This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

$ rpki-client -vvf repo-rpki.idnic.net/repo/c4956505-d6b3-43dc-9070-d4dbdb7cf963/0/47CBAD1A648715C5E867F1A2ED3558688608EE19.mft
File: 47CBAD1A648715C5E867F1A2ED3558688608EE19.mft (raw, json)
Hash identifier: ZatZbTOvB2kq00b04KvyRfbmlegiKHQ6emnbJA2adzc=
Subject key identifier: BF:E7:30:F8:BD:B3:C8:07:F2:73:B9:DF:A0:D3:25:BB:C6:BF:32:1E
Authority key identifier: 47:CB:AD:1A:64:87:15:C5:E8:67:F1:A2:ED:35:58:68:86:08:EE:19
Certificate issuer: /CN=47CBAD1A648715C5E867F1A2ED3558688608EE19
Certificate serial: 0E4C93ED42325D0AA6AD658C0175136CE330C6C6
Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/47CBAD1A648715C5E867F1A2ED3558688608EE19.cer
Subject info access: rsync://repo-rpki.idnic.net/repo/c4956505-d6b3-43dc-9070-d4dbdb7cf963/0/47CBAD1A648715C5E867F1A2ED3558688608EE19.mft
Manifest number: 018D
Signing time: Wed 03 Dec 2025 01:21:14 +0000
Manifest this update: Wed 03 Dec 2025 01:16:14 +0000
Manifest next update: Sat 06 Dec 2025 08:24:14 +0000
Files and hashes: 1: 3130332e3135332e3135302e302f32342d3234203d3e20313430343637.roa (hash: 1a16GMwOcOCsjYtXlZLoq81/WntEbXylQSYsmM31kuc=)
2: 47CBAD1A648715C5E867F1A2ED3558688608EE19.crl (hash: sW2hE3vAsPw6JSpI/LPKPRPGowITfQxBnLdY9yRjBy0=)
3: 3130332e3233352e36352e302f32342d3234203d3e20313430343637.roa (hash: zg3C7UqiFNjk6v4cmaqyG4vvOgQ3amedsyfg+VEOO70=)
4: 323430363a343634303a3a2f33322d3332203d3e20313430343637.roa (hash: +ck2E10dFd5/OEf+e40wX7Ntpp2HW/ZWwaXbGUuqd1Q=)
Validation: OK
Signature path: rsync://repo-rpki.idnic.net/repo/c4956505-d6b3-43dc-9070-d4dbdb7cf963/0/47CBAD1A648715C5E867F1A2ED3558688608EE19.crl
rsync://repo-rpki.idnic.net/repo/c4956505-d6b3-43dc-9070-d4dbdb7cf963/0/47CBAD1A648715C5E867F1A2ED3558688608EE19.mft
rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/47CBAD1A648715C5E867F1A2ED3558688608EE19.cer
rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl
rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Sat 06 Dec 2025 08:24:14 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
0e:4c:93:ed:42:32:5d:0a:a6:ad:65:8c:01:75:13:6c:e3:30:c6:c6
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=47CBAD1A648715C5E867F1A2ED3558688608EE19
Validity
Not Before: Dec 3 01:16:14 2025 GMT
Not After : Dec 6 08:24:14 2025 GMT
Subject: CN=BFE730F8BDB3C807F273B9DFA0D325BBC6BF321E
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a3:50:b5:43:8d:28:9f:89:ba:5a:79:16:83:26:
d4:ca:86:e2:0a:29:22:fe:e3:8b:68:31:5c:05:ba:
d5:20:71:ee:d4:4c:d4:40:ce:53:1a:69:91:09:42:
e8:bc:8b:37:60:eb:5c:90:01:fd:41:63:be:c7:91:
fc:d9:4a:7a:36:6d:ce:1a:71:25:cc:2a:8a:75:4f:
a8:01:35:3d:49:87:13:7b:dc:bd:a9:4d:38:8e:22:
fd:d7:14:ea:1f:20:9e:c3:4c:77:c6:cf:f1:2b:b7:
d3:d1:de:79:8e:05:da:41:74:40:39:bf:82:c5:b6:
23:b6:f6:e7:19:63:f8:4c:8e:ae:3d:3b:8b:40:3f:
40:e8:75:7f:d6:e5:93:d4:9e:e1:5a:63:7c:5d:a7:
4c:d9:9c:ff:d3:fa:de:56:27:1a:65:4a:dd:56:35:
d8:c0:0f:c1:d4:e7:b4:de:4d:65:82:68:66:58:fd:
70:31:6a:c0:0e:db:05:8d:f4:f4:92:15:ae:b8:67:
a5:77:64:06:8e:9f:c1:6d:e7:55:3b:b3:c6:bb:0a:
d5:91:15:dd:30:36:0f:41:fe:32:fb:dd:2e:5c:83:
b1:cf:92:60:86:f1:92:ed:5e:a9:55:f9:07:18:86:
c8:48:1e:0e:d1:26:fd:94:04:b4:ac:25:59:f6:6a:
32:f1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
BF:E7:30:F8:BD:B3:C8:07:F2:73:B9:DF:A0:D3:25:BB:C6:BF:32:1E
X509v3 Authority Key Identifier:
keyid:47:CB:AD:1A:64:87:15:C5:E8:67:F1:A2:ED:35:58:68:86:08:EE:19
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://repo-rpki.idnic.net/repo/c4956505-d6b3-43dc-9070-d4dbdb7cf963/0/47CBAD1A648715C5E867F1A2ED3558688608EE19.crl
Authority Information Access:
CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/47CBAD1A648715C5E867F1A2ED3558688608EE19.cer
Subject Information Access:
Signed Object - URI:rsync://repo-rpki.idnic.net/repo/c4956505-d6b3-43dc-9070-d4dbdb7cf963/0/47CBAD1A648715C5E867F1A2ED3558688608EE19.mft
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
63:9e:b1:7f:67:4e:93:b2:1f:3d:14:15:a7:6f:ab:40:7a:94:
4f:ad:18:c2:68:da:20:ca:e3:95:fa:11:4a:94:cd:c1:c9:41:
9e:a7:e9:76:e6:b9:17:99:31:f4:70:8d:0a:f3:91:83:2b:59:
8e:df:3a:1c:b0:ba:08:e5:4c:f8:f1:3e:91:fd:fc:f0:fc:43:
04:15:9b:73:c1:eb:05:f1:bc:74:6a:ae:31:10:07:4b:39:ff:
12:63:9b:3b:b1:1d:23:b6:2f:38:7c:1c:f0:04:31:97:81:3b:
60:dc:b2:f1:b6:0a:8d:2c:3f:e9:6f:46:15:62:d3:2a:23:0e:
18:e0:3d:2e:27:13:88:1d:47:5f:d5:09:f1:41:74:3c:39:58:
91:0f:da:3f:03:14:78:06:9b:0a:e3:fa:ed:21:af:b0:ac:a6:
2c:db:66:2d:ac:4e:57:cf:79:52:c2:0e:21:11:31:9d:59:b6:
86:e0:0c:ab:75:4b:ca:44:41:f5:ab:2b:fb:44:22:d9:5b:d5:
97:11:3e:f7:f3:80:d6:42:b5:c3:5a:05:d7:5a:d4:e5:60:2d:
6e:9c:e9:36:0a:ae:a8:11:c9:21:b5:4e:61:88:f8:bf:34:c1:
3b:55:30:00:69:a6:f8:ab:e5:95:4c:35:a2:52:52:7a:07:43:
e1:85:0e:72
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Dec 3 14:44:29 2025 by rpki-client