This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf repo-rpki.idnic.net/repo/797b8f4a-3110-40b7-9032-0f02215a0b6a/0/C47E73E669156D8FB32AB80941C6E5A4EE07D37A.mft File: C47E73E669156D8FB32AB80941C6E5A4EE07D37A.mft (raw, json) Hash identifier: wD2FNUsHW9Jp9gFinjtCKLLhwOWtd95I5zViyPyv9GQ= Subject key identifier: BD:89:7D:BD:54:0D:D5:1D:39:CA:70:2B:AE:5D:34:03:98:FD:6A:D3 Authority key identifier: C4:7E:73:E6:69:15:6D:8F:B3:2A:B8:09:41:C6:E5:A4:EE:07:D3:7A Certificate issuer: /CN=C47E73E669156D8FB32AB80941C6E5A4EE07D37A Certificate serial: 6835ED78B8BA835ECAECB92D8CA3B2CBA87CC097 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/C47E73E669156D8FB32AB80941C6E5A4EE07D37A.cer Subject info access: rsync://repo-rpki.idnic.net/repo/797b8f4a-3110-40b7-9032-0f02215a0b6a/0/C47E73E669156D8FB32AB80941C6E5A4EE07D37A.mft Manifest number: 04EA Signing time: Tue 02 Dec 2025 22:11:03 +0000 Manifest this update: Tue 02 Dec 2025 22:06:03 +0000 Manifest next update: Sat 06 Dec 2025 04:28:03 +0000 Files and hashes: 1: C47E73E669156D8FB32AB80941C6E5A4EE07D37A.crl (hash: 5S9/1QtLXN9F3XSFoz9K87Zs0RtWygSntymLewf+p58=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/797b8f4a-3110-40b7-9032-0f02215a0b6a/0/C47E73E669156D8FB32AB80941C6E5A4EE07D37A.crl rsync://repo-rpki.idnic.net/repo/797b8f4a-3110-40b7-9032-0f02215a0b6a/0/C47E73E669156D8FB32AB80941C6E5A4EE07D37A.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/C47E73E669156D8FB32AB80941C6E5A4EE07D37A.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 06 Dec 2025 04:28:03 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 68:35:ed:78:b8:ba:83:5e:ca:ec:b9:2d:8c:a3:b2:cb:a8:7c:c0:97 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=C47E73E669156D8FB32AB80941C6E5A4EE07D37A Validity Not Before: Dec 2 22:06:03 2025 GMT Not After : Dec 6 04:28:03 2025 GMT Subject: CN=BD897DBD540DD51D39CA702BAE5D340398FD6AD3 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:dd:d0:1f:17:68:97:50:dc:c9:ca:1e:60:e0:60: 14:70:fc:4b:65:ee:30:d6:98:61:a3:a5:91:9c:85: a5:14:1b:c3:91:a0:db:01:33:7f:85:0f:fb:c7:b0: ea:a3:2e:c1:bb:b4:e0:1c:14:2a:85:fc:5c:51:ce: 1f:f8:22:97:81:a7:b8:d1:92:d4:00:d2:c2:f6:70: 64:34:8e:f3:46:b5:b2:0e:50:4d:03:1c:64:f7:ec: f5:50:70:db:2c:b2:c6:1b:72:84:7a:7c:d6:a2:37: d7:4a:18:39:b8:ae:c2:e2:17:cc:dc:41:98:39:49: c0:f4:f5:a6:a7:16:6a:33:66:e8:28:4f:a4:39:26: 60:21:dd:f9:39:e8:df:d9:58:5b:e6:92:74:e1:cc: 2d:d3:9e:cc:69:d8:4c:2b:98:e4:de:8d:f5:7d:37: e6:dd:55:6f:42:44:28:af:00:be:33:8a:88:a2:ef: cf:5d:98:fe:1e:fe:50:b7:2a:64:18:98:ff:8f:48: f7:c3:6e:5a:92:98:9d:0c:80:b7:01:41:c1:f0:d5: 4f:8c:71:e1:3d:09:3d:60:80:51:14:7a:c6:73:cb: 16:63:d3:4d:7b:37:ce:7c:f5:c2:c4:db:1d:48:62: 46:1f:92:8d:c6:5f:0e:33:cb:05:24:67:ae:66:a7: 78:a7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: BD:89:7D:BD:54:0D:D5:1D:39:CA:70:2B:AE:5D:34:03:98:FD:6A:D3 X509v3 Authority Key Identifier: keyid:C4:7E:73:E6:69:15:6D:8F:B3:2A:B8:09:41:C6:E5:A4:EE:07:D3:7A X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/797b8f4a-3110-40b7-9032-0f02215a0b6a/0/C47E73E669156D8FB32AB80941C6E5A4EE07D37A.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/C47E73E669156D8FB32AB80941C6E5A4EE07D37A.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/797b8f4a-3110-40b7-9032-0f02215a0b6a/0/C47E73E669156D8FB32AB80941C6E5A4EE07D37A.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 55:61:09:de:e2:70:eb:a5:24:3c:9f:db:ae:ec:69:f7:de:f7: 53:1f:5c:5c:6f:1e:43:ba:36:8c:7a:9d:3f:6c:f7:f7:7c:60: 6e:42:3a:a7:ce:19:cf:44:d0:a0:ec:ec:d6:b6:4a:a4:1b:9b: 84:47:8a:91:ef:5b:bd:aa:b2:09:2c:d1:53:46:59:54:82:b2: 76:a6:d9:d4:8e:b9:50:5e:a5:a4:8a:bc:6d:66:05:27:d1:10: 9c:60:c2:81:60:81:06:d2:6c:33:24:80:10:8e:b0:8e:dd:4a: 59:29:d3:b0:df:5f:1e:7c:ce:7b:2d:ce:15:d8:ee:70:27:c4: 10:2a:d3:0c:d9:99:a5:fb:46:71:23:fd:2d:fb:20:25:25:ee: d4:7c:39:20:fd:53:00:62:4a:cd:f5:4d:8e:3e:f1:ce:67:be: 0d:d9:8c:62:e4:1f:d9:dd:93:d3:e9:6a:0c:fa:22:09:5a:cd: cf:80:7f:c5:72:02:cc:4b:bf:1e:fe:a9:08:d4:6b:7e:a3:ac: 69:6f:3b:b7:d4:9e:88:2b:7c:8f:dd:aa:7a:3f:9d:3b:27:44: b3:57:a0:11:c6:ba:81:84:f9:28:de:78:33:53:34:ee:e4:fd: 9a:7b:25:4e:f8:fa:db:b2:44:b7:28:c7:07:1e:8a:20:bf:7f: a4:ee:d8:92 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUaDXteLi6g17K7LktjKOyy6h8wJcwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoQzQ3RTczRTY2OTE1NkQ4RkIzMkFCODA5NDFDNkU1QTRF RTA3RDM3QTAeFw0yNTEyMDIyMjA2MDNaFw0yNTEyMDYwNDI4MDNaMDMxMTAvBgNV BAMTKEJEODk3REJENTQwREQ1MUQzOUNBNzAyQkFFNUQzNDAzOThGRDZBRDMwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDd0B8XaJdQ3MnKHmDgYBRw/Etl 7jDWmGGjpZGchaUUG8ORoNsBM3+FD/vHsOqjLsG7tOAcFCqF/FxRzh/4IpeBp7jR ktQA0sL2cGQ0jvNGtbIOUE0DHGT37PVQcNssssYbcoR6fNaiN9dKGDm4rsLiF8zc QZg5ScD09aanFmozZugoT6Q5JmAh3fk56N/ZWFvmknThzC3Tnsxp2EwrmOTejfV9 N+bdVW9CRCivAL4zioii789dmP4e/lC3KmQYmP+PSPfDblqSmJ0MgLcBQcHw1U+M ceE9CT1ggFEUesZzyxZj0017N8589cLE2x1IYkYfko3GXw4zywUkZ65mp3inAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUvYl9vVQN1R05ynArrl00A5j9atMwHwYDVR0j BBgwFoAUxH5z5mkVbY+zKrgJQcblpO4H03owDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby83 OTdiOGY0YS0zMTEwLTQwYjctOTAzMi0wZjAyMjE1YTBiNmEvMC9DNDdFNzNFNjY5 MTU2RDhGQjMyQUI4MDk0MUM2RTVBNEVFMDdEMzdBLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvQzQ3RTczRTY2OTE1NkQ4RkIzMkFCODA5NDFDNkU1QTRFRTA3 RDM3QS5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vNzk3YjhmNGEtMzExMC00MGI3LTkw MzItMGYwMjIxNWEwYjZhLzAvQzQ3RTczRTY2OTE1NkQ4RkIzMkFCODA5NDFDNkU1 QTRFRTA3RDM3QS5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAFVhCd7icOulJDyf267saffe91MfXFxvHkO6 Nox6nT9s9/d8YG5COqfOGc9E0KDs7Na2SqQbm4RHipHvW72qsgks0VNGWVSCsnam 2dSOuVBepaSKvG1mBSfREJxgwoFggQbSbDMkgBCOsI7dSlkp07DfXx58znstzhXY 7nAnxBAq0wzZmaX7RnEj/S37ICUl7tR8OSD9UwBiSs31TY4+8c5nvg3ZjGLkH9nd k9Ppagz6Iglazc+Af8VyAsxLvx7+qQjUa36jrGlvO7fUnogrfI/dqno/nTsnRLNX oBHGuoGE+SjeeDNTNO7k/Zp7JU74+tuyRLcoxwceiiC/f6Tu2JI= -----END CERTIFICATE-----Generated at Wed Dec 3 13:58:12 2025 by rpki-client