This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf repo-rpki.idnic.net/repo/eb81bcea-b70f-4374-924b-b6c778109837/0/CA47BA6D9780611AEA68BC9BF72724AE94799AA6.mft File: CA47BA6D9780611AEA68BC9BF72724AE94799AA6.mft (raw, json) Hash identifier: v14PtmC6V0mDuB9fz/ZoSmnam5YZsDpdpTRUtFlqAMM= Subject key identifier: 89:BA:16:7F:21:AF:69:C8:2B:E0:DB:58:1E:D7:24:3D:B5:C3:E5:C4 Authority key identifier: CA:47:BA:6D:97:80:61:1A:EA:68:BC:9B:F7:27:24:AE:94:79:9A:A6 Certificate issuer: /CN=CA47BA6D9780611AEA68BC9BF72724AE94799AA6 Certificate serial: 420CF2319465CD384B42123C7C3616123E95C314 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/CA47BA6D9780611AEA68BC9BF72724AE94799AA6.cer Subject info access: rsync://repo-rpki.idnic.net/repo/eb81bcea-b70f-4374-924b-b6c778109837/0/CA47BA6D9780611AEA68BC9BF72724AE94799AA6.mft Manifest number: 02A9 Signing time: Fri 23 Jan 2026 20:10:50 +0000 Manifest this update: Fri 23 Jan 2026 20:05:50 +0000 Manifest next update: Tue 27 Jan 2026 07:54:50 +0000 Files and hashes: 1: 3130332e3130382e3234312e302f32342d3234203d3e20313333373936.roa (hash: kunQ1kMqm5dCsvOsI1+HGGCtiZ5NKsilDdmi0e2JkQE=) 2: 3130332e3130382e3234322e302f32342d3234203d3e20313336383535.roa (hash: 3PkfuBqgUsXvYP/cBasxl1kYosVT98po9pZBDusnWb4=) 3: CA47BA6D9780611AEA68BC9BF72724AE94799AA6.crl (hash: baqN4/0Jd2hDV8yxjZX1NVnIH2tiZHL6WNR8EBn9EWM=) 4: 3130332e3130382e3234302e302f32322d3232203d3e20313336383535.roa (hash: 7eJhfA1U72MfmI6Gl9X8Bc7KFQEL+NhfB3ZqMIqrEaA=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/eb81bcea-b70f-4374-924b-b6c778109837/0/CA47BA6D9780611AEA68BC9BF72724AE94799AA6.crl rsync://repo-rpki.idnic.net/repo/eb81bcea-b70f-4374-924b-b6c778109837/0/CA47BA6D9780611AEA68BC9BF72724AE94799AA6.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/CA47BA6D9780611AEA68BC9BF72724AE94799AA6.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 27 Jan 2026 07:54:50 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 42:0c:f2:31:94:65:cd:38:4b:42:12:3c:7c:36:16:12:3e:95:c3:14 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=CA47BA6D9780611AEA68BC9BF72724AE94799AA6 Validity Not Before: Jan 23 20:05:50 2026 GMT Not After : Jan 27 07:54:50 2026 GMT Subject: CN=89BA167F21AF69C82BE0DB581ED7243DB5C3E5C4 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a7:81:15:24:8f:9a:06:a3:5e:a5:cf:90:1d:3b: 49:05:fd:35:8d:0f:95:fb:04:a4:c1:4e:35:2f:62: 0b:aa:50:ff:2e:15:eb:79:ec:58:76:28:8b:94:95: be:7d:0f:76:13:7d:d3:46:40:15:ee:81:43:06:3a: a3:ab:87:b8:98:dc:61:dd:67:86:c3:1f:7f:26:b0: 83:60:fd:0c:9a:fc:61:b6:e9:c5:d6:ab:41:78:32: a2:85:ac:ed:d1:59:af:c5:eb:b5:1c:ff:3d:55:92: d1:13:85:32:20:14:d7:57:93:9b:46:20:43:99:cd: 86:f6:8f:db:cc:46:51:61:2e:c0:5f:61:47:97:85: 87:16:88:09:51:88:04:1f:9e:5f:db:7f:88:c5:ee: 20:5b:83:0b:15:5b:21:9c:6a:94:21:10:b7:39:bf: 43:43:96:0f:2d:b2:29:9d:8d:bf:10:44:ef:db:6c: 43:cf:e6:41:44:76:5e:b8:b0:57:50:c8:16:c8:32: e3:e7:94:d8:07:16:97:44:99:82:87:61:cf:33:82: d0:c9:f3:f8:8e:06:25:7f:02:66:d3:f1:04:f5:b4: 5e:46:10:59:8c:6e:be:22:35:f7:ed:49:d2:47:dd: 4e:54:5e:f9:46:50:dd:95:d6:0e:e1:e6:6c:6f:84: a4:41 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 89:BA:16:7F:21:AF:69:C8:2B:E0:DB:58:1E:D7:24:3D:B5:C3:E5:C4 X509v3 Authority Key Identifier: keyid:CA:47:BA:6D:97:80:61:1A:EA:68:BC:9B:F7:27:24:AE:94:79:9A:A6 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/eb81bcea-b70f-4374-924b-b6c778109837/0/CA47BA6D9780611AEA68BC9BF72724AE94799AA6.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/CA47BA6D9780611AEA68BC9BF72724AE94799AA6.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/eb81bcea-b70f-4374-924b-b6c778109837/0/CA47BA6D9780611AEA68BC9BF72724AE94799AA6.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 73:06:2b:e8:1a:31:12:3e:87:de:e5:fb:b0:96:2e:89:52:49: 7b:21:60:9a:99:2b:d5:29:37:a8:8e:31:86:af:58:3a:75:fd: 40:62:97:c6:d5:7d:08:67:f8:cc:83:1e:41:11:aa:9e:80:6a: b7:d3:61:b7:2f:f8:c9:c3:d6:0f:97:45:49:16:65:af:42:ca: 89:c5:a4:5d:38:cd:7b:2e:b9:64:69:f0:26:4b:4f:c9:a0:ed: 80:ca:bc:65:0b:ea:fb:43:05:36:be:38:6c:c5:bd:33:5e:b5: a7:a3:88:1f:e7:48:4a:13:d4:7f:40:77:a9:5d:57:e1:dd:c7: ad:08:5a:52:37:a4:b9:d4:27:a4:0c:f6:c2:be:62:28:37:2e: b8:6d:0b:47:a8:78:1e:b4:4a:ad:cd:4a:1c:82:53:9f:8a:43: b6:98:f6:3c:a8:a3:f1:67:38:c5:f2:26:e9:0c:49:ce:0a:e2: 4a:89:31:af:1e:69:84:9a:04:b7:f1:d5:18:5c:00:eb:c3:0e: 4e:10:5c:40:17:3a:e6:f9:b9:0d:35:c7:d7:2c:49:de:07:50: db:f0:49:95:99:66:52:e1:c8:c9:65:95:02:4e:97:46:7c:3e: f8:f6:c8:19:95:da:9d:41:e4:4f:60:7a:29:47:7f:d7:ff:9f: 01:bf:4a:bd -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUQgzyMZRlzThLQhI8fDYWEj6VwxQwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoQ0E0N0JBNkQ5NzgwNjExQUVBNjhCQzlCRjcyNzI0QUU5 NDc5OUFBNjAeFw0yNjAxMjMyMDA1NTBaFw0yNjAxMjcwNzU0NTBaMDMxMTAvBgNV BAMTKDg5QkExNjdGMjFBRjY5QzgyQkUwREI1ODFFRDcyNDNEQjVDM0U1QzQwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCngRUkj5oGo16lz5AdO0kF/TWN D5X7BKTBTjUvYguqUP8uFet57Fh2KIuUlb59D3YTfdNGQBXugUMGOqOrh7iY3GHd Z4bDH38msINg/Qya/GG26cXWq0F4MqKFrO3RWa/F67Uc/z1VktEThTIgFNdXk5tG IEOZzYb2j9vMRlFhLsBfYUeXhYcWiAlRiAQfnl/bf4jF7iBbgwsVWyGcapQhELc5 v0NDlg8tsimdjb8QRO/bbEPP5kFEdl64sFdQyBbIMuPnlNgHFpdEmYKHYc8zgtDJ 8/iOBiV/AmbT8QT1tF5GEFmMbr4iNfftSdJH3U5UXvlGUN2V1g7h5mxvhKRBAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUiboWfyGvacgr4NtYHtckPbXD5cQwHwYDVR0j BBgwFoAUyke6bZeAYRrqaLyb9yckrpR5mqYwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby9l YjgxYmNlYS1iNzBmLTQzNzQtOTI0Yi1iNmM3NzgxMDk4MzcvMC9DQTQ3QkE2RDk3 ODA2MTFBRUE2OEJDOUJGNzI3MjRBRTk0Nzk5QUE2LmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvQ0E0N0JBNkQ5NzgwNjExQUVBNjhCQzlCRjcyNzI0QUU5NDc5 OUFBNi5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vZWI4MWJjZWEtYjcwZi00Mzc0LTky NGItYjZjNzc4MTA5ODM3LzAvQ0E0N0JBNkQ5NzgwNjExQUVBNjhCQzlCRjcyNzI0 QUU5NDc5OUFBNi5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAHMGK+gaMRI+h97l+7CWLolSSXshYJqZK9Up N6iOMYavWDp1/UBil8bVfQhn+MyDHkERqp6AarfTYbcv+MnD1g+XRUkWZa9CyonF pF04zXsuuWRp8CZLT8mg7YDKvGUL6vtDBTa+OGzFvTNetaejiB/nSEoT1H9Ad6ld V+Hdx60IWlI3pLnUJ6QM9sK+Yig3LrhtC0eoeB60Sq3NShyCU5+KQ7aY9jyoo/Fn OMXyJukMSc4K4kqJMa8eaYSaBLfx1RhcAOvDDk4QXEAXOub5uQ01x9csSd4HUNvw SZWZZlLhyMlllQJOl0Z8Pvj2yBmV2p1B5E9geilHf9f/nwG/Sr0= -----END CERTIFICATE-----Generated at Mon Jan 26 01:05:59 2026 by rpki-client