This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf repo-rpki.idnic.net/repo/cf2975d5-f990-484e-9460-f136b4551f8d/0/47571F0366875B7351B244D25CB7E8258FB33E93.mft
File:                     47571F0366875B7351B244D25CB7E8258FB33E93.mft (raw, json)
Hash identifier:          Bdhy9Sg9wXqrumhY7JX55g3IICjYk5dZbjlwm5XWwo0=
Subject key identifier:   BC:CA:77:D1:DB:BB:E8:A7:D0:89:F4:2D:D1:2E:43:F4:F3:72:36:CA
Authority key identifier: 47:57:1F:03:66:87:5B:73:51:B2:44:D2:5C:B7:E8:25:8F:B3:3E:93
Certificate issuer:       /CN=47571F0366875B7351B244D25CB7E8258FB33E93
Certificate serial:       485E66DAD23D768508E21C114AD8AA2962305440
Authority info access:    rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/47571F0366875B7351B244D25CB7E8258FB33E93.cer
Subject info access:      rsync://repo-rpki.idnic.net/repo/cf2975d5-f990-484e-9460-f136b4551f8d/0/47571F0366875B7351B244D25CB7E8258FB33E93.mft
Manifest number:          C5
Signing time:             Sat 24 Jan 2026 06:52:32 +0000
Manifest this update:     Sat 24 Jan 2026 06:47:32 +0000
Manifest next update:     Tue 27 Jan 2026 06:58:32 +0000
Files and hashes:         1: 47571F0366875B7351B244D25CB7E8258FB33E93.crl (hash: R2d28whuGM6csofMLsvXjI1GW37Wz9u2/guk+hswzFA=)
                          2: 3136302e3138372e3136342e302f32342d3234203d3e20313439393333.roa (hash: EQmwZNedUjq2O/AJCi3gmfSvtjSzhrTVmBFbfysjDew=)
Validation:               OK
Signature path:           rsync://repo-rpki.idnic.net/repo/cf2975d5-f990-484e-9460-f136b4551f8d/0/47571F0366875B7351B244D25CB7E8258FB33E93.crl
                          rsync://repo-rpki.idnic.net/repo/cf2975d5-f990-484e-9460-f136b4551f8d/0/47571F0366875B7351B244D25CB7E8258FB33E93.mft
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/47571F0366875B7351B244D25CB7E8258FB33E93.cer
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/60F8BE9C16625C424B269EE06C64A83BAB8506D4.crl
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/60F8BE9C16625C424B269EE06C64A83BAB8506D4.mft
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/YPi-nBZiXEJLJp7gbGSoO6uFBtQ.cer
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Tue 27 Jan 2026 06:58:32 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            48:5e:66:da:d2:3d:76:85:08:e2:1c:11:4a:d8:aa:29:62:30:54:40
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=47571F0366875B7351B244D25CB7E8258FB33E93
        Validity
            Not Before: Jan 24 06:47:32 2026 GMT
            Not After : Jan 27 06:58:32 2026 GMT
        Subject: CN=BCCA77D1DBBBE8A7D089F42DD12E43F4F37236CA
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c1:e0:4a:1f:d3:df:b7:fe:92:7f:a6:e0:a2:ef:
                    1d:c0:c1:d0:aa:db:b5:62:7b:d5:07:32:da:4e:b0:
                    ec:6b:21:d8:b6:90:0e:94:04:32:8e:cc:22:d0:cb:
                    b1:52:e7:14:17:46:1f:2d:5b:ba:33:f4:d6:26:0b:
                    04:5b:12:79:cf:39:e6:7b:65:a1:01:65:90:b4:33:
                    80:2e:37:04:ba:b3:85:93:1f:69:bb:97:6e:dd:a9:
                    37:0b:d2:ff:5a:c6:5e:51:b6:f6:69:34:2b:0b:b6:
                    aa:f2:38:16:06:58:89:5c:8a:92:30:eb:d5:18:a3:
                    20:be:11:b1:bf:f1:9b:05:8f:ba:02:ec:d8:26:55:
                    09:07:3d:bf:7d:d5:8e:e6:ea:41:85:12:8e:0e:a6:
                    67:66:42:4b:c3:8a:fe:7a:cf:58:87:ec:15:2e:fc:
                    84:0e:5f:6f:d6:1c:40:9a:e1:59:f0:b1:0a:2e:12:
                    24:a1:35:47:d9:a3:78:0e:6f:2a:e7:18:fc:0e:04:
                    0b:72:84:23:04:a6:fe:ee:7d:f7:e0:90:02:2e:85:
                    ad:b2:e0:fe:4b:18:a9:fb:f3:05:4b:66:1b:6f:ec:
                    af:eb:f9:46:35:79:4f:bb:af:72:f6:07:c0:2e:00:
                    a2:81:4e:89:d1:52:0f:47:8c:03:58:83:af:98:ac:
                    87:d1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                BC:CA:77:D1:DB:BB:E8:A7:D0:89:F4:2D:D1:2E:43:F4:F3:72:36:CA
            X509v3 Authority Key Identifier:
                keyid:47:57:1F:03:66:87:5B:73:51:B2:44:D2:5C:B7:E8:25:8F:B3:3E:93

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repo-rpki.idnic.net/repo/cf2975d5-f990-484e-9460-f136b4551f8d/0/47571F0366875B7351B244D25CB7E8258FB33E93.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/47571F0366875B7351B244D25CB7E8258FB33E93.cer

            Subject Information Access:
                Signed Object - URI:rsync://repo-rpki.idnic.net/repo/cf2975d5-f990-484e-9460-f136b4551f8d/0/47571F0366875B7351B244D25CB7E8258FB33E93.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         6f:9d:2a:5f:15:a7:9d:9a:14:8e:28:2b:83:cd:fa:65:4a:6a:
         f1:9e:03:83:bc:0c:d2:b4:e3:5c:1b:82:10:38:0d:1a:a4:c6:
         33:20:8c:25:00:3d:2e:58:ae:59:19:f2:53:4f:8b:57:32:8f:
         ff:92:be:e0:37:ba:01:bc:33:47:c9:fb:b7:1a:cf:3e:b3:b4:
         80:57:a1:02:bd:fc:2b:ec:73:49:2b:9b:86:8d:89:d3:86:8c:
         8a:29:cb:21:29:b3:28:aa:b9:0a:18:4a:cf:88:9c:ef:e1:7e:
         f0:57:eb:b8:14:8c:89:01:d6:72:fb:7e:ad:b4:9c:c1:9d:d7:
         66:92:a4:52:9e:69:56:91:3c:1d:bf:e7:97:81:4f:de:ac:b1:
         31:aa:0a:ef:21:36:b5:e3:61:2f:f7:46:cb:a5:b9:1a:2b:a3:
         41:17:8a:81:f6:47:ee:f7:a4:fe:33:ac:55:9b:09:55:e6:f8:
         c4:5a:ae:24:01:66:f0:49:f1:be:4a:23:12:b2:05:e0:3f:b2:
         36:4a:8d:6c:7f:c5:69:e0:5b:29:4e:c3:37:d3:2f:e2:fd:35:
         f0:1b:2d:d7:c3:0a:d5:56:ac:38:25:81:fb:1b:61:a4:a8:af:
         ff:44:69:e5:04:99:f5:3f:6d:b9:ba:fa:08:eb:c5:9d:2c:a4:
         8f:dc:15:47
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jan 26 06:09:36 2026 by rpki-client