This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf repo-rpki.idnic.net/repo/2dd47f56-ec53-42eb-9b8b-fa08f874d319/0/47B3FBF39D8DFE5BC5CFD2BED39F0FA152619097.mft File: 47B3FBF39D8DFE5BC5CFD2BED39F0FA152619097.mft (raw, json) Hash identifier: xeplTrMDTq7WWb0kssUGAw1aVsJza4+Bkxv3I6Sh8kc= Subject key identifier: 1D:D9:A1:12:D6:2C:67:FD:3F:66:15:FD:90:44:49:B8:39:48:18:78 Authority key identifier: 47:B3:FB:F3:9D:8D:FE:5B:C5:CF:D2:BE:D3:9F:0F:A1:52:61:90:97 Certificate issuer: /CN=47B3FBF39D8DFE5BC5CFD2BED39F0FA152619097 Certificate serial: 3EE2BB1A577A6E1142417E4A42791CF7A217DD7F Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/47B3FBF39D8DFE5BC5CFD2BED39F0FA152619097.cer Subject info access: rsync://repo-rpki.idnic.net/repo/2dd47f56-ec53-42eb-9b8b-fa08f874d319/0/47B3FBF39D8DFE5BC5CFD2BED39F0FA152619097.mft Manifest number: 01B5 Signing time: Wed 24 Dec 2025 18:42:05 +0000 Manifest this update: Wed 24 Dec 2025 18:37:05 +0000 Manifest next update: Sun 28 Dec 2025 01:36:05 +0000 Files and hashes: 1: 3131352e3136362e39362e302f31392d3234203d3e203234353335.roa (hash: o1nadYOiSyfzP5DiUIaxIjQ6Y6Z7EbT62ljXiAR8xj8=) 2: 47B3FBF39D8DFE5BC5CFD2BED39F0FA152619097.crl (hash: nAKH20wEcYkm33mPgOlKlEEo4WL6wk7s7egn4lGJqwI=) 3: 323430333a666630303a3a2f33322d3438203d3e203234353335.roa (hash: acX5TVrGelz7sikLTlbnR9gGsookgeyobaWlbIZGoJY=) 4: 35382e36352e3234302e302f32312d3234203d3e203234353335.roa (hash: rPiRcVboc3keI3JDFzeJMujOJliCIhrAj1H/kJF3N9o=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/2dd47f56-ec53-42eb-9b8b-fa08f874d319/0/47B3FBF39D8DFE5BC5CFD2BED39F0FA152619097.crl rsync://repo-rpki.idnic.net/repo/2dd47f56-ec53-42eb-9b8b-fa08f874d319/0/47B3FBF39D8DFE5BC5CFD2BED39F0FA152619097.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/47B3FBF39D8DFE5BC5CFD2BED39F0FA152619097.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 27 Dec 2025 17:20:12 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 3e:e2:bb:1a:57:7a:6e:11:42:41:7e:4a:42:79:1c:f7:a2:17:dd:7f Signature Algorithm: sha256WithRSAEncryption Issuer: CN=47B3FBF39D8DFE5BC5CFD2BED39F0FA152619097 Validity Not Before: Dec 24 18:37:05 2025 GMT Not After : Dec 28 01:36:05 2025 GMT Subject: CN=1DD9A112D62C67FD3F6615FD904449B839481878 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b8:95:aa:d9:f5:9f:be:49:55:88:f5:d4:ed:8c: 03:a1:e9:51:4b:75:08:03:c1:f5:15:71:fb:c3:ae: 06:67:5a:5d:bb:25:f6:93:10:19:1d:34:7b:7c:de: ed:71:f7:39:fb:ab:b0:1d:35:5c:1a:bf:c3:53:dc: 44:1d:5b:0a:a2:b1:68:71:b2:97:c4:93:3e:d9:a2: 39:99:f5:78:9e:7d:49:b8:23:00:c0:66:84:65:4c: 59:ab:3e:a3:3f:bd:e5:7c:93:b5:64:1c:79:96:aa: f8:e9:fd:bb:13:bf:f0:28:24:98:c3:c8:fa:f1:da: 8b:1f:aa:12:4f:ef:bf:94:87:3f:27:b4:af:4e:15: 86:57:02:b5:a1:6b:64:8d:99:93:18:3f:48:27:68: 6a:a5:0a:fc:9c:0d:c8:12:77:50:05:ab:91:13:61: f1:fc:c1:15:51:71:e7:95:ff:04:ec:4d:1a:7c:10: 90:9f:83:f4:2e:51:a8:84:54:d2:0b:6c:42:ae:05: 0d:e0:d8:79:d1:76:3e:80:65:2a:e3:ad:d3:1c:3d: 8f:bd:7b:52:c4:df:ff:a6:82:b3:ab:3e:c0:a6:97: 38:e5:95:84:26:77:71:f3:f7:5c:1e:16:a0:e4:25: 15:2a:4c:f3:61:48:2d:aa:8c:5e:8f:27:48:5a:d2: 87:9b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 1D:D9:A1:12:D6:2C:67:FD:3F:66:15:FD:90:44:49:B8:39:48:18:78 X509v3 Authority Key Identifier: keyid:47:B3:FB:F3:9D:8D:FE:5B:C5:CF:D2:BE:D3:9F:0F:A1:52:61:90:97 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/2dd47f56-ec53-42eb-9b8b-fa08f874d319/0/47B3FBF39D8DFE5BC5CFD2BED39F0FA152619097.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/47B3FBF39D8DFE5BC5CFD2BED39F0FA152619097.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/2dd47f56-ec53-42eb-9b8b-fa08f874d319/0/47B3FBF39D8DFE5BC5CFD2BED39F0FA152619097.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 78:f4:f2:8a:8a:3e:57:db:75:f0:6b:74:f3:ea:ab:12:86:c3: 40:f2:0d:8f:1b:fa:8e:32:d1:90:83:0a:22:47:b3:63:4f:4d: 0b:80:30:77:28:5c:8f:ad:7d:93:cc:20:20:40:02:a2:c0:cf: 0b:2b:26:53:71:4a:2c:88:48:db:a2:da:30:ef:7c:d1:89:5b: eb:f1:c6:fc:8c:f9:76:68:80:9b:14:26:73:d7:a4:66:5e:df: b3:56:74:00:2f:fe:dd:cb:67:2d:4d:48:80:55:57:f9:e0:fc: b2:77:40:51:7b:cf:ca:cd:4e:57:b0:6a:86:bf:49:b5:38:18: 98:ff:93:45:ed:25:9e:d9:7b:57:69:5e:ce:27:25:c3:e7:c2: be:35:9d:77:a2:64:d3:72:92:67:6f:bd:b7:15:e3:13:15:ff: 38:48:80:17:65:02:ef:48:e7:94:f8:e4:63:55:b3:c3:cd:d7: b1:d5:72:1f:eb:c3:b2:45:4b:dd:3a:a7:33:14:f9:ea:e8:53: 84:47:dd:f0:ec:b2:cc:43:15:4a:e3:39:1e:60:39:a4:5e:44: ca:ba:8d:12:6c:aa:38:6b:0e:a8:c4:43:da:ee:9d:12:bd:bc: cb:2a:bd:22:cf:5f:a3:ae:e9:45:b3:3a:ff:d2:d2:67:4e:22: 30:e6:d7:a2 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUPuK7Gld6bhFCQX5KQnkc96IX3X8wDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoNDdCM0ZCRjM5RDhERkU1QkM1Q0ZEMkJFRDM5RjBGQTE1 MjYxOTA5NzAeFw0yNTEyMjQxODM3MDVaFw0yNTEyMjgwMTM2MDVaMDMxMTAvBgNV BAMTKDFERDlBMTEyRDYyQzY3RkQzRjY2MTVGRDkwNDQ0OUI4Mzk0ODE4NzgwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC4larZ9Z++SVWI9dTtjAOh6VFL dQgDwfUVcfvDrgZnWl27JfaTEBkdNHt83u1x9zn7q7AdNVwav8NT3EQdWwqisWhx spfEkz7ZojmZ9XiefUm4IwDAZoRlTFmrPqM/veV8k7VkHHmWqvjp/bsTv/AoJJjD yPrx2osfqhJP77+Uhz8ntK9OFYZXArWha2SNmZMYP0gnaGqlCvycDcgSd1AFq5ET YfH8wRVRceeV/wTsTRp8EJCfg/QuUaiEVNILbEKuBQ3g2HnRdj6AZSrjrdMcPY+9 e1LE3/+mgrOrPsCmlzjllYQmd3Hz91weFqDkJRUqTPNhSC2qjF6PJ0ha0oebAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUHdmhEtYsZ/0/ZhX9kERJuDlIGHgwHwYDVR0j BBgwFoAUR7P7852N/lvFz9K+058PoVJhkJcwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby8y ZGQ0N2Y1Ni1lYzUzLTQyZWItOWI4Yi1mYTA4Zjg3NGQzMTkvMC80N0IzRkJGMzlE OERGRTVCQzVDRkQyQkVEMzlGMEZBMTUyNjE5MDk3LmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvNDdCM0ZCRjM5RDhERkU1QkM1Q0ZEMkJFRDM5RjBGQTE1MjYx OTA5Ny5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vMmRkNDdmNTYtZWM1My00MmViLTli OGItZmEwOGY4NzRkMzE5LzAvNDdCM0ZCRjM5RDhERkU1QkM1Q0ZEMkJFRDM5RjBG QTE1MjYxOTA5Ny5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAHj08oqKPlfbdfBrdPPqqxKGw0DyDY8b+o4y 0ZCDCiJHs2NPTQuAMHcoXI+tfZPMICBAAqLAzwsrJlNxSiyISNui2jDvfNGJW+vx xvyM+XZogJsUJnPXpGZe37NWdAAv/t3LZy1NSIBVV/ng/LJ3QFF7z8rNTlewaoa/ SbU4GJj/k0XtJZ7Ze1dpXs4nJcPnwr41nXeiZNNykmdvvbcV4xMV/zhIgBdlAu9I 55T45GNVs8PN17HVch/rw7JFS906pzMU+eroU4RH3fDsssxDFUrjOR5gOaReRMq6 jRJsqjhrDqjEQ9runRK9vMsqvSLPX6Ou6UWzOv/S0mdOIjDm16I= -----END CERTIFICATE-----Generated at Wed Dec 24 22:06:18 2025 by rpki-client