This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf repo-rpki.idnic.net/repo/af5fa54d-248e-423c-9e49-d6e6bfbbf78b/0/47C7E54A67164AFF95399B44CF7AFF364CD0476C.mft File: 47C7E54A67164AFF95399B44CF7AFF364CD0476C.mft (raw, json) Hash identifier: RXYhgbaBaNay8xC/ECAlJ9+dDSQ+iqtqOfRDS13IFRg= Subject key identifier: 9C:F0:3E:FF:E3:19:FC:A1:E5:F9:BD:13:56:39:A4:76:2A:1C:B9:6E Authority key identifier: 47:C7:E5:4A:67:16:4A:FF:95:39:9B:44:CF:7A:FF:36:4C:D0:47:6C Certificate issuer: /CN=47C7E54A67164AFF95399B44CF7AFF364CD0476C Certificate serial: 3F7C80D24B728F4761AE022EC0FC7CDEFD5CB052 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/47C7E54A67164AFF95399B44CF7AFF364CD0476C.cer Subject info access: rsync://repo-rpki.idnic.net/repo/af5fa54d-248e-423c-9e49-d6e6bfbbf78b/0/47C7E54A67164AFF95399B44CF7AFF364CD0476C.mft Manifest number: 0211 Signing time: Thu 18 Dec 2025 02:50:58 +0000 Manifest this update: Thu 18 Dec 2025 02:45:58 +0000 Manifest next update: Sun 21 Dec 2025 02:51:58 +0000 Files and hashes: 1: 47C7E54A67164AFF95399B44CF7AFF364CD0476C.crl (hash: wzWC7Brhx3PeZw+GjRc2X1XlK4BEo5rkJxJd1cYyUt4=) 2: 3130332e3139312e3136352e302f32342d3234203d3e20313439393235.roa (hash: YpgQnQU5lvkeRKFK74g+rncTHe8QCPlhwaAIMSjOHQI=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/af5fa54d-248e-423c-9e49-d6e6bfbbf78b/0/47C7E54A67164AFF95399B44CF7AFF364CD0476C.crl rsync://repo-rpki.idnic.net/repo/af5fa54d-248e-423c-9e49-d6e6bfbbf78b/0/47C7E54A67164AFF95399B44CF7AFF364CD0476C.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/47C7E54A67164AFF95399B44CF7AFF364CD0476C.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 21 Dec 2025 02:51:58 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 3f:7c:80:d2:4b:72:8f:47:61:ae:02:2e:c0:fc:7c:de:fd:5c:b0:52 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=47C7E54A67164AFF95399B44CF7AFF364CD0476C Validity Not Before: Dec 18 02:45:58 2025 GMT Not After : Dec 21 02:51:58 2025 GMT Subject: CN=9CF03EFFE319FCA1E5F9BD135639A4762A1CB96E Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b0:73:2f:38:9d:02:b7:54:f0:1d:ad:09:e9:b6: 28:c8:5e:19:e9:39:9b:20:75:c6:8f:74:32:f3:b3: 7c:93:7d:58:a9:9d:da:ac:dc:55:2a:b5:c2:e0:98: 13:f6:4a:c6:81:cb:2c:bb:12:5c:29:ff:60:13:11: 91:2f:58:de:eb:e4:27:65:c8:87:7d:3d:76:b3:f2: 4f:7d:e8:d9:fd:e4:9e:d2:84:42:a5:bd:9d:0d:13: ac:cc:64:54:4f:a2:a5:20:60:95:1a:21:32:fa:9c: a1:7e:74:02:60:27:fd:f2:a0:16:d9:fe:4c:3d:06: 1b:0b:11:a1:8d:ca:b1:9c:d2:94:09:88:e1:d3:ca: ab:da:6e:29:27:0b:14:d5:51:fd:76:95:46:2c:5c: 0e:47:a3:09:bf:db:1b:0e:7c:23:e6:2e:ef:c6:88: 73:3f:73:42:93:b2:06:85:c0:23:6e:5c:f9:d7:c5: 87:22:ec:ac:63:61:13:07:74:0e:9e:14:9a:6e:be: 6c:c2:42:86:c4:49:3a:76:7b:6d:31:51:c8:b2:96: ef:60:03:d5:ad:d5:f7:5c:d4:4c:a5:a0:4b:d7:d9: 66:9c:c5:e2:1c:a1:bb:2f:0c:fe:14:c0:31:d2:6d: 7d:cc:c3:f6:78:57:32:80:01:86:07:09:59:4d:c2: 2e:c5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 9C:F0:3E:FF:E3:19:FC:A1:E5:F9:BD:13:56:39:A4:76:2A:1C:B9:6E X509v3 Authority Key Identifier: keyid:47:C7:E5:4A:67:16:4A:FF:95:39:9B:44:CF:7A:FF:36:4C:D0:47:6C X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/af5fa54d-248e-423c-9e49-d6e6bfbbf78b/0/47C7E54A67164AFF95399B44CF7AFF364CD0476C.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/47C7E54A67164AFF95399B44CF7AFF364CD0476C.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/af5fa54d-248e-423c-9e49-d6e6bfbbf78b/0/47C7E54A67164AFF95399B44CF7AFF364CD0476C.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 47:76:be:40:bf:42:6b:ce:d1:98:93:a8:fb:be:dd:4a:84:a7: 38:ae:91:6e:c5:17:8b:d7:42:ac:76:b1:1d:d8:72:f9:cf:57: 27:e7:38:33:81:f8:b6:3b:11:7a:98:f5:24:09:a9:46:b4:3e: 8d:a7:28:b7:3c:44:95:5e:ee:72:7f:1c:c9:b5:75:d7:a6:16: bd:54:61:a3:ae:c8:e0:4e:61:7d:29:84:65:37:84:d4:19:69: ed:97:4f:33:d2:05:e9:5f:6e:ea:fa:54:b2:0a:b3:03:27:25: 96:94:f9:58:94:fd:21:e1:a8:46:3c:24:1f:b4:84:4f:89:89: 51:7d:c6:86:a7:0a:1f:cd:d8:14:e7:b4:21:58:cc:4c:e3:b5: 7a:71:4c:f6:94:55:2d:65:b7:5a:de:61:c1:e9:e5:cb:d2:b4: 99:3e:76:92:13:61:c6:f7:dc:2f:a1:88:66:f5:ee:2c:96:43: 24:84:5c:5b:b1:89:dd:d6:20:95:c3:f5:13:31:05:f6:12:3e: a0:89:46:de:82:7a:fa:63:f3:bd:38:00:cf:e2:76:c3:c8:ae: db:d5:0d:81:64:9d:4c:b5:26:3c:95:fb:f3:43:90:7b:31:d4: ca:10:e7:24:f0:09:b2:d5:d5:e0:c7:78:75:c3:52:10:9c:56: ff:ba:b8:1a -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUP3yA0ktyj0dhrgIuwPx83v1csFIwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoNDdDN0U1NEE2NzE2NEFGRjk1Mzk5QjQ0Q0Y3QUZGMzY0 Q0QwNDc2QzAeFw0yNTEyMTgwMjQ1NThaFw0yNTEyMjEwMjUxNThaMDMxMTAvBgNV BAMTKDlDRjAzRUZGRTMxOUZDQTFFNUY5QkQxMzU2MzlBNDc2MkExQ0I5NkUwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCwcy84nQK3VPAdrQnptijIXhnp OZsgdcaPdDLzs3yTfVipndqs3FUqtcLgmBP2SsaByyy7Elwp/2ATEZEvWN7r5Cdl yId9PXaz8k996Nn95J7ShEKlvZ0NE6zMZFRPoqUgYJUaITL6nKF+dAJgJ/3yoBbZ /kw9BhsLEaGNyrGc0pQJiOHTyqvabiknCxTVUf12lUYsXA5Howm/2xsOfCPmLu/G iHM/c0KTsgaFwCNuXPnXxYci7KxjYRMHdA6eFJpuvmzCQobESTp2e20xUciylu9g A9Wt1fdc1EyloEvX2WacxeIcobsvDP4UwDHSbX3Mw/Z4VzKAAYYHCVlNwi7FAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUnPA+/+MZ/KHl+b0TVjmkdiocuW4wHwYDVR0j BBgwFoAUR8flSmcWSv+VOZtEz3r/NkzQR2wwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby9h ZjVmYTU0ZC0yNDhlLTQyM2MtOWU0OS1kNmU2YmZiYmY3OGIvMC80N0M3RTU0QTY3 MTY0QUZGOTUzOTlCNDRDRjdBRkYzNjRDRDA0NzZDLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvNDdDN0U1NEE2NzE2NEFGRjk1Mzk5QjQ0Q0Y3QUZGMzY0Q0Qw NDc2Qy5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vYWY1ZmE1NGQtMjQ4ZS00MjNjLTll NDktZDZlNmJmYmJmNzhiLzAvNDdDN0U1NEE2NzE2NEFGRjk1Mzk5QjQ0Q0Y3QUZG MzY0Q0QwNDc2Qy5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAEd2vkC/QmvO0ZiTqPu+3UqEpziukW7FF4vX Qqx2sR3YcvnPVyfnODOB+LY7EXqY9SQJqUa0Po2nKLc8RJVe7nJ/HMm1ddemFr1U YaOuyOBOYX0phGU3hNQZae2XTzPSBelfbur6VLIKswMnJZaU+ViU/SHhqEY8JB+0 hE+JiVF9xoanCh/N2BTntCFYzEzjtXpxTPaUVS1lt1reYcHp5cvStJk+dpITYcb3 3C+hiGb17iyWQySEXFuxid3WIJXD9RMxBfYSPqCJRt6Cevpj8704AM/idsPIrtvV DYFknUy1JjyV+/NDkHsx1MoQ5yTwCbLV1eDHeHXDUhCcVv+6uBo= -----END CERTIFICATE-----Generated at Fri Dec 19 18:46:23 2025 by rpki-client