This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf repo-rpki.idnic.net/repo/eb81bcea-b70f-4374-924b-b6c778109837/0/CA47BA6D9780611AEA68BC9BF72724AE94799AA6.mft File: CA47BA6D9780611AEA68BC9BF72724AE94799AA6.mft (raw, json) Hash identifier: ct4AqxkX2Fmd0Vi46Eo7clvty1cMtXdJO0jrsHvckG8= Subject key identifier: 0D:04:25:DA:8F:2B:AC:21:A4:AC:44:DC:F5:20:A9:86:0A:29:6E:B1 Authority key identifier: CA:47:BA:6D:97:80:61:1A:EA:68:BC:9B:F7:27:24:AE:94:79:9A:A6 Certificate issuer: /CN=CA47BA6D9780611AEA68BC9BF72724AE94799AA6 Certificate serial: 5E9E8FB725B6FC6AFF200DB162984E4389EF15BB Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/CA47BA6D9780611AEA68BC9BF72724AE94799AA6.cer Subject info access: rsync://repo-rpki.idnic.net/repo/eb81bcea-b70f-4374-924b-b6c778109837/0/CA47BA6D9780611AEA68BC9BF72724AE94799AA6.mft Manifest number: 029A Signing time: Sat 20 Dec 2025 21:11:20 +0000 Manifest this update: Sat 20 Dec 2025 21:06:20 +0000 Manifest next update: Wed 24 Dec 2025 04:24:20 +0000 Files and hashes: 1: CA47BA6D9780611AEA68BC9BF72724AE94799AA6.crl (hash: 8h49V4wqYOHaY/f+lUEI7WuUPBhJ7dDvjwSWQ79oOec=) 2: 3130332e3130382e3234302e302f32322d3232203d3e20313336383535.roa (hash: 7eJhfA1U72MfmI6Gl9X8Bc7KFQEL+NhfB3ZqMIqrEaA=) 3: 3130332e3130382e3234312e302f32342d3234203d3e20313333373936.roa (hash: kunQ1kMqm5dCsvOsI1+HGGCtiZ5NKsilDdmi0e2JkQE=) 4: 3130332e3130382e3234322e302f32342d3234203d3e20313336383535.roa (hash: 3PkfuBqgUsXvYP/cBasxl1kYosVT98po9pZBDusnWb4=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/eb81bcea-b70f-4374-924b-b6c778109837/0/CA47BA6D9780611AEA68BC9BF72724AE94799AA6.crl rsync://repo-rpki.idnic.net/repo/eb81bcea-b70f-4374-924b-b6c778109837/0/CA47BA6D9780611AEA68BC9BF72724AE94799AA6.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/CA47BA6D9780611AEA68BC9BF72724AE94799AA6.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 24 Dec 2025 04:24:20 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 5e:9e:8f:b7:25:b6:fc:6a:ff:20:0d:b1:62:98:4e:43:89:ef:15:bb Signature Algorithm: sha256WithRSAEncryption Issuer: CN=CA47BA6D9780611AEA68BC9BF72724AE94799AA6 Validity Not Before: Dec 20 21:06:20 2025 GMT Not After : Dec 24 04:24:20 2025 GMT Subject: CN=0D0425DA8F2BAC21A4AC44DCF520A9860A296EB1 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c6:7d:23:22:e0:e7:97:e7:35:ca:69:f0:23:ff: 43:ce:b8:b7:fe:c9:2f:89:e8:1b:2a:85:f4:b2:dd: e8:12:f6:f4:ea:31:c8:cc:c6:75:f4:da:39:fc:d9: bc:30:22:16:a0:20:cf:69:31:6b:ac:0a:dd:58:8d: d3:0e:bd:88:8e:54:08:8a:19:b6:8b:00:97:0f:84: 93:08:3b:2d:3b:92:b0:78:55:ec:b1:38:c8:a9:cf: 8d:31:50:e1:ae:19:14:69:58:9d:09:f9:da:0d:2d: a6:c9:60:f9:ac:99:89:da:7c:46:55:7b:44:bd:ea: 56:72:2a:df:5d:c3:21:2b:54:25:6a:83:67:03:2f: 64:02:58:1c:68:9d:e7:1c:28:c4:16:c9:3f:22:cc: be:30:86:d9:b9:2d:49:b9:a6:99:4e:ab:d6:eb:97: b2:5d:00:a1:e6:b8:ae:f0:68:af:51:5f:75:3d:9c: ce:7d:af:7a:bd:e5:67:30:07:62:4c:5b:6d:c1:25: af:c9:eb:82:f4:ec:77:18:5f:39:b4:33:71:d2:04: 46:9f:a3:55:c0:7a:f1:43:76:81:1a:94:b8:cd:a3: d3:d8:60:fa:44:60:0c:9e:c2:2c:de:f9:3b:49:f5: f8:3b:b3:5d:ac:8c:b7:36:43:5d:97:8e:d4:99:48: 92:b1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 0D:04:25:DA:8F:2B:AC:21:A4:AC:44:DC:F5:20:A9:86:0A:29:6E:B1 X509v3 Authority Key Identifier: keyid:CA:47:BA:6D:97:80:61:1A:EA:68:BC:9B:F7:27:24:AE:94:79:9A:A6 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/eb81bcea-b70f-4374-924b-b6c778109837/0/CA47BA6D9780611AEA68BC9BF72724AE94799AA6.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/CA47BA6D9780611AEA68BC9BF72724AE94799AA6.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/eb81bcea-b70f-4374-924b-b6c778109837/0/CA47BA6D9780611AEA68BC9BF72724AE94799AA6.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 8b:70:4b:91:ac:d0:77:dc:64:c1:fb:03:8e:48:13:72:70:49: a7:9f:0a:4e:72:96:de:7b:5f:c5:38:c3:99:6d:83:42:f0:31: da:b4:b6:c5:b6:8e:72:15:2a:28:95:e2:1a:84:56:fe:8c:68: 64:21:a5:ab:5c:02:cc:53:4b:b5:b1:0a:53:38:38:58:21:69: 21:fc:d5:c3:7c:39:ce:77:8c:8e:39:51:fa:63:e0:39:5d:f2: 69:58:0f:bf:80:1c:f6:70:e2:70:36:35:32:43:6f:6b:f5:34: 02:2e:6b:31:1e:56:08:6d:3b:b3:40:6b:22:d8:94:c3:e0:1f: ef:42:bc:0c:c7:0f:3d:75:a5:db:e6:4f:74:7f:d1:8e:35:51: ac:8e:14:cf:aa:d5:93:6b:6d:0f:f6:de:9c:df:a7:ea:5f:f8: 8c:3d:df:f7:5f:bf:97:b1:84:42:2f:2a:60:5b:50:1d:3a:a1: b7:2c:d9:e7:4a:7f:c7:ed:c0:cd:a1:6b:27:eb:69:20:7e:dc: b2:60:e6:c1:45:a2:4b:94:fd:6e:ff:88:e6:ab:a0:6c:12:1b: f7:1a:4a:4c:ab:3a:27:61:f6:26:45:95:d0:52:04:df:01:a0: f7:e6:ec:48:ed:1f:9d:eb:3a:fc:49:ec:8d:93:f8:91:0b:d2: 5d:96:22:ca -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUXp6PtyW2/Gr/IA2xYphOQ4nvFbswDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoQ0E0N0JBNkQ5NzgwNjExQUVBNjhCQzlCRjcyNzI0QUU5 NDc5OUFBNjAeFw0yNTEyMjAyMTA2MjBaFw0yNTEyMjQwNDI0MjBaMDMxMTAvBgNV BAMTKDBEMDQyNURBOEYyQkFDMjFBNEFDNDREQ0Y1MjBBOTg2MEEyOTZFQjEwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDGfSMi4OeX5zXKafAj/0POuLf+ yS+J6BsqhfSy3egS9vTqMcjMxnX02jn82bwwIhagIM9pMWusCt1YjdMOvYiOVAiK GbaLAJcPhJMIOy07krB4VeyxOMipz40xUOGuGRRpWJ0J+doNLabJYPmsmYnafEZV e0S96lZyKt9dwyErVCVqg2cDL2QCWBxoneccKMQWyT8izL4whtm5LUm5pplOq9br l7JdAKHmuK7waK9RX3U9nM59r3q95WcwB2JMW23BJa/J64L07HcYXzm0M3HSBEaf o1XAevFDdoEalLjNo9PYYPpEYAyewize+TtJ9fg7s12sjLc2Q12XjtSZSJKxAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUDQQl2o8rrCGkrETc9SCphgopbrEwHwYDVR0j BBgwFoAUyke6bZeAYRrqaLyb9yckrpR5mqYwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby9l YjgxYmNlYS1iNzBmLTQzNzQtOTI0Yi1iNmM3NzgxMDk4MzcvMC9DQTQ3QkE2RDk3 ODA2MTFBRUE2OEJDOUJGNzI3MjRBRTk0Nzk5QUE2LmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvQ0E0N0JBNkQ5NzgwNjExQUVBNjhCQzlCRjcyNzI0QUU5NDc5 OUFBNi5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vZWI4MWJjZWEtYjcwZi00Mzc0LTky NGItYjZjNzc4MTA5ODM3LzAvQ0E0N0JBNkQ5NzgwNjExQUVBNjhCQzlCRjcyNzI0 QUU5NDc5OUFBNi5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAItwS5Gs0HfcZMH7A45IE3JwSaefCk5ylt57 X8U4w5ltg0LwMdq0tsW2jnIVKiiV4hqEVv6MaGQhpatcAsxTS7WxClM4OFghaSH8 1cN8Oc53jI45Ufpj4Dld8mlYD7+AHPZw4nA2NTJDb2v1NAIuazEeVghtO7NAayLY lMPgH+9CvAzHDz11pdvmT3R/0Y41UayOFM+q1ZNrbQ/23pzfp+pf+Iw93/dfv5ex hEIvKmBbUB06obcs2edKf8ftwM2hayfraSB+3LJg5sFFokuU/W7/iOaroGwSG/ca SkyrOidh9iZFldBSBN8BoPfm7EjtH53rOvxJ7I2T+JEL0l2WIso= -----END CERTIFICATE-----Generated at Mon Dec 22 02:34:55 2025 by rpki-client