This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

$ rpki-client -vvf repo-rpki.idnic.net/repo/c4956505-d6b3-43dc-9070-d4dbdb7cf963/0/47CBAD1A648715C5E867F1A2ED3558688608EE19.mft
File: 47CBAD1A648715C5E867F1A2ED3558688608EE19.mft (raw, json)
Hash identifier: oQPJQxn3s2ZZQTe5I/lOyCNLah3P9qnuuQXX8xrD3No=
Subject key identifier: 41:8F:11:A3:E8:48:B9:A0:64:F7:77:B3:E0:2F:54:DA:3C:FD:B4:04
Authority key identifier: 47:CB:AD:1A:64:87:15:C5:E8:67:F1:A2:ED:35:58:68:86:08:EE:19
Certificate issuer: /CN=47CBAD1A648715C5E867F1A2ED3558688608EE19
Certificate serial: 0728A8F421672337657CB964F7F049B924F56D8E
Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/47CBAD1A648715C5E867F1A2ED3558688608EE19.cer
Subject info access: rsync://repo-rpki.idnic.net/repo/c4956505-d6b3-43dc-9070-d4dbdb7cf963/0/47CBAD1A648715C5E867F1A2ED3558688608EE19.mft
Manifest number: 018E
Signing time: Fri 05 Dec 2025 08:31:13 +0000
Manifest this update: Fri 05 Dec 2025 08:26:13 +0000
Manifest next update: Mon 08 Dec 2025 11:19:13 +0000
Files and hashes: 1: 323430363a343634303a3a2f33322d3332203d3e20313430343637.roa (hash: +ck2E10dFd5/OEf+e40wX7Ntpp2HW/ZWwaXbGUuqd1Q=)
2: 47CBAD1A648715C5E867F1A2ED3558688608EE19.crl (hash: mjR3uuJWIyQ4BrSliFHy2sZmVbLMHW6dCZJtefYHLCs=)
3: 3130332e3233352e36352e302f32342d3234203d3e20313430343637.roa (hash: zg3C7UqiFNjk6v4cmaqyG4vvOgQ3amedsyfg+VEOO70=)
4: 3130332e3135332e3135302e302f32342d3234203d3e20313430343637.roa (hash: 1a16GMwOcOCsjYtXlZLoq81/WntEbXylQSYsmM31kuc=)
Validation: OK
Signature path: rsync://repo-rpki.idnic.net/repo/c4956505-d6b3-43dc-9070-d4dbdb7cf963/0/47CBAD1A648715C5E867F1A2ED3558688608EE19.crl
rsync://repo-rpki.idnic.net/repo/c4956505-d6b3-43dc-9070-d4dbdb7cf963/0/47CBAD1A648715C5E867F1A2ED3558688608EE19.mft
rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/47CBAD1A648715C5E867F1A2ED3558688608EE19.cer
rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl
rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Mon 08 Dec 2025 11:19:13 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
07:28:a8:f4:21:67:23:37:65:7c:b9:64:f7:f0:49:b9:24:f5:6d:8e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=47CBAD1A648715C5E867F1A2ED3558688608EE19
Validity
Not Before: Dec 5 08:26:13 2025 GMT
Not After : Dec 8 11:19:13 2025 GMT
Subject: CN=418F11A3E848B9A064F777B3E02F54DA3CFDB404
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c0:2a:19:59:0e:1b:e7:5c:51:66:95:39:68:c9:
af:6c:aa:bd:b1:5a:44:84:62:85:7b:9b:78:9f:a0:
34:84:77:cf:f1:9c:e2:1e:d6:98:d0:17:c0:1d:37:
00:75:d9:d4:cc:72:c9:cf:16:7e:ef:82:b1:1f:c0:
24:87:d5:5a:d8:33:8f:03:ec:6b:f9:b9:65:8b:4b:
65:a0:b0:23:d4:62:97:c4:5b:8f:8f:75:63:f3:cc:
ab:80:b3:38:90:72:ec:61:3e:25:b5:3b:60:1e:0c:
2f:f2:16:d7:9e:df:0e:27:b5:69:41:31:28:98:eb:
6c:e0:32:f1:1f:0c:9b:04:7c:78:e9:0a:a4:5c:13:
63:70:d7:bd:e0:c7:03:97:10:d9:f7:16:b2:be:33:
50:ba:ea:34:e4:1d:cc:78:7f:43:ea:ed:30:a9:ba:
6f:49:c7:5d:ba:22:94:b8:08:2b:a8:b5:eb:ca:75:
d4:76:c9:33:f1:6d:ea:ee:a2:d0:ac:fd:87:62:ae:
6c:4a:3d:82:5a:15:22:e4:d0:44:41:76:f2:67:4c:
fb:07:d4:af:29:8c:39:81:49:1b:c9:09:c6:0d:f4:
30:80:be:79:2f:74:24:1c:07:5e:ee:08:dc:ce:34:
5d:0b:05:10:5e:ab:eb:9b:92:63:6e:87:6a:bf:f5:
57:d1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
41:8F:11:A3:E8:48:B9:A0:64:F7:77:B3:E0:2F:54:DA:3C:FD:B4:04
X509v3 Authority Key Identifier:
keyid:47:CB:AD:1A:64:87:15:C5:E8:67:F1:A2:ED:35:58:68:86:08:EE:19
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://repo-rpki.idnic.net/repo/c4956505-d6b3-43dc-9070-d4dbdb7cf963/0/47CBAD1A648715C5E867F1A2ED3558688608EE19.crl
Authority Information Access:
CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/47CBAD1A648715C5E867F1A2ED3558688608EE19.cer
Subject Information Access:
Signed Object - URI:rsync://repo-rpki.idnic.net/repo/c4956505-d6b3-43dc-9070-d4dbdb7cf963/0/47CBAD1A648715C5E867F1A2ED3558688608EE19.mft
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
0d:f2:54:9b:93:4c:70:e3:76:a5:d2:b9:af:be:9f:4e:a3:e2:
32:6d:5a:9c:e6:6a:26:48:bf:42:f0:ce:bc:0b:48:b8:e3:5a:
73:3e:5c:f6:0f:9f:9f:07:c4:78:80:29:99:de:8e:62:94:dc:
12:df:c7:30:84:b3:06:43:c5:14:a6:ed:e6:f0:f2:8e:1a:53:
d7:68:52:e5:9b:ad:72:b0:88:ec:57:1e:b1:4a:14:8c:38:7b:
e5:8f:97:8b:45:6c:4b:6c:97:70:03:02:6c:e5:e3:92:68:bf:
ca:da:21:b1:3f:2f:8a:3b:34:b3:ae:5e:27:00:a7:2a:f0:9f:
bd:2b:04:cf:15:1e:d9:c6:ad:0d:70:66:8b:2d:1b:2b:93:11:
1c:fc:37:ae:68:69:a3:d7:07:2f:b3:37:be:ce:e9:eb:97:1e:
57:1d:82:d0:49:97:3f:a0:5e:91:b2:cc:c3:fa:45:b3:c7:2b:
ad:b2:43:3f:de:20:b8:ba:54:3f:49:f1:b3:61:cc:e5:87:74:
70:a8:79:58:37:db:19:43:7c:ec:09:ca:4a:b7:69:f6:d0:b4:
f6:f3:61:7d:ac:ca:7a:94:54:96:e4:95:41:e3:de:a2:f8:83:
4f:2e:47:02:88:76:f9:f4:ca:67:1f:c6:3b:4b:61:a3:d5:e5:
f5:56:79:5d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Dec 6 23:52:06 2025 by rpki-client