This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf repo-rpki.idnic.net/repo/cf2975d5-f990-484e-9460-f136b4551f8d/0/47571F0366875B7351B244D25CB7E8258FB33E93.mft File: 47571F0366875B7351B244D25CB7E8258FB33E93.mft (raw, json) Hash identifier: bx6emjJSD2EqmI9kbJyDip9nlBSkmP7hg77Ce8vPsEw= Subject key identifier: 31:AE:7D:BA:4B:1B:4D:70:EF:D1:9B:DF:09:F2:4D:5E:69:6E:75:88 Authority key identifier: 47:57:1F:03:66:87:5B:73:51:B2:44:D2:5C:B7:E8:25:8F:B3:3E:93 Certificate issuer: /CN=47571F0366875B7351B244D25CB7E8258FB33E93 Certificate serial: 12BBCE5D3C24AD619B00D612FA3E889C8E7E80EE Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/47571F0366875B7351B244D25CB7E8258FB33E93.cer Subject info access: rsync://repo-rpki.idnic.net/repo/cf2975d5-f990-484e-9460-f136b4551f8d/0/47571F0366875B7351B244D25CB7E8258FB33E93.mft Manifest number: C3 Signing time: Mon 19 Jan 2026 18:42:28 +0000 Manifest this update: Mon 19 Jan 2026 18:37:28 +0000 Manifest next update: Fri 23 Jan 2026 03:16:28 +0000 Files and hashes: 1: 47571F0366875B7351B244D25CB7E8258FB33E93.crl (hash: bRLLjXbVteOATAMbfETJwgKmgez40+zWeVMzOlb6grM=) 2: 3136302e3138372e3136342e302f32342d3234203d3e20313439393333.roa (hash: EQmwZNedUjq2O/AJCi3gmfSvtjSzhrTVmBFbfysjDew=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/cf2975d5-f990-484e-9460-f136b4551f8d/0/47571F0366875B7351B244D25CB7E8258FB33E93.crl rsync://repo-rpki.idnic.net/repo/cf2975d5-f990-484e-9460-f136b4551f8d/0/47571F0366875B7351B244D25CB7E8258FB33E93.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/47571F0366875B7351B244D25CB7E8258FB33E93.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/60F8BE9C16625C424B269EE06C64A83BAB8506D4.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/60F8BE9C16625C424B269EE06C64A83BAB8506D4.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/YPi-nBZiXEJLJp7gbGSoO6uFBtQ.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 23 Jan 2026 03:16:28 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 12:bb:ce:5d:3c:24:ad:61:9b:00:d6:12:fa:3e:88:9c:8e:7e:80:ee Signature Algorithm: sha256WithRSAEncryption Issuer: CN=47571F0366875B7351B244D25CB7E8258FB33E93 Validity Not Before: Jan 19 18:37:28 2026 GMT Not After : Jan 23 03:16:28 2026 GMT Subject: CN=31AE7DBA4B1B4D70EFD19BDF09F24D5E696E7588 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bd:f2:e3:02:26:e9:ef:74:0a:73:81:7e:b2:4c: 22:f2:2c:27:5a:d1:24:1d:4c:5d:7d:6f:a8:03:a0: aa:96:7c:a2:c3:62:4b:db:71:88:e1:43:54:30:62: 32:f9:ca:33:b3:c3:34:eb:d5:f0:43:ea:d8:26:c6: 9c:3d:de:cd:4a:6e:50:1c:9d:2e:47:00:dc:92:e6: 3e:31:12:84:bc:7b:5a:48:8a:e3:08:a0:9a:7f:6c: 74:0a:3f:8e:37:22:07:9a:f8:21:e5:41:37:39:f2: e8:e0:9d:cd:01:29:f9:5f:07:f6:43:da:a4:40:b6: 8c:3a:d6:d2:ad:fb:42:f0:6d:6e:20:d4:22:d7:4d: b8:4a:d8:2e:23:37:b4:44:cc:43:4c:21:4c:d5:cf: 42:44:87:ea:ae:cc:ee:b2:35:e4:67:20:65:90:53: 4d:3b:9c:12:5c:5f:47:a9:96:f3:a7:d7:9d:d7:5f: ea:65:61:30:df:c4:a1:e8:9a:66:73:ad:5f:8e:41: d2:bb:c7:ae:21:99:53:1b:15:7b:45:94:d4:38:c7: c4:26:34:18:95:0d:59:13:6f:e7:a3:49:26:4d:a6: 0b:3a:dd:3d:10:97:9c:ba:bc:74:2c:6f:8e:ae:b2: 49:0a:cb:04:96:50:1c:11:a2:88:7c:b4:e8:45:8b: 3b:eb Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 31:AE:7D:BA:4B:1B:4D:70:EF:D1:9B:DF:09:F2:4D:5E:69:6E:75:88 X509v3 Authority Key Identifier: keyid:47:57:1F:03:66:87:5B:73:51:B2:44:D2:5C:B7:E8:25:8F:B3:3E:93 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/cf2975d5-f990-484e-9460-f136b4551f8d/0/47571F0366875B7351B244D25CB7E8258FB33E93.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/47571F0366875B7351B244D25CB7E8258FB33E93.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/cf2975d5-f990-484e-9460-f136b4551f8d/0/47571F0366875B7351B244D25CB7E8258FB33E93.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 87:37:c2:b1:fd:03:ca:0e:63:8b:8b:08:44:a6:d6:e8:a5:c1: bc:69:02:14:e1:43:6e:56:e1:60:be:4a:1a:92:49:45:9d:fd: 72:b8:29:89:c8:bc:e5:da:d1:3c:ea:32:28:e0:1f:ab:ac:fc: 34:3b:19:b8:72:e8:cf:3a:31:55:64:3a:2a:83:75:e0:5a:20: 79:70:0e:fc:91:86:d7:b6:83:36:37:bf:a6:a7:41:e9:97:77: 32:bb:ef:bf:91:b1:a6:20:9f:9b:53:7a:c5:37:a1:9d:98:79: a8:20:68:c4:84:04:76:1e:db:28:10:43:86:e1:3d:6f:bb:22: 6b:a4:d6:b4:2b:30:e5:d2:61:33:14:8f:93:e3:4c:0b:5a:35: a5:20:85:05:db:51:90:db:5c:b8:cf:56:b5:3f:8c:16:a4:97: b9:1c:6a:4d:06:f6:e6:d0:ee:99:b3:98:1d:1f:cd:1a:49:f9: c1:3c:2b:fe:e0:3f:41:c5:78:5c:57:5b:bb:52:6a:86:20:ca: f5:fa:79:30:1f:3d:9e:0d:03:b7:14:1f:b1:31:31:b5:00:8c: 75:8f:3e:22:16:9e:d2:ff:26:d3:c6:71:b8:4c:d0:44:b8:91: 7e:cd:7a:86:d6:c6:6f:a0:57:92:8b:b1:8f:fc:00:4f:6b:ac: 8b:30:3f:08 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUErvOXTwkrWGbANYS+j6InI5+gO4wDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoNDc1NzFGMDM2Njg3NUI3MzUxQjI0NEQyNUNCN0U4MjU4 RkIzM0U5MzAeFw0yNjAxMTkxODM3MjhaFw0yNjAxMjMwMzE2MjhaMDMxMTAvBgNV BAMTKDMxQUU3REJBNEIxQjRENzBFRkQxOUJERjA5RjI0RDVFNjk2RTc1ODgwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC98uMCJunvdApzgX6yTCLyLCda 0SQdTF19b6gDoKqWfKLDYkvbcYjhQ1QwYjL5yjOzwzTr1fBD6tgmxpw93s1KblAc nS5HANyS5j4xEoS8e1pIiuMIoJp/bHQKP443Igea+CHlQTc58ujgnc0BKflfB/ZD 2qRAtow61tKt+0LwbW4g1CLXTbhK2C4jN7REzENMIUzVz0JEh+quzO6yNeRnIGWQ U007nBJcX0eplvOn153XX+plYTDfxKHommZzrV+OQdK7x64hmVMbFXtFlNQ4x8Qm NBiVDVkTb+ejSSZNpgs63T0Ql5y6vHQsb46uskkKywSWUBwRooh8tOhFizvrAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUMa59uksbTXDv0ZvfCfJNXmludYgwHwYDVR0j BBgwFoAUR1cfA2aHW3NRskTSXLfoJY+zPpMwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby9j ZjI5NzVkNS1mOTkwLTQ4NGUtOTQ2MC1mMTM2YjQ1NTFmOGQvMC80NzU3MUYwMzY2 ODc1QjczNTFCMjQ0RDI1Q0I3RTgyNThGQjMzRTkzLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzEvNDc1NzFGMDM2Njg3NUI3MzUxQjI0NEQyNUNCN0U4MjU4RkIz M0U5My5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vY2YyOTc1ZDUtZjk5MC00ODRlLTk0 NjAtZjEzNmI0NTUxZjhkLzAvNDc1NzFGMDM2Njg3NUI3MzUxQjI0NEQyNUNCN0U4 MjU4RkIzM0U5My5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAIc3wrH9A8oOY4uLCESm1uilwbxpAhThQ25W 4WC+ShqSSUWd/XK4KYnIvOXa0TzqMijgH6us/DQ7Gbhy6M86MVVkOiqDdeBaIHlw DvyRhte2gzY3v6anQemXdzK777+RsaYgn5tTesU3oZ2YeaggaMSEBHYe2ygQQ4bh PW+7Imuk1rQrMOXSYTMUj5PjTAtaNaUghQXbUZDbXLjPVrU/jBakl7kcak0G9ubQ 7pmzmB0fzRpJ+cE8K/7gP0HFeFxXW7tSaoYgyvX6eTAfPZ4NA7cUH7ExMbUAjHWP PiIWntL/JtPGcbhM0ES4kX7NeobWxm+gV5KLsY/8AE9rrIswPwg= -----END CERTIFICATE-----Generated at Wed Jan 21 12:17:45 2026 by rpki-client