This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf repo-rpki.idnic.net/repo/b3c973d5-fe94-400d-bcbf-f233e8ac5537/0/47A9D99A8511F7CE54F9F71E1EF83EF548924274.mft File: 47A9D99A8511F7CE54F9F71E1EF83EF548924274.mft (raw, json) Hash identifier: /lkyjaLbuBwiIa7Bn78XsMVRhXKmRApJeMpjTc2IIUI= Subject key identifier: 44:AA:78:AD:B2:E6:3E:BC:AA:1F:0F:A7:70:86:00:46:D4:AF:8D:D0 Authority key identifier: 47:A9:D9:9A:85:11:F7:CE:54:F9:F7:1E:1E:F8:3E:F5:48:92:42:74 Certificate issuer: /CN=47A9D99A8511F7CE54F9F71E1EF83EF548924274 Certificate serial: 79A723BCF70C0B893A6851154DA4879011EF50A0 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/47A9D99A8511F7CE54F9F71E1EF83EF548924274.cer Subject info access: rsync://repo-rpki.idnic.net/repo/b3c973d5-fe94-400d-bcbf-f233e8ac5537/0/47A9D99A8511F7CE54F9F71E1EF83EF548924274.mft Manifest number: 01E2 Signing time: Mon 01 Dec 2025 12:10:39 +0000 Manifest this update: Mon 01 Dec 2025 12:05:39 +0000 Manifest next update: Thu 04 Dec 2025 19:09:39 +0000 Files and hashes: 1: 3130332e37382e3234302e302f32342d3234203d3e20313530343836.roa (hash: Co4oCqQgIJlqQAiLFlbpmiRGvqJo8VYFhlYbFw0DIow=) 2: 47A9D99A8511F7CE54F9F71E1EF83EF548924274.crl (hash: 8XmLIt4Qcm/lnBj/ei1kTeTdxfSc44fSC+L/EDUOGGM=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/b3c973d5-fe94-400d-bcbf-f233e8ac5537/0/47A9D99A8511F7CE54F9F71E1EF83EF548924274.crl rsync://repo-rpki.idnic.net/repo/b3c973d5-fe94-400d-bcbf-f233e8ac5537/0/47A9D99A8511F7CE54F9F71E1EF83EF548924274.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/47A9D99A8511F7CE54F9F71E1EF83EF548924274.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 04 Dec 2025 19:09:39 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 79:a7:23:bc:f7:0c:0b:89:3a:68:51:15:4d:a4:87:90:11:ef:50:a0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=47A9D99A8511F7CE54F9F71E1EF83EF548924274 Validity Not Before: Dec 1 12:05:39 2025 GMT Not After : Dec 4 19:09:39 2025 GMT Subject: CN=44AA78ADB2E63EBCAA1F0FA770860046D4AF8DD0 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b1:b1:87:da:47:d7:e3:c0:4d:c7:07:1c:63:f4: b6:06:43:ad:41:ee:37:0c:f2:df:b7:7c:b3:fb:5c: 1d:f1:64:a3:c2:e9:25:a2:45:ca:5c:a8:4b:68:39: 90:0a:c3:e8:10:3f:87:76:5c:49:e4:70:7f:e4:5f: ec:40:7f:b3:5c:08:4a:aa:53:24:ef:ab:89:f3:bd: 16:41:e2:1c:24:32:f3:10:2a:22:c7:8f:27:bc:eb: 3b:d6:72:70:15:ac:43:eb:de:23:f1:97:d6:e6:6c: 9a:d4:a4:0f:bb:39:31:f4:15:95:0d:9d:a5:ff:ea: b0:65:9e:bb:f3:18:f7:8f:95:e7:b6:5c:61:b2:78: ba:2a:d6:50:32:06:31:ee:04:ba:d9:bc:74:0a:3f: 47:e1:03:9c:a9:dd:48:bc:0f:4b:fc:7c:84:b8:e8: 41:84:98:e1:db:ec:a4:9e:6d:b8:12:c3:26:93:b9: b4:42:f2:a5:c8:86:27:69:72:c7:cb:9a:f9:62:fd: df:8b:2f:fe:33:c0:d4:92:94:8b:20:94:0d:03:61: d6:f9:e7:76:4a:c4:f1:50:b6:74:c3:c0:13:2b:25: 91:ca:46:0a:42:c4:c7:ca:8e:ce:e0:89:c8:58:6d: 9e:2c:7e:ab:16:40:3f:15:32:a3:9c:ae:48:61:9c: 80:45 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 44:AA:78:AD:B2:E6:3E:BC:AA:1F:0F:A7:70:86:00:46:D4:AF:8D:D0 X509v3 Authority Key Identifier: keyid:47:A9:D9:9A:85:11:F7:CE:54:F9:F7:1E:1E:F8:3E:F5:48:92:42:74 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/b3c973d5-fe94-400d-bcbf-f233e8ac5537/0/47A9D99A8511F7CE54F9F71E1EF83EF548924274.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/47A9D99A8511F7CE54F9F71E1EF83EF548924274.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/b3c973d5-fe94-400d-bcbf-f233e8ac5537/0/47A9D99A8511F7CE54F9F71E1EF83EF548924274.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 89:cd:11:2e:f9:b4:08:87:94:00:9d:62:cd:29:b2:2e:cf:48: 99:65:fb:78:cc:66:d0:07:8b:d4:86:a5:28:91:0e:53:46:1a: 7b:ff:71:1d:79:7d:d9:57:98:2b:ce:ae:ea:53:1a:a5:09:0b: d2:1e:28:3b:3e:c3:5f:26:41:7d:39:17:e8:95:e7:e5:0b:3c: fa:7e:b1:7c:40:73:20:38:ef:a9:7f:fb:0c:ad:e7:af:0a:bc: c4:af:ca:24:80:18:f9:44:8c:a9:fb:a9:d8:dd:b2:a3:64:d0: 15:2b:3b:00:fe:76:33:14:05:fc:1a:ab:10:23:cd:9b:cd:c6: b6:32:d6:9e:5e:ea:9a:e9:94:1b:86:ff:72:f6:39:91:b7:91: 24:62:0b:d7:11:1f:fd:cb:fb:e2:d3:d8:d6:c3:91:30:6e:17: 96:5d:5b:9b:7a:af:b5:3e:5f:7d:c1:d1:10:5f:bd:d1:fb:b0: 2d:20:fd:ff:b0:6e:4f:f9:f1:4f:36:72:03:f0:b8:5d:6a:ee: 37:07:91:67:ba:ca:04:69:00:68:56:f0:11:2e:e0:84:d3:f0: f9:10:8a:09:b6:2e:78:5b:8e:ac:d6:81:33:02:54:13:47:d7: de:55:c5:c9:38:03:1c:cc:b4:9c:8f:ba:74:c9:36:f0:a6:0e: b8:95:a5:b3 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUeacjvPcMC4k6aFEVTaSHkBHvUKAwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoNDdBOUQ5OUE4NTExRjdDRTU0RjlGNzFFMUVGODNFRjU0 ODkyNDI3NDAeFw0yNTEyMDExMjA1MzlaFw0yNTEyMDQxOTA5MzlaMDMxMTAvBgNV BAMTKDQ0QUE3OEFEQjJFNjNFQkNBQTFGMEZBNzcwODYwMDQ2RDRBRjhERDAwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCxsYfaR9fjwE3HBxxj9LYGQ61B 7jcM8t+3fLP7XB3xZKPC6SWiRcpcqEtoOZAKw+gQP4d2XEnkcH/kX+xAf7NcCEqq UyTvq4nzvRZB4hwkMvMQKiLHjye86zvWcnAVrEPr3iPxl9bmbJrUpA+7OTH0FZUN naX/6rBlnrvzGPePlee2XGGyeLoq1lAyBjHuBLrZvHQKP0fhA5yp3Ui8D0v8fIS4 6EGEmOHb7KSebbgSwyaTubRC8qXIhidpcsfLmvli/d+LL/4zwNSSlIsglA0DYdb5 53ZKxPFQtnTDwBMrJZHKRgpCxMfKjs7gichYbZ4sfqsWQD8VMqOcrkhhnIBFAgMB AAGjggI8MIICODAdBgNVHQ4EFgQURKp4rbLmPryqHw+ncIYARtSvjdAwHwYDVR0j BBgwFoAUR6nZmoUR985U+fceHvg+9UiSQnQwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby9i M2M5NzNkNS1mZTk0LTQwMGQtYmNiZi1mMjMzZThhYzU1MzcvMC80N0E5RDk5QTg1 MTFGN0NFNTRGOUY3MUUxRUY4M0VGNTQ4OTI0Mjc0LmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvNDdBOUQ5OUE4NTExRjdDRTU0RjlGNzFFMUVGODNFRjU0ODky NDI3NC5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vYjNjOTczZDUtZmU5NC00MDBkLWJj YmYtZjIzM2U4YWM1NTM3LzAvNDdBOUQ5OUE4NTExRjdDRTU0RjlGNzFFMUVGODNF RjU0ODkyNDI3NC5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAInNES75tAiHlACdYs0psi7PSJll+3jMZtAH i9SGpSiRDlNGGnv/cR15fdlXmCvOrupTGqUJC9IeKDs+w18mQX05F+iV5+ULPPp+ sXxAcyA476l/+wyt568KvMSvyiSAGPlEjKn7qdjdsqNk0BUrOwD+djMUBfwaqxAj zZvNxrYy1p5e6prplBuG/3L2OZG3kSRiC9cRH/3L++LT2NbDkTBuF5ZdW5t6r7U+ X33B0RBfvdH7sC0g/f+wbk/58U82cgPwuF1q7jcHkWe6ygRpAGhW8BEu4ITT8PkQ igm2LnhbjqzWgTMCVBNH195Vxck4AxzMtJyPunTJNvCmDriVpbM= -----END CERTIFICATE-----Generated at Wed Dec 3 14:56:36 2025 by rpki-client