This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf repo-rpki.idnic.net/repo/b3c973d5-fe94-400d-bcbf-f233e8ac5537/0/47A9D99A8511F7CE54F9F71E1EF83EF548924274.mft File: 47A9D99A8511F7CE54F9F71E1EF83EF548924274.mft (raw, json) Hash identifier: 4iL4TxM5sCxNJPEGQIYT6aAoeUgfXmwvK8Lf6vem1k0= Subject key identifier: 87:E0:72:45:74:16:BC:9D:AA:9A:31:4C:60:A2:9B:8F:74:24:42:FC Authority key identifier: 47:A9:D9:9A:85:11:F7:CE:54:F9:F7:1E:1E:F8:3E:F5:48:92:42:74 Certificate issuer: /CN=47A9D99A8511F7CE54F9F71E1EF83EF548924274 Certificate serial: 5300057A47815F19047FBCE62C930897882FF735 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/47A9D99A8511F7CE54F9F71E1EF83EF548924274.cer Subject info access: rsync://repo-rpki.idnic.net/repo/b3c973d5-fe94-400d-bcbf-f233e8ac5537/0/47A9D99A8511F7CE54F9F71E1EF83EF548924274.mft Manifest number: 01EC Signing time: Wed 24 Dec 2025 15:10:40 +0000 Manifest this update: Wed 24 Dec 2025 15:05:40 +0000 Manifest next update: Sat 27 Dec 2025 16:49:40 +0000 Files and hashes: 1: 3130332e37382e3234302e302f32342d3234203d3e20313530343836.roa (hash: Co4oCqQgIJlqQAiLFlbpmiRGvqJo8VYFhlYbFw0DIow=) 2: 47A9D99A8511F7CE54F9F71E1EF83EF548924274.crl (hash: QoaZFllPW/xemNtUUeSZ36RuMCJKorLDhL6e8WHduLg=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/b3c973d5-fe94-400d-bcbf-f233e8ac5537/0/47A9D99A8511F7CE54F9F71E1EF83EF548924274.crl rsync://repo-rpki.idnic.net/repo/b3c973d5-fe94-400d-bcbf-f233e8ac5537/0/47A9D99A8511F7CE54F9F71E1EF83EF548924274.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/47A9D99A8511F7CE54F9F71E1EF83EF548924274.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 27 Dec 2025 16:49:40 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 53:00:05:7a:47:81:5f:19:04:7f:bc:e6:2c:93:08:97:88:2f:f7:35 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=47A9D99A8511F7CE54F9F71E1EF83EF548924274 Validity Not Before: Dec 24 15:05:40 2025 GMT Not After : Dec 27 16:49:40 2025 GMT Subject: CN=87E072457416BC9DAA9A314C60A29B8F742442FC Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c2:ee:76:2f:a9:e9:b7:2e:2c:70:25:b5:9c:e8: 0a:bd:68:2b:f7:f5:c8:58:14:41:ae:29:e2:b6:f9: d6:04:8b:ee:93:56:50:f2:cb:30:18:7e:03:3e:c3: 39:01:28:d9:db:96:c8:0d:90:07:42:0b:af:8f:40: 8f:09:07:cb:ab:5b:fc:b8:1a:aa:73:22:b2:63:3c: 5a:73:37:d9:a6:c0:c0:07:d0:ab:85:67:8f:b6:68: a4:83:5e:f1:75:08:9e:0b:cc:e3:ec:67:7c:b9:7a: cf:7c:f4:2f:e2:f4:c0:c6:a3:ba:ea:37:d2:5e:71: a7:28:f0:06:67:1a:3a:4c:07:5d:27:8a:a6:43:a8: a8:d0:9b:f7:48:ed:db:cc:22:08:6c:21:96:71:9d: 9e:17:af:53:3e:98:18:40:2c:26:17:ef:82:3e:3e: 2f:56:fb:95:1f:5d:69:b9:df:18:5e:79:c6:5b:17: c3:2c:9b:df:ba:fd:74:cd:c5:37:01:e3:22:6f:2d: 4a:2d:98:6a:8e:6a:2d:3b:a9:e7:27:25:9f:5f:ec: 9b:d7:9b:06:eb:41:00:74:6d:39:d6:57:13:67:d2: 91:32:db:f8:c4:95:ad:12:cf:e8:b6:ea:ad:dd:c8: 3e:18:20:c4:85:30:00:15:12:3d:7f:0d:7f:60:08: 70:55 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 87:E0:72:45:74:16:BC:9D:AA:9A:31:4C:60:A2:9B:8F:74:24:42:FC X509v3 Authority Key Identifier: keyid:47:A9:D9:9A:85:11:F7:CE:54:F9:F7:1E:1E:F8:3E:F5:48:92:42:74 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/b3c973d5-fe94-400d-bcbf-f233e8ac5537/0/47A9D99A8511F7CE54F9F71E1EF83EF548924274.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/47A9D99A8511F7CE54F9F71E1EF83EF548924274.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/b3c973d5-fe94-400d-bcbf-f233e8ac5537/0/47A9D99A8511F7CE54F9F71E1EF83EF548924274.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 54:66:1b:ed:ba:b0:e7:a7:7e:b6:2c:c5:ed:f8:24:73:e1:89: 3d:76:24:dc:f2:c9:54:3a:e4:72:78:5c:5b:f9:31:3f:d3:ed: ef:31:47:1f:2d:09:1b:89:cd:9f:85:2d:64:6f:16:07:d7:f1: aa:68:77:cd:2d:4a:5a:5d:b7:44:48:c5:d6:a2:43:43:a0:02: 4e:ab:2b:7f:95:6d:88:0b:2f:79:4f:7d:b4:f2:4a:ef:f0:07: 8d:cd:27:d0:65:98:25:e9:44:55:a2:24:9f:63:38:af:4f:3a: 72:ba:0a:10:52:d2:15:ca:49:db:9d:ec:e1:93:f4:d0:9c:9c: 12:df:1d:39:65:bf:aa:12:61:02:41:09:1e:0c:ec:41:9e:aa: b1:88:07:73:06:a0:1b:b8:e1:26:d0:1e:6a:b6:0c:25:0c:f1: 26:a3:b8:a5:65:22:96:a7:4d:78:5f:70:4a:07:15:d3:5b:70: 1e:59:a9:ac:9e:c9:45:40:e0:d2:f3:b1:ea:04:a8:2f:86:97: 51:26:72:58:00:df:d9:4c:7a:22:18:f9:25:85:a5:27:e7:db: c6:1c:a2:ce:27:e1:c7:29:98:df:2f:32:92:7b:a1:39:9b:33: 10:81:54:a8:8c:64:fa:b6:79:f1:98:7e:b1:c8:e8:83:5c:f1: c6:1d:ce:b8 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUUwAFekeBXxkEf7zmLJMIl4gv9zUwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoNDdBOUQ5OUE4NTExRjdDRTU0RjlGNzFFMUVGODNFRjU0 ODkyNDI3NDAeFw0yNTEyMjQxNTA1NDBaFw0yNTEyMjcxNjQ5NDBaMDMxMTAvBgNV BAMTKDg3RTA3MjQ1NzQxNkJDOURBQTlBMzE0QzYwQTI5QjhGNzQyNDQyRkMwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDC7nYvqem3LixwJbWc6Aq9aCv3 9chYFEGuKeK2+dYEi+6TVlDyyzAYfgM+wzkBKNnblsgNkAdCC6+PQI8JB8urW/y4 GqpzIrJjPFpzN9mmwMAH0KuFZ4+2aKSDXvF1CJ4LzOPsZ3y5es989C/i9MDGo7rq N9Jecaco8AZnGjpMB10niqZDqKjQm/dI7dvMIghsIZZxnZ4Xr1M+mBhALCYX74I+ Pi9W+5UfXWm53xheecZbF8Msm9+6/XTNxTcB4yJvLUotmGqOai07qecnJZ9f7JvX mwbrQQB0bTnWVxNn0pEy2/jEla0Sz+i26q3dyD4YIMSFMAAVEj1/DX9gCHBVAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUh+ByRXQWvJ2qmjFMYKKbj3QkQvwwHwYDVR0j BBgwFoAUR6nZmoUR985U+fceHvg+9UiSQnQwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby9i M2M5NzNkNS1mZTk0LTQwMGQtYmNiZi1mMjMzZThhYzU1MzcvMC80N0E5RDk5QTg1 MTFGN0NFNTRGOUY3MUUxRUY4M0VGNTQ4OTI0Mjc0LmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvNDdBOUQ5OUE4NTExRjdDRTU0RjlGNzFFMUVGODNFRjU0ODky NDI3NC5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vYjNjOTczZDUtZmU5NC00MDBkLWJj YmYtZjIzM2U4YWM1NTM3LzAvNDdBOUQ5OUE4NTExRjdDRTU0RjlGNzFFMUVGODNF RjU0ODkyNDI3NC5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAFRmG+26sOenfrYsxe34JHPhiT12JNzyyVQ6 5HJ4XFv5MT/T7e8xRx8tCRuJzZ+FLWRvFgfX8apod80tSlpdt0RIxdaiQ0OgAk6r K3+VbYgLL3lPfbTySu/wB43NJ9BlmCXpRFWiJJ9jOK9POnK6ChBS0hXKSdud7OGT 9NCcnBLfHTllv6oSYQJBCR4M7EGeqrGIB3MGoBu44SbQHmq2DCUM8SajuKVlIpan TXhfcEoHFdNbcB5ZqayeyUVA4NLzseoEqC+Gl1EmclgA39lMeiIY+SWFpSfn28Yc os4n4ccpmN8vMpJ7oTmbMxCBVKiMZPq2efGYfrHI6INc8cYdzrg= -----END CERTIFICATE-----Generated at Wed Dec 24 22:11:37 2025 by rpki-client