This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

$ rpki-client -vvf repo-rpki.idnic.net/repo/dce9f43d-08ba-4d02-8f38-74732f15cd8c/0/47E5E36B848613534A65DDE4FBA27AB59A745B50.mft
File: 47E5E36B848613534A65DDE4FBA27AB59A745B50.mft (raw, json)
Hash identifier: uVvxEvv/RALiLCI2jol1xF87hBKLuBCNG1abjjPvaCg=
Subject key identifier: F8:A2:36:CF:2C:95:BD:1A:FF:5B:06:1D:A6:21:2B:E4:DF:62:CA:4C
Authority key identifier: 47:E5:E3:6B:84:86:13:53:4A:65:DD:E4:FB:A2:7A:B5:9A:74:5B:50
Certificate issuer: /CN=47E5E36B848613534A65DDE4FBA27AB59A745B50
Certificate serial: 785DA59E83F1BA27B55E5F8B9E6F7833A718FE10
Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/47E5E36B848613534A65DDE4FBA27AB59A745B50.cer
Subject info access: rsync://repo-rpki.idnic.net/repo/dce9f43d-08ba-4d02-8f38-74732f15cd8c/0/47E5E36B848613534A65DDE4FBA27AB59A745B50.mft
Manifest number: 026E
Signing time: Sat 24 Jan 2026 16:32:00 +0000
Manifest this update: Sat 24 Jan 2026 16:27:00 +0000
Manifest next update: Tue 27 Jan 2026 23:57:00 +0000
Files and hashes: 1: 47E5E36B848613534A65DDE4FBA27AB59A745B50.crl (hash: R3+8mv/MI9T08ilcYRFBXI8ejhqSm+troWPdfr0mvmI=)
2: 3130332e3138362e33322e302f32342d3234203d3e20313439363930.roa (hash: +RzIkKcclhhmS8GwfpMzHJYL3/aslCxP9ofzAqZe73s=)
3: 3130332e3138362e33332e302f32342d3234203d3e20313439363930.roa (hash: qSOluZYhHbh5qhe9XFML1T+yjS4Nr+V42eVROiXrJCc=)
Validation: OK
Signature path: rsync://repo-rpki.idnic.net/repo/dce9f43d-08ba-4d02-8f38-74732f15cd8c/0/47E5E36B848613534A65DDE4FBA27AB59A745B50.crl
rsync://repo-rpki.idnic.net/repo/dce9f43d-08ba-4d02-8f38-74732f15cd8c/0/47E5E36B848613534A65DDE4FBA27AB59A745B50.mft
rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/47E5E36B848613534A65DDE4FBA27AB59A745B50.cer
rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl
rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Tue 27 Jan 2026 23:57:00 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
78:5d:a5:9e:83:f1:ba:27:b5:5e:5f:8b:9e:6f:78:33:a7:18:fe:10
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=47E5E36B848613534A65DDE4FBA27AB59A745B50
Validity
Not Before: Jan 24 16:27:00 2026 GMT
Not After : Jan 27 23:57:00 2026 GMT
Subject: CN=F8A236CF2C95BD1AFF5B061DA6212BE4DF62CA4C
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d6:b6:29:e3:43:df:3b:17:3f:24:54:45:4c:a0:
b3:e1:4e:c5:5f:8c:f3:21:15:c6:62:0c:b0:d7:19:
c1:5f:bd:b3:a5:8a:d9:08:e5:16:7c:f3:88:06:94:
20:ba:88:ec:bd:53:0e:70:37:54:4f:e6:43:82:cf:
d6:92:e8:d7:81:62:c7:9f:44:f2:33:d7:12:5f:2a:
64:ff:93:9f:ac:f3:b3:20:76:d6:21:46:27:0a:77:
6e:ef:36:e4:42:7a:53:61:fb:3a:13:0f:06:5a:3d:
37:14:5a:75:28:1e:94:b2:32:b3:05:a5:35:bc:8e:
b8:21:bc:9a:c3:2d:69:32:d1:28:03:5f:87:7b:7f:
3b:00:31:b3:cc:f2:4e:40:19:a3:be:86:49:df:b3:
65:6e:e8:54:9d:78:80:78:56:b1:21:76:38:13:a4:
76:e6:43:3d:45:c3:ae:85:fe:53:72:3c:06:a2:06:
06:9e:cd:ff:b6:7e:7c:24:a0:e6:69:a2:7e:c9:b7:
09:24:ff:3a:b1:ee:67:fa:22:8a:f1:bc:6f:c3:aa:
27:b6:75:d8:7b:1a:bd:40:4a:2a:cb:1a:ff:7b:4e:
ba:4c:a0:fa:28:48:5b:30:8d:4a:45:8e:7f:07:b6:
14:05:93:d2:e4:05:ae:48:3e:6b:b6:69:5c:20:09:
5c:cd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F8:A2:36:CF:2C:95:BD:1A:FF:5B:06:1D:A6:21:2B:E4:DF:62:CA:4C
X509v3 Authority Key Identifier:
keyid:47:E5:E3:6B:84:86:13:53:4A:65:DD:E4:FB:A2:7A:B5:9A:74:5B:50
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://repo-rpki.idnic.net/repo/dce9f43d-08ba-4d02-8f38-74732f15cd8c/0/47E5E36B848613534A65DDE4FBA27AB59A745B50.crl
Authority Information Access:
CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/47E5E36B848613534A65DDE4FBA27AB59A745B50.cer
Subject Information Access:
Signed Object - URI:rsync://repo-rpki.idnic.net/repo/dce9f43d-08ba-4d02-8f38-74732f15cd8c/0/47E5E36B848613534A65DDE4FBA27AB59A745B50.mft
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
68:6a:fb:c7:bf:f6:a9:ec:48:80:bc:d7:26:42:da:f3:38:8c:
a4:1e:e5:91:f1:85:b8:e1:93:a7:0c:19:5c:e7:00:43:3c:d9:
0d:22:af:63:3d:c2:12:38:a0:3e:64:7f:9f:bd:a6:f7:17:0d:
02:b5:d3:49:4b:29:80:9d:32:a7:61:d7:e9:0c:07:f8:b8:c8:
57:de:cd:7e:53:c4:52:fe:d8:79:aa:b5:fd:f1:67:fe:8b:b6:
ec:93:04:e8:59:0b:b1:2a:08:02:d1:39:d6:96:7e:99:bb:0e:
db:ce:46:77:a1:fa:9b:b6:8b:7f:b4:01:ac:d6:22:2b:0a:7c:
de:ca:b0:ae:06:2f:3b:f7:2b:21:89:5c:d4:e7:85:bf:b0:04:
e0:e8:87:f9:77:50:b2:16:34:df:a1:82:14:7a:ac:3c:8e:38:
25:a3:20:1c:de:91:fa:46:ee:79:1a:92:19:6f:ff:f5:89:7d:
a5:dc:06:ae:05:0a:cf:37:17:72:6f:ea:9c:0d:b1:85:83:c3:
05:e4:d4:ba:e6:42:9a:3c:cc:2c:be:d9:a5:64:d4:eb:3f:ff:
0a:7c:02:ee:b4:44:6b:7d:93:c4:2e:2f:97:f6:a8:f8:0a:04:
13:7f:f8:cf:20:84:e3:f4:2f:6e:4a:0f:9d:07:93:2b:fd:8c:
e2:77:fe:e7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jan 26 04:28:34 2026 by rpki-client