:ad:2c:b6:6e:4f:81:b5:fc:8a:d0:f5:e4: 0c:b5:a7:25:79:fc:dc:b0:e0:90:88:ae:49:bd:46:4c:d8:57: fa:98:27:56:25:2c:21:2c:36:11:1f:4f:17:86:68:a2:a4:48: 70:e1:38:94:b3:73:c1:ca:8a:e9:3b:bf:14:a4:8e:85:1b:61: 01:77:5c:11:12:d9:c0:f9:90:0a:4c:7f:af:3a:40:c5:86:fa: f9:c1:fe:5f:ad:89:65:f6:68:3d:15:93:71:9e:49:3c:14:83: 90:2d:0b:be:1d:1f:12:0a:80:6b:d4:7a:21:8b:7c:e7:a4:00: 4b:b1:42:b6:c8:a2:35:97:f8:82:7c:71:75:df:cf:b9:43:19: f9:63:04:9f:8e:2f:6b:81:79:c5:5f:2b:97:f7:b5:e1:c5:98: 5a:95:54:2e:18:22:3a:28:8d:89:d6:3f:f0:76:e6:25:b3:90: 5b:e6:1a:d5:1f:a5:ec:f8:13:0f:c2:de:bb:59:f2:32:9d:42: cf:90:bb:13 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUQmTnXGyD9TobbDC9q3l9akqb238wDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMjc1NzVBRUJDNDQzNDE3QzMxRkRGNEExRERGRTAxNjU1 N0E4MzVGNDAeFw0yNTEyMTcxNTQ2MzdaFw0yNTEyMjEwMjQ3MzdaMDMxMTAvBgNV BAMTKDlEOTMyMjJENDk2NTIxNkQ3MEI0OEYzRjFEMjNBNTk3QTVBREEzMkEwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDTScjyLZICXwk/tWGDe1cPhSGZ p4l/gOEeGnZoXTous/gESn2z+qyVfetoTRgqImRwRzmFkn5HeFwDw3kZvRkZQw60 AHt2Le4Zuc3Zpqe5ud+Ho3w79j7BTHSL4cE9FUU0kB4nkalxLf56qXgTyNgSKXZZ W1YfUvlM12qrnizg0S8I3r1THw1JNkOEQNlNbSu5kBlogTg41CjgUbcv6Ie7og1/ ksOmVZ9P1XERXrQqW4+AxVfqUHSoaTsLym4VXdxXelsRF3wI6bTA1nSnmmDeZk7B ZFT7cGvLQacRJ3tJmbczHtWlebeFBjiGqJt405sHdFNcITfa6ob2j98NVI8FAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUnZMiLUllIW1wtI8/HSOll6WtoyowHwYDVR0j BBgwFoAUJ1da68RDQXwx/fSh3f4BZVeoNfQwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby9l YzZiNTk3Yy05NTQ3LTRjMWUtYWM4Ny0zYTQzNGEzMDBhNjcvMC8yNzU3NUFFQkM0 NDM0MTdDMzFGREY0QTFEREZFMDE2NTU3QTgzNUY0LmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvMjc1NzVBRUJDNDQzNDE3QzMxRkRGNEExRERGRTAxNjU1N0E4 MzVGNC5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vZWM2YjU5N2MtOTU0Ny00YzFlLWFj ODctM2E0MzRhMzAwYTY3LzAvMjc1NzVBRUJDNDQzNDE3QzMxRkRGNEExRERGRTAx NjU1N0E4MzVGNC5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBALWVnZK0Zmz4retvsmLk7rSjmAJz+4U+VJTx YXxY/gADdYbp763sx3UgC5sM5nHjLVLNiJ41XoxwfkFQs60stm5PgbX8itD15Ay1 pyV5/Nyw4JCIrkm9RkzYV/qYJ1YlLCEsNhEfTxeGaKKkSHDhOJSzc8HKiuk7vxSk joUbYQF3XBES2cD5kApMf686QMWG+vnB/l+tiWX2aD0Vk3GeSTwUg5AtC74dHxIK gGvUeiGLfOekAEuxQrbIojWX+IJ8cXXfz7lDGfljBJ+OL2uBecVfK5f3teHFmFqV VC4YIjoojYnWP/B25iWzkFvmGtUfpez4Ew/C3rtZ8jKdQs+QuxM= -----END CERTIFICATE-----Generated at Fri Dec 19 03:13:41 2025 by rpki-client