This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf repo-rpki.idnic.net/repo/797b8f4a-3110-40b7-9032-0f02215a0b6a/0/C47E73E669156D8FB32AB80941C6E5A4EE07D37A.mft File: C47E73E669156D8FB32AB80941C6E5A4EE07D37A.mft (raw, json) Hash identifier: 5jKGHSDD9Glxb6JzzAzUWexd23GWzp6nCH7zUx7y/J8= Subject key identifier: 9E:4B:5F:83:0C:88:08:21:AD:22:ED:66:4C:59:F3:44:69:2C:D0:F2 Authority key identifier: C4:7E:73:E6:69:15:6D:8F:B3:2A:B8:09:41:C6:E5:A4:EE:07:D3:7A Certificate issuer: /CN=C47E73E669156D8FB32AB80941C6E5A4EE07D37A Certificate serial: 7B8E65D6FD11F2DD33F099B42224B50B8832C2CA Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/C47E73E669156D8FB32AB80941C6E5A4EE07D37A.cer Subject info access: rsync://repo-rpki.idnic.net/repo/797b8f4a-3110-40b7-9032-0f02215a0b6a/0/C47E73E669156D8FB32AB80941C6E5A4EE07D37A.mft Manifest number: 04F1 Signing time: Thu 18 Dec 2025 08:31:04 +0000 Manifest this update: Thu 18 Dec 2025 08:26:04 +0000 Manifest next update: Sun 21 Dec 2025 14:26:04 +0000 Files and hashes: 1: C47E73E669156D8FB32AB80941C6E5A4EE07D37A.crl (hash: h07DODwq4sXqTm0pIrydxxP6LS3/ab3w5sm8DHTi7Zk=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/797b8f4a-3110-40b7-9032-0f02215a0b6a/0/C47E73E669156D8FB32AB80941C6E5A4EE07D37A.crl rsync://repo-rpki.idnic.net/repo/797b8f4a-3110-40b7-9032-0f02215a0b6a/0/C47E73E669156D8FB32AB80941C6E5A4EE07D37A.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/C47E73E669156D8FB32AB80941C6E5A4EE07D37A.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 21 Dec 2025 14:26:04 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 7b:8e:65:d6:fd:11:f2:dd:33:f0:99:b4:22:24:b5:0b:88:32:c2:ca Signature Algorithm: sha256WithRSAEncryption Issuer: CN=C47E73E669156D8FB32AB80941C6E5A4EE07D37A Validity Not Before: Dec 18 08:26:04 2025 GMT Not After : Dec 21 14:26:04 2025 GMT Subject: CN=9E4B5F830C880821AD22ED664C59F344692CD0F2 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a8:52:aa:a4:03:69:b0:27:14:cb:b6:1e:a8:fd: 3e:d4:3d:6c:d7:da:ab:82:ae:3c:7d:7d:b1:2b:89: 0e:07:16:f8:d1:cc:40:2b:15:f6:aa:56:10:5d:97: f9:94:25:2a:67:ce:4e:18:9f:63:65:0d:f1:b5:31: 9c:15:ce:35:07:90:3e:d9:18:88:f2:0e:92:e4:da: 26:2d:0d:dc:33:52:c1:96:19:c6:8e:4f:f5:d1:1a: 9d:66:8a:e4:6d:33:c9:0b:6e:83:a2:72:88:b0:6f: 9c:5e:71:ba:25:d2:cd:79:75:d8:dd:04:25:1d:c3: 4e:b0:da:61:e3:84:07:71:21:86:ae:e6:2b:f2:e4: a8:62:52:c5:60:f6:3b:56:9f:55:a9:2d:62:f5:36: 22:a2:97:13:aa:2f:b7:e2:b1:02:58:c6:7a:e1:03: 31:cf:51:53:eb:43:41:38:49:c2:43:22:15:f9:c4: 6f:7d:d0:06:78:31:7d:2f:c1:e9:1e:61:38:70:9f: 24:33:c0:e9:81:ab:c0:33:1a:47:99:d4:ce:5d:3e: 3a:aa:38:8f:96:2f:e3:c7:3c:d8:fd:53:e0:3d:01: b9:38:43:9a:52:54:3a:49:e9:c5:37:a1:e4:7e:85: 5d:2a:54:40:f3:1d:8b:77:f3:2c:fd:ea:65:86:f6: 75:01 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 9E:4B:5F:83:0C:88:08:21:AD:22:ED:66:4C:59:F3:44:69:2C:D0:F2 X509v3 Authority Key Identifier: keyid:C4:7E:73:E6:69:15:6D:8F:B3:2A:B8:09:41:C6:E5:A4:EE:07:D3:7A X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/797b8f4a-3110-40b7-9032-0f02215a0b6a/0/C47E73E669156D8FB32AB80941C6E5A4EE07D37A.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/C47E73E669156D8FB32AB80941C6E5A4EE07D37A.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/797b8f4a-3110-40b7-9032-0f02215a0b6a/0/C47E73E669156D8FB32AB80941C6E5A4EE07D37A.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption a0:77:c8:44:9d:80:74:d5:b1:18:c4:7a:03:ca:b2:54:36:5b: af:fd:56:81:9b:a8:c6:dd:91:19:04:34:d9:f7:be:e8:8b:32: c1:32:7c:18:da:e0:5b:08:a9:d3:a4:d0:6b:e4:a4:db:78:60: d9:2d:e8:2f:cd:86:7e:70:65:32:82:69:38:f5:18:82:a3:2d: 71:7d:b7:79:cc:97:b5:2d:28:72:9d:80:41:f9:52:b3:e5:96: ab:57:c8:94:df:46:ab:24:a3:08:26:f2:ca:09:85:89:bb:3d: 74:1c:e9:33:32:93:ac:82:7e:6f:e8:9c:e6:3e:97:5f:de:44: b1:3b:a0:1f:d8:72:9e:67:87:1c:da:87:e9:9d:61:37:3a:4e: 6a:58:06:6f:b0:c4:8c:9e:e0:68:c0:26:dd:49:16:f9:e3:6c: 5d:80:5f:48:a9:0b:8f:33:cb:9e:b2:e2:56:5b:0e:76:d3:68: e4:bb:d4:3c:1f:5a:e1:d6:43:d3:64:9c:a1:95:35:31:07:73: a0:5a:55:84:b2:c0:ae:53:da:cf:d6:1b:61:ae:c4:fc:b0:91: 77:28:00:c3:be:e1:25:a6:e6:d8:fb:09:34:82:f5:0f:48:08: ae:72:49:de:a4:20:43:33:cd:68:c5:fd:93:bd:3a:7b:23:a7: 3a:82:85:8f -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUe45l1v0R8t0z8Jm0IiS1C4gywsowDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoQzQ3RTczRTY2OTE1NkQ4RkIzMkFCODA5NDFDNkU1QTRF RTA3RDM3QTAeFw0yNTEyMTgwODI2MDRaFw0yNTEyMjExNDI2MDRaMDMxMTAvBgNV BAMTKDlFNEI1RjgzMEM4ODA4MjFBRDIyRUQ2NjRDNTlGMzQ0NjkyQ0QwRjIwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCoUqqkA2mwJxTLth6o/T7UPWzX 2quCrjx9fbEriQ4HFvjRzEArFfaqVhBdl/mUJSpnzk4Yn2NlDfG1MZwVzjUHkD7Z GIjyDpLk2iYtDdwzUsGWGcaOT/XRGp1miuRtM8kLboOicoiwb5xecbol0s15ddjd BCUdw06w2mHjhAdxIYau5ivy5KhiUsVg9jtWn1WpLWL1NiKilxOqL7fisQJYxnrh AzHPUVPrQ0E4ScJDIhX5xG990AZ4MX0vwekeYThwnyQzwOmBq8AzGkeZ1M5dPjqq OI+WL+PHPNj9U+A9Abk4Q5pSVDpJ6cU3oeR+hV0qVEDzHYt38yz96mWG9nUBAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUnktfgwyICCGtIu1mTFnzRGks0PIwHwYDVR0j BBgwFoAUxH5z5mkVbY+zKrgJQcblpO4H03owDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby83 OTdiOGY0YS0zMTEwLTQwYjctOTAzMi0wZjAyMjE1YTBiNmEvMC9DNDdFNzNFNjY5 MTU2RDhGQjMyQUI4MDk0MUM2RTVBNEVFMDdEMzdBLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvQzQ3RTczRTY2OTE1NkQ4RkIzMkFCODA5NDFDNkU1QTRFRTA3 RDM3QS5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vNzk3YjhmNGEtMzExMC00MGI3LTkw MzItMGYwMjIxNWEwYjZhLzAvQzQ3RTczRTY2OTE1NkQ4RkIzMkFCODA5NDFDNkU1 QTRFRTA3RDM3QS5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAKB3yESdgHTVsRjEegPKslQ2W6/9VoGbqMbd kRkENNn3vuiLMsEyfBja4FsIqdOk0GvkpNt4YNkt6C/Nhn5wZTKCaTj1GIKjLXF9 t3nMl7UtKHKdgEH5UrPllqtXyJTfRqskowgm8soJhYm7PXQc6TMyk6yCfm/onOY+ l1/eRLE7oB/Ycp5nhxzah+mdYTc6TmpYBm+wxIye4GjAJt1JFvnjbF2AX0ipC48z y56y4lZbDnbTaOS71DwfWuHWQ9NknKGVNTEHc6BaVYSywK5T2s/WG2GuxPywkXco AMO+4SWm5tj7CTSC9Q9ICK5ySd6kIEMzzWjF/ZO9OnsjpzqChY8= -----END CERTIFICATE-----Generated at Fri Dec 19 11:19:50 2025 by rpki-client