This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf repo-rpki.idnic.net/repo/af5fa54d-248e-423c-9e49-d6e6bfbbf78b/0/47C7E54A67164AFF95399B44CF7AFF364CD0476C.mft File: 47C7E54A67164AFF95399B44CF7AFF364CD0476C.mft (raw, json) Hash identifier: FPYD2g+a0Kjee636cE+8KnD0x8+W2Hlye5pnk41Y91A= Subject key identifier: 65:AD:5A:1D:74:E1:6C:70:16:33:5D:BD:75:E4:EC:A7:10:C3:F3:48 Authority key identifier: 47:C7:E5:4A:67:16:4A:FF:95:39:9B:44:CF:7A:FF:36:4C:D0:47:6C Certificate issuer: /CN=47C7E54A67164AFF95399B44CF7AFF364CD0476C Certificate serial: 307AF13A5CFF5FC7DE5A767AA4E3383860FC7978 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/47C7E54A67164AFF95399B44CF7AFF364CD0476C.cer Subject info access: rsync://repo-rpki.idnic.net/repo/af5fa54d-248e-423c-9e49-d6e6bfbbf78b/0/47C7E54A67164AFF95399B44CF7AFF364CD0476C.mft Manifest number: 020C Signing time: Sat 06 Dec 2025 17:50:57 +0000 Manifest this update: Sat 06 Dec 2025 17:45:57 +0000 Manifest next update: Tue 09 Dec 2025 23:20:57 +0000 Files and hashes: 1: 3130332e3139312e3136352e302f32342d3234203d3e20313439393235.roa (hash: YpgQnQU5lvkeRKFK74g+rncTHe8QCPlhwaAIMSjOHQI=) 2: 47C7E54A67164AFF95399B44CF7AFF364CD0476C.crl (hash: jHVYVDJMEm8cOD28XX2uvQzzs/cRINz4oWQ1JPuVnxU=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/af5fa54d-248e-423c-9e49-d6e6bfbbf78b/0/47C7E54A67164AFF95399B44CF7AFF364CD0476C.crl rsync://repo-rpki.idnic.net/repo/af5fa54d-248e-423c-9e49-d6e6bfbbf78b/0/47C7E54A67164AFF95399B44CF7AFF364CD0476C.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/47C7E54A67164AFF95399B44CF7AFF364CD0476C.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 09 Dec 2025 15:57:52 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 30:7a:f1:3a:5c:ff:5f:c7:de:5a:76:7a:a4:e3:38:38:60:fc:79:78 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=47C7E54A67164AFF95399B44CF7AFF364CD0476C Validity Not Before: Dec 6 17:45:57 2025 GMT Not After : Dec 9 23:20:57 2025 GMT Subject: CN=65AD5A1D74E16C7016335DBD75E4ECA710C3F348 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e7:85:e3:3b:7a:a5:18:6d:6b:ae:e8:18:f6:5a: b1:71:33:f6:f9:a4:f3:a8:30:30:90:1d:24:71:39: 46:ec:07:09:53:0a:a2:2d:9d:e8:72:d1:bb:57:cb: 13:c1:b9:2a:83:cc:54:45:42:b5:d3:a2:54:15:e5: cb:90:64:e8:7f:4b:1a:0b:d2:56:9e:cf:0a:b0:35: 93:6c:71:e6:5f:39:ee:2c:9b:16:61:7b:40:a0:c3: 32:0c:1d:cf:f2:c2:15:81:15:f6:ac:59:4c:aa:45: b0:e8:77:f9:7f:16:87:e7:d5:2c:b2:f7:0d:2b:09: 52:79:da:b8:84:83:f1:c4:85:1e:8e:ae:22:29:e3: cb:3c:af:3a:52:20:2f:a7:32:c2:96:ec:14:4d:85: 92:9f:a2:e4:ea:d3:d1:d4:48:18:b2:ca:42:3c:53: 04:2f:86:8c:e1:36:62:de:87:25:bd:b8:ca:2d:46: 71:99:fd:6c:0d:42:56:8c:d4:c5:0d:0c:53:ca:1b: 51:88:58:a2:53:9f:6f:56:d3:1f:9d:e2:cc:6a:80: 59:6a:cc:64:0b:9d:0c:aa:63:9c:d6:f7:13:ed:f1: 52:b5:70:10:0b:23:bf:63:d8:5d:e2:13:a2:78:05: 73:bd:78:54:79:1a:14:e2:0a:51:26:50:2b:71:a8: dc:a7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 65:AD:5A:1D:74:E1:6C:70:16:33:5D:BD:75:E4:EC:A7:10:C3:F3:48 X509v3 Authority Key Identifier: keyid:47:C7:E5:4A:67:16:4A:FF:95:39:9B:44:CF:7A:FF:36:4C:D0:47:6C X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/af5fa54d-248e-423c-9e49-d6e6bfbbf78b/0/47C7E54A67164AFF95399B44CF7AFF364CD0476C.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/47C7E54A67164AFF95399B44CF7AFF364CD0476C.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/af5fa54d-248e-423c-9e49-d6e6bfbbf78b/0/47C7E54A67164AFF95399B44CF7AFF364CD0476C.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption a1:94:e2:e6:dd:43:a7:96:ac:09:67:54:f2:a7:7c:4f:d0:ea: 3f:38:25:f7:22:8b:57:1f:f4:8e:62:b5:84:25:89:ae:b2:34: 5a:9b:a8:74:a0:4c:c6:b5:73:63:18:9b:5f:39:05:10:31:06: 5b:6b:44:c6:06:f6:0b:44:c4:04:09:12:f4:19:a5:7a:ff:31: 2c:24:a8:17:c9:e2:9e:bf:37:78:38:4a:48:1c:70:fb:63:4f: ff:34:7d:87:e8:f5:2e:f5:45:e5:99:52:fe:cd:4b:df:4d:bc: fe:93:42:db:03:f1:f7:63:bd:99:54:fe:ba:f6:33:79:fc:b2: e5:18:80:0e:67:57:ba:d7:ae:c3:02:8e:94:6e:b7:73:3d:53: ed:96:f2:df:2e:8d:f0:b8:40:fa:ec:0d:05:d5:ba:ed:f0:ee: 6c:f0:28:2b:cc:bb:1c:3f:97:35:86:fc:95:33:58:3d:91:fb: 5a:88:e8:5f:8f:02:a5:ee:ee:af:59:4d:d9:4e:26:ca:c5:f0: 08:c1:e6:84:96:49:c0:0e:3f:8e:66:8e:b0:35:8d:a3:69:99: d3:c0:3c:22:53:1b:f2:67:ff:a5:67:2b:42:39:5a:5c:f5:95: 26:d4:da:4d:6f:83:c4:6f:e7:f7:47:db:52:8b:c7:13:86:69: 34:1f:2f:65 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUMHrxOlz/X8feWnZ6pOM4OGD8eXgwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoNDdDN0U1NEE2NzE2NEFGRjk1Mzk5QjQ0Q0Y3QUZGMzY0 Q0QwNDc2QzAeFw0yNTEyMDYxNzQ1NTdaFw0yNTEyMDkyMzIwNTdaMDMxMTAvBgNV BAMTKDY1QUQ1QTFENzRFMTZDNzAxNjMzNURCRDc1RTRFQ0E3MTBDM0YzNDgwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDnheM7eqUYbWuu6Bj2WrFxM/b5 pPOoMDCQHSRxOUbsBwlTCqItnehy0btXyxPBuSqDzFRFQrXTolQV5cuQZOh/SxoL 0laezwqwNZNsceZfOe4smxZhe0CgwzIMHc/ywhWBFfasWUyqRbDod/l/Fofn1Syy 9w0rCVJ52riEg/HEhR6OriIp48s8rzpSIC+nMsKW7BRNhZKfouTq09HUSBiyykI8 UwQvhozhNmLehyW9uMotRnGZ/WwNQlaM1MUNDFPKG1GIWKJTn29W0x+d4sxqgFlq zGQLnQyqY5zW9xPt8VK1cBALI79j2F3iE6J4BXO9eFR5GhTiClEmUCtxqNynAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUZa1aHXThbHAWM129deTspxDD80gwHwYDVR0j BBgwFoAUR8flSmcWSv+VOZtEz3r/NkzQR2wwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby9h ZjVmYTU0ZC0yNDhlLTQyM2MtOWU0OS1kNmU2YmZiYmY3OGIvMC80N0M3RTU0QTY3 MTY0QUZGOTUzOTlCNDRDRjdBRkYzNjRDRDA0NzZDLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvNDdDN0U1NEE2NzE2NEFGRjk1Mzk5QjQ0Q0Y3QUZGMzY0Q0Qw NDc2Qy5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vYWY1ZmE1NGQtMjQ4ZS00MjNjLTll NDktZDZlNmJmYmJmNzhiLzAvNDdDN0U1NEE2NzE2NEFGRjk1Mzk5QjQ0Q0Y3QUZG MzY0Q0QwNDc2Qy5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAKGU4ubdQ6eWrAlnVPKnfE/Q6j84Jfcii1cf 9I5itYQlia6yNFqbqHSgTMa1c2MYm185BRAxBltrRMYG9gtExAQJEvQZpXr/MSwk qBfJ4p6/N3g4SkgccPtjT/80fYfo9S71ReWZUv7NS99NvP6TQtsD8fdjvZlU/rr2 M3n8suUYgA5nV7rXrsMCjpRut3M9U+2W8t8ujfC4QPrsDQXVuu3w7mzwKCvMuxw/ lzWG/JUzWD2R+1qI6F+PAqXu7q9ZTdlOJsrF8AjB5oSWScAOP45mjrA1jaNpmdPA PCJTG/Jn/6VnK0I5Wlz1lSbU2k1vg8Rv5/dH21KLxxOGaTQfL2U= -----END CERTIFICATE-----Generated at Sat Dec 6 23:51:06 2025 by rpki-client