This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf repo-rpki.idnic.net/repo/c4956505-d6b3-43dc-9070-d4dbdb7cf963/0/47CBAD1A648715C5E867F1A2ED3558688608EE19.mft
File:                     47CBAD1A648715C5E867F1A2ED3558688608EE19.mft (raw, json)
Hash identifier:          DZLn9dkj4njI+3TmDXG1NUNzu4iLEjxVLSXI/Aav/3M=
Subject key identifier:   14:5D:54:07:C8:53:19:22:D8:29:5C:A1:4D:01:87:99:C6:2E:8C:43
Authority key identifier: 47:CB:AD:1A:64:87:15:C5:E8:67:F1:A2:ED:35:58:68:86:08:EE:19
Certificate issuer:       /CN=47CBAD1A648715C5E867F1A2ED3558688608EE19
Certificate serial:       172B960533C272F08E9E5BAF190883ECED9E6860
Authority info access:    rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/47CBAD1A648715C5E867F1A2ED3558688608EE19.cer
Subject info access:      rsync://repo-rpki.idnic.net/repo/c4956505-d6b3-43dc-9070-d4dbdb7cf963/0/47CBAD1A648715C5E867F1A2ED3558688608EE19.mft
Manifest number:          01A4
Signing time:             Fri 23 Jan 2026 17:41:13 +0000
Manifest this update:     Fri 23 Jan 2026 17:36:13 +0000
Manifest next update:     Tue 27 Jan 2026 04:28:13 +0000
Files and hashes:         1: 323430363a343634303a3a2f33322d3332203d3e20313430343637.roa (hash: +ck2E10dFd5/OEf+e40wX7Ntpp2HW/ZWwaXbGUuqd1Q=)
                          2: 3130332e3233352e36352e302f32342d3234203d3e20313430343637.roa (hash: zg3C7UqiFNjk6v4cmaqyG4vvOgQ3amedsyfg+VEOO70=)
                          3: 47CBAD1A648715C5E867F1A2ED3558688608EE19.crl (hash: y2N/IFokfm2mp/quGEtuh8iUVNVuY0qyDN8Vn/5vwg8=)
                          4: 3130332e3135332e3135302e302f32342d3234203d3e20313430343637.roa (hash: 1a16GMwOcOCsjYtXlZLoq81/WntEbXylQSYsmM31kuc=)
Validation:               OK
Signature path:           rsync://repo-rpki.idnic.net/repo/c4956505-d6b3-43dc-9070-d4dbdb7cf963/0/47CBAD1A648715C5E867F1A2ED3558688608EE19.crl
                          rsync://repo-rpki.idnic.net/repo/c4956505-d6b3-43dc-9070-d4dbdb7cf963/0/47CBAD1A648715C5E867F1A2ED3558688608EE19.mft
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/47CBAD1A648715C5E867F1A2ED3558688608EE19.cer
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Tue 27 Jan 2026 04:28:13 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            17:2b:96:05:33:c2:72:f0:8e:9e:5b:af:19:08:83:ec:ed:9e:68:60
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=47CBAD1A648715C5E867F1A2ED3558688608EE19
        Validity
            Not Before: Jan 23 17:36:13 2026 GMT
            Not After : Jan 27 04:28:13 2026 GMT
        Subject: CN=145D5407C8531922D8295CA14D018799C62E8C43
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d1:2d:9b:6c:d1:59:15:2d:a7:89:c3:dc:22:e0:
                    90:c7:cc:c2:13:6a:52:42:93:34:f7:d6:78:99:dc:
                    1a:e0:a2:c3:e9:04:26:e4:c9:49:8d:23:3e:80:75:
                    2b:9b:70:b0:2d:43:3d:b4:56:e4:28:f4:67:df:26:
                    c5:40:44:70:a2:64:dc:e9:b0:87:74:e7:9d:6f:df:
                    64:e0:b6:44:58:6a:90:96:7b:81:78:6e:b8:1f:fc:
                    2b:32:dd:e9:5a:42:97:d8:fd:af:cc:9b:21:98:0c:
                    01:6a:ad:3f:58:76:06:5d:fe:a1:7b:e6:bc:fd:55:
                    34:62:5c:a0:18:87:ef:ee:ca:f3:15:6b:26:64:fa:
                    d8:48:cc:9f:8a:73:70:49:bf:04:69:4b:d4:da:1c:
                    f1:84:e8:9f:09:df:ca:0b:71:27:ae:52:7e:cd:07:
                    33:3a:01:af:77:11:63:53:22:f8:10:d9:96:ae:4a:
                    16:74:5e:bb:d5:f1:58:f6:f6:17:5e:07:9e:a1:a2:
                    f3:a7:5f:87:35:4f:82:bd:63:da:16:7e:ae:24:e0:
                    07:ae:7f:aa:18:6d:ab:49:e6:15:f2:42:9f:27:0d:
                    ea:ca:e6:57:a6:bd:42:e4:22:f8:49:cd:56:3f:90:
                    96:2e:15:95:ac:32:36:34:82:d8:81:c5:16:39:6c:
                    c6:4b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                14:5D:54:07:C8:53:19:22:D8:29:5C:A1:4D:01:87:99:C6:2E:8C:43
            X509v3 Authority Key Identifier:
                keyid:47:CB:AD:1A:64:87:15:C5:E8:67:F1:A2:ED:35:58:68:86:08:EE:19

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repo-rpki.idnic.net/repo/c4956505-d6b3-43dc-9070-d4dbdb7cf963/0/47CBAD1A648715C5E867F1A2ED3558688608EE19.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/47CBAD1A648715C5E867F1A2ED3558688608EE19.cer

            Subject Information Access:
                Signed Object - URI:rsync://repo-rpki.idnic.net/repo/c4956505-d6b3-43dc-9070-d4dbdb7cf963/0/47CBAD1A648715C5E867F1A2ED3558688608EE19.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         23:0a:a2:ae:a8:b6:d6:55:1a:30:02:3f:8b:53:81:4d:09:bc:
         a6:49:d8:7d:66:2a:a2:a5:ce:6d:8b:5a:5a:4a:86:59:aa:29:
         7d:21:bd:9d:05:87:d0:46:ee:81:92:47:a5:20:86:39:a3:f9:
         3c:86:8c:04:ba:cc:1c:f4:57:13:06:2a:84:41:5b:e5:3e:f0:
         8a:f6:9a:d7:2a:4f:d7:a3:99:c3:6b:5e:6c:7f:40:49:a5:a1:
         b8:c5:ef:40:f9:24:21:ba:20:71:06:48:db:31:04:a3:1a:69:
         93:d4:b5:33:b6:e2:ad:c2:65:ed:23:b4:0c:0f:a2:54:fa:85:
         c3:d4:45:97:d6:b3:fc:a8:68:0a:8d:fb:00:46:e2:aa:fa:8a:
         fe:52:94:4b:2a:d0:d9:e6:38:3e:c9:80:fa:b8:ec:c6:54:96:
         6e:51:64:d4:16:83:17:c9:e3:d5:40:55:5a:0f:d8:e6:92:0f:
         09:17:78:52:54:b9:b5:0a:49:8e:de:43:54:70:f9:a5:e7:8c:
         c1:7e:83:cd:da:09:67:b9:98:9b:3b:41:bf:af:69:97:5b:34:
         c6:8c:08:93:60:68:05:3e:f1:a2:f6:d4:9d:e0:ad:9d:f9:6d:
         e5:1a:b2:f9:53:1b:43:bf:81:3e:aa:38:5b:e2:54:af:bd:f8:
         68:ac:47:ab
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jan 25 18:50:06 2026 by rpki-client