This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf repo-rpki.idnic.net/repo/dce9f43d-08ba-4d02-8f38-74732f15cd8c/0/47E5E36B848613534A65DDE4FBA27AB59A745B50.mft File: 47E5E36B848613534A65DDE4FBA27AB59A745B50.mft (raw, json) Hash identifier: Izxjq/Jybl0NSVXMDUu3an2jMb5ejseqcTC8RBsKtec= Subject key identifier: B9:A5:F1:E1:4B:14:35:B6:6C:AF:E1:65:EC:82:9E:A2:1B:13:E1:5F Authority key identifier: 47:E5:E3:6B:84:86:13:53:4A:65:DD:E4:FB:A2:7A:B5:9A:74:5B:50 Certificate issuer: /CN=47E5E36B848613534A65DDE4FBA27AB59A745B50 Certificate serial: 4196059512654CEEB23488B68A0DA1D804B32300 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/47E5E36B848613534A65DDE4FBA27AB59A745B50.cer Subject info access: rsync://repo-rpki.idnic.net/repo/dce9f43d-08ba-4d02-8f38-74732f15cd8c/0/47E5E36B848613534A65DDE4FBA27AB59A745B50.mft Manifest number: 025E Signing time: Sat 20 Dec 2025 15:32:27 +0000 Manifest this update: Sat 20 Dec 2025 15:27:27 +0000 Manifest next update: Tue 23 Dec 2025 18:47:27 +0000 Files and hashes: 1: 3130332e3138362e33332e302f32342d3234203d3e20313439363930.roa (hash: P4hdS37EWneF08stt5Krg+rWSIKfiKz6ffEd1QqCT5Q=) 2: 3130332e3138362e33322e302f32342d3234203d3e20313439363930.roa (hash: WkOEvMx4pLjLVaF0ggIqh7pDPWEbi8P19IogxuTVO3k=) 3: 47E5E36B848613534A65DDE4FBA27AB59A745B50.crl (hash: FJ826rdOkesvFpDf0Qpe4Tjb6GFP8xAkfzbLWeMnK+w=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/dce9f43d-08ba-4d02-8f38-74732f15cd8c/0/47E5E36B848613534A65DDE4FBA27AB59A745B50.crl rsync://repo-rpki.idnic.net/repo/dce9f43d-08ba-4d02-8f38-74732f15cd8c/0/47E5E36B848613534A65DDE4FBA27AB59A745B50.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/47E5E36B848613534A65DDE4FBA27AB59A745B50.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 23 Dec 2025 18:47:27 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 41:96:05:95:12:65:4c:ee:b2:34:88:b6:8a:0d:a1:d8:04:b3:23:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=47E5E36B848613534A65DDE4FBA27AB59A745B50 Validity Not Before: Dec 20 15:27:27 2025 GMT Not After : Dec 23 18:47:27 2025 GMT Subject: CN=B9A5F1E14B1435B66CAFE165EC829EA21B13E15F Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ab:88:36:9e:72:c6:cb:b2:1e:84:e8:a1:43:d7: db:22:6e:e6:26:b3:d4:d8:ee:17:f1:35:b6:fd:c1: bf:05:a9:15:1f:4e:2d:c9:ba:bb:39:b8:76:a0:0a: 09:1b:2e:33:4f:69:0e:9c:ba:0c:d8:2f:a4:c2:a4: cd:c0:15:53:5d:bc:43:07:11:e2:75:51:c9:5f:d1: 30:2b:67:05:24:42:26:9d:f8:07:c3:f3:16:b0:28: e2:a9:fe:f7:74:3a:da:57:a0:b4:ed:47:cf:f9:d3: 17:f8:0c:da:67:19:7b:24:9d:ab:fd:f3:9c:cf:31: 53:6a:1b:49:89:57:50:3f:02:f3:98:85:cf:62:4f: 86:dd:39:52:14:4c:49:37:e4:a3:96:38:b0:40:db: 4e:5b:47:b3:66:0c:ba:3d:23:55:18:bb:16:c3:23: 66:dd:9c:22:0c:1f:86:0a:75:85:73:57:5e:7b:99: 98:be:69:1b:7f:6e:92:a4:98:2b:b9:cf:f5:75:74: ca:97:b4:b7:a5:c2:37:e2:fa:12:4b:ee:0f:e8:79: 9c:ec:f1:71:ee:6d:c0:dc:0a:97:5e:7e:ac:ba:69: 16:1c:36:8e:6f:54:ad:c8:a1:63:ac:1d:e2:20:ab: a9:65:c7:45:d9:18:73:ee:99:a0:26:06:f7:a3:75: 6f:3f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: B9:A5:F1:E1:4B:14:35:B6:6C:AF:E1:65:EC:82:9E:A2:1B:13:E1:5F X509v3 Authority Key Identifier: keyid:47:E5:E3:6B:84:86:13:53:4A:65:DD:E4:FB:A2:7A:B5:9A:74:5B:50 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/dce9f43d-08ba-4d02-8f38-74732f15cd8c/0/47E5E36B848613534A65DDE4FBA27AB59A745B50.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/47E5E36B848613534A65DDE4FBA27AB59A745B50.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/dce9f43d-08ba-4d02-8f38-74732f15cd8c/0/47E5E36B848613534A65DDE4FBA27AB59A745B50.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption ac:ae:7c:29:7f:b5:82:5c:57:e4:4f:ce:e0:d0:91:1a:6d:fe: 73:26:9e:78:57:09:e0:3e:bd:ac:13:f3:79:a5:c8:a5:e4:1b: ec:1f:ea:e1:2a:cf:1f:7c:0b:2b:62:a6:e0:7b:a7:15:f0:cd: 74:b0:e5:0a:6d:e9:98:8d:61:d6:a9:5a:e5:18:fd:b7:68:a3: e9:61:f9:35:43:ec:dc:20:26:a4:b8:c2:22:be:d3:59:2d:16: c4:27:2c:4e:2c:f6:49:23:21:cf:e9:78:d6:ba:e5:1f:6b:03: 8a:48:8f:bf:a2:b7:7e:9a:d4:5e:df:10:8c:c7:8d:ff:f8:80: 26:01:e1:13:bb:e2:b2:fc:92:ce:b8:78:38:35:d9:ea:70:53: 55:68:dc:11:0a:68:80:84:16:85:02:9c:da:d8:a4:b8:b6:7d: a6:40:69:61:f5:92:20:28:ae:c1:75:a2:de:f2:73:dc:c1:b6: b3:5d:ed:e3:75:01:64:35:b8:9d:43:04:1c:7e:e5:a8:df:6e: 32:10:aa:26:1c:58:0b:32:4b:99:e1:9a:c4:8d:ce:5e:7c:40: 80:39:5e:2c:0b:86:27:03:1a:fb:53:27:e8:fa:7b:04:31:25: e8:ae:47:ba:50:1d:c7:65:de:e0:96:c4:0a:f2:07:bc:29:90: dd:41:8a:94 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUQZYFlRJlTO6yNIi2ig2h2ASzIwAwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoNDdFNUUzNkI4NDg2MTM1MzRBNjVEREU0RkJBMjdBQjU5 QTc0NUI1MDAeFw0yNTEyMjAxNTI3MjdaFw0yNTEyMjMxODQ3MjdaMDMxMTAvBgNV BAMTKEI5QTVGMUUxNEIxNDM1QjY2Q0FGRTE2NUVDODI5RUEyMUIxM0UxNUYwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCriDaecsbLsh6E6KFD19sibuYm s9TY7hfxNbb9wb8FqRUfTi3Jurs5uHagCgkbLjNPaQ6cugzYL6TCpM3AFVNdvEMH EeJ1Uclf0TArZwUkQiad+AfD8xawKOKp/vd0OtpXoLTtR8/50xf4DNpnGXsknav9 85zPMVNqG0mJV1A/AvOYhc9iT4bdOVIUTEk35KOWOLBA205bR7NmDLo9I1UYuxbD I2bdnCIMH4YKdYVzV157mZi+aRt/bpKkmCu5z/V1dMqXtLelwjfi+hJL7g/oeZzs 8XHubcDcCpdefqy6aRYcNo5vVK3IoWOsHeIgq6llx0XZGHPumaAmBvejdW8/AgMB AAGjggI8MIICODAdBgNVHQ4EFgQUuaXx4UsUNbZsr+Fl7IKeohsT4V8wHwYDVR0j BBgwFoAUR+Xja4SGE1NKZd3k+6J6tZp0W1AwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby9k Y2U5ZjQzZC0wOGJhLTRkMDItOGYzOC03NDczMmYxNWNkOGMvMC80N0U1RTM2Qjg0 ODYxMzUzNEE2NURERTRGQkEyN0FCNTlBNzQ1QjUwLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvNDdFNUUzNkI4NDg2MTM1MzRBNjVEREU0RkJBMjdBQjU5QTc0 NUI1MC5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vZGNlOWY0M2QtMDhiYS00ZDAyLThm MzgtNzQ3MzJmMTVjZDhjLzAvNDdFNUUzNkI4NDg2MTM1MzRBNjVEREU0RkJBMjdB QjU5QTc0NUI1MC5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAKyufCl/tYJcV+RPzuDQkRpt/nMmnnhXCeA+ vawT83mlyKXkG+wf6uEqzx98CytipuB7pxXwzXSw5Qpt6ZiNYdapWuUY/bdoo+lh +TVD7NwgJqS4wiK+01ktFsQnLE4s9kkjIc/peNa65R9rA4pIj7+it36a1F7fEIzH jf/4gCYB4RO74rL8ks64eDg12epwU1Vo3BEKaICEFoUCnNrYpLi2faZAaWH1kiAo rsF1ot7yc9zBtrNd7eN1AWQ1uJ1DBBx+5ajfbjIQqiYcWAsyS5nhmsSNzl58QIA5 XiwLhicDGvtTJ+j6ewQxJeiuR7pQHcdl3uCWxAryB7wpkN1BipQ= -----END CERTIFICATE-----Generated at Sun Dec 21 07:38:58 2025 by rpki-client