This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf repo-rpki.idnic.net/repo/2dd47f56-ec53-42eb-9b8b-fa08f874d319/0/47B3FBF39D8DFE5BC5CFD2BED39F0FA152619097.mft File: 47B3FBF39D8DFE5BC5CFD2BED39F0FA152619097.mft (raw, json) Hash identifier: WIwhhfWBgcWqmluU9UPR/D8udqmoZ4PNdZj2H/P3E24= Subject key identifier: A6:DA:7D:33:DA:31:E1:05:CA:98:64:DB:07:B6:D9:D5:39:DF:EB:A7 Authority key identifier: 47:B3:FB:F3:9D:8D:FE:5B:C5:CF:D2:BE:D3:9F:0F:A1:52:61:90:97 Certificate issuer: /CN=47B3FBF39D8DFE5BC5CFD2BED39F0FA152619097 Certificate serial: 14536750A83287580BF418AF44CB2EDA1FF71573 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/47B3FBF39D8DFE5BC5CFD2BED39F0FA152619097.cer Subject info access: rsync://repo-rpki.idnic.net/repo/2dd47f56-ec53-42eb-9b8b-fa08f874d319/0/47B3FBF39D8DFE5BC5CFD2BED39F0FA152619097.mft Manifest number: 01C8 Signing time: Sat 24 Jan 2026 10:22:05 +0000 Manifest this update: Sat 24 Jan 2026 10:17:05 +0000 Manifest next update: Tue 27 Jan 2026 20:26:05 +0000 Files and hashes: 1: 3131352e3136362e39362e302f31392d3234203d3e203234353335.roa (hash: o1nadYOiSyfzP5DiUIaxIjQ6Y6Z7EbT62ljXiAR8xj8=) 2: 47B3FBF39D8DFE5BC5CFD2BED39F0FA152619097.crl (hash: +tBo2nLKYjpwwHlb7AeOdmqG5l8d/W8t94Nzy4saKW8=) 3: 323430333a666630303a3a2f33322d3438203d3e203234353335.roa (hash: acX5TVrGelz7sikLTlbnR9gGsookgeyobaWlbIZGoJY=) 4: 3131352e3136362e3131312e302f32342d3234203d3e203136353039.roa (hash: v5qvmgh9eiTpdk3UEoQin8K5RQSDk24SVWpfNhiVRfU=) 5: 3131352e3136362e3131312e302f32342d3234203d3e203134363138.roa (hash: dHVT1pPpYfkat8LYG0fIQg445W2VxpF/m4eXlcGf8/Q=) 6: 35382e36352e3234302e302f32312d3234203d3e203234353335.roa (hash: rPiRcVboc3keI3JDFzeJMujOJliCIhrAj1H/kJF3N9o=) 7: 3131352e3136362e3131312e302f32342d3234203d3e20333936393832.roa (hash: wgtqwaW/q6/6iiFZEkr1mrOJmIiiA3/QZmD2Fiv1Qhg=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/2dd47f56-ec53-42eb-9b8b-fa08f874d319/0/47B3FBF39D8DFE5BC5CFD2BED39F0FA152619097.crl rsync://repo-rpki.idnic.net/repo/2dd47f56-ec53-42eb-9b8b-fa08f874d319/0/47B3FBF39D8DFE5BC5CFD2BED39F0FA152619097.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/47B3FBF39D8DFE5BC5CFD2BED39F0FA152619097.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 27 Jan 2026 20:26:05 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 14:53:67:50:a8:32:87:58:0b:f4:18:af:44:cb:2e:da:1f:f7:15:73 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=47B3FBF39D8DFE5BC5CFD2BED39F0FA152619097 Validity Not Before: Jan 24 10:17:05 2026 GMT Not After : Jan 27 20:26:05 2026 GMT Subject: CN=A6DA7D33DA31E105CA9864DB07B6D9D539DFEBA7 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ce:db:47:1e:64:c2:27:2d:27:2f:91:e1:a1:10: db:9e:84:e8:3b:9b:87:9f:64:e7:37:55:ce:5d:2c: 72:bd:7b:a2:71:92:02:7a:b8:66:f1:88:bd:c3:4a: 73:07:5e:2c:ea:84:db:82:9f:2e:9c:27:69:73:fe: 17:0c:8d:29:a7:91:f0:8a:6f:8b:8c:ec:60:e9:6c: db:21:89:5b:50:00:5e:52:07:e4:29:34:44:eb:72: a4:7b:06:77:1f:f7:e1:04:73:2c:ba:b2:e2:c0:35: 7b:f4:c9:87:8b:f7:ea:c3:f5:83:73:99:42:23:b7: 59:b6:a9:93:c0:a2:8c:b9:e1:49:c5:0a:65:30:67: d2:c6:80:f0:2c:77:7d:df:3c:ea:e7:e8:6a:f8:a2: 62:70:96:5a:70:ae:7d:4f:f3:0f:2c:fc:fa:b7:1e: 10:83:3a:04:84:06:51:d7:4c:ef:da:99:63:48:03: 2d:9c:ea:f3:e0:90:7b:c5:2f:f7:59:ed:c8:e1:6c: d4:10:5c:60:fa:d5:75:47:dc:0c:8e:81:65:48:e0: 5f:b4:19:28:22:36:51:8f:7b:d1:67:a9:4e:2c:84: c9:b5:cb:69:54:af:e7:f7:ff:99:e7:32:4a:6d:ac: 00:59:62:e0:84:26:4b:4f:c1:bb:68:ea:be:00:fb: d6:e5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: A6:DA:7D:33:DA:31:E1:05:CA:98:64:DB:07:B6:D9:D5:39:DF:EB:A7 X509v3 Authority Key Identifier: keyid:47:B3:FB:F3:9D:8D:FE:5B:C5:CF:D2:BE:D3:9F:0F:A1:52:61:90:97 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/2dd47f56-ec53-42eb-9b8b-fa08f874d319/0/47B3FBF39D8DFE5BC5CFD2BED39F0FA152619097.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/47B3FBF39D8DFE5BC5CFD2BED39F0FA152619097.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/2dd47f56-ec53-42eb-9b8b-fa08f874d319/0/47B3FBF39D8DFE5BC5CFD2BED39F0FA152619097.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 16:17:50:be:11:eb:f7:a4:36:d6:1c:12:69:31:32:e1:61:a4: 62:11:81:e2:b4:82:f4:78:50:7f:02:0b:33:0b:56:62:c5:60: 56:0c:82:2e:9b:48:c6:ef:f2:73:3e:81:1b:31:b5:88:cd:29: c1:bd:6d:3d:b7:00:a1:dc:cc:6d:76:6e:09:bc:e9:83:2f:60: ea:e2:e2:af:19:fa:bb:7a:0e:1d:2a:f5:fb:8a:2a:c4:cb:24: 2e:9e:b6:f1:c1:03:c2:15:e7:b3:2e:36:b6:20:8f:34:f3:7e: e2:34:82:f4:21:bc:ec:2a:4a:f2:5f:7d:dc:58:c0:f8:c9:e6: b3:12:a6:9b:8a:cf:10:f6:8a:b1:98:01:b3:c6:d6:ab:aa:eb: 6e:19:07:68:a1:c6:d3:1c:5d:32:3b:a8:18:f0:49:b7:5a:7a: 9d:25:3f:ed:4d:f5:93:dd:1d:e8:19:1e:c5:fa:32:cc:94:8e: 46:8e:b0:f3:4e:a8:ec:65:fb:ca:ca:49:f4:24:88:67:fc:e6: 7b:5e:b7:23:a8:4c:9e:8c:a8:c6:c4:62:de:6c:5f:07:01:64: f9:b0:2e:87:c0:c2:bd:14:61:3d:fd:03:29:b5:3c:da:66:37: 26:71:93:ca:8d:c5:81:19:f7:cf:8c:05:e8:ea:7f:31:31:62: e4:8c:75:20 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUFFNnUKgyh1gL9BivRMsu2h/3FXMwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoNDdCM0ZCRjM5RDhERkU1QkM1Q0ZEMkJFRDM5RjBGQTE1 MjYxOTA5NzAeFw0yNjAxMjQxMDE3MDVaFw0yNjAxMjcyMDI2MDVaMDMxMTAvBgNV BAMTKEE2REE3RDMzREEzMUUxMDVDQTk4NjREQjA3QjZEOUQ1MzlERkVCQTcwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDO20ceZMInLScvkeGhENuehOg7 m4efZOc3Vc5dLHK9e6JxkgJ6uGbxiL3DSnMHXizqhNuCny6cJ2lz/hcMjSmnkfCK b4uM7GDpbNshiVtQAF5SB+QpNETrcqR7Bncf9+EEcyy6suLANXv0yYeL9+rD9YNz mUIjt1m2qZPAooy54UnFCmUwZ9LGgPAsd33fPOrn6Gr4omJwllpwrn1P8w8s/Pq3 HhCDOgSEBlHXTO/amWNIAy2c6vPgkHvFL/dZ7cjhbNQQXGD61XVH3AyOgWVI4F+0 GSgiNlGPe9FnqU4shMm1y2lUr+f3/5nnMkptrABZYuCEJktPwbto6r4A+9blAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUptp9M9ox4QXKmGTbB7bZ1Tnf66cwHwYDVR0j BBgwFoAUR7P7852N/lvFz9K+058PoVJhkJcwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby8y ZGQ0N2Y1Ni1lYzUzLTQyZWItOWI4Yi1mYTA4Zjg3NGQzMTkvMC80N0IzRkJGMzlE OERGRTVCQzVDRkQyQkVEMzlGMEZBMTUyNjE5MDk3LmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvNDdCM0ZCRjM5RDhERkU1QkM1Q0ZEMkJFRDM5RjBGQTE1MjYx OTA5Ny5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vMmRkNDdmNTYtZWM1My00MmViLTli OGItZmEwOGY4NzRkMzE5LzAvNDdCM0ZCRjM5RDhERkU1QkM1Q0ZEMkJFRDM5RjBG QTE1MjYxOTA5Ny5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBABYXUL4R6/ekNtYcEmkxMuFhpGIRgeK0gvR4 UH8CCzMLVmLFYFYMgi6bSMbv8nM+gRsxtYjNKcG9bT23AKHczG12bgm86YMvYOri 4q8Z+rt6Dh0q9fuKKsTLJC6etvHBA8IV57MuNrYgjzTzfuI0gvQhvOwqSvJffdxY wPjJ5rMSppuKzxD2irGYAbPG1quq624ZB2ihxtMcXTI7qBjwSbdaep0lP+1N9ZPd HegZHsX6MsyUjkaOsPNOqOxl+8rKSfQkiGf85ntetyOoTJ6MqMbEYt5sXwcBZPmw LofAwr0UYT39Aym1PNpmNyZxk8qNxYEZ98+MBejqfzExYuSMdSA= -----END CERTIFICATE-----Generated at Sun Jan 25 18:34:27 2026 by rpki-client