This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

$ rpki-client -vvf repo-rpki.idnic.net/repo/b3c973d5-fe94-400d-bcbf-f233e8ac5537/0/47A9D99A8511F7CE54F9F71E1EF83EF548924274.mft
File: 47A9D99A8511F7CE54F9F71E1EF83EF548924274.mft (raw, json)
Hash identifier: YD9hqbhplRkdiUUsNORxpAXocaS4ig+yWwkSWU+rUvw=
Subject key identifier: A5:FF:E9:36:04:9C:47:DF:8A:C1:3C:B7:4E:B8:E0:ED:1E:4A:8C:84
Authority key identifier: 47:A9:D9:9A:85:11:F7:CE:54:F9:F7:1E:1E:F8:3E:F5:48:92:42:74
Certificate issuer: /CN=47A9D99A8511F7CE54F9F71E1EF83EF548924274
Certificate serial: 553A8509380BE580BE9BD4110DD7D3F4541CB7A9
Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/47A9D99A8511F7CE54F9F71E1EF83EF548924274.cer
Subject info access: rsync://repo-rpki.idnic.net/repo/b3c973d5-fe94-400d-bcbf-f233e8ac5537/0/47A9D99A8511F7CE54F9F71E1EF83EF548924274.mft
Manifest number: 01FD
Signing time: Sat 31 Jan 2026 05:40:39 +0000
Manifest this update: Sat 31 Jan 2026 05:35:39 +0000
Manifest next update: Tue 03 Feb 2026 13:28:39 +0000
Files and hashes: 1: 3130332e37382e3234302e302f32342d3234203d3e20313530343836.roa (hash: Co4oCqQgIJlqQAiLFlbpmiRGvqJo8VYFhlYbFw0DIow=)
2: 47A9D99A8511F7CE54F9F71E1EF83EF548924274.crl (hash: pIO0foFK6d31owAZ/SZ323gErhmdZIF42wnoAwVJt+4=)
Validation: OK
Signature path: rsync://repo-rpki.idnic.net/repo/b3c973d5-fe94-400d-bcbf-f233e8ac5537/0/47A9D99A8511F7CE54F9F71E1EF83EF548924274.crl
rsync://repo-rpki.idnic.net/repo/b3c973d5-fe94-400d-bcbf-f233e8ac5537/0/47A9D99A8511F7CE54F9F71E1EF83EF548924274.mft
rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/47A9D99A8511F7CE54F9F71E1EF83EF548924274.cer
rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl
rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Tue 03 Feb 2026 13:28:39 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
55:3a:85:09:38:0b:e5:80:be:9b:d4:11:0d:d7:d3:f4:54:1c:b7:a9
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=47A9D99A8511F7CE54F9F71E1EF83EF548924274
Validity
Not Before: Jan 31 05:35:39 2026 GMT
Not After : Feb 3 13:28:39 2026 GMT
Subject: CN=A5FFE936049C47DF8AC13CB74EB8E0ED1E4A8C84
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bb:d3:3a:dd:9c:35:1c:17:f6:c5:d1:a3:2d:14:
52:29:f2:33:b2:8b:cb:97:87:6e:d6:20:34:a9:16:
ac:b8:95:aa:5c:3d:c0:ee:80:96:7f:bc:ed:df:92:
da:06:81:bf:b2:27:ab:c6:b3:3e:89:be:a0:40:1d:
4f:64:4b:72:09:e9:36:4c:89:67:fc:b2:71:56:1d:
fa:be:4b:02:09:b8:7f:3a:93:84:d8:fd:5d:d2:52:
96:27:8c:c3:6d:5d:e0:c2:d6:d9:9c:03:ba:4d:2f:
b0:6c:18:79:b6:bd:66:c6:2e:ba:d7:ad:d0:29:d1:
6b:5e:aa:18:ea:02:8b:e6:aa:e9:ca:01:29:93:da:
e8:05:43:58:0d:e4:c6:56:a2:59:09:43:b7:6e:21:
e1:9d:f1:83:f7:61:ef:bc:66:4c:ca:b2:c9:dc:45:
e5:76:0f:a7:ba:91:a5:68:81:27:d0:19:0e:e9:13:
32:a3:b6:9d:eb:fd:1c:77:60:6e:e5:ec:13:09:36:
49:07:50:9f:8f:f3:4e:e5:17:b9:7d:5a:47:2c:f6:
e4:b0:e1:d1:db:8c:48:b2:bc:f4:81:01:08:a7:a1:
61:66:28:0b:e7:5e:cc:bf:ee:b4:7c:03:f7:33:21:
d3:d6:1d:a0:97:b8:41:e1:b2:a3:dc:fb:47:b6:5a:
50:29
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A5:FF:E9:36:04:9C:47:DF:8A:C1:3C:B7:4E:B8:E0:ED:1E:4A:8C:84
X509v3 Authority Key Identifier:
keyid:47:A9:D9:9A:85:11:F7:CE:54:F9:F7:1E:1E:F8:3E:F5:48:92:42:74
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://repo-rpki.idnic.net/repo/b3c973d5-fe94-400d-bcbf-f233e8ac5537/0/47A9D99A8511F7CE54F9F71E1EF83EF548924274.crl
Authority Information Access:
CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/47A9D99A8511F7CE54F9F71E1EF83EF548924274.cer
Subject Information Access:
Signed Object - URI:rsync://repo-rpki.idnic.net/repo/b3c973d5-fe94-400d-bcbf-f233e8ac5537/0/47A9D99A8511F7CE54F9F71E1EF83EF548924274.mft
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
34:a4:24:28:62:25:b9:a3:ff:88:54:d4:1a:bb:67:41:38:35:
91:11:bf:ef:25:fe:d8:b9:72:cd:7c:66:1a:49:be:95:dd:b5:
38:2f:5c:c4:0d:b4:c5:39:6b:c9:8b:89:08:3d:e7:25:32:eb:
55:97:17:e1:91:ec:f0:41:d4:81:a1:6d:b0:93:74:ba:1b:bb:
19:b8:95:2d:98:20:48:56:f7:71:c9:cc:70:c3:fa:ad:0e:8b:
d4:95:19:65:1b:ed:1f:2c:9e:8c:55:22:8a:f7:66:9a:17:53:
f8:84:ea:90:c9:e1:0d:71:35:58:f9:b0:83:c2:58:29:02:d7:
eb:27:07:63:b4:55:8c:85:8d:03:4c:97:a5:88:b1:f4:b3:40:
05:e9:2e:7c:1e:d9:ed:fe:29:17:a0:e3:7c:d8:13:a2:6a:78:
f6:12:6b:9b:16:44:ce:57:59:7c:45:e2:fd:f2:b4:c3:d2:85:
52:0c:5e:36:e6:4f:b6:4a:2b:d9:bb:cd:c7:5b:eb:a9:b5:78:
c1:34:b0:8d:37:05:80:67:1c:40:36:9e:1e:f5:92:84:e8:f5:
93:bf:82:f5:f4:3e:32:99:42:da:8e:69:ad:d1:51:31:95:3a:
0a:34:3e:c3:16:37:58:b3:9c:4a:8a:f6:3e:4f:d5:5b:2b:03:
98:94:08:2c
-----BEGIN CERTIFICATE-----
MIIFMjCCBBqgAwIBAgIUVTqFCTgL5YC+m9QRDdfT9FQct6kwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoNDdBOUQ5OUE4NTExRjdDRTU0RjlGNzFFMUVGODNFRjU0
ODkyNDI3NDAeFw0yNjAxMzEwNTM1MzlaFw0yNjAyMDMxMzI4MzlaMDMxMTAvBgNV
BAMTKEE1RkZFOTM2MDQ5QzQ3REY4QUMxM0NCNzRFQjhFMEVEMUU0QThDODQwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC70zrdnDUcF/bF0aMtFFIp8jOy
i8uXh27WIDSpFqy4lapcPcDugJZ/vO3fktoGgb+yJ6vGsz6JvqBAHU9kS3IJ6TZM
iWf8snFWHfq+SwIJuH86k4TY/V3SUpYnjMNtXeDC1tmcA7pNL7BsGHm2vWbGLrrX
rdAp0WteqhjqAovmqunKASmT2ugFQ1gN5MZWolkJQ7duIeGd8YP3Ye+8ZkzKssnc
ReV2D6e6kaVogSfQGQ7pEzKjtp3r/Rx3YG7l7BMJNkkHUJ+P807lF7l9Wkcs9uSw
4dHbjEiyvPSBAQinoWFmKAvnXsy/7rR8A/czIdPWHaCXuEHhsqPc+0e2WlApAgMB
AAGjggI8MIICODAdBgNVHQ4EFgQUpf/pNgScR9+KwTy3Trjg7R5KjIQwHwYDVR0j
BBgwFoAUR6nZmoUR985U+fceHvg+9UiSQnQwDgYDVR0PAQH/BAQDAgeAMIGFBgNV
HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby9i
M2M5NzNkNS1mZTk0LTQwMGQtYmNiZi1mMjMzZThhYzU1MzcvMC80N0E5RDk5QTg1
MTFGN0NFNTRGOUY3MUUxRUY4M0VGNTQ4OTI0Mjc0LmNybDB0BggrBgEFBQcBAQRo
MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv
L0lETklDLUlELzIvNDdBOUQ5OUE4NTExRjdDRTU0RjlGNzFFMUVGODNFRjU0ODky
NDI3NC5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6
Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vYjNjOTczZDUtZmU5NC00MDBkLWJj
YmYtZjIzM2U4YWM1NTM3LzAvNDdBOUQ5OUE4NTExRjdDRTU0RjlGNzFFMUVGODNF
RjU0ODkyNDI3NC5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF
BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC
BQAwDQYJKoZIhvcNAQELBQADggEBADSkJChiJbmj/4hU1Bq7Z0E4NZERv+8l/ti5
cs18ZhpJvpXdtTgvXMQNtMU5a8mLiQg95yUy61WXF+GR7PBB1IGhbbCTdLobuxm4
lS2YIEhW93HJzHDD+q0Oi9SVGWUb7R8snoxVIor3ZpoXU/iE6pDJ4Q1xNVj5sIPC
WCkC1+snB2O0VYyFjQNMl6WIsfSzQAXpLnwe2e3+KReg43zYE6JqePYSa5sWRM5X
WXxF4v3ytMPShVIMXjbmT7ZKK9m7zcdb66m1eME0sI03BYBnHEA2nh71koTo9ZO/
gvX0PjKZQtqOaa3RUTGVOgo0PsMWN1iznEqK9j5P1VsrA5iUCCw=
-----END CERTIFICATE-----
Generated at Mon Feb 2 10:06:10 2026 by rpki-client