This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf repo-rpki.idnic.net/repo/cf2975d5-f990-484e-9460-f136b4551f8d/0/47571F0366875B7351B244D25CB7E8258FB33E93.mft File: 47571F0366875B7351B244D25CB7E8258FB33E93.mft (raw, json) Hash identifier: 1DTWL+pvtD3LGO0f7kALd2nHYLivXIr5XaTRogLVHbQ= Subject key identifier: 66:23:9D:BA:F8:F6:02:1C:F3:C8:47:E6:50:69:94:56:43:E5:EA:9A Authority key identifier: 47:57:1F:03:66:87:5B:73:51:B2:44:D2:5C:B7:E8:25:8F:B3:3E:93 Certificate issuer: /CN=47571F0366875B7351B244D25CB7E8258FB33E93 Certificate serial: 3489D7CB31B4B26DB97CE9E92E57E5F10DBA2F77 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/47571F0366875B7351B244D25CB7E8258FB33E93.cer Subject info access: rsync://repo-rpki.idnic.net/repo/cf2975d5-f990-484e-9460-f136b4551f8d/0/47571F0366875B7351B244D25CB7E8258FB33E93.mft Manifest number: AF Signing time: Thu 04 Dec 2025 17:32:28 +0000 Manifest this update: Thu 04 Dec 2025 17:27:28 +0000 Manifest next update: Mon 08 Dec 2025 01:01:28 +0000 Files and hashes: 1: 3136302e3138372e3136342e302f32342d3234203d3e20313439393333.roa (hash: EQmwZNedUjq2O/AJCi3gmfSvtjSzhrTVmBFbfysjDew=) 2: 47571F0366875B7351B244D25CB7E8258FB33E93.crl (hash: rdqNJf48cgmAl3/LZpEFHALIcVf/NVZlPzjywvLdeiY=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/cf2975d5-f990-484e-9460-f136b4551f8d/0/47571F0366875B7351B244D25CB7E8258FB33E93.crl rsync://repo-rpki.idnic.net/repo/cf2975d5-f990-484e-9460-f136b4551f8d/0/47571F0366875B7351B244D25CB7E8258FB33E93.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/47571F0366875B7351B244D25CB7E8258FB33E93.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/60F8BE9C16625C424B269EE06C64A83BAB8506D4.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/60F8BE9C16625C424B269EE06C64A83BAB8506D4.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/YPi-nBZiXEJLJp7gbGSoO6uFBtQ.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 08 Dec 2025 01:01:28 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 34:89:d7:cb:31:b4:b2:6d:b9:7c:e9:e9:2e:57:e5:f1:0d:ba:2f:77 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=47571F0366875B7351B244D25CB7E8258FB33E93 Validity Not Before: Dec 4 17:27:28 2025 GMT Not After : Dec 8 01:01:28 2025 GMT Subject: CN=66239DBAF8F6021CF3C847E65069945643E5EA9A Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bd:0e:fc:59:d6:5a:4e:72:1d:fa:a9:8e:0e:98: 55:c4:ab:84:47:71:c6:8a:55:2b:fc:c0:e2:d9:19: 64:0b:42:cf:f3:c2:1c:06:53:d4:a4:6c:c5:33:1f: 67:65:54:a9:5f:d6:60:7a:b3:58:8f:3d:e6:17:a2: e7:1d:06:52:59:d5:e4:c1:99:84:3a:0d:f2:ab:bb: ed:73:1d:8f:de:7c:4e:79:fd:f4:c8:0a:a9:63:3a: 79:90:5d:26:50:1e:fa:dc:9e:ce:b5:c5:b0:a3:96: d4:95:97:09:40:77:2f:de:05:a9:e3:e7:45:88:3f: 19:fe:51:f1:6b:ea:1c:2b:8e:5e:a4:7a:a0:57:a2: 60:7c:a0:85:e3:33:fe:08:1d:40:f0:ea:f2:3d:c1: 6c:bf:78:34:0a:7f:7b:d3:d1:d1:c4:20:e2:97:1d: 46:1c:d0:b6:dd:40:a5:2e:67:10:7f:4c:ab:bd:47: 81:b9:de:f1:19:1c:fa:75:c4:ac:d2:0a:7b:53:73: 3c:7d:10:b2:95:a9:d6:9d:9b:81:f2:a8:b4:f7:22: 14:05:75:a1:e0:49:a6:8f:f5:29:fd:67:c2:df:97: 8c:90:fe:44:89:5b:96:96:66:9a:38:4d:24:44:cd: 94:e2:4c:18:d3:24:c2:da:b9:5e:e7:0f:70:a6:b1: ac:e3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 66:23:9D:BA:F8:F6:02:1C:F3:C8:47:E6:50:69:94:56:43:E5:EA:9A X509v3 Authority Key Identifier: keyid:47:57:1F:03:66:87:5B:73:51:B2:44:D2:5C:B7:E8:25:8F:B3:3E:93 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/cf2975d5-f990-484e-9460-f136b4551f8d/0/47571F0366875B7351B244D25CB7E8258FB33E93.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/47571F0366875B7351B244D25CB7E8258FB33E93.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/cf2975d5-f990-484e-9460-f136b4551f8d/0/47571F0366875B7351B244D25CB7E8258FB33E93.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption b0:bc:eb:f6:4c:9a:0b:f9:b3:c5:62:be:db:52:be:e7:c0:a5: a4:44:c8:be:57:02:fb:59:15:c7:4b:24:a1:63:3a:33:02:09: 7c:31:22:85:ab:dc:5a:7e:38:8a:81:43:a4:28:e7:6d:20:e8: 82:d0:06:c7:4a:aa:02:cc:4d:6f:8e:54:21:7e:0a:06:f6:13: 0f:c0:fc:e7:15:da:0d:6e:a2:11:38:71:b5:7c:e4:70:95:0a: 1e:2c:ed:b8:70:a1:d9:79:27:e2:f2:dd:21:03:5c:4c:7a:36: fc:dc:40:6f:31:bb:13:1a:c3:6d:63:60:9e:9c:eb:72:54:07: 0b:f1:4e:4d:11:7d:0a:46:d4:bf:37:d3:c4:ed:18:ca:20:0d: 08:12:86:89:3f:10:60:b6:8e:00:02:dd:33:df:fb:5e:e1:75: 03:74:7f:53:fe:a0:bd:47:eb:68:fc:4b:a2:cf:87:f6:fc:29: 4c:be:88:c6:f7:34:d7:1d:1d:04:39:38:44:07:f5:1b:62:bc: b1:a1:49:d3:50:96:23:8c:83:2c:be:2e:11:ba:56:4e:8e:d8: 4b:0c:4d:09:24:91:ff:06:78:d9:82:78:db:74:ab:cd:d5:c3: ea:e9:37:9a:f0:5f:b7:9f:7b:ac:c9:fd:0f:6e:3e:03:47:d1: de:cd:31:bd -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUNInXyzG0sm25fOnpLlfl8Q26L3cwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoNDc1NzFGMDM2Njg3NUI3MzUxQjI0NEQyNUNCN0U4MjU4 RkIzM0U5MzAeFw0yNTEyMDQxNzI3MjhaFw0yNTEyMDgwMTAxMjhaMDMxMTAvBgNV BAMTKDY2MjM5REJBRjhGNjAyMUNGM0M4NDdFNjUwNjk5NDU2NDNFNUVBOUEwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC9DvxZ1lpOch36qY4OmFXEq4RH ccaKVSv8wOLZGWQLQs/zwhwGU9SkbMUzH2dlVKlf1mB6s1iPPeYXoucdBlJZ1eTB mYQ6DfKru+1zHY/efE55/fTICqljOnmQXSZQHvrcns61xbCjltSVlwlAdy/eBanj 50WIPxn+UfFr6hwrjl6keqBXomB8oIXjM/4IHUDw6vI9wWy/eDQKf3vT0dHEIOKX HUYc0LbdQKUuZxB/TKu9R4G53vEZHPp1xKzSCntTczx9ELKVqdadm4HyqLT3IhQF daHgSaaP9Sn9Z8Lfl4yQ/kSJW5aWZpo4TSREzZTiTBjTJMLauV7nD3CmsazjAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUZiOduvj2AhzzyEfmUGmUVkPl6powHwYDVR0j BBgwFoAUR1cfA2aHW3NRskTSXLfoJY+zPpMwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby9j ZjI5NzVkNS1mOTkwLTQ4NGUtOTQ2MC1mMTM2YjQ1NTFmOGQvMC80NzU3MUYwMzY2 ODc1QjczNTFCMjQ0RDI1Q0I3RTgyNThGQjMzRTkzLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzEvNDc1NzFGMDM2Njg3NUI3MzUxQjI0NEQyNUNCN0U4MjU4RkIz M0U5My5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vY2YyOTc1ZDUtZjk5MC00ODRlLTk0 NjAtZjEzNmI0NTUxZjhkLzAvNDc1NzFGMDM2Njg3NUI3MzUxQjI0NEQyNUNCN0U4 MjU4RkIzM0U5My5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBALC86/ZMmgv5s8VivttSvufApaREyL5XAvtZ FcdLJKFjOjMCCXwxIoWr3Fp+OIqBQ6Qo520g6ILQBsdKqgLMTW+OVCF+Cgb2Ew/A /OcV2g1uohE4cbV85HCVCh4s7bhwodl5J+Ly3SEDXEx6NvzcQG8xuxMaw21jYJ6c 63JUBwvxTk0RfQpG1L8308TtGMogDQgShok/EGC2jgAC3TPf+17hdQN0f1P+oL1H 62j8S6LPh/b8KUy+iMb3NNcdHQQ5OEQH9RtivLGhSdNQliOMgyy+LhG6Vk6O2EsM TQkkkf8GeNmCeNt0q83Vw+rpN5rwX7efe6zJ/Q9uPgNH0d7NMb0= -----END CERTIFICATE-----Generated at Sat Dec 6 16:01:58 2025 by rpki-client