This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

$ rpki-client -vvf repo-rpki.idnic.net/repo/4f61f04d-18e7-42ff-ae82-d56554f9264c/0/47C87696529FAF404AF0E8681AAFA8F224187D59.mft
File: 47C87696529FAF404AF0E8681AAFA8F224187D59.mft (raw, json)
Hash identifier: xXYJvpuaVwPicxIcDuD4JYilI5n+L2v5xTRQSG0KZSE=
Subject key identifier: 4A:88:45:11:52:B9:92:09:04:C1:95:3D:89:5C:EA:9C:03:58:DA:52
Authority key identifier: 47:C8:76:96:52:9F:AF:40:4A:F0:E8:68:1A:AF:A8:F2:24:18:7D:59
Certificate issuer: /CN=47C87696529FAF404AF0E8681AAFA8F224187D59
Certificate serial: 654460DAA90A12B3725E575B27D160817B85D845
Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/47C87696529FAF404AF0E8681AAFA8F224187D59.cer
Subject info access: rsync://repo-rpki.idnic.net/repo/4f61f04d-18e7-42ff-ae82-d56554f9264c/0/47C87696529FAF404AF0E8681AAFA8F224187D59.mft
Manifest number: 0500
Signing time: Wed 17 Dec 2025 17:01:06 +0000
Manifest this update: Wed 17 Dec 2025 16:56:06 +0000
Manifest next update: Sun 21 Dec 2025 01:08:06 +0000
Files and hashes: 1: 47C87696529FAF404AF0E8681AAFA8F224187D59.crl (hash: 4Uo3d3kpiSnpIqb2n9m0pHbB6DbuRqBdZppSeKpaqmI=)
2: 3130332e3133362e3137302e302f32342d3234203d3e203538333639.roa (hash: JR9pnbueKrjvNp5CfL5jMHGleDRr0PreIte+IDzNXSA=)
3: 3130332e3133362e3137302e302f32332d3233203d3e203538333639.roa (hash: Z0Nbz1XibnxNyKBNr2zQqXw+MKf+eHjiJCZdkBIGrIo=)
4: 3130332e3133362e3137312e302f32342d3234203d3e203538333639.roa (hash: fPxnb7CxS8XbJvCYQXehN0lgrSSBnAAiXKdKbHXXpFg=)
Validation: OK
Signature path: rsync://repo-rpki.idnic.net/repo/4f61f04d-18e7-42ff-ae82-d56554f9264c/0/47C87696529FAF404AF0E8681AAFA8F224187D59.crl
rsync://repo-rpki.idnic.net/repo/4f61f04d-18e7-42ff-ae82-d56554f9264c/0/47C87696529FAF404AF0E8681AAFA8F224187D59.mft
rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/47C87696529FAF404AF0E8681AAFA8F224187D59.cer
rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl
rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Sun 21 Dec 2025 01:08:06 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
65:44:60:da:a9:0a:12:b3:72:5e:57:5b:27:d1:60:81:7b:85:d8:45
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=47C87696529FAF404AF0E8681AAFA8F224187D59
Validity
Not Before: Dec 17 16:56:06 2025 GMT
Not After : Dec 21 01:08:06 2025 GMT
Subject: CN=4A88451152B9920904C1953D895CEA9C0358DA52
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c0:e7:fb:44:29:46:15:9f:d7:4b:d5:ee:2c:1f:
b4:d6:b6:cb:52:4d:22:7f:c0:92:6a:68:a5:ce:bf:
57:26:75:2d:f1:eb:d9:69:f8:9f:eb:64:db:4a:3d:
1d:09:a6:74:1e:42:15:3b:79:61:05:05:41:2e:b2:
d7:db:e0:5e:7f:28:23:2f:a3:24:dc:6e:12:ee:19:
3a:48:d6:e4:fc:0d:da:50:f1:7c:a9:d1:83:5c:3f:
66:c5:22:66:c1:c7:56:35:d8:47:4a:c6:9d:bf:e2:
80:91:32:f6:19:88:0a:f9:c9:c3:30:29:d6:03:ae:
1a:29:fc:0d:92:05:e9:e5:c5:a8:c5:f0:5e:85:3f:
3e:6d:21:f2:30:ad:fe:4f:44:24:53:29:c6:f9:31:
77:98:61:f5:15:38:b4:92:ba:03:7f:ac:b3:be:b3:
ce:7d:52:c4:ab:8c:66:a4:27:a0:56:e5:a8:bd:f9:
12:42:cb:5f:a2:69:68:3b:f2:72:28:cf:bf:3d:87:
d3:86:3f:93:ad:b7:ef:39:b9:c0:75:a9:fe:8d:db:
05:27:e2:d3:b0:5e:d4:83:89:4d:4e:12:d6:79:67:
be:15:2d:f0:94:2a:19:c7:b3:50:92:0e:b2:14:d1:
df:2e:f5:10:ee:e0:dd:68:5a:c6:3e:c6:05:ab:b8:
96:6d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
4A:88:45:11:52:B9:92:09:04:C1:95:3D:89:5C:EA:9C:03:58:DA:52
X509v3 Authority Key Identifier:
keyid:47:C8:76:96:52:9F:AF:40:4A:F0:E8:68:1A:AF:A8:F2:24:18:7D:59
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://repo-rpki.idnic.net/repo/4f61f04d-18e7-42ff-ae82-d56554f9264c/0/47C87696529FAF404AF0E8681AAFA8F224187D59.crl
Authority Information Access:
CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/47C87696529FAF404AF0E8681AAFA8F224187D59.cer
Subject Information Access:
Signed Object - URI:rsync://repo-rpki.idnic.net/repo/4f61f04d-18e7-42ff-ae82-d56554f9264c/0/47C87696529FAF404AF0E8681AAFA8F224187D59.mft
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
1b:69:db:57:b1:06:09:d3:5c:e8:6e:af:82:10:3a:c5:64:9a:
2c:99:76:77:f1:54:da:c7:2b:5e:41:c1:5c:ae:2e:c0:7f:d3:
bd:94:db:af:85:8f:3e:98:b2:f6:23:42:95:10:84:d7:27:d0:
23:3b:56:ad:b4:82:ef:0d:9d:4c:97:3f:15:0d:62:6b:bf:19:
a8:52:ea:90:b1:0a:9f:77:ab:88:34:a3:ab:84:ec:15:82:d8:
ae:2a:8c:c2:1c:5f:f4:e3:a1:b3:ac:6d:f7:1a:81:39:15:d1:
5e:5b:6f:2e:62:39:a5:35:b8:20:68:b5:3b:32:b8:30:a1:42:
e8:28:17:ec:ef:55:9f:dd:1c:ac:3d:68:85:35:c4:38:59:1e:
77:55:6b:ab:2b:d2:39:25:63:6a:63:73:70:47:89:d7:9f:35:
c0:d6:e1:5e:2b:96:2c:d6:88:da:56:e5:12:ed:90:5e:20:36:
34:27:71:65:b6:83:52:1f:63:78:cd:ee:16:5f:ed:32:e9:46:
de:f7:16:13:ce:fd:4f:77:ea:fe:e1:ae:8f:cd:ef:4d:46:53:
43:ba:c5:c0:e7:10:c5:ea:22:69:76:ea:db:63:3e:d9:97:f9:
ba:e6:2f:73:4b:7a:e5:ae:cf:a7:a3:9a:5c:7a:98:97:20:72:
b9:d0:e0:ad
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Dec 18 06:49:03 2025 by rpki-client