This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf repo-rpki.idnic.net/repo/c4956505-d6b3-43dc-9070-d4dbdb7cf963/0/47CBAD1A648715C5E867F1A2ED3558688608EE19.mft
File:                     47CBAD1A648715C5E867F1A2ED3558688608EE19.mft (raw, json)
Hash identifier:          5kYmispcG7IB3j7hYzQz9W1Z76ljfYOJdlTiuvIxbGY=
Subject key identifier:   FC:83:0B:6D:D1:E8:3E:1B:C1:6F:B7:A3:32:E1:C2:80:70:DD:D9:05
Authority key identifier: 47:CB:AD:1A:64:87:15:C5:E8:67:F1:A2:ED:35:58:68:86:08:EE:19
Certificate issuer:       /CN=47CBAD1A648715C5E867F1A2ED3558688608EE19
Certificate serial:       30174B0C49ACB95C4AB74C4A5BCE0A5DCAE2EED6
Authority info access:    rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/47CBAD1A648715C5E867F1A2ED3558688608EE19.cer
Subject info access:      rsync://repo-rpki.idnic.net/repo/c4956505-d6b3-43dc-9070-d4dbdb7cf963/0/47CBAD1A648715C5E867F1A2ED3558688608EE19.mft
Manifest number:          0196
Signing time:             Mon 22 Dec 2025 20:01:20 +0000
Manifest this update:     Mon 22 Dec 2025 19:56:20 +0000
Manifest next update:     Fri 26 Dec 2025 00:49:20 +0000
Files and hashes:         1: 47CBAD1A648715C5E867F1A2ED3558688608EE19.crl (hash: Ys2oflXVZxXFEM+KNYT8AXqgE6tkSgNrex8vOQp7Ul4=)
                          2: 3130332e3135332e3135302e302f32342d3234203d3e20313430343637.roa (hash: 1a16GMwOcOCsjYtXlZLoq81/WntEbXylQSYsmM31kuc=)
                          3: 3130332e3233352e36352e302f32342d3234203d3e20313430343637.roa (hash: zg3C7UqiFNjk6v4cmaqyG4vvOgQ3amedsyfg+VEOO70=)
                          4: 323430363a343634303a3a2f33322d3332203d3e20313430343637.roa (hash: +ck2E10dFd5/OEf+e40wX7Ntpp2HW/ZWwaXbGUuqd1Q=)
Validation:               OK
Signature path:           rsync://repo-rpki.idnic.net/repo/c4956505-d6b3-43dc-9070-d4dbdb7cf963/0/47CBAD1A648715C5E867F1A2ED3558688608EE19.crl
                          rsync://repo-rpki.idnic.net/repo/c4956505-d6b3-43dc-9070-d4dbdb7cf963/0/47CBAD1A648715C5E867F1A2ED3558688608EE19.mft
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/47CBAD1A648715C5E867F1A2ED3558688608EE19.cer
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Fri 26 Dec 2025 00:49:20 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            30:17:4b:0c:49:ac:b9:5c:4a:b7:4c:4a:5b:ce:0a:5d:ca:e2:ee:d6
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=47CBAD1A648715C5E867F1A2ED3558688608EE19
        Validity
            Not Before: Dec 22 19:56:20 2025 GMT
            Not After : Dec 26 00:49:20 2025 GMT
        Subject: CN=FC830B6DD1E83E1BC16FB7A332E1C28070DDD905
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a6:ee:94:f6:17:4b:2b:d5:0c:79:2f:16:27:42:
                    b5:34:27:67:3f:b7:05:ed:45:ff:12:87:9d:ad:4c:
                    85:58:70:9d:44:8f:5f:dc:85:4d:5c:85:e9:4d:de:
                    4d:17:9d:6e:1d:be:d9:b9:dc:8e:90:c1:9a:53:a5:
                    49:7f:f6:21:c0:94:33:d0:4b:6f:79:af:1f:da:1c:
                    35:48:f5:8b:f0:cb:82:60:13:f7:ce:17:7d:f9:11:
                    28:65:08:29:58:a1:e6:c7:1d:84:41:f8:f5:dd:d4:
                    de:c8:a6:99:07:06:2c:4a:fa:05:0e:6c:c4:39:1e:
                    b3:97:f3:ff:9c:83:6e:9c:d6:3c:8a:2e:2f:3e:f1:
                    b2:1e:91:b5:99:91:0b:26:43:59:49:df:86:94:36:
                    13:5b:14:a6:91:e1:83:34:c8:03:e5:41:d5:bf:48:
                    f1:a5:9b:a3:81:fe:1b:04:7d:00:60:ef:98:f2:b6:
                    55:9c:11:ee:89:7a:10:67:10:53:8c:60:34:90:ae:
                    1b:29:86:87:8a:59:5d:4e:52:71:7d:a2:a4:d4:0d:
                    48:0b:e9:93:e9:a8:57:24:91:12:c8:26:08:57:73:
                    b0:1d:dc:58:b5:e0:4c:82:e8:1f:da:ab:f2:d8:5d:
                    c7:8f:7c:28:4a:e4:b4:fc:6f:74:8c:20:2e:32:90:
                    f6:93
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                FC:83:0B:6D:D1:E8:3E:1B:C1:6F:B7:A3:32:E1:C2:80:70:DD:D9:05
            X509v3 Authority Key Identifier:
                keyid:47:CB:AD:1A:64:87:15:C5:E8:67:F1:A2:ED:35:58:68:86:08:EE:19

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repo-rpki.idnic.net/repo/c4956505-d6b3-43dc-9070-d4dbdb7cf963/0/47CBAD1A648715C5E867F1A2ED3558688608EE19.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/47CBAD1A648715C5E867F1A2ED3558688608EE19.cer

            Subject Information Access:
                Signed Object - URI:rsync://repo-rpki.idnic.net/repo/c4956505-d6b3-43dc-9070-d4dbdb7cf963/0/47CBAD1A648715C5E867F1A2ED3558688608EE19.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         4a:fb:5e:4e:ee:f0:ac:d1:bd:d6:79:e4:18:a4:3f:e6:6e:59:
         83:7c:51:6a:f4:01:53:c9:5a:e8:be:a7:bf:42:b0:96:9b:49:
         68:dd:be:d8:11:8a:81:04:02:e3:f2:73:93:bb:a6:41:e9:dc:
         f6:74:77:a8:d3:f0:e2:84:e9:a0:1a:bf:d5:40:28:e7:79:9e:
         cd:cf:0c:b7:f3:8a:0a:79:39:71:ab:3d:b8:54:06:ee:b7:7e:
         09:f4:19:2b:99:0a:19:e5:81:35:aa:71:e5:50:18:b2:73:a6:
         61:cc:63:b2:54:5e:a6:bf:d8:ae:e6:c5:bf:39:55:b9:ab:4b:
         ad:63:03:2b:1d:84:e1:80:a3:b4:f4:73:4d:a6:e7:73:d3:cd:
         32:63:ed:e5:20:4f:8d:36:d3:98:c3:5d:4c:10:ca:18:de:5c:
         34:29:ce:32:27:12:bd:98:f4:29:ba:6e:b0:1e:9c:46:38:00:
         fe:ba:4b:54:82:28:c5:de:a0:89:df:df:5a:36:ca:5c:4d:5b:
         cb:56:e2:ac:ff:53:e5:fd:93:af:59:b6:52:b5:02:72:63:25:
         23:06:8f:38:16:f9:47:45:0f:c2:a1:db:52:28:7b:ee:ff:2b:
         67:ef:a7:fa:49:30:37:c1:7d:fa:e5:a9:d1:c8:62:07:36:2e:
         12:60:6d:67
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Dec 25 00:41:46 2025 by rpki-client