This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf repo-rpki.idnic.net/repo/797b8f4a-3110-40b7-9032-0f02215a0b6a/0/C47E73E669156D8FB32AB80941C6E5A4EE07D37A.mft File: C47E73E669156D8FB32AB80941C6E5A4EE07D37A.mft (raw, json) Hash identifier: 6MajVeTzhzYBryC7yEaZe+Rlb7foeTDlYAwf7P0lbaY= Subject key identifier: 3E:53:F3:B1:0A:6F:C1:80:0F:AB:A7:13:0E:2A:34:8A:5C:F8:69:29 Authority key identifier: C4:7E:73:E6:69:15:6D:8F:B3:2A:B8:09:41:C6:E5:A4:EE:07:D3:7A Certificate issuer: /CN=C47E73E669156D8FB32AB80941C6E5A4EE07D37A Certificate serial: 07BC8D1A8639E7C579C6111E0BAAF08CDC39514E Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/C47E73E669156D8FB32AB80941C6E5A4EE07D37A.cer Subject info access: rsync://repo-rpki.idnic.net/repo/797b8f4a-3110-40b7-9032-0f02215a0b6a/0/C47E73E669156D8FB32AB80941C6E5A4EE07D37A.mft Manifest number: 04EB Signing time: Fri 05 Dec 2025 04:31:08 +0000 Manifest this update: Fri 05 Dec 2025 04:26:08 +0000 Manifest next update: Mon 08 Dec 2025 09:13:08 +0000 Files and hashes: 1: C47E73E669156D8FB32AB80941C6E5A4EE07D37A.crl (hash: xes+EG3XQu+XpZ61Uv/ff4MU7ho9tCKgI6WdIkm1bUM=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/797b8f4a-3110-40b7-9032-0f02215a0b6a/0/C47E73E669156D8FB32AB80941C6E5A4EE07D37A.crl rsync://repo-rpki.idnic.net/repo/797b8f4a-3110-40b7-9032-0f02215a0b6a/0/C47E73E669156D8FB32AB80941C6E5A4EE07D37A.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/C47E73E669156D8FB32AB80941C6E5A4EE07D37A.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 08 Dec 2025 09:13:08 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 07:bc:8d:1a:86:39:e7:c5:79:c6:11:1e:0b:aa:f0:8c:dc:39:51:4e Signature Algorithm: sha256WithRSAEncryption Issuer: CN=C47E73E669156D8FB32AB80941C6E5A4EE07D37A Validity Not Before: Dec 5 04:26:08 2025 GMT Not After : Dec 8 09:13:08 2025 GMT Subject: CN=3E53F3B10A6FC1800FABA7130E2A348A5CF86929 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c1:ed:2d:69:40:b3:db:4b:51:30:ec:61:ea:a1: f0:f8:6c:42:89:4c:cb:d6:6a:82:3f:6a:6d:53:9b: a9:e6:0d:ac:30:7a:19:a4:44:6f:5c:d9:fc:79:fd: 0f:14:8e:a8:31:1c:ae:1e:f2:da:4b:07:39:8d:81: 2c:89:8a:a1:45:92:ef:27:49:40:9e:02:c1:1a:0e: 78:fa:52:e6:f4:a0:ed:e8:13:18:7a:45:ef:92:ff: 53:4a:76:eb:2b:11:2f:c2:76:a5:48:47:a3:97:89: 23:92:f4:2d:f2:ca:cb:cf:dd:3b:c4:d8:9e:9e:1f: eb:69:53:f6:3a:0b:b5:a9:88:a4:0c:45:ff:1e:f3: a6:e9:ba:8d:c5:1f:2d:22:f4:cc:b3:ce:a5:6e:96: ac:79:3a:6c:b4:9b:8d:03:9b:0f:d8:0d:f0:57:cd: 30:07:8d:06:b9:aa:59:a0:76:85:6b:45:9f:4c:65: 01:93:45:cb:e8:aa:47:4d:bc:9b:a2:1f:0f:46:90: e0:4c:99:fd:3d:2b:8a:df:bb:c6:54:f8:35:f6:69: 3b:e2:82:f5:79:24:c9:d7:29:9e:94:b7:12:de:7a: 28:1b:c9:3a:d2:af:8e:32:6d:f1:94:8e:d9:f5:63: 6c:6e:3e:b2:e9:42:da:a4:49:5f:23:6f:77:c2:37: ff:65 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 3E:53:F3:B1:0A:6F:C1:80:0F:AB:A7:13:0E:2A:34:8A:5C:F8:69:29 X509v3 Authority Key Identifier: keyid:C4:7E:73:E6:69:15:6D:8F:B3:2A:B8:09:41:C6:E5:A4:EE:07:D3:7A X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/797b8f4a-3110-40b7-9032-0f02215a0b6a/0/C47E73E669156D8FB32AB80941C6E5A4EE07D37A.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/C47E73E669156D8FB32AB80941C6E5A4EE07D37A.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/797b8f4a-3110-40b7-9032-0f02215a0b6a/0/C47E73E669156D8FB32AB80941C6E5A4EE07D37A.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 7c:0e:52:68:10:fb:fe:95:df:61:c9:60:3c:d1:d6:a3:ec:02: 8f:cd:68:44:3b:41:38:ee:bd:52:a5:de:84:8b:8d:9f:e1:64: ad:c7:ab:19:da:c4:94:92:d2:73:10:96:7f:3b:29:01:1c:58: 6b:a5:57:d5:1d:33:e0:6f:cf:84:92:fa:de:af:f4:67:f2:6a: d7:e6:21:ac:ae:85:0c:6b:31:15:6c:f6:00:08:c5:b1:71:52: 4d:6d:f6:c4:7b:ca:56:d1:bc:94:ae:a4:27:88:b8:dd:89:b1: f6:3b:b1:de:bf:4d:0b:d3:c0:cb:ba:d3:26:67:48:4d:85:e6: 82:9a:e8:03:9c:8d:49:a9:b3:37:69:ae:54:d5:33:35:1c:4c: 40:18:ea:c6:92:f4:44:45:86:19:c7:a4:3a:05:cc:ef:90:ad: 60:e8:89:53:32:a9:f8:20:29:c8:27:de:10:0d:e8:88:a7:e1: 6e:76:32:e7:38:80:6e:00:26:b9:cb:d8:a2:f5:2c:46:b0:0c: af:9b:7d:31:b4:ca:7c:f3:ce:d5:85:20:e0:e2:c5:5a:90:29: 5c:18:51:b4:e7:d6:45:c2:53:6d:d0:06:05:fd:b4:9b:f2:7a: d3:5c:fd:ff:03:e4:4c:09:ed:8e:48:08:82:cd:3d:9d:d7:dd: f5:84:17:52 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUB7yNGoY558V5xhEeC6rwjNw5UU4wDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoQzQ3RTczRTY2OTE1NkQ4RkIzMkFCODA5NDFDNkU1QTRF RTA3RDM3QTAeFw0yNTEyMDUwNDI2MDhaFw0yNTEyMDgwOTEzMDhaMDMxMTAvBgNV BAMTKDNFNTNGM0IxMEE2RkMxODAwRkFCQTcxMzBFMkEzNDhBNUNGODY5MjkwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDB7S1pQLPbS1Ew7GHqofD4bEKJ TMvWaoI/am1Tm6nmDawwehmkRG9c2fx5/Q8UjqgxHK4e8tpLBzmNgSyJiqFFku8n SUCeAsEaDnj6Uub0oO3oExh6Re+S/1NKdusrES/CdqVIR6OXiSOS9C3yysvP3TvE 2J6eH+tpU/Y6C7WpiKQMRf8e86bpuo3FHy0i9MyzzqVulqx5Omy0m40Dmw/YDfBX zTAHjQa5qlmgdoVrRZ9MZQGTRcvoqkdNvJuiHw9GkOBMmf09K4rfu8ZU+DX2aTvi gvV5JMnXKZ6UtxLeeigbyTrSr44ybfGUjtn1Y2xuPrLpQtqkSV8jb3fCN/9lAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUPlPzsQpvwYAPq6cTDio0ilz4aSkwHwYDVR0j BBgwFoAUxH5z5mkVbY+zKrgJQcblpO4H03owDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby83 OTdiOGY0YS0zMTEwLTQwYjctOTAzMi0wZjAyMjE1YTBiNmEvMC9DNDdFNzNFNjY5 MTU2RDhGQjMyQUI4MDk0MUM2RTVBNEVFMDdEMzdBLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvQzQ3RTczRTY2OTE1NkQ4RkIzMkFCODA5NDFDNkU1QTRFRTA3 RDM3QS5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vNzk3YjhmNGEtMzExMC00MGI3LTkw MzItMGYwMjIxNWEwYjZhLzAvQzQ3RTczRTY2OTE1NkQ4RkIzMkFCODA5NDFDNkU1 QTRFRTA3RDM3QS5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAHwOUmgQ+/6V32HJYDzR1qPsAo/NaEQ7QTju vVKl3oSLjZ/hZK3HqxnaxJSS0nMQln87KQEcWGulV9UdM+Bvz4SS+t6v9Gfyatfm IayuhQxrMRVs9gAIxbFxUk1t9sR7ylbRvJSupCeIuN2JsfY7sd6/TQvTwMu60yZn SE2F5oKa6AOcjUmpszdprlTVMzUcTEAY6saS9ERFhhnHpDoFzO+QrWDoiVMyqfgg Kcgn3hAN6Iin4W52Muc4gG4AJrnL2KL1LEawDK+bfTG0ynzzztWFIODixVqQKVwY UbTn1kXCU23QBgX9tJvyetNc/f8D5EwJ7Y5ICILNPZ3X3fWEF1I= -----END CERTIFICATE-----Generated at Sun Dec 7 03:07:54 2025 by rpki-client