This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf repo-rpki.idnic.net/repo/6e0764d4-f2bd-42bc-86c4-2a61b623a49b/0/47AC32E2BE2523241C15975CC6CFC8ADFC9CC97D.mft
File:                     47AC32E2BE2523241C15975CC6CFC8ADFC9CC97D.mft (raw, json)
Hash identifier:          RfRGza8Q6hLOeezoY0hhKR4ZmcarMKS0EQboEUVuqxU=
Subject key identifier:   40:9C:12:9A:90:40:41:22:99:72:5C:70:3A:13:14:3E:FD:88:2A:D1
Authority key identifier: 47:AC:32:E2:BE:25:23:24:1C:15:97:5C:C6:CF:C8:AD:FC:9C:C9:7D
Certificate issuer:       /CN=47AC32E2BE2523241C15975CC6CFC8ADFC9CC97D
Certificate serial:       021B7DE89D364AD2912A6F0781838102BB65A598
Authority info access:    rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/47AC32E2BE2523241C15975CC6CFC8ADFC9CC97D.cer
Subject info access:      rsync://repo-rpki.idnic.net/repo/6e0764d4-f2bd-42bc-86c4-2a61b623a49b/0/47AC32E2BE2523241C15975CC6CFC8ADFC9CC97D.mft
Manifest number:          0255
Signing time:             Sun 01 Feb 2026 14:11:36 +0000
Manifest this update:     Sun 01 Feb 2026 14:06:36 +0000
Manifest next update:     Wed 04 Feb 2026 16:59:36 +0000
Files and hashes:         1: 47AC32E2BE2523241C15975CC6CFC8ADFC9CC97D.crl (hash: ZRdIahM2v2ZthQmIth8xpHLX7PZh0cJ6ge6Rh7+B3j0=)
Validation:               OK
Signature path:           rsync://repo-rpki.idnic.net/repo/6e0764d4-f2bd-42bc-86c4-2a61b623a49b/0/47AC32E2BE2523241C15975CC6CFC8ADFC9CC97D.crl
                          rsync://repo-rpki.idnic.net/repo/6e0764d4-f2bd-42bc-86c4-2a61b623a49b/0/47AC32E2BE2523241C15975CC6CFC8ADFC9CC97D.mft
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/47AC32E2BE2523241C15975CC6CFC8ADFC9CC97D.cer
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Wed 04 Feb 2026 16:59:36 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            02:1b:7d:e8:9d:36:4a:d2:91:2a:6f:07:81:83:81:02:bb:65:a5:98
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=47AC32E2BE2523241C15975CC6CFC8ADFC9CC97D
        Validity
            Not Before: Feb  1 14:06:36 2026 GMT
            Not After : Feb  4 16:59:36 2026 GMT
        Subject: CN=409C129A9040412299725C703A13143EFD882AD1
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cf:87:8e:f2:77:24:ca:05:d7:e1:c8:9a:e3:1d:
                    74:30:b4:f0:7e:73:d1:19:a0:69:eb:06:04:32:9e:
                    67:d3:89:36:a6:25:2b:a2:7b:7b:97:ab:00:b4:13:
                    f1:3f:d8:fe:25:51:0e:10:c5:66:b0:3d:80:79:64:
                    0a:71:b5:2b:2c:bc:1b:4d:bd:0e:33:61:df:46:71:
                    c2:be:07:7a:83:bf:d5:fe:40:7a:b0:84:b6:d2:3f:
                    2d:d5:30:11:3c:04:28:c0:b5:3a:4f:db:cc:8c:85:
                    3a:0b:bb:9f:12:3e:b8:70:a4:a4:65:25:cb:b1:d1:
                    5a:7f:ba:15:0c:09:d2:05:07:e5:d1:99:ac:05:12:
                    4a:ab:07:4e:93:92:5e:f5:f4:aa:c9:d4:28:30:0c:
                    a2:b7:92:88:d1:1f:25:db:61:08:47:a7:b2:4b:7a:
                    1c:86:16:01:75:f4:96:88:14:58:9b:67:7a:64:35:
                    08:f4:d5:29:92:67:5c:91:9e:e9:21:c4:db:4c:6d:
                    6d:d5:ca:39:87:62:9f:31:5f:91:c7:e6:5f:66:49:
                    fb:00:9e:3f:b0:8f:ac:54:ee:80:20:c5:66:f8:88:
                    9a:ca:76:80:e9:91:9d:61:10:ac:29:f8:24:6d:de:
                    cc:ad:2e:79:e4:08:a9:d6:e8:c5:74:3a:9a:9c:9a:
                    f1:9f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                40:9C:12:9A:90:40:41:22:99:72:5C:70:3A:13:14:3E:FD:88:2A:D1
            X509v3 Authority Key Identifier:
                keyid:47:AC:32:E2:BE:25:23:24:1C:15:97:5C:C6:CF:C8:AD:FC:9C:C9:7D

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repo-rpki.idnic.net/repo/6e0764d4-f2bd-42bc-86c4-2a61b623a49b/0/47AC32E2BE2523241C15975CC6CFC8ADFC9CC97D.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/47AC32E2BE2523241C15975CC6CFC8ADFC9CC97D.cer

            Subject Information Access:
                Signed Object - URI:rsync://repo-rpki.idnic.net/repo/6e0764d4-f2bd-42bc-86c4-2a61b623a49b/0/47AC32E2BE2523241C15975CC6CFC8ADFC9CC97D.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         60:56:ad:b6:9d:87:47:36:83:fa:9e:3c:71:ac:9c:81:b0:87:
         49:21:cf:f1:03:1c:e2:3d:03:0b:26:c0:fc:8e:5f:bc:e9:fc:
         df:1d:33:49:ce:8d:28:77:96:ae:63:cf:8f:bb:65:4d:b2:27:
         d8:3c:2e:81:2d:ea:28:3b:2a:2e:a8:c2:91:7d:1c:89:09:6a:
         8d:44:dc:2c:38:c8:d9:b0:a5:38:bf:be:f5:39:4b:6c:94:00:
         f1:e0:85:d7:6e:bd:12:55:7b:68:3a:b2:ed:0d:01:45:47:8f:
         7f:ec:ca:c1:00:5f:01:8e:f9:94:d6:17:0c:65:a4:85:29:ef:
         fc:e2:fd:4c:e8:51:8c:50:90:bb:47:81:87:17:17:ce:a6:fe:
         e5:c8:63:44:5d:b1:bb:b1:d3:8b:3b:63:20:bd:b5:52:da:cd:
         d1:d9:51:7a:e9:86:cc:07:f3:fd:06:13:88:2b:13:c4:71:36:
         57:d1:18:0f:fc:0a:3e:ca:59:80:ff:4d:42:80:4b:01:60:21:
         9f:c0:40:c7:12:13:49:58:61:00:3b:7e:b0:46:66:05:4b:d6:
         04:d7:d4:9a:ae:3d:5e:38:96:1b:61:d8:f1:52:73:19:8b:a7:
         38:85:d0:55:c9:dc:01:ac:8c:f0:42:d5:69:e4:df:98:aa:97:
         ec:20:7b:87
-----BEGIN CERTIFICATE-----
MIIFMjCCBBqgAwIBAgIUAht96J02StKRKm8HgYOBArtlpZgwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoNDdBQzMyRTJCRTI1MjMyNDFDMTU5NzVDQzZDRkM4QURG
QzlDQzk3RDAeFw0yNjAyMDExNDA2MzZaFw0yNjAyMDQxNjU5MzZaMDMxMTAvBgNV
BAMTKDQwOUMxMjlBOTA0MDQxMjI5OTcyNUM3MDNBMTMxNDNFRkQ4ODJBRDEwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDPh47ydyTKBdfhyJrjHXQwtPB+
c9EZoGnrBgQynmfTiTamJSuie3uXqwC0E/E/2P4lUQ4QxWawPYB5ZApxtSssvBtN
vQ4zYd9GccK+B3qDv9X+QHqwhLbSPy3VMBE8BCjAtTpP28yMhToLu58SPrhwpKRl
Jcux0Vp/uhUMCdIFB+XRmawFEkqrB06Tkl719KrJ1CgwDKK3kojRHyXbYQhHp7JL
ehyGFgF19JaIFFibZ3pkNQj01SmSZ1yRnukhxNtMbW3VyjmHYp8xX5HH5l9mSfsA
nj+wj6xU7oAgxWb4iJrKdoDpkZ1hEKwp+CRt3sytLnnkCKnW6MV0OpqcmvGfAgMB
AAGjggI8MIICODAdBgNVHQ4EFgQUQJwSmpBAQSKZclxwOhMUPv2IKtEwHwYDVR0j
BBgwFoAUR6wy4r4lIyQcFZdcxs/IrfycyX0wDgYDVR0PAQH/BAQDAgeAMIGFBgNV
HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby82
ZTA3NjRkNC1mMmJkLTQyYmMtODZjNC0yYTYxYjYyM2E0OWIvMC80N0FDMzJFMkJF
MjUyMzI0MUMxNTk3NUNDNkNGQzhBREZDOUNDOTdELmNybDB0BggrBgEFBQcBAQRo
MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv
L0lETklDLUlELzIvNDdBQzMyRTJCRTI1MjMyNDFDMTU5NzVDQzZDRkM4QURGQzlD
Qzk3RC5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6
Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vNmUwNzY0ZDQtZjJiZC00MmJjLTg2
YzQtMmE2MWI2MjNhNDliLzAvNDdBQzMyRTJCRTI1MjMyNDFDMTU5NzVDQzZDRkM4
QURGQzlDQzk3RC5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF
BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC
BQAwDQYJKoZIhvcNAQELBQADggEBAGBWrbadh0c2g/qePHGsnIGwh0khz/EDHOI9
AwsmwPyOX7zp/N8dM0nOjSh3lq5jz4+7ZU2yJ9g8LoEt6ig7Ki6owpF9HIkJao1E
3Cw4yNmwpTi/vvU5S2yUAPHghdduvRJVe2g6su0NAUVHj3/sysEAXwGO+ZTWFwxl
pIUp7/zi/UzoUYxQkLtHgYcXF86m/uXIY0Rdsbux04s7YyC9tVLazdHZUXrphswH
8/0GE4grE8RxNlfRGA/8Cj7KWYD/TUKASwFgIZ/AQMcSE0lYYQA7frBGZgVL1gTX
1JquPV44lhth2PFScxmLpziF0FXJ3AGsjPBC1Wnk35iql+wge4c=
-----END CERTIFICATE-----
Generated at Mon Feb 2 10:03:39 2026 by rpki-client