This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

$ rpki-client -vvf repo-rpki.idnic.net/repo/4f61f04d-18e7-42ff-ae82-d56554f9264c/0/47C87696529FAF404AF0E8681AAFA8F224187D59.mft
File: 47C87696529FAF404AF0E8681AAFA8F224187D59.mft (raw, json)
Hash identifier: pSY3aZDgZe2d7EGTXe7YnujRwYKn72xAVa0u/xcRaaY=
Subject key identifier: 6F:BB:B0:32:4A:7B:00:36:46:55:99:48:09:C0:16:95:B3:F5:CF:E2
Authority key identifier: 47:C8:76:96:52:9F:AF:40:4A:F0:E8:68:1A:AF:A8:F2:24:18:7D:59
Certificate issuer: /CN=47C87696529FAF404AF0E8681AAFA8F224187D59
Certificate serial: 3FFF3EB34CEE18E2097B1F7ACD5D3255E33E900B
Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/47C87696529FAF404AF0E8681AAFA8F224187D59.cer
Subject info access: rsync://repo-rpki.idnic.net/repo/4f61f04d-18e7-42ff-ae82-d56554f9264c/0/47C87696529FAF404AF0E8681AAFA8F224187D59.mft
Manifest number: 0511
Signing time: Sat 24 Jan 2026 16:01:09 +0000
Manifest this update: Sat 24 Jan 2026 15:56:09 +0000
Manifest next update: Tue 27 Jan 2026 19:55:09 +0000
Files and hashes: 1: 47C87696529FAF404AF0E8681AAFA8F224187D59.crl (hash: vfK7lSvSVAd+RyAGZeB02lfbskhiT5R4af7blvXd3Fs=)
2: 3130332e3133362e3137312e302f32342d3234203d3e203538333639.roa (hash: fPxnb7CxS8XbJvCYQXehN0lgrSSBnAAiXKdKbHXXpFg=)
3: 3130332e3133362e3137302e302f32342d3234203d3e203538333639.roa (hash: JR9pnbueKrjvNp5CfL5jMHGleDRr0PreIte+IDzNXSA=)
4: 3130332e3133362e3137302e302f32332d3233203d3e203538333639.roa (hash: Z0Nbz1XibnxNyKBNr2zQqXw+MKf+eHjiJCZdkBIGrIo=)
Validation: OK
Signature path: rsync://repo-rpki.idnic.net/repo/4f61f04d-18e7-42ff-ae82-d56554f9264c/0/47C87696529FAF404AF0E8681AAFA8F224187D59.crl
rsync://repo-rpki.idnic.net/repo/4f61f04d-18e7-42ff-ae82-d56554f9264c/0/47C87696529FAF404AF0E8681AAFA8F224187D59.mft
rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/47C87696529FAF404AF0E8681AAFA8F224187D59.cer
rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl
rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Tue 27 Jan 2026 19:55:09 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
3f:ff:3e:b3:4c:ee:18:e2:09:7b:1f:7a:cd:5d:32:55:e3:3e:90:0b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=47C87696529FAF404AF0E8681AAFA8F224187D59
Validity
Not Before: Jan 24 15:56:09 2026 GMT
Not After : Jan 27 19:55:09 2026 GMT
Subject: CN=6FBBB0324A7B00364655994809C01695B3F5CFE2
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c2:12:90:aa:e8:14:30:41:01:99:ba:e2:fd:32:
bd:3d:45:bb:fa:b9:60:10:ec:36:52:42:96:07:5e:
69:2d:ef:56:dd:3c:6b:4d:a5:01:d3:c1:00:1d:0d:
a5:8f:be:1c:98:43:01:7f:63:ec:46:06:ca:74:ba:
38:e9:9d:d8:b5:85:d5:f8:f1:92:e0:a4:82:65:c9:
d7:79:13:17:28:25:75:70:d9:7d:76:79:92:8d:7c:
ff:86:4b:79:a5:d4:fc:46:92:c6:c4:81:d8:10:0c:
0f:f3:e1:61:82:e9:19:81:40:bc:56:ce:7e:e1:8c:
e5:26:6d:cb:09:58:62:63:c7:9f:c7:01:19:e9:47:
32:02:2d:b5:72:b7:dd:bd:4f:be:59:13:9c:39:87:
d2:1e:f2:27:f3:15:99:b7:b4:58:ad:24:3c:2d:8c:
8a:15:13:61:52:38:cc:8a:5e:4c:0a:3e:21:5e:1d:
d3:ec:9e:e4:76:06:1d:0f:01:ef:20:2b:aa:c2:3c:
de:8d:e3:f8:e3:6c:65:a7:1a:02:20:fc:fd:80:34:
c8:f2:f3:49:54:b2:32:58:ec:ec:6d:3e:39:16:68:
ac:86:2e:3a:ff:3a:8a:a7:82:21:0b:23:a6:be:e5:
74:fe:1b:f6:fd:51:f3:a0:29:4a:9c:db:44:f8:62:
15:8f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
6F:BB:B0:32:4A:7B:00:36:46:55:99:48:09:C0:16:95:B3:F5:CF:E2
X509v3 Authority Key Identifier:
keyid:47:C8:76:96:52:9F:AF:40:4A:F0:E8:68:1A:AF:A8:F2:24:18:7D:59
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://repo-rpki.idnic.net/repo/4f61f04d-18e7-42ff-ae82-d56554f9264c/0/47C87696529FAF404AF0E8681AAFA8F224187D59.crl
Authority Information Access:
CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/47C87696529FAF404AF0E8681AAFA8F224187D59.cer
Subject Information Access:
Signed Object - URI:rsync://repo-rpki.idnic.net/repo/4f61f04d-18e7-42ff-ae82-d56554f9264c/0/47C87696529FAF404AF0E8681AAFA8F224187D59.mft
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
32:14:a0:dc:6a:d5:59:00:bf:8c:29:00:46:86:06:a9:10:cf:
c2:cd:a2:8d:b0:25:a3:06:57:e1:d4:a0:51:fc:70:02:15:9a:
38:bc:76:ce:35:f6:a3:12:90:3b:28:a6:9b:a2:cf:4d:a1:7b:
f2:a6:88:24:b1:49:cf:15:70:9b:ca:f3:e7:be:3f:06:58:98:
dc:07:6a:4e:c7:9b:a2:b3:fe:32:8a:31:d2:76:34:d8:d2:48:
1e:b7:2b:23:ab:90:31:df:ec:99:ea:a6:60:e3:ce:7e:e7:e5:
b9:3e:3b:e5:fd:62:4c:9c:43:9b:98:d8:3f:81:65:5a:e0:7a:
db:09:1f:a7:86:35:57:8c:e6:cd:dc:84:3a:d3:b8:c0:52:14:
a8:ee:f8:0d:b1:2b:57:bb:dd:cf:25:22:a6:84:3b:5e:d1:94:
3b:54:57:f0:39:ba:3c:13:d3:00:a3:1b:11:47:71:58:7b:89:
4d:3c:ad:3f:60:53:99:5e:0f:5d:8d:21:21:4a:db:74:47:51:
82:68:13:a6:b8:85:4e:fb:bf:c1:48:dd:85:62:aa:e0:e0:c9:
0d:ba:bb:4f:c8:0b:c9:f3:db:ce:86:3e:a0:59:81:ac:65:3e:
7f:52:a6:41:25:58:ac:5e:c1:ff:df:c2:cc:55:66:44:7e:b1:
a1:da:46:cb
-----BEGIN CERTIFICATE-----
MIIFMjCCBBqgAwIBAgIUP/8+s0zuGOIJex96zV0yVeM+kAswDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoNDdDODc2OTY1MjlGQUY0MDRBRjBFODY4MUFBRkE4RjIy
NDE4N0Q1OTAeFw0yNjAxMjQxNTU2MDlaFw0yNjAxMjcxOTU1MDlaMDMxMTAvBgNV
BAMTKDZGQkJCMDMyNEE3QjAwMzY0NjU1OTk0ODA5QzAxNjk1QjNGNUNGRTIwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDCEpCq6BQwQQGZuuL9Mr09Rbv6
uWAQ7DZSQpYHXmkt71bdPGtNpQHTwQAdDaWPvhyYQwF/Y+xGBsp0ujjpndi1hdX4
8ZLgpIJlydd5ExcoJXVw2X12eZKNfP+GS3ml1PxGksbEgdgQDA/z4WGC6RmBQLxW
zn7hjOUmbcsJWGJjx5/HARnpRzICLbVyt929T75ZE5w5h9Ie8ifzFZm3tFitJDwt
jIoVE2FSOMyKXkwKPiFeHdPsnuR2Bh0PAe8gK6rCPN6N4/jjbGWnGgIg/P2ANMjy
80lUsjJY7OxtPjkWaKyGLjr/OoqngiELI6a+5XT+G/b9UfOgKUqc20T4YhWPAgMB
AAGjggI8MIICODAdBgNVHQ4EFgQUb7uwMkp7ADZGVZlICcAWlbP1z+IwHwYDVR0j
BBgwFoAUR8h2llKfr0BK8OhoGq+o8iQYfVkwDgYDVR0PAQH/BAQDAgeAMIGFBgNV
HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby80
ZjYxZjA0ZC0xOGU3LTQyZmYtYWU4Mi1kNTY1NTRmOTI2NGMvMC80N0M4NzY5NjUy
OUZBRjQwNEFGMEU4NjgxQUFGQThGMjI0MTg3RDU5LmNybDB0BggrBgEFBQcBAQRo
MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv
L0lETklDLUlELzIvNDdDODc2OTY1MjlGQUY0MDRBRjBFODY4MUFBRkE4RjIyNDE4
N0Q1OS5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6
Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vNGY2MWYwNGQtMThlNy00MmZmLWFl
ODItZDU2NTU0ZjkyNjRjLzAvNDdDODc2OTY1MjlGQUY0MDRBRjBFODY4MUFBRkE4
RjIyNDE4N0Q1OS5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF
BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC
BQAwDQYJKoZIhvcNAQELBQADggEBADIUoNxq1VkAv4wpAEaGBqkQz8LNoo2wJaMG
V+HUoFH8cAIVmji8ds419qMSkDsoppuiz02he/KmiCSxSc8VcJvK8+e+PwZYmNwH
ak7Hm6Kz/jKKMdJ2NNjSSB63KyOrkDHf7JnqpmDjzn7n5bk+O+X9YkycQ5uY2D+B
ZVrgetsJH6eGNVeM5s3chDrTuMBSFKju+A2xK1e73c8lIqaEO17RlDtUV/A5ujwT
0wCjGxFHcVh7iU08rT9gU5leD12NISFK23RHUYJoE6a4hU77v8FI3YViquDgyQ26
u0/IC8nz286GPqBZgaxlPn9SpkElWKxewf/fwsxVZkR+saHaRss=
-----END CERTIFICATE-----
Generated at Sun Jan 25 18:37:05 2026 by rpki-client