This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf repo-rpki.idnic.net/repo/20f7be06-9672-4641-97bd-9bfdf955de17/0/0B47BFC94FDCEC084CD7B35536C8510E41F55130.mft File: 0B47BFC94FDCEC084CD7B35536C8510E41F55130.mft (raw, json) Hash identifier: X5ucgfEJ47D8eOoobdM7iNE8O4kgiXYQTP8if7Aoxxk= Subject key identifier: 46:15:AF:2A:8E:DD:06:D2:70:11:E5:6F:84:55:AB:00:14:54:F9:CB Authority key identifier: 0B:47:BF:C9:4F:DC:EC:08:4C:D7:B3:55:36:C8:51:0E:41:F5:51:30 Certificate issuer: /CN=0B47BFC94FDCEC084CD7B35536C8510E41F55130 Certificate serial: 4965E4C755B45F402DE59AA4B05B41A34AB9C192 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/0B47BFC94FDCEC084CD7B35536C8510E41F55130.cer Subject info access: rsync://repo-rpki.idnic.net/repo/20f7be06-9672-4641-97bd-9bfdf955de17/0/0B47BFC94FDCEC084CD7B35536C8510E41F55130.mft Manifest number: 026F Signing time: Sun 14 Dec 2025 14:12:24 +0000 Manifest this update: Sun 14 Dec 2025 14:07:24 +0000 Manifest next update: Wed 17 Dec 2025 14:21:24 +0000 Files and hashes: 1: 3130332e3232352e3234322e302f32342d3234203d3e20313332363334.roa (hash: GqDgDYZHwoD6s9CHkugs2Z1R9R08+t73eMRbzWBmBRU=) 2: 3130332e382e3233382e302f32342d3234203d3e20313332363334.roa (hash: dJ48+N7DnAPMlFVVdm79c3GqAaF0/rFXKq0WJY2Deco=) 3: 0B47BFC94FDCEC084CD7B35536C8510E41F55130.crl (hash: 8DAvkBJYBFhgLB2PM6p6vpc3K/WzLrDvXiwuZxRHQPc=) 4: 3130332e31362e34382e302f32332d3234203d3e20313332363334.roa (hash: GkgIUj3iLnoDBgSLwsXcxjcRmy20+p6SRzqI9r3pCJc=) 5: 3130332e362e33342e302f32342d3234203d3e20313332363334.roa (hash: KdryargeIqiffwYupqsX1uiOw2sgJxDwDmYHhrfT8ZA=) 6: 3130332e31382e3131372e302f32342d3234203d3e20313332363334.roa (hash: it5Y8uFhllmL1qnw/+3j2vvqBc+psgWABpreLSlxm7g=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/20f7be06-9672-4641-97bd-9bfdf955de17/0/0B47BFC94FDCEC084CD7B35536C8510E41F55130.crl rsync://repo-rpki.idnic.net/repo/20f7be06-9672-4641-97bd-9bfdf955de17/0/0B47BFC94FDCEC084CD7B35536C8510E41F55130.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/0B47BFC94FDCEC084CD7B35536C8510E41F55130.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 17 Dec 2025 14:21:24 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 49:65:e4:c7:55:b4:5f:40:2d:e5:9a:a4:b0:5b:41:a3:4a:b9:c1:92 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=0B47BFC94FDCEC084CD7B35536C8510E41F55130 Validity Not Before: Dec 14 14:07:24 2025 GMT Not After : Dec 17 14:21:24 2025 GMT Subject: CN=4615AF2A8EDD06D27011E56F8455AB001454F9CB Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ec:7f:d5:0d:d7:f0:a0:1a:b3:50:e7:42:c0:f9: 71:9f:39:0f:78:69:2a:26:f7:ed:42:40:bf:51:75: 24:bf:c6:6e:7b:ed:ae:b0:fe:8f:ca:de:c7:a4:1e: 06:0e:26:2b:33:94:53:aa:5c:1a:83:da:31:26:f9: 5a:65:f9:1f:ea:fe:6d:3d:77:8f:3d:ef:34:66:eb: f9:17:d3:19:ad:f3:2b:b1:3a:1a:6c:09:18:21:12: 11:fd:c9:d1:1f:2a:f5:a8:78:b8:11:30:02:ff:03: da:3d:97:8c:fe:6e:16:ce:59:16:c5:05:a3:49:74: 93:de:4c:cd:e2:32:ae:3b:18:80:63:38:17:10:43: 86:b6:5e:e4:fb:78:ca:9a:9b:c6:ca:d7:3b:ec:55: a9:f6:fd:bb:87:34:4c:a5:3e:0a:41:33:e5:6d:21: 29:37:53:b5:8d:75:d3:4b:a4:e8:4b:27:46:8f:c5: 59:03:15:3f:6c:24:06:75:0c:cc:3f:4f:64:39:9f: 8e:31:a8:70:9f:6f:53:2a:35:74:ff:13:e3:2a:95: f7:23:10:b3:b2:8b:73:b1:77:d2:f6:4b:62:74:77: d3:e2:db:f8:a9:b1:89:11:9a:0d:05:10:a2:d6:50: 46:0b:1c:1b:cf:e3:fc:86:f7:7b:ae:89:38:9d:f5: a4:09 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 46:15:AF:2A:8E:DD:06:D2:70:11:E5:6F:84:55:AB:00:14:54:F9:CB X509v3 Authority Key Identifier: keyid:0B:47:BF:C9:4F:DC:EC:08:4C:D7:B3:55:36:C8:51:0E:41:F5:51:30 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/20f7be06-9672-4641-97bd-9bfdf955de17/0/0B47BFC94FDCEC084CD7B35536C8510E41F55130.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/0B47BFC94FDCEC084CD7B35536C8510E41F55130.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/20f7be06-9672-4641-97bd-9bfdf955de17/0/0B47BFC94FDCEC084CD7B35536C8510E41F55130.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 4d:73:4f:99:2e:3f:e1:9a:2d:21:de:6c:c3:82:80:32:b0:39: c7:d9:d1:6c:7b:13:41:e3:d7:79:9a:56:21:af:2a:2e:c1:14: 81:de:24:fd:41:66:ac:24:af:d8:d8:37:23:ce:79:b6:4e:c5: 8e:7d:d5:0e:83:73:63:86:78:aa:0f:41:6b:1c:63:0a:0c:68: c9:df:b3:f6:31:92:e9:72:15:76:b5:01:6b:79:3b:df:e0:29: 5a:2a:91:4c:e1:1b:2e:d2:ed:6e:22:dc:55:a8:44:fc:10:3b: 3a:e0:e5:9e:99:45:68:40:89:45:f0:d2:db:c1:17:ae:c1:4f: f3:1d:9b:54:2a:5b:cc:f5:ec:a6:6c:03:a6:d8:be:28:ab:00: 91:3c:02:f4:3c:70:da:44:84:10:22:72:fc:43:b4:6f:13:e9: 5b:4b:20:52:30:91:43:8c:55:67:65:ce:49:9d:27:43:5c:8b: 0f:53:fa:19:c3:13:7f:aa:0f:2e:1f:a8:8c:90:c7:a6:84:b7: e5:73:5b:43:2b:f7:ad:83:6e:ad:00:bc:23:c9:e0:03:a5:c8: a3:a4:1a:30:c8:57:e8:a6:22:c6:c5:57:68:5d:1e:34:cf:75: 75:8a:20:c0:cf:b8:3e:73:6d:55:a5:7c:bf:e2:14:35:f6:ab: 04:03:01:d8 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUSWXkx1W0X0At5ZqksFtBo0q5wZIwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMEI0N0JGQzk0RkRDRUMwODRDRDdCMzU1MzZDODUxMEU0 MUY1NTEzMDAeFw0yNTEyMTQxNDA3MjRaFw0yNTEyMTcxNDIxMjRaMDMxMTAvBgNV BAMTKDQ2MTVBRjJBOEVERDA2RDI3MDExRTU2Rjg0NTVBQjAwMTQ1NEY5Q0IwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDsf9UN1/CgGrNQ50LA+XGfOQ94 aSom9+1CQL9RdSS/xm577a6w/o/K3sekHgYOJiszlFOqXBqD2jEm+Vpl+R/q/m09 d4897zRm6/kX0xmt8yuxOhpsCRghEhH9ydEfKvWoeLgRMAL/A9o9l4z+bhbOWRbF BaNJdJPeTM3iMq47GIBjOBcQQ4a2XuT7eMqam8bK1zvsVan2/buHNEylPgpBM+Vt ISk3U7WNddNLpOhLJ0aPxVkDFT9sJAZ1DMw/T2Q5n44xqHCfb1MqNXT/E+Mqlfcj ELOyi3Oxd9L2S2J0d9Pi2/ipsYkRmg0FEKLWUEYLHBvP4/yG93uuiTid9aQJAgMB AAGjggI8MIICODAdBgNVHQ4EFgQURhWvKo7dBtJwEeVvhFWrABRU+cswHwYDVR0j BBgwFoAUC0e/yU/c7AhM17NVNshRDkH1UTAwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby8y MGY3YmUwNi05NjcyLTQ2NDEtOTdiZC05YmZkZjk1NWRlMTcvMC8wQjQ3QkZDOTRG RENFQzA4NENEN0IzNTUzNkM4NTEwRTQxRjU1MTMwLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvMEI0N0JGQzk0RkRDRUMwODRDRDdCMzU1MzZDODUxMEU0MUY1 NTEzMC5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vMjBmN2JlMDYtOTY3Mi00NjQxLTk3 YmQtOWJmZGY5NTVkZTE3LzAvMEI0N0JGQzk0RkRDRUMwODRDRDdCMzU1MzZDODUx MEU0MUY1NTEzMC5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAE1zT5kuP+GaLSHebMOCgDKwOcfZ0Wx7E0Hj 13maViGvKi7BFIHeJP1BZqwkr9jYNyPOebZOxY591Q6Dc2OGeKoPQWscYwoMaMnf s/YxkulyFXa1AWt5O9/gKVoqkUzhGy7S7W4i3FWoRPwQOzrg5Z6ZRWhAiUXw0tvB F67BT/Mdm1QqW8z17KZsA6bYviirAJE8AvQ8cNpEhBAicvxDtG8T6VtLIFIwkUOM VWdlzkmdJ0Nciw9T+hnDE3+qDy4fqIyQx6aEt+VzW0Mr962Dbq0AvCPJ4AOlyKOk GjDIV+imIsbFV2hdHjTPdXWKIMDPuD5zbVWlfL/iFDX2qwQDAdg= -----END CERTIFICATE-----Generated at Mon Dec 15 16:56:52 2025 by rpki-client