This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

$ rpki-client -vvf repo-rpki.idnic.net/repo/cf2975d5-f990-484e-9460-f136b4551f8d/0/47571F0366875B7351B244D25CB7E8258FB33E93.mft
File: 47571F0366875B7351B244D25CB7E8258FB33E93.mft (raw, json)
Hash identifier: Bdhy9Sg9wXqrumhY7JX55g3IICjYk5dZbjlwm5XWwo0=
Subject key identifier: BC:CA:77:D1:DB:BB:E8:A7:D0:89:F4:2D:D1:2E:43:F4:F3:72:36:CA
Authority key identifier: 47:57:1F:03:66:87:5B:73:51:B2:44:D2:5C:B7:E8:25:8F:B3:3E:93
Certificate issuer: /CN=47571F0366875B7351B244D25CB7E8258FB33E93
Certificate serial: 485E66DAD23D768508E21C114AD8AA2962305440
Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/47571F0366875B7351B244D25CB7E8258FB33E93.cer
Subject info access: rsync://repo-rpki.idnic.net/repo/cf2975d5-f990-484e-9460-f136b4551f8d/0/47571F0366875B7351B244D25CB7E8258FB33E93.mft
Manifest number: C5
Signing time: Sat 24 Jan 2026 06:52:32 +0000
Manifest this update: Sat 24 Jan 2026 06:47:32 +0000
Manifest next update: Tue 27 Jan 2026 06:58:32 +0000
Files and hashes: 1: 47571F0366875B7351B244D25CB7E8258FB33E93.crl (hash: R2d28whuGM6csofMLsvXjI1GW37Wz9u2/guk+hswzFA=)
2: 3136302e3138372e3136342e302f32342d3234203d3e20313439393333.roa (hash: EQmwZNedUjq2O/AJCi3gmfSvtjSzhrTVmBFbfysjDew=)
Validation: OK
Signature path: rsync://repo-rpki.idnic.net/repo/cf2975d5-f990-484e-9460-f136b4551f8d/0/47571F0366875B7351B244D25CB7E8258FB33E93.crl
rsync://repo-rpki.idnic.net/repo/cf2975d5-f990-484e-9460-f136b4551f8d/0/47571F0366875B7351B244D25CB7E8258FB33E93.mft
rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/47571F0366875B7351B244D25CB7E8258FB33E93.cer
rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/60F8BE9C16625C424B269EE06C64A83BAB8506D4.crl
rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/60F8BE9C16625C424B269EE06C64A83BAB8506D4.mft
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/YPi-nBZiXEJLJp7gbGSoO6uFBtQ.cer
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Tue 27 Jan 2026 06:58:32 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
48:5e:66:da:d2:3d:76:85:08:e2:1c:11:4a:d8:aa:29:62:30:54:40
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=47571F0366875B7351B244D25CB7E8258FB33E93
Validity
Not Before: Jan 24 06:47:32 2026 GMT
Not After : Jan 27 06:58:32 2026 GMT
Subject: CN=BCCA77D1DBBBE8A7D089F42DD12E43F4F37236CA
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c1:e0:4a:1f:d3:df:b7:fe:92:7f:a6:e0:a2:ef:
1d:c0:c1:d0:aa:db:b5:62:7b:d5:07:32:da:4e:b0:
ec:6b:21:d8:b6:90:0e:94:04:32:8e:cc:22:d0:cb:
b1:52:e7:14:17:46:1f:2d:5b:ba:33:f4:d6:26:0b:
04:5b:12:79:cf:39:e6:7b:65:a1:01:65:90:b4:33:
80:2e:37:04:ba:b3:85:93:1f:69:bb:97:6e:dd:a9:
37:0b:d2:ff:5a:c6:5e:51:b6:f6:69:34:2b:0b:b6:
aa:f2:38:16:06:58:89:5c:8a:92:30:eb:d5:18:a3:
20:be:11:b1:bf:f1:9b:05:8f:ba:02:ec:d8:26:55:
09:07:3d:bf:7d:d5:8e:e6:ea:41:85:12:8e:0e:a6:
67:66:42:4b:c3:8a:fe:7a:cf:58:87:ec:15:2e:fc:
84:0e:5f:6f:d6:1c:40:9a:e1:59:f0:b1:0a:2e:12:
24:a1:35:47:d9:a3:78:0e:6f:2a:e7:18:fc:0e:04:
0b:72:84:23:04:a6:fe:ee:7d:f7:e0:90:02:2e:85:
ad:b2:e0:fe:4b:18:a9:fb:f3:05:4b:66:1b:6f:ec:
af:eb:f9:46:35:79:4f:bb:af:72:f6:07:c0:2e:00:
a2:81:4e:89:d1:52:0f:47:8c:03:58:83:af:98:ac:
87:d1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
BC:CA:77:D1:DB:BB:E8:A7:D0:89:F4:2D:D1:2E:43:F4:F3:72:36:CA
X509v3 Authority Key Identifier:
keyid:47:57:1F:03:66:87:5B:73:51:B2:44:D2:5C:B7:E8:25:8F:B3:3E:93
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://repo-rpki.idnic.net/repo/cf2975d5-f990-484e-9460-f136b4551f8d/0/47571F0366875B7351B244D25CB7E8258FB33E93.crl
Authority Information Access:
CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/47571F0366875B7351B244D25CB7E8258FB33E93.cer
Subject Information Access:
Signed Object - URI:rsync://repo-rpki.idnic.net/repo/cf2975d5-f990-484e-9460-f136b4551f8d/0/47571F0366875B7351B244D25CB7E8258FB33E93.mft
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
6f:9d:2a:5f:15:a7:9d:9a:14:8e:28:2b:83:cd:fa:65:4a:6a:
f1:9e:03:83:bc:0c:d2:b4:e3:5c:1b:82:10:38:0d:1a:a4:c6:
33:20:8c:25:00:3d:2e:58:ae:59:19:f2:53:4f:8b:57:32:8f:
ff:92:be:e0:37:ba:01:bc:33:47:c9:fb:b7:1a:cf:3e:b3:b4:
80:57:a1:02:bd:fc:2b:ec:73:49:2b:9b:86:8d:89:d3:86:8c:
8a:29:cb:21:29:b3:28:aa:b9:0a:18:4a:cf:88:9c:ef:e1:7e:
f0:57:eb:b8:14:8c:89:01:d6:72:fb:7e:ad:b4:9c:c1:9d:d7:
66:92:a4:52:9e:69:56:91:3c:1d:bf:e7:97:81:4f:de:ac:b1:
31:aa:0a:ef:21:36:b5:e3:61:2f:f7:46:cb:a5:b9:1a:2b:a3:
41:17:8a:81:f6:47:ee:f7:a4:fe:33:ac:55:9b:09:55:e6:f8:
c4:5a:ae:24:01:66:f0:49:f1:be:4a:23:12:b2:05:e0:3f:b2:
36:4a:8d:6c:7f:c5:69:e0:5b:29:4e:c3:37:d3:2f:e2:fd:35:
f0:1b:2d:d7:c3:0a:d5:56:ac:38:25:81:fb:1b:61:a4:a8:af:
ff:44:69:e5:04:99:f5:3f:6d:b9:ba:fa:08:eb:c5:9d:2c:a4:
8f:dc:15:47
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jan 26 06:09:36 2026 by rpki-client