This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf repo-rpki.idnic.net/repo/4f61f04d-18e7-42ff-ae82-d56554f9264c/0/47C87696529FAF404AF0E8681AAFA8F224187D59.mft File: 47C87696529FAF404AF0E8681AAFA8F224187D59.mft (raw, json) Hash identifier: VLzvSWTfCq67w4S/ZCHFLwiHutzNW9S6WWr2niRDhnE= Subject key identifier: E8:A1:2B:4A:B6:27:FC:56:44:40:A1:64:D3:80:B2:6B:F8:70:F5:50 Authority key identifier: 47:C8:76:96:52:9F:AF:40:4A:F0:E8:68:1A:AF:A8:F2:24:18:7D:59 Certificate issuer: /CN=47C87696529FAF404AF0E8681AAFA8F224187D59 Certificate serial: 50A4790BD180B5A13FBE28BA91CEAC1F17EFAC60 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/47C87696529FAF404AF0E8681AAFA8F224187D59.cer Subject info access: rsync://repo-rpki.idnic.net/repo/4f61f04d-18e7-42ff-ae82-d56554f9264c/0/47C87696529FAF404AF0E8681AAFA8F224187D59.mft Manifest number: 04FB Signing time: Sat 06 Dec 2025 17:11:07 +0000 Manifest this update: Sat 06 Dec 2025 17:06:07 +0000 Manifest next update: Tue 09 Dec 2025 19:51:07 +0000 Files and hashes: 1: 47C87696529FAF404AF0E8681AAFA8F224187D59.crl (hash: KEeA8qwBjXtTwkjL3g72Yfx5AEEybbqEpFzSzqr12P4=) 2: 3130332e3133362e3137302e302f32332d3233203d3e203538333639.roa (hash: Z0Nbz1XibnxNyKBNr2zQqXw+MKf+eHjiJCZdkBIGrIo=) 3: 3130332e3133362e3137312e302f32342d3234203d3e203538333639.roa (hash: fPxnb7CxS8XbJvCYQXehN0lgrSSBnAAiXKdKbHXXpFg=) 4: 3130332e3133362e3137302e302f32342d3234203d3e203538333639.roa (hash: JR9pnbueKrjvNp5CfL5jMHGleDRr0PreIte+IDzNXSA=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/4f61f04d-18e7-42ff-ae82-d56554f9264c/0/47C87696529FAF404AF0E8681AAFA8F224187D59.crl rsync://repo-rpki.idnic.net/repo/4f61f04d-18e7-42ff-ae82-d56554f9264c/0/47C87696529FAF404AF0E8681AAFA8F224187D59.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/47C87696529FAF404AF0E8681AAFA8F224187D59.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 09 Dec 2025 15:57:52 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 50:a4:79:0b:d1:80:b5:a1:3f:be:28:ba:91:ce:ac:1f:17:ef:ac:60 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=47C87696529FAF404AF0E8681AAFA8F224187D59 Validity Not Before: Dec 6 17:06:07 2025 GMT Not After : Dec 9 19:51:07 2025 GMT Subject: CN=E8A12B4AB627FC564440A164D380B26BF870F550 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b8:fa:c3:81:43:04:bf:f3:4f:0e:d0:22:bb:24: 45:ad:e6:50:84:f2:6d:0a:fd:5a:e6:41:24:68:77: 20:cc:ea:36:a6:ab:8e:73:8e:e4:50:b8:db:50:aa: ee:c6:3b:0e:55:15:ec:74:ef:67:29:0a:a7:ba:f8: 1a:8f:bb:a4:aa:d3:bb:31:37:39:a4:f1:f1:89:bc: a8:7f:33:58:37:5b:3b:f8:0e:83:64:53:a4:65:ef: 0e:4d:0e:f8:36:6b:3a:41:81:4f:2f:f6:ae:b9:54: 9e:fd:e6:a8:3d:ab:c3:83:44:16:da:b5:25:4d:f0: 41:dd:ba:91:4c:1e:4e:83:c0:b3:47:65:26:39:24: 38:fe:f6:2a:72:38:ee:e1:cd:04:32:ca:47:63:bb: e1:5f:c8:0a:76:ac:48:f7:ef:83:ff:89:e5:99:55: 9f:1f:92:53:33:33:10:be:d3:fd:4a:5d:13:59:ea: 27:cd:26:38:45:08:15:fc:0c:41:85:dd:93:0d:b8: cb:b5:45:d9:32:94:af:1a:71:9f:77:b2:57:64:ef: 1a:2c:26:d4:be:db:73:65:ec:4f:d8:50:f1:20:a7: 0a:34:94:38:fe:82:41:1a:ce:14:4c:2e:ac:dd:d1: 52:74:c4:0c:28:f0:fb:cd:eb:0f:54:9d:57:78:73: 1d:93 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: E8:A1:2B:4A:B6:27:FC:56:44:40:A1:64:D3:80:B2:6B:F8:70:F5:50 X509v3 Authority Key Identifier: keyid:47:C8:76:96:52:9F:AF:40:4A:F0:E8:68:1A:AF:A8:F2:24:18:7D:59 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/4f61f04d-18e7-42ff-ae82-d56554f9264c/0/47C87696529FAF404AF0E8681AAFA8F224187D59.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/47C87696529FAF404AF0E8681AAFA8F224187D59.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/4f61f04d-18e7-42ff-ae82-d56554f9264c/0/47C87696529FAF404AF0E8681AAFA8F224187D59.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 92:67:23:3c:16:bf:5b:54:68:bd:53:63:0b:7e:e3:84:4b:b7: fb:77:ff:84:6e:06:e3:5a:c7:8a:66:b1:71:5a:bf:99:91:db: 1a:d2:4c:5e:56:30:4d:43:24:52:b2:e4:6f:15:73:f5:b5:f6: 06:a5:c8:0c:fb:8a:2c:7e:3d:39:66:33:29:a4:d3:a8:ae:aa: 6f:40:81:cd:3a:09:6b:98:2f:5f:ea:d8:ae:b1:bb:4c:0f:51: 14:c9:db:7e:31:cb:37:28:be:6c:f2:fa:63:3d:b5:4f:2e:b5: b9:c6:1a:d6:e5:9c:78:cd:f8:c7:e1:7e:4d:7c:95:73:e5:f9: 66:06:c1:83:bd:dc:0d:d1:bb:4c:a0:34:dc:d2:0f:38:3b:89: 53:ac:9d:93:29:fd:66:53:d6:d7:74:cd:ea:28:70:e5:8f:76: f8:cd:79:81:64:80:c3:3e:ca:0c:db:d9:98:ea:5b:92:fc:8e: 20:44:38:95:58:1b:8f:07:83:08:73:67:48:be:48:28:a2:8d: 39:c3:09:69:e2:57:39:07:02:51:af:60:ed:bd:92:38:54:43: 12:76:ad:56:be:6a:16:7e:bb:4f:1c:00:4b:88:ef:08:fa:28: e2:a9:7f:ca:75:d7:94:6d:92:79:89:da:b8:4b:f8:36:55:19: 5c:df:7e:48 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUUKR5C9GAtaE/vii6kc6sHxfvrGAwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoNDdDODc2OTY1MjlGQUY0MDRBRjBFODY4MUFBRkE4RjIy NDE4N0Q1OTAeFw0yNTEyMDYxNzA2MDdaFw0yNTEyMDkxOTUxMDdaMDMxMTAvBgNV BAMTKEU4QTEyQjRBQjYyN0ZDNTY0NDQwQTE2NEQzODBCMjZCRjg3MEY1NTAwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC4+sOBQwS/808O0CK7JEWt5lCE 8m0K/VrmQSRodyDM6jamq45zjuRQuNtQqu7GOw5VFex072cpCqe6+BqPu6Sq07sx Nzmk8fGJvKh/M1g3Wzv4DoNkU6Rl7w5NDvg2azpBgU8v9q65VJ795qg9q8ODRBba tSVN8EHdupFMHk6DwLNHZSY5JDj+9ipyOO7hzQQyykdju+FfyAp2rEj374P/ieWZ VZ8fklMzMxC+0/1KXRNZ6ifNJjhFCBX8DEGF3ZMNuMu1RdkylK8acZ93sldk7xos JtS+23Nl7E/YUPEgpwo0lDj+gkEazhRMLqzd0VJ0xAwo8PvN6w9UnVd4cx2TAgMB AAGjggI8MIICODAdBgNVHQ4EFgQU6KErSrYn/FZEQKFk04Cya/hw9VAwHwYDVR0j BBgwFoAUR8h2llKfr0BK8OhoGq+o8iQYfVkwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby80 ZjYxZjA0ZC0xOGU3LTQyZmYtYWU4Mi1kNTY1NTRmOTI2NGMvMC80N0M4NzY5NjUy OUZBRjQwNEFGMEU4NjgxQUFGQThGMjI0MTg3RDU5LmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvNDdDODc2OTY1MjlGQUY0MDRBRjBFODY4MUFBRkE4RjIyNDE4 N0Q1OS5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vNGY2MWYwNGQtMThlNy00MmZmLWFl ODItZDU2NTU0ZjkyNjRjLzAvNDdDODc2OTY1MjlGQUY0MDRBRjBFODY4MUFBRkE4 RjIyNDE4N0Q1OS5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAJJnIzwWv1tUaL1TYwt+44RLt/t3/4RuBuNa x4pmsXFav5mR2xrSTF5WME1DJFKy5G8Vc/W19galyAz7iix+PTlmMymk06iuqm9A gc06CWuYL1/q2K6xu0wPURTJ234xyzcovmzy+mM9tU8utbnGGtblnHjN+Mfhfk18 lXPl+WYGwYO93A3Ru0ygNNzSDzg7iVOsnZMp/WZT1td0zeoocOWPdvjNeYFkgMM+ ygzb2ZjqW5L8jiBEOJVYG48HgwhzZ0i+SCiijTnDCWniVzkHAlGvYO29kjhUQxJ2 rVa+ahZ+u08cAEuI7wj6KOKpf8p115RtknmJ2rhL+DZVGVzffkg= -----END CERTIFICATE-----Generated at Sat Dec 6 23:50:19 2025 by rpki-client