This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

$ rpki-client -vvf repo-rpki.idnic.net/repo/4f61f04d-18e7-42ff-ae82-d56554f9264c/0/47C87696529FAF404AF0E8681AAFA8F224187D59.mft
File: 47C87696529FAF404AF0E8681AAFA8F224187D59.mft (raw, json)
Hash identifier: 06wOmVeLtiVmakIVL18jxJDsl0waxidXhGhv/kB9EUY=
Subject key identifier: F6:80:FE:C3:48:7C:2C:B6:DB:B0:0F:FF:C7:3D:C3:4F:1B:C7:CF:37
Authority key identifier: 47:C8:76:96:52:9F:AF:40:4A:F0:E8:68:1A:AF:A8:F2:24:18:7D:59
Certificate issuer: /CN=47C87696529FAF404AF0E8681AAFA8F224187D59
Certificate serial: 53A2B2BB8AEC7C6CCDCF572690FE9EACAA22F7A7
Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/47C87696529FAF404AF0E8681AAFA8F224187D59.cer
Subject info access: rsync://repo-rpki.idnic.net/repo/4f61f04d-18e7-42ff-ae82-d56554f9264c/0/47C87696529FAF404AF0E8681AAFA8F224187D59.mft
Manifest number: 0506
Signing time: Tue 30 Dec 2025 18:31:07 +0000
Manifest this update: Tue 30 Dec 2025 18:26:07 +0000
Manifest next update: Sat 03 Jan 2026 04:59:07 +0000
Files and hashes: 1: 3130332e3133362e3137302e302f32332d3233203d3e203538333639.roa (hash: Z0Nbz1XibnxNyKBNr2zQqXw+MKf+eHjiJCZdkBIGrIo=)
2: 47C87696529FAF404AF0E8681AAFA8F224187D59.crl (hash: NdSWPVTahSzPLUItHbMZ7daWxL2kQN5ztIlTSEcLnYg=)
3: 3130332e3133362e3137302e302f32342d3234203d3e203538333639.roa (hash: JR9pnbueKrjvNp5CfL5jMHGleDRr0PreIte+IDzNXSA=)
4: 3130332e3133362e3137312e302f32342d3234203d3e203538333639.roa (hash: fPxnb7CxS8XbJvCYQXehN0lgrSSBnAAiXKdKbHXXpFg=)
Validation: OK
Signature path: rsync://repo-rpki.idnic.net/repo/4f61f04d-18e7-42ff-ae82-d56554f9264c/0/47C87696529FAF404AF0E8681AAFA8F224187D59.crl
rsync://repo-rpki.idnic.net/repo/4f61f04d-18e7-42ff-ae82-d56554f9264c/0/47C87696529FAF404AF0E8681AAFA8F224187D59.mft
rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/47C87696529FAF404AF0E8681AAFA8F224187D59.cer
rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl
rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Sat 03 Jan 2026 04:59:07 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
53:a2:b2:bb:8a:ec:7c:6c:cd:cf:57:26:90:fe:9e:ac:aa:22:f7:a7
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=47C87696529FAF404AF0E8681AAFA8F224187D59
Validity
Not Before: Dec 30 18:26:07 2025 GMT
Not After : Jan 3 04:59:07 2026 GMT
Subject: CN=F680FEC3487C2CB6DBB00FFFC73DC34F1BC7CF37
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ca:ca:c0:4c:93:1d:a8:b7:75:c3:d8:17:3d:b1:
80:ad:c3:02:c9:18:84:85:51:fc:93:e0:9b:ea:8d:
de:82:25:23:9a:50:23:55:c3:16:7c:0f:88:b8:a9:
37:0a:51:6d:fb:2a:12:12:a7:0a:4e:90:68:13:ff:
de:be:1d:98:e5:ea:e5:c5:19:ae:f6:7b:66:1e:fc:
36:29:89:be:3f:d4:9c:c0:6b:50:e3:b7:c2:65:ed:
4e:d5:71:59:90:20:07:9d:d3:e9:66:c0:3d:9c:59:
14:6e:89:17:d9:0f:88:1c:13:ac:41:77:f4:d1:09:
0f:7c:fc:99:0a:a6:d6:50:7f:82:2e:04:ac:11:39:
0b:8e:d2:f8:f1:e8:32:73:b2:0d:e9:30:23:84:aa:
b1:0c:22:51:68:e6:0f:a5:6b:28:04:fc:2d:de:94:
26:79:4e:83:76:89:7a:14:7f:a0:28:7c:b6:1b:b1:
2f:19:f7:fb:07:a5:cc:53:5b:f9:40:73:24:97:14:
ad:94:ea:7f:28:a2:b4:88:28:f9:5b:da:fc:75:ae:
26:cb:b1:68:7a:50:2e:9b:59:a5:e0:c5:50:95:d7:
25:2e:e1:37:e7:ed:66:84:fd:20:b2:fe:f2:c6:43:
0b:30:eb:01:20:ec:0f:a7:60:77:c1:55:7d:98:a6:
00:b5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F6:80:FE:C3:48:7C:2C:B6:DB:B0:0F:FF:C7:3D:C3:4F:1B:C7:CF:37
X509v3 Authority Key Identifier:
keyid:47:C8:76:96:52:9F:AF:40:4A:F0:E8:68:1A:AF:A8:F2:24:18:7D:59
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://repo-rpki.idnic.net/repo/4f61f04d-18e7-42ff-ae82-d56554f9264c/0/47C87696529FAF404AF0E8681AAFA8F224187D59.crl
Authority Information Access:
CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/47C87696529FAF404AF0E8681AAFA8F224187D59.cer
Subject Information Access:
Signed Object - URI:rsync://repo-rpki.idnic.net/repo/4f61f04d-18e7-42ff-ae82-d56554f9264c/0/47C87696529FAF404AF0E8681AAFA8F224187D59.mft
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
85:45:c2:15:07:54:a0:57:f1:ba:df:62:4b:89:80:e9:04:35:
8e:fe:e8:7e:02:1a:17:1f:eb:10:2b:21:3c:94:9e:ea:b5:72:
2b:08:bd:c4:e3:43:24:da:0f:98:84:c7:34:8e:cb:7d:57:10:
61:f8:df:fc:80:ae:fe:4d:d7:3d:92:80:a4:3f:bd:2b:a8:23:
0b:da:bb:fb:7f:cf:3b:86:27:59:92:48:6a:0b:57:90:c0:8d:
68:87:de:08:75:37:55:17:e2:5f:84:89:d2:b7:46:d1:6b:52:
40:31:a1:1f:48:3a:b3:88:8d:e8:2b:8f:83:d4:89:40:4f:0f:
24:e6:e9:c4:eb:a4:3a:31:0d:b3:dc:77:8c:7f:93:00:3b:be:
25:e1:aa:ff:dc:ca:2a:89:88:14:8b:cf:b8:8f:6b:4d:56:a0:
36:55:81:73:82:1b:fc:d3:f3:87:d1:bd:69:96:ab:86:29:b5:
08:b6:0a:0e:d0:ba:3c:79:92:3b:72:06:35:f9:1a:cd:84:41:
d6:71:1a:86:7c:2c:f2:cb:e9:b3:d4:c0:07:4a:bd:f5:db:b4:
d5:b1:4c:5f:c0:8e:47:53:e0:35:46:a1:89:d9:f6:15:5c:82:
67:32:0e:f6:78:32:aa:0b:0f:36:66:39:83:46:af:f1:e9:70:
d2:06:ab:5b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Dec 31 20:27:31 2025 by rpki-client