This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf repo-rpki.idnic.net/repo/af5fa54d-248e-423c-9e49-d6e6bfbbf78b/0/47C7E54A67164AFF95399B44CF7AFF364CD0476C.mft File: 47C7E54A67164AFF95399B44CF7AFF364CD0476C.mft (raw, json) Hash identifier: FYa+7rsLe88JmwkEjAkgx1SCT46BfI3gk+JoZ3h3B9M= Subject key identifier: 16:9D:46:FD:F4:D8:E4:5C:3C:78:DC:47:74:5E:08:E2:92:8E:BE:D6 Authority key identifier: 47:C7:E5:4A:67:16:4A:FF:95:39:9B:44:CF:7A:FF:36:4C:D0:47:6C Certificate issuer: /CN=47C7E54A67164AFF95399B44CF7AFF364CD0476C Certificate serial: 787D551851E0C19735F39CAF164FF315D47973B9 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/47C7E54A67164AFF95399B44CF7AFF364CD0476C.cer Subject info access: rsync://repo-rpki.idnic.net/repo/af5fa54d-248e-423c-9e49-d6e6bfbbf78b/0/47C7E54A67164AFF95399B44CF7AFF364CD0476C.mft Manifest number: 020A Signing time: Tue 02 Dec 2025 07:00:59 +0000 Manifest this update: Tue 02 Dec 2025 06:55:59 +0000 Manifest next update: Fri 05 Dec 2025 12:20:59 +0000 Files and hashes: 1: 47C7E54A67164AFF95399B44CF7AFF364CD0476C.crl (hash: FjK4cJXMnMKMIMUOhy6xjgF9xmJE87rj3o2iAyMhao8=) 2: 3130332e3139312e3136352e302f32342d3234203d3e20313439393235.roa (hash: YpgQnQU5lvkeRKFK74g+rncTHe8QCPlhwaAIMSjOHQI=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/af5fa54d-248e-423c-9e49-d6e6bfbbf78b/0/47C7E54A67164AFF95399B44CF7AFF364CD0476C.crl rsync://repo-rpki.idnic.net/repo/af5fa54d-248e-423c-9e49-d6e6bfbbf78b/0/47C7E54A67164AFF95399B44CF7AFF364CD0476C.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/47C7E54A67164AFF95399B44CF7AFF364CD0476C.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 05 Dec 2025 12:20:59 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 78:7d:55:18:51:e0:c1:97:35:f3:9c:af:16:4f:f3:15:d4:79:73:b9 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=47C7E54A67164AFF95399B44CF7AFF364CD0476C Validity Not Before: Dec 2 06:55:59 2025 GMT Not After : Dec 5 12:20:59 2025 GMT Subject: CN=169D46FDF4D8E45C3C78DC47745E08E2928EBED6 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d0:09:2f:3e:a4:0d:70:f0:60:2f:79:5b:72:91: a1:8b:2d:78:11:ca:75:b9:db:b4:77:85:d6:c0:73: 3e:1b:95:93:87:ec:9e:70:9b:c5:ed:c0:af:72:24: 36:29:78:87:a5:ee:7c:5f:ad:f4:96:c3:24:2d:a3: b3:72:3f:7f:15:66:b5:26:15:22:5d:fd:cd:06:ad: 8a:59:94:92:36:3f:fd:59:56:79:3d:e6:41:34:06: 84:01:6e:f5:11:0e:07:f2:37:b7:b9:34:30:6c:6f: e2:35:13:01:80:6c:64:01:1c:3c:aa:0d:f6:7b:fd: 1e:72:3f:18:1c:82:ea:09:c7:93:43:81:47:91:7a: e6:aa:6c:ef:d1:3f:77:57:9e:79:26:97:c3:de:06: 54:af:30:4e:26:b4:c5:be:0d:59:f4:0f:1c:ad:ba: 23:40:d7:9e:b7:67:7e:eb:1d:34:53:3c:5e:71:16: 94:1e:75:7d:ff:01:7f:29:b1:e0:32:0c:87:0f:e2: 97:d8:6a:0e:a7:3c:33:27:2d:93:2b:6c:f5:b1:7e: b2:f5:66:70:f7:38:d6:3f:42:8e:e5:14:0b:5c:88: 3e:a2:5e:3e:db:7a:30:b3:f8:69:33:9b:17:49:ac: 11:24:25:a4:3a:b4:60:e1:c6:ab:9f:bc:93:ed:b8: ed:e7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 16:9D:46:FD:F4:D8:E4:5C:3C:78:DC:47:74:5E:08:E2:92:8E:BE:D6 X509v3 Authority Key Identifier: keyid:47:C7:E5:4A:67:16:4A:FF:95:39:9B:44:CF:7A:FF:36:4C:D0:47:6C X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/af5fa54d-248e-423c-9e49-d6e6bfbbf78b/0/47C7E54A67164AFF95399B44CF7AFF364CD0476C.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/47C7E54A67164AFF95399B44CF7AFF364CD0476C.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/af5fa54d-248e-423c-9e49-d6e6bfbbf78b/0/47C7E54A67164AFF95399B44CF7AFF364CD0476C.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 5c:28:e9:78:07:41:9e:6b:3f:92:8c:33:8d:20:63:46:71:df: 75:42:fc:d4:09:b8:d4:f3:e2:d2:f7:70:91:75:37:00:05:58: 35:d0:35:13:42:00:74:9b:ae:75:09:87:76:90:64:c3:ab:af: 98:8f:46:fe:08:3c:38:25:0e:a7:60:1b:e1:91:7b:c8:d2:6d: af:8f:e5:60:1d:32:5b:5e:19:5b:73:5f:fd:64:d6:74:27:ff: 5b:11:7d:ac:f5:a1:ff:95:c5:a5:fd:de:75:ef:4f:bd:02:ca: 60:8a:5c:57:04:64:b1:8a:5f:cd:80:d9:3c:14:0b:5e:72:3b: 8a:1d:cf:79:6b:a5:a9:92:94:c6:62:09:6a:5d:9d:0a:89:dc: 77:ab:76:1e:e4:06:c4:95:65:49:46:a6:c8:6b:eb:32:a8:a0: c3:48:57:90:52:23:48:ef:47:8f:72:ba:b3:20:96:e8:a2:4d: 4a:ce:66:bb:e5:d4:6d:6f:f2:12:21:bb:c7:18:60:72:22:a0: 38:b6:38:42:fd:08:4e:43:9f:c4:6d:ee:ab:b5:5e:0d:d4:cc: cb:c3:3c:bf:2b:46:01:00:39:6b:7f:5f:f7:29:00:4c:fc:44: 4a:88:b8:f1:46:e8:a3:c6:ea:d9:81:d7:a3:67:e0:25:95:37: 59:a8:8b:ef -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUeH1VGFHgwZc185yvFk/zFdR5c7kwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoNDdDN0U1NEE2NzE2NEFGRjk1Mzk5QjQ0Q0Y3QUZGMzY0 Q0QwNDc2QzAeFw0yNTEyMDIwNjU1NTlaFw0yNTEyMDUxMjIwNTlaMDMxMTAvBgNV BAMTKDE2OUQ0NkZERjREOEU0NUMzQzc4REM0Nzc0NUUwOEUyOTI4RUJFRDYwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDQCS8+pA1w8GAveVtykaGLLXgR ynW527R3hdbAcz4blZOH7J5wm8XtwK9yJDYpeIel7nxfrfSWwyQto7NyP38VZrUm FSJd/c0GrYpZlJI2P/1ZVnk95kE0BoQBbvURDgfyN7e5NDBsb+I1EwGAbGQBHDyq DfZ7/R5yPxgcguoJx5NDgUeReuaqbO/RP3dXnnkml8PeBlSvME4mtMW+DVn0Dxyt uiNA1563Z37rHTRTPF5xFpQedX3/AX8pseAyDIcP4pfYag6nPDMnLZMrbPWxfrL1 ZnD3ONY/Qo7lFAtciD6iXj7bejCz+GkzmxdJrBEkJaQ6tGDhxqufvJPtuO3nAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUFp1G/fTY5Fw8eNxHdF4I4pKOvtYwHwYDVR0j BBgwFoAUR8flSmcWSv+VOZtEz3r/NkzQR2wwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby9h ZjVmYTU0ZC0yNDhlLTQyM2MtOWU0OS1kNmU2YmZiYmY3OGIvMC80N0M3RTU0QTY3 MTY0QUZGOTUzOTlCNDRDRjdBRkYzNjRDRDA0NzZDLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvNDdDN0U1NEE2NzE2NEFGRjk1Mzk5QjQ0Q0Y3QUZGMzY0Q0Qw NDc2Qy5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vYWY1ZmE1NGQtMjQ4ZS00MjNjLTll NDktZDZlNmJmYmJmNzhiLzAvNDdDN0U1NEE2NzE2NEFGRjk1Mzk5QjQ0Q0Y3QUZG MzY0Q0QwNDc2Qy5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAFwo6XgHQZ5rP5KMM40gY0Zx33VC/NQJuNTz 4tL3cJF1NwAFWDXQNRNCAHSbrnUJh3aQZMOrr5iPRv4IPDglDqdgG+GRe8jSba+P 5WAdMlteGVtzX/1k1nQn/1sRfaz1of+VxaX93nXvT70CymCKXFcEZLGKX82A2TwU C15yO4odz3lrpamSlMZiCWpdnQqJ3Herdh7kBsSVZUlGpshr6zKooMNIV5BSI0jv R49yurMgluiiTUrOZrvl1G1v8hIhu8cYYHIioDi2OEL9CE5Dn8Rt7qu1Xg3UzMvD PL8rRgEAOWt/X/cpAEz8REqIuPFG6KPG6tmB16Nn4CWVN1moi+8= -----END CERTIFICATE-----Generated at Wed Dec 3 14:44:18 2025 by rpki-client