This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf repo-rpki.idnic.net/repo/2dd47f56-ec53-42eb-9b8b-fa08f874d319/0/47B3FBF39D8DFE5BC5CFD2BED39F0FA152619097.mft File: 47B3FBF39D8DFE5BC5CFD2BED39F0FA152619097.mft (raw, json) Hash identifier: llyKbR0Zc2r5e9jN14auqD+8kIwUf0lBAtYzab5cL6s= Subject key identifier: FD:A9:E7:42:13:09:A4:C3:43:D6:84:C4:ED:AD:9D:8C:9A:A4:8E:20 Authority key identifier: 47:B3:FB:F3:9D:8D:FE:5B:C5:CF:D2:BE:D3:9F:0F:A1:52:61:90:97 Certificate issuer: /CN=47B3FBF39D8DFE5BC5CFD2BED39F0FA152619097 Certificate serial: 3AE3AAF8D7D00F8E0C9C30101853B307C6F08840 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/47B3FBF39D8DFE5BC5CFD2BED39F0FA152619097.cer Subject info access: rsync://repo-rpki.idnic.net/repo/2dd47f56-ec53-42eb-9b8b-fa08f874d319/0/47B3FBF39D8DFE5BC5CFD2BED39F0FA152619097.mft Manifest number: 01AB Signing time: Mon 01 Dec 2025 19:12:06 +0000 Manifest this update: Mon 01 Dec 2025 19:07:06 +0000 Manifest next update: Thu 04 Dec 2025 19:46:06 +0000 Files and hashes: 1: 3131352e3136362e39362e302f31392d3234203d3e203234353335.roa (hash: o1nadYOiSyfzP5DiUIaxIjQ6Y6Z7EbT62ljXiAR8xj8=) 2: 35382e36352e3234302e302f32312d3234203d3e203234353335.roa (hash: rPiRcVboc3keI3JDFzeJMujOJliCIhrAj1H/kJF3N9o=) 3: 47B3FBF39D8DFE5BC5CFD2BED39F0FA152619097.crl (hash: DgZKUgBSzJlfk/7HKdXgLGVVeVkd2e5S2EL2+G6vTOw=) 4: 323430333a666630303a3a2f33322d3438203d3e203234353335.roa (hash: acX5TVrGelz7sikLTlbnR9gGsookgeyobaWlbIZGoJY=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/2dd47f56-ec53-42eb-9b8b-fa08f874d319/0/47B3FBF39D8DFE5BC5CFD2BED39F0FA152619097.crl rsync://repo-rpki.idnic.net/repo/2dd47f56-ec53-42eb-9b8b-fa08f874d319/0/47B3FBF39D8DFE5BC5CFD2BED39F0FA152619097.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/47B3FBF39D8DFE5BC5CFD2BED39F0FA152619097.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 04 Dec 2025 19:46:06 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 3a:e3:aa:f8:d7:d0:0f:8e:0c:9c:30:10:18:53:b3:07:c6:f0:88:40 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=47B3FBF39D8DFE5BC5CFD2BED39F0FA152619097 Validity Not Before: Dec 1 19:07:06 2025 GMT Not After : Dec 4 19:46:06 2025 GMT Subject: CN=FDA9E7421309A4C343D684C4EDAD9D8C9AA48E20 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c8:2f:4b:f6:1e:e1:cf:66:67:1c:e4:40:86:9e: 40:6d:5c:da:e0:b0:8f:14:09:0b:12:8d:2a:88:a4: d3:a0:7a:3a:65:2a:82:93:15:cf:69:ae:29:8e:1a: 6c:61:a1:e9:0d:64:13:92:1f:fe:b9:00:f2:92:56: fd:3f:bc:7e:51:fe:2d:06:22:57:4f:b3:7a:b9:72: 20:90:99:48:24:98:f9:a8:db:53:ef:ef:1c:15:2c: 62:06:1f:fa:17:06:43:46:05:93:56:ef:1f:e6:d9: e3:d5:0b:75:a9:b6:63:7c:8e:c7:cf:99:c2:38:ed: 88:4c:af:b2:81:90:52:27:f4:08:ba:c8:90:04:ee: 6e:37:81:6b:ec:1c:6a:12:0a:42:cf:73:c2:e3:b8: 5d:84:8a:a8:3e:ce:c1:86:c2:29:0c:af:41:c1:6a: 0a:d2:08:92:fc:98:1c:01:d8:96:bb:5b:6d:d6:cd: f0:ee:db:75:de:1f:20:87:a4:5a:3a:a3:a6:86:60: a9:f8:8c:55:64:79:4c:cf:08:7b:d7:01:30:19:35: 5a:68:3c:19:84:48:1c:7c:10:a7:3d:4f:97:40:4a: 75:82:0a:38:0c:08:a6:cb:48:73:ab:ad:78:71:33: 5f:cc:32:7d:eb:c2:10:f9:8b:c1:58:52:ad:b5:12: ca:71 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: FD:A9:E7:42:13:09:A4:C3:43:D6:84:C4:ED:AD:9D:8C:9A:A4:8E:20 X509v3 Authority Key Identifier: keyid:47:B3:FB:F3:9D:8D:FE:5B:C5:CF:D2:BE:D3:9F:0F:A1:52:61:90:97 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/2dd47f56-ec53-42eb-9b8b-fa08f874d319/0/47B3FBF39D8DFE5BC5CFD2BED39F0FA152619097.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/47B3FBF39D8DFE5BC5CFD2BED39F0FA152619097.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/2dd47f56-ec53-42eb-9b8b-fa08f874d319/0/47B3FBF39D8DFE5BC5CFD2BED39F0FA152619097.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 57:b1:39:4b:bf:71:0a:06:02:da:da:04:41:e7:5b:ab:4e:b5: fe:17:8d:fc:62:49:16:29:54:6c:dc:7b:a3:f0:0a:3f:e3:4b: a7:48:3d:2e:d2:f3:b6:27:5f:a0:24:55:ed:13:fa:ea:45:0d: 8f:3c:be:04:83:6d:9d:2e:f9:72:16:15:94:5f:4f:ab:ed:d7: fa:04:d8:ce:1f:22:77:23:2f:05:75:b8:0c:e6:d5:f2:d1:c0: a3:b1:5c:bc:ca:d2:ae:45:61:a0:50:cb:d8:f8:26:1b:9a:db: 09:0b:13:c3:d6:a2:6f:28:f3:52:c3:f4:b3:ab:4c:a4:e5:0f: e4:42:70:02:2d:3b:f8:49:07:b7:31:14:ee:e9:10:7b:db:f2: 49:43:6b:ab:f8:f5:77:ad:36:87:85:0c:42:72:48:c4:f6:11: 13:b7:f3:9d:e2:93:ee:a0:0f:4f:11:81:e7:07:3d:1e:ad:7a: 14:e3:a8:47:81:7b:70:5d:44:58:60:16:cc:0a:cd:e0:0b:7e: 54:44:15:48:3f:f0:b4:54:ab:2c:3b:8a:ff:d7:d4:00:ed:7b: 57:78:da:4c:48:34:16:a9:fa:88:da:c8:d1:f7:c6:7f:10:29: ef:40:f1:01:8f:79:45:7d:fd:f3:6c:a4:93:ab:b5:28:f9:98: 9f:77:75:9f -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUOuOq+NfQD44MnDAQGFOzB8bwiEAwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoNDdCM0ZCRjM5RDhERkU1QkM1Q0ZEMkJFRDM5RjBGQTE1 MjYxOTA5NzAeFw0yNTEyMDExOTA3MDZaFw0yNTEyMDQxOTQ2MDZaMDMxMTAvBgNV BAMTKEZEQTlFNzQyMTMwOUE0QzM0M0Q2ODRDNEVEQUQ5RDhDOUFBNDhFMjAwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDIL0v2HuHPZmcc5ECGnkBtXNrg sI8UCQsSjSqIpNOgejplKoKTFc9primOGmxhoekNZBOSH/65APKSVv0/vH5R/i0G IldPs3q5ciCQmUgkmPmo21Pv7xwVLGIGH/oXBkNGBZNW7x/m2ePVC3WptmN8jsfP mcI47YhMr7KBkFIn9Ai6yJAE7m43gWvsHGoSCkLPc8LjuF2Eiqg+zsGGwikMr0HB agrSCJL8mBwB2Ja7W23WzfDu23XeHyCHpFo6o6aGYKn4jFVkeUzPCHvXATAZNVpo PBmESBx8EKc9T5dASnWCCjgMCKbLSHOrrXhxM1/MMn3rwhD5i8FYUq21EspxAgMB AAGjggI8MIICODAdBgNVHQ4EFgQU/annQhMJpMND1oTE7a2djJqkjiAwHwYDVR0j BBgwFoAUR7P7852N/lvFz9K+058PoVJhkJcwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby8y ZGQ0N2Y1Ni1lYzUzLTQyZWItOWI4Yi1mYTA4Zjg3NGQzMTkvMC80N0IzRkJGMzlE OERGRTVCQzVDRkQyQkVEMzlGMEZBMTUyNjE5MDk3LmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvNDdCM0ZCRjM5RDhERkU1QkM1Q0ZEMkJFRDM5RjBGQTE1MjYx OTA5Ny5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vMmRkNDdmNTYtZWM1My00MmViLTli OGItZmEwOGY4NzRkMzE5LzAvNDdCM0ZCRjM5RDhERkU1QkM1Q0ZEMkJFRDM5RjBG QTE1MjYxOTA5Ny5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAFexOUu/cQoGAtraBEHnW6tOtf4XjfxiSRYp VGzce6PwCj/jS6dIPS7S87YnX6AkVe0T+upFDY88vgSDbZ0u+XIWFZRfT6vt1/oE 2M4fIncjLwV1uAzm1fLRwKOxXLzK0q5FYaBQy9j4Jhua2wkLE8PWom8o81LD9LOr TKTlD+RCcAItO/hJB7cxFO7pEHvb8klDa6v49XetNoeFDEJySMT2ERO3853ik+6g D08RgecHPR6tehTjqEeBe3BdRFhgFswKzeALflREFUg/8LRUqyw7iv/X1ADte1d4 2kxINBap+ojayNH3xn8QKe9A8QGPeUV9/fNspJOrtSj5mJ93dZ8= -----END CERTIFICATE-----Generated at Wed Dec 3 13:57:17 2025 by rpki-client