This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

$ rpki-client -vvf repo-rpki.idnic.net/repo/734f13e8-deef-48a8-a2e0-5a63ad159efa/0/47FF2FBD96536B4FD610282F11EC87790C683CEF.mft
File: 47FF2FBD96536B4FD610282F11EC87790C683CEF.mft (raw, json)
Hash identifier: kkgiEG/ibLxI79mim/rqx5wYuSjpuCIuJwIixkPs14s=
Subject key identifier: 9A:EE:38:3C:37:9C:94:69:44:89:22:09:C9:3F:AE:36:18:69:CE:7A
Authority key identifier: 47:FF:2F:BD:96:53:6B:4F:D6:10:28:2F:11:EC:87:79:0C:68:3C:EF
Certificate issuer: /CN=47FF2FBD96536B4FD610282F11EC87790C683CEF
Certificate serial: 4E62A9E7776A45DADDCE4399CFDA7A71005362ED
Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/47FF2FBD96536B4FD610282F11EC87790C683CEF.cer
Subject info access: rsync://repo-rpki.idnic.net/repo/734f13e8-deef-48a8-a2e0-5a63ad159efa/0/47FF2FBD96536B4FD610282F11EC87790C683CEF.mft
Manifest number: 0132
Signing time: Tue 02 Dec 2025 13:02:15 +0000
Manifest this update: Tue 02 Dec 2025 12:57:15 +0000
Manifest next update: Fri 05 Dec 2025 20:29:15 +0000
Files and hashes: 1: 47FF2FBD96536B4FD610282F11EC87790C683CEF.crl (hash: 00NpxXLNOphDrcdsgS6Gp+HeDTYLmN16yxgBr3DUlBk=)
Validation: OK
Signature path: rsync://repo-rpki.idnic.net/repo/734f13e8-deef-48a8-a2e0-5a63ad159efa/0/47FF2FBD96536B4FD610282F11EC87790C683CEF.crl
rsync://repo-rpki.idnic.net/repo/734f13e8-deef-48a8-a2e0-5a63ad159efa/0/47FF2FBD96536B4FD610282F11EC87790C683CEF.mft
rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/47FF2FBD96536B4FD610282F11EC87790C683CEF.cer
rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl
rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Fri 05 Dec 2025 20:29:15 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
4e:62:a9:e7:77:6a:45:da:dd:ce:43:99:cf:da:7a:71:00:53:62:ed
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=47FF2FBD96536B4FD610282F11EC87790C683CEF
Validity
Not Before: Dec 2 12:57:15 2025 GMT
Not After : Dec 5 20:29:15 2025 GMT
Subject: CN=9AEE383C379C946944892209C93FAE361869CE7A
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d1:10:b4:c7:6e:7d:13:6c:b8:65:12:b9:47:00:
ea:20:e3:b2:b6:68:62:98:11:83:0d:08:eb:0c:82:
19:f1:7c:fe:46:87:41:0c:c5:ca:f4:04:34:3c:33:
24:b5:3a:fa:b3:74:99:50:00:68:01:68:6b:4b:1c:
46:55:c9:ae:88:f2:c9:06:4b:0e:89:97:f1:5a:e6:
9f:1d:41:74:9e:5a:81:0c:5b:e9:b4:12:c9:e2:6d:
d9:bd:af:9d:f0:77:08:ff:71:98:bb:bc:4f:98:1a:
18:95:9d:62:12:a5:61:43:b5:3e:ae:a0:7d:4b:8c:
42:f2:97:1c:70:04:6e:2f:14:a4:2e:12:99:4f:ec:
cf:d3:5d:7a:9d:cb:12:01:16:8e:f2:8d:1d:29:22:
fb:01:a8:60:86:3c:40:8d:8f:94:11:cb:ce:31:2b:
c1:ae:3e:46:57:9a:71:4e:72:9e:4e:e5:92:06:73:
2c:a3:50:6b:d2:b3:8c:6f:4f:4c:dd:7b:d7:0d:aa:
5b:6f:17:88:20:c9:46:4d:e4:98:3c:c6:64:8a:78:
df:9e:21:3a:7a:2f:6f:90:bd:a0:42:84:81:5f:9f:
ec:06:84:a1:5d:db:bb:53:34:cd:12:1f:53:5c:11:
34:05:2a:9c:b7:ad:5f:22:2b:61:0f:05:53:69:d2:
e6:ab
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
9A:EE:38:3C:37:9C:94:69:44:89:22:09:C9:3F:AE:36:18:69:CE:7A
X509v3 Authority Key Identifier:
keyid:47:FF:2F:BD:96:53:6B:4F:D6:10:28:2F:11:EC:87:79:0C:68:3C:EF
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://repo-rpki.idnic.net/repo/734f13e8-deef-48a8-a2e0-5a63ad159efa/0/47FF2FBD96536B4FD610282F11EC87790C683CEF.crl
Authority Information Access:
CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/47FF2FBD96536B4FD610282F11EC87790C683CEF.cer
Subject Information Access:
Signed Object - URI:rsync://repo-rpki.idnic.net/repo/734f13e8-deef-48a8-a2e0-5a63ad159efa/0/47FF2FBD96536B4FD610282F11EC87790C683CEF.mft
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
55:96:9d:5d:6f:05:cf:7b:cf:f9:c1:73:82:57:07:2c:2b:7e:
88:d0:d6:2c:82:79:6c:0d:9e:15:c6:6c:e1:00:00:87:44:f0:
7b:f2:34:2d:1d:ca:8e:7d:63:4b:fa:45:01:53:3a:bc:3a:e9:
a0:ad:ec:22:2e:d0:35:22:b8:b8:3e:0f:56:dd:ce:47:a2:94:
7e:74:9a:21:6e:b8:94:0b:08:84:68:6c:09:a7:41:26:db:10:
98:e5:25:a1:97:b0:5d:ef:1d:6b:03:ec:ae:66:8f:34:db:b3:
a7:fe:00:da:ad:52:bd:0b:2b:60:5b:9c:41:a7:d6:46:33:16:
03:ae:e1:4d:51:fa:11:63:7a:78:43:19:5a:13:71:d8:b1:12:
8e:01:d0:2f:15:dd:a0:f5:b0:20:3e:86:4e:cb:7e:fc:8a:b6:
be:a8:e9:17:3a:9d:40:54:b8:5b:dd:f2:ee:ae:b5:99:69:0f:
bd:4f:30:be:50:2c:e6:f0:fc:26:b5:17:20:84:57:a8:79:d4:
00:e0:53:15:ea:81:ed:c6:01:1b:2a:d3:b9:a1:91:65:6e:60:
14:bd:aa:37:5a:5f:cc:bc:79:a3:2a:0e:34:eb:6d:5f:11:4e:
3f:17:34:ff:c1:76:a3:f1:b1:a8:34:c3:bb:33:c5:d7:b2:eb:
c3:fd:f3:f1
-----BEGIN CERTIFICATE-----
MIIFMjCCBBqgAwIBAgIUTmKp53dqRdrdzkOZz9p6cQBTYu0wDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoNDdGRjJGQkQ5NjUzNkI0RkQ2MTAyODJGMTFFQzg3Nzkw
QzY4M0NFRjAeFw0yNTEyMDIxMjU3MTVaFw0yNTEyMDUyMDI5MTVaMDMxMTAvBgNV
BAMTKDlBRUUzODNDMzc5Qzk0Njk0NDg5MjIwOUM5M0ZBRTM2MTg2OUNFN0EwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDRELTHbn0TbLhlErlHAOog47K2
aGKYEYMNCOsMghnxfP5Gh0EMxcr0BDQ8MyS1OvqzdJlQAGgBaGtLHEZVya6I8skG
Sw6Jl/Fa5p8dQXSeWoEMW+m0Esnibdm9r53wdwj/cZi7vE+YGhiVnWISpWFDtT6u
oH1LjELylxxwBG4vFKQuEplP7M/TXXqdyxIBFo7yjR0pIvsBqGCGPECNj5QRy84x
K8GuPkZXmnFOcp5O5ZIGcyyjUGvSs4xvT0zde9cNqltvF4ggyUZN5Jg8xmSKeN+e
ITp6L2+QvaBChIFfn+wGhKFd27tTNM0SH1NcETQFKpy3rV8iK2EPBVNp0uarAgMB
AAGjggI8MIICODAdBgNVHQ4EFgQUmu44PDeclGlEiSIJyT+uNhhpznowHwYDVR0j
BBgwFoAUR/8vvZZTa0/WECgvEeyHeQxoPO8wDgYDVR0PAQH/BAQDAgeAMIGFBgNV
HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby83
MzRmMTNlOC1kZWVmLTQ4YTgtYTJlMC01YTYzYWQxNTllZmEvMC80N0ZGMkZCRDk2
NTM2QjRGRDYxMDI4MkYxMUVDODc3OTBDNjgzQ0VGLmNybDB0BggrBgEFBQcBAQRo
MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv
L0lETklDLUlELzIvNDdGRjJGQkQ5NjUzNkI0RkQ2MTAyODJGMTFFQzg3NzkwQzY4
M0NFRi5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6
Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vNzM0ZjEzZTgtZGVlZi00OGE4LWEy
ZTAtNWE2M2FkMTU5ZWZhLzAvNDdGRjJGQkQ5NjUzNkI0RkQ2MTAyODJGMTFFQzg3
NzkwQzY4M0NFRi5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF
BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC
BQAwDQYJKoZIhvcNAQELBQADggEBAFWWnV1vBc97z/nBc4JXBywrfojQ1iyCeWwN
nhXGbOEAAIdE8HvyNC0dyo59Y0v6RQFTOrw66aCt7CIu0DUiuLg+D1bdzkeilH50
miFuuJQLCIRobAmnQSbbEJjlJaGXsF3vHWsD7K5mjzTbs6f+ANqtUr0LK2BbnEGn
1kYzFgOu4U1R+hFjenhDGVoTcdixEo4B0C8V3aD1sCA+hk7LfvyKtr6o6Rc6nUBU
uFvd8u6utZlpD71PML5QLObw/Ca1FyCEV6h51ADgUxXqge3GARsq07mhkWVuYBS9
qjdaX8y8eaMqDjTrbV8RTj8XNP/BdqPxsag0w7szxdey68P98/E=
-----END CERTIFICATE-----
Generated at Wed Dec 3 14:43:48 2025 by rpki-client