This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf repo-rpki.idnic.net/repo/cf2975d5-f990-484e-9460-f136b4551f8d/0/47571F0366875B7351B244D25CB7E8258FB33E93.mft File: 47571F0366875B7351B244D25CB7E8258FB33E93.mft (raw, json) Hash identifier: A2wOa8X66LylMovFX/aaBujeR++R9thKWfvV9TgcmBQ= Subject key identifier: 70:15:8C:4F:A9:88:A3:25:0A:F7:5E:27:7D:EB:9F:0C:2F:BB:52:03 Authority key identifier: 47:57:1F:03:66:87:5B:73:51:B2:44:D2:5C:B7:E8:25:8F:B3:3E:93 Certificate issuer: /CN=47571F0366875B7351B244D25CB7E8258FB33E93 Certificate serial: 3298D8BE4E4E1F92A94CD24C6CD6BE055ABF80EF Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/47571F0366875B7351B244D25CB7E8258FB33E93.cer Subject info access: rsync://repo-rpki.idnic.net/repo/cf2975d5-f990-484e-9460-f136b4551f8d/0/47571F0366875B7351B244D25CB7E8258FB33E93.mft Manifest number: B6 Signing time: Sat 20 Dec 2025 08:13:06 +0000 Manifest this update: Sat 20 Dec 2025 08:08:06 +0000 Manifest next update: Tue 23 Dec 2025 19:41:06 +0000 Files and hashes: 1: 3136302e3138372e3136342e302f32342d3234203d3e20313439393333.roa (hash: EQmwZNedUjq2O/AJCi3gmfSvtjSzhrTVmBFbfysjDew=) 2: 47571F0366875B7351B244D25CB7E8258FB33E93.crl (hash: F/X79YQVAfy+XEUifvC9AkUGcPCPValYTuC6TjmTCZY=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/cf2975d5-f990-484e-9460-f136b4551f8d/0/47571F0366875B7351B244D25CB7E8258FB33E93.crl rsync://repo-rpki.idnic.net/repo/cf2975d5-f990-484e-9460-f136b4551f8d/0/47571F0366875B7351B244D25CB7E8258FB33E93.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/47571F0366875B7351B244D25CB7E8258FB33E93.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/60F8BE9C16625C424B269EE06C64A83BAB8506D4.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/60F8BE9C16625C424B269EE06C64A83BAB8506D4.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/YPi-nBZiXEJLJp7gbGSoO6uFBtQ.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 23 Dec 2025 15:37:53 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 32:98:d8:be:4e:4e:1f:92:a9:4c:d2:4c:6c:d6:be:05:5a:bf:80:ef Signature Algorithm: sha256WithRSAEncryption Issuer: CN=47571F0366875B7351B244D25CB7E8258FB33E93 Validity Not Before: Dec 20 08:08:06 2025 GMT Not After : Dec 23 19:41:06 2025 GMT Subject: CN=70158C4FA988A3250AF75E277DEB9F0C2FBB5203 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ed:d0:88:ed:09:2d:c2:fd:36:73:cc:a2:8e:4d: 3d:79:77:84:21:2e:d5:fe:63:b1:11:0b:d7:be:f6: 51:a7:0d:dc:ef:19:9f:60:44:37:ae:8e:19:aa:f4: 05:2a:ed:85:f3:02:b5:c8:b1:a9:c8:f9:57:d7:79: dd:43:7a:cb:b7:d0:62:c0:a6:a0:8f:c3:c0:58:19: 0f:f1:da:ae:f6:44:ca:79:65:40:5e:f1:3b:32:80: ed:8a:15:2c:ab:7b:4e:a4:aa:67:ca:04:c5:ea:52: 6c:33:47:81:1d:40:cb:e7:e5:ef:20:fd:7c:b7:11: 71:0f:26:6e:48:de:c2:97:33:40:2d:35:a3:3e:05: 09:8f:85:06:e2:80:7e:11:f7:9b:73:fb:db:e2:ab: 49:8c:dd:97:f9:03:a9:5b:23:36:b0:c2:59:34:df: fb:c3:75:40:cc:6a:4b:15:94:8c:c7:bc:ce:18:90: 3b:78:79:74:24:ed:02:b6:31:7e:73:17:5a:44:a2: 1f:be:33:35:d1:48:18:f1:2b:55:97:b3:73:45:76: 44:20:ed:9e:79:bc:ca:a9:ff:c1:d2:1f:52:e9:8c: f9:85:68:48:5a:20:9a:c8:7d:ff:3f:83:d8:05:19: b5:ba:67:f7:00:1f:87:33:5d:4c:b3:3b:a0:4e:aa: 7c:59 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 70:15:8C:4F:A9:88:A3:25:0A:F7:5E:27:7D:EB:9F:0C:2F:BB:52:03 X509v3 Authority Key Identifier: keyid:47:57:1F:03:66:87:5B:73:51:B2:44:D2:5C:B7:E8:25:8F:B3:3E:93 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/cf2975d5-f990-484e-9460-f136b4551f8d/0/47571F0366875B7351B244D25CB7E8258FB33E93.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/47571F0366875B7351B244D25CB7E8258FB33E93.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/cf2975d5-f990-484e-9460-f136b4551f8d/0/47571F0366875B7351B244D25CB7E8258FB33E93.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 90:9b:33:7b:6c:31:05:5a:c8:a8:25:ee:2f:c6:b6:81:33:f7: 50:e6:f5:59:94:d6:ce:bc:8e:36:77:99:bc:0e:a6:f8:15:f1: a2:aa:3f:12:13:a3:7e:74:22:77:33:e4:8c:76:1f:a1:53:bb: 19:93:6d:e2:02:cc:7e:4b:8b:bb:56:48:45:ba:79:13:8d:e5: 7d:24:00:7d:85:63:fc:90:bd:80:86:54:d3:78:f8:12:16:2c: 52:c1:a6:74:b2:24:1b:57:21:53:da:8b:11:70:ef:7c:a6:d2: 46:1c:38:e7:a7:28:e4:51:d2:64:1c:2d:e5:1b:0f:02:fa:c2: 0d:03:bd:4d:ad:07:0f:a5:d9:f1:ee:60:bd:23:f7:17:c2:34: c8:2d:2b:a4:cb:0d:98:a6:e8:63:2f:1e:1c:91:74:64:6e:3f: 19:f8:8f:9a:df:d8:60:d1:02:75:0d:ce:a5:ec:a1:a5:43:26: 7a:bc:79:fb:68:a3:51:ad:7b:c9:10:05:77:73:52:0e:1d:4a: 04:19:c5:55:6b:9a:da:3c:55:1c:6f:8d:fa:94:a6:ec:d6:d2: b8:06:24:f9:a2:79:30:bb:36:5c:8a:47:44:49:8e:ee:5f:3d: 8b:8e:02:d5:be:77:91:55:ef:63:49:0f:48:3e:ae:e9:0c:c4: a6:be:45:2a -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUMpjYvk5OH5KpTNJMbNa+BVq/gO8wDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoNDc1NzFGMDM2Njg3NUI3MzUxQjI0NEQyNUNCN0U4MjU4 RkIzM0U5MzAeFw0yNTEyMjAwODA4MDZaFw0yNTEyMjMxOTQxMDZaMDMxMTAvBgNV BAMTKDcwMTU4QzRGQTk4OEEzMjUwQUY3NUUyNzdERUI5RjBDMkZCQjUyMDMwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDt0IjtCS3C/TZzzKKOTT15d4Qh LtX+Y7ERC9e+9lGnDdzvGZ9gRDeujhmq9AUq7YXzArXIsanI+VfXed1Desu30GLA pqCPw8BYGQ/x2q72RMp5ZUBe8TsygO2KFSyre06kqmfKBMXqUmwzR4EdQMvn5e8g /Xy3EXEPJm5I3sKXM0AtNaM+BQmPhQbigH4R95tz+9viq0mM3Zf5A6lbIzawwlk0 3/vDdUDMaksVlIzHvM4YkDt4eXQk7QK2MX5zF1pEoh++MzXRSBjxK1WXs3NFdkQg 7Z55vMqp/8HSH1LpjPmFaEhaIJrIff8/g9gFGbW6Z/cAH4czXUyzO6BOqnxZAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUcBWMT6mIoyUK914nfeufDC+7UgMwHwYDVR0j BBgwFoAUR1cfA2aHW3NRskTSXLfoJY+zPpMwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby9j ZjI5NzVkNS1mOTkwLTQ4NGUtOTQ2MC1mMTM2YjQ1NTFmOGQvMC80NzU3MUYwMzY2 ODc1QjczNTFCMjQ0RDI1Q0I3RTgyNThGQjMzRTkzLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzEvNDc1NzFGMDM2Njg3NUI3MzUxQjI0NEQyNUNCN0U4MjU4RkIz M0U5My5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vY2YyOTc1ZDUtZjk5MC00ODRlLTk0 NjAtZjEzNmI0NTUxZjhkLzAvNDc1NzFGMDM2Njg3NUI3MzUxQjI0NEQyNUNCN0U4 MjU4RkIzM0U5My5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAJCbM3tsMQVayKgl7i/GtoEz91Dm9VmU1s68 jjZ3mbwOpvgV8aKqPxITo350Incz5Ix2H6FTuxmTbeICzH5Li7tWSEW6eRON5X0k AH2FY/yQvYCGVNN4+BIWLFLBpnSyJBtXIVPaixFw73ym0kYcOOenKORR0mQcLeUb DwL6wg0DvU2tBw+l2fHuYL0j9xfCNMgtK6TLDZim6GMvHhyRdGRuPxn4j5rf2GDR AnUNzqXsoaVDJnq8eftoo1Gte8kQBXdzUg4dSgQZxVVrmto8VRxvjfqUpuzW0rgG JPmieTC7NlyKR0RJju5fPYuOAtW+d5FV72NJD0g+rukMxKa+RSo= -----END CERTIFICATE-----Generated at Sun Dec 21 15:26:07 2025 by rpki-client