This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf repo-rpki.idnic.net/repo/af5fa54d-248e-423c-9e49-d6e6bfbbf78b/0/47C7E54A67164AFF95399B44CF7AFF364CD0476C.mft File: 47C7E54A67164AFF95399B44CF7AFF364CD0476C.mft (raw, json) Hash identifier: QrS/Lw9jUaPWcK30kbZFXhYC80uXVnoC1BN5XKN+H/E= Subject key identifier: D3:70:3D:09:98:78:90:EA:1B:8D:F2:39:1B:AB:D5:86:81:07:8C:23 Authority key identifier: 47:C7:E5:4A:67:16:4A:FF:95:39:9B:44:CF:7A:FF:36:4C:D0:47:6C Certificate issuer: /CN=47C7E54A67164AFF95399B44CF7AFF364CD0476C Certificate serial: 77B31A53C6089D89E24D97BDC661FC2125FCEAA2 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/47C7E54A67164AFF95399B44CF7AFF364CD0476C.cer Subject info access: rsync://repo-rpki.idnic.net/repo/af5fa54d-248e-423c-9e49-d6e6bfbbf78b/0/47C7E54A67164AFF95399B44CF7AFF364CD0476C.mft Manifest number: 0222 Signing time: Sat 24 Jan 2026 00:11:01 +0000 Manifest this update: Sat 24 Jan 2026 00:06:01 +0000 Manifest next update: Tue 27 Jan 2026 03:04:01 +0000 Files and hashes: 1: 3130332e3139312e3136352e302f32342d3234203d3e20313439393235.roa (hash: YpgQnQU5lvkeRKFK74g+rncTHe8QCPlhwaAIMSjOHQI=) 2: 47C7E54A67164AFF95399B44CF7AFF364CD0476C.crl (hash: Oz/7EEuZRq9LLEbqcLjE/j94a+bW/MY6vEb9a6lAbsk=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/af5fa54d-248e-423c-9e49-d6e6bfbbf78b/0/47C7E54A67164AFF95399B44CF7AFF364CD0476C.crl rsync://repo-rpki.idnic.net/repo/af5fa54d-248e-423c-9e49-d6e6bfbbf78b/0/47C7E54A67164AFF95399B44CF7AFF364CD0476C.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/47C7E54A67164AFF95399B44CF7AFF364CD0476C.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 27 Jan 2026 03:04:01 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 77:b3:1a:53:c6:08:9d:89:e2:4d:97:bd:c6:61:fc:21:25:fc:ea:a2 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=47C7E54A67164AFF95399B44CF7AFF364CD0476C Validity Not Before: Jan 24 00:06:01 2026 GMT Not After : Jan 27 03:04:01 2026 GMT Subject: CN=D3703D09987890EA1B8DF2391BABD58681078C23 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:db:b9:77:b3:d2:9b:e4:bc:39:c5:2d:28:ec:3c: a7:d2:d8:c6:85:44:aa:e4:21:7b:f9:10:f2:e9:6b: 0f:e3:43:4d:e8:70:6e:ca:d5:0d:5e:64:67:d5:04: 4e:20:61:53:df:5b:4c:bb:aa:35:33:93:4c:11:ba: 6b:72:b7:c1:9a:65:fa:2d:d0:b2:a0:5b:db:98:a4: 09:15:67:be:7c:eb:21:42:0c:fb:85:18:7f:cf:8c: 3a:49:c0:ba:fe:aa:05:5e:fb:87:84:c8:23:4b:27: 6c:a6:ff:b1:78:2a:ba:0e:79:43:a7:4a:d6:8b:51: 2b:b8:ca:01:0a:fd:8b:de:40:22:04:0f:c2:d5:94: 8d:58:2a:13:5a:eb:f9:c1:b9:89:5b:11:25:0b:f6: dc:ae:5e:7a:8b:7c:e2:28:45:78:f6:51:38:86:48: 7e:3c:53:c7:8c:3c:7f:6a:42:ff:a5:5b:31:70:4e: 87:7b:89:04:7d:45:32:b2:b6:ad:37:b7:2f:88:3d: 23:bc:f5:ce:7d:75:92:35:ee:b3:0d:47:3d:5a:f0: e3:1f:5b:1b:3f:92:67:c7:ed:55:6e:5d:ff:ae:cf: 00:d9:fc:e7:bc:1d:2b:2d:58:8f:a0:6c:e1:71:00: fa:cf:c7:12:dd:88:16:11:18:65:3d:d3:a0:3c:89: 97:97 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D3:70:3D:09:98:78:90:EA:1B:8D:F2:39:1B:AB:D5:86:81:07:8C:23 X509v3 Authority Key Identifier: keyid:47:C7:E5:4A:67:16:4A:FF:95:39:9B:44:CF:7A:FF:36:4C:D0:47:6C X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/af5fa54d-248e-423c-9e49-d6e6bfbbf78b/0/47C7E54A67164AFF95399B44CF7AFF364CD0476C.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/47C7E54A67164AFF95399B44CF7AFF364CD0476C.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/af5fa54d-248e-423c-9e49-d6e6bfbbf78b/0/47C7E54A67164AFF95399B44CF7AFF364CD0476C.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 8d:75:62:a6:ec:29:a7:1b:79:d6:97:3f:32:56:fa:d6:7f:19: 2a:11:27:27:0c:6f:ab:f0:65:d3:80:24:43:c6:16:19:c0:09: 34:1d:c2:3d:5e:4f:d0:6c:55:a0:ab:b7:93:9e:0d:c2:57:c9: ff:ab:1a:68:dd:e1:7e:24:ca:cd:29:37:af:37:03:10:42:8c: d7:79:7e:14:81:14:9a:03:ab:9d:cb:10:84:26:01:8f:8c:d9: 0a:1e:e6:9e:31:ff:b6:ca:d7:52:d3:09:43:30:eb:a3:1f:7c: 20:9d:dd:e9:5f:37:a6:51:0e:8b:25:d0:dc:72:42:d7:5c:05: 67:64:f8:18:84:9f:05:4a:0c:28:02:cb:1d:34:29:0c:1f:3e: ce:e4:7c:81:67:19:bc:05:7e:91:c3:75:1c:49:4e:df:28:02: 39:80:95:c6:b3:1b:14:e6:2f:6c:41:6a:8a:a8:d0:78:3a:5b: 77:f3:72:33:a8:e3:94:af:12:61:f4:5d:d0:24:a1:94:5a:f1: fb:ac:fd:19:6f:95:e4:4c:b7:95:00:b7:67:bf:71:d9:16:e6: 4b:5a:23:07:3e:dc:42:a1:61:af:71:cb:d2:e4:94:b4:39:b0: 9d:7d:8e:58:08:90:42:d7:c8:06:c2:00:b0:18:f6:02:c0:bb: 91:97:9e:68 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUd7MaU8YInYniTZe9xmH8ISX86qIwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoNDdDN0U1NEE2NzE2NEFGRjk1Mzk5QjQ0Q0Y3QUZGMzY0 Q0QwNDc2QzAeFw0yNjAxMjQwMDA2MDFaFw0yNjAxMjcwMzA0MDFaMDMxMTAvBgNV BAMTKEQzNzAzRDA5OTg3ODkwRUExQjhERjIzOTFCQUJENTg2ODEwNzhDMjMwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDbuXez0pvkvDnFLSjsPKfS2MaF RKrkIXv5EPLpaw/jQ03ocG7K1Q1eZGfVBE4gYVPfW0y7qjUzk0wRumtyt8GaZfot 0LKgW9uYpAkVZ7586yFCDPuFGH/PjDpJwLr+qgVe+4eEyCNLJ2ym/7F4KroOeUOn StaLUSu4ygEK/YveQCIED8LVlI1YKhNa6/nBuYlbESUL9tyuXnqLfOIoRXj2UTiG SH48U8eMPH9qQv+lWzFwTod7iQR9RTKytq03ty+IPSO89c59dZI17rMNRz1a8OMf Wxs/kmfH7VVuXf+uzwDZ/Oe8HSstWI+gbOFxAPrPxxLdiBYRGGU906A8iZeXAgMB AAGjggI8MIICODAdBgNVHQ4EFgQU03A9CZh4kOobjfI5G6vVhoEHjCMwHwYDVR0j BBgwFoAUR8flSmcWSv+VOZtEz3r/NkzQR2wwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby9h ZjVmYTU0ZC0yNDhlLTQyM2MtOWU0OS1kNmU2YmZiYmY3OGIvMC80N0M3RTU0QTY3 MTY0QUZGOTUzOTlCNDRDRjdBRkYzNjRDRDA0NzZDLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvNDdDN0U1NEE2NzE2NEFGRjk1Mzk5QjQ0Q0Y3QUZGMzY0Q0Qw NDc2Qy5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vYWY1ZmE1NGQtMjQ4ZS00MjNjLTll NDktZDZlNmJmYmJmNzhiLzAvNDdDN0U1NEE2NzE2NEFGRjk1Mzk5QjQ0Q0Y3QUZG MzY0Q0QwNDc2Qy5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAI11YqbsKacbedaXPzJW+tZ/GSoRJycMb6vw ZdOAJEPGFhnACTQdwj1eT9BsVaCrt5OeDcJXyf+rGmjd4X4kys0pN683AxBCjNd5 fhSBFJoDq53LEIQmAY+M2Qoe5p4x/7bK11LTCUMw66MffCCd3elfN6ZRDosl0Nxy QtdcBWdk+BiEnwVKDCgCyx00KQwfPs7kfIFnGbwFfpHDdRxJTt8oAjmAlcazGxTm L2xBaoqo0Hg6W3fzcjOo45SvEmH0XdAkoZRa8fus/RlvleRMt5UAt2e/cdkW5kta Iwc+3EKhYa9xy9LklLQ5sJ19jlgIkELXyAbCALAY9gLAu5GXnmg= -----END CERTIFICATE-----Generated at Sun Jan 25 18:44:35 2026 by rpki-client