This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

$ rpki-client -vvf repo-rpki.idnic.net/repo/2dd47f56-ec53-42eb-9b8b-fa08f874d319/0/47B3FBF39D8DFE5BC5CFD2BED39F0FA152619097.mft
File: 47B3FBF39D8DFE5BC5CFD2BED39F0FA152619097.mft (raw, json)
Hash identifier: T1G1OlTHuX83VCa+kG6jL511btfZtphYJ4WV+H5TmNc=
Subject key identifier: 59:BE:8B:84:FD:17:F0:6E:6D:93:EE:88:58:AF:E0:BC:68:4D:3D:86
Authority key identifier: 47:B3:FB:F3:9D:8D:FE:5B:C5:CF:D2:BE:D3:9F:0F:A1:52:61:90:97
Certificate issuer: /CN=47B3FBF39D8DFE5BC5CFD2BED39F0FA152619097
Certificate serial: 581496EEDABA4174D161A8AC140BF45CF09099F3
Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/47B3FBF39D8DFE5BC5CFD2BED39F0FA152619097.cer
Subject info access: rsync://repo-rpki.idnic.net/repo/2dd47f56-ec53-42eb-9b8b-fa08f874d319/0/47B3FBF39D8DFE5BC5CFD2BED39F0FA152619097.mft
Manifest number: 01CB
Signing time: Sat 31 Jan 2026 11:42:05 +0000
Manifest this update: Sat 31 Jan 2026 11:37:05 +0000
Manifest next update: Tue 03 Feb 2026 16:12:05 +0000
Files and hashes: 1: 3131352e3136362e39362e302f31392d3234203d3e203234353335.roa (hash: o1nadYOiSyfzP5DiUIaxIjQ6Y6Z7EbT62ljXiAR8xj8=)
2: 35382e36352e3234302e302f32312d3234203d3e203234353335.roa (hash: rPiRcVboc3keI3JDFzeJMujOJliCIhrAj1H/kJF3N9o=)
3: 3131352e3136362e3131312e302f32342d3234203d3e203134363138.roa (hash: dHVT1pPpYfkat8LYG0fIQg445W2VxpF/m4eXlcGf8/Q=)
4: 3131352e3136362e3131312e302f32342d3234203d3e20333936393832.roa (hash: wgtqwaW/q6/6iiFZEkr1mrOJmIiiA3/QZmD2Fiv1Qhg=)
5: 3131352e3136362e3131312e302f32342d3234203d3e203136353039.roa (hash: v5qvmgh9eiTpdk3UEoQin8K5RQSDk24SVWpfNhiVRfU=)
6: 47B3FBF39D8DFE5BC5CFD2BED39F0FA152619097.crl (hash: oQzTr+sEPnIPgd1FKIpulyYLvj87Bf57bQESuklGY8M=)
7: 323430333a666630303a3a2f33322d3438203d3e203234353335.roa (hash: acX5TVrGelz7sikLTlbnR9gGsookgeyobaWlbIZGoJY=)
Validation: OK
Signature path: rsync://repo-rpki.idnic.net/repo/2dd47f56-ec53-42eb-9b8b-fa08f874d319/0/47B3FBF39D8DFE5BC5CFD2BED39F0FA152619097.crl
rsync://repo-rpki.idnic.net/repo/2dd47f56-ec53-42eb-9b8b-fa08f874d319/0/47B3FBF39D8DFE5BC5CFD2BED39F0FA152619097.mft
rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/47B3FBF39D8DFE5BC5CFD2BED39F0FA152619097.cer
rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl
rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Tue 03 Feb 2026 16:12:05 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
58:14:96:ee:da:ba:41:74:d1:61:a8:ac:14:0b:f4:5c:f0:90:99:f3
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=47B3FBF39D8DFE5BC5CFD2BED39F0FA152619097
Validity
Not Before: Jan 31 11:37:05 2026 GMT
Not After : Feb 3 16:12:05 2026 GMT
Subject: CN=59BE8B84FD17F06E6D93EE8858AFE0BC684D3D86
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bc:6a:63:49:7f:42:21:8b:61:af:98:97:fb:80:
a1:1e:9d:49:6e:61:50:01:51:73:f2:35:d5:7f:bf:
04:c9:ec:d3:b4:99:5e:4d:d3:5b:4c:fe:4f:0d:df:
58:e5:bf:2b:5f:f9:92:66:2f:78:65:cb:d4:c8:3a:
3c:5d:1f:4a:81:8c:de:f6:00:01:fa:f1:c2:c0:e8:
a4:8b:57:55:b9:d7:7f:33:67:16:8c:08:49:01:9f:
46:92:bf:b7:6a:1c:f9:ba:f3:4c:02:2e:12:06:94:
20:55:54:c7:8e:cd:ee:74:38:ac:b2:17:49:d4:fc:
14:c0:9f:f4:aa:c0:31:05:ff:4a:c3:4c:a5:12:5b:
60:c1:39:82:9e:a5:68:ea:36:3e:63:40:f0:6d:48:
99:f6:24:60:9c:af:e4:e8:01:47:78:eb:de:21:ea:
51:43:52:d0:ed:da:68:50:ab:69:1d:37:fe:e7:27:
28:23:f2:c6:ac:86:68:85:8c:37:f5:1a:27:02:c6:
5e:6b:a0:aa:67:90:ce:0e:bc:fc:8e:9f:16:e9:71:
04:da:12:10:af:ce:3e:77:6f:3f:17:33:b9:3c:94:
b8:df:86:30:94:20:09:b5:2e:8a:22:a9:7c:0d:12:
53:da:17:c2:d6:70:0d:4d:01:1a:d9:b8:e9:3b:90:
d9:e7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
59:BE:8B:84:FD:17:F0:6E:6D:93:EE:88:58:AF:E0:BC:68:4D:3D:86
X509v3 Authority Key Identifier:
keyid:47:B3:FB:F3:9D:8D:FE:5B:C5:CF:D2:BE:D3:9F:0F:A1:52:61:90:97
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://repo-rpki.idnic.net/repo/2dd47f56-ec53-42eb-9b8b-fa08f874d319/0/47B3FBF39D8DFE5BC5CFD2BED39F0FA152619097.crl
Authority Information Access:
CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/47B3FBF39D8DFE5BC5CFD2BED39F0FA152619097.cer
Subject Information Access:
Signed Object - URI:rsync://repo-rpki.idnic.net/repo/2dd47f56-ec53-42eb-9b8b-fa08f874d319/0/47B3FBF39D8DFE5BC5CFD2BED39F0FA152619097.mft
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
1a:9d:5e:73:60:f7:8c:18:fc:44:93:f3:d3:11:46:cd:b5:05:
c2:1c:64:04:7b:d7:57:e5:21:df:c0:12:0f:b4:a3:bd:a7:cb:
6e:31:61:c1:45:0f:16:97:a9:fe:27:7c:ee:58:33:ae:3d:be:
83:39:b8:cf:a7:24:e7:3d:b6:38:72:87:a9:af:08:ec:73:89:
94:25:42:1c:26:8d:d6:af:24:19:8c:8c:e6:1f:eb:00:15:77:
50:1f:ef:06:ff:57:a6:10:5c:4a:fe:d7:bd:ac:1f:68:56:32:
c6:be:45:c9:92:3d:ce:30:35:92:f5:27:85:2d:1d:ec:51:a7:
8a:13:6c:d0:80:10:c0:58:f9:3e:17:7a:0f:c4:a5:7d:5b:93:
27:74:50:fa:22:03:ef:bf:4c:f3:bf:24:cb:93:92:36:a2:00:
39:17:74:46:c5:3d:4b:84:6f:80:0d:39:1f:cf:df:45:98:f3:
e0:57:82:81:14:97:79:ab:8a:0b:89:19:fb:4e:89:7c:af:9b:
99:bf:b6:04:0c:87:c2:67:12:56:80:ff:18:52:26:55:5a:fd:
45:18:e6:30:f6:d9:4e:9c:4a:b4:fa:4c:3b:e9:32:61:3c:83:
b0:d0:49:f9:fd:f1:ff:3c:f3:e1:8f:10:cf:08:8d:f2:fd:12:
1d:7c:48:e3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Feb 2 09:43:43 2026 by rpki-client