This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf repo-rpki.idnic.net/repo/cf2975d5-f990-484e-9460-f136b4551f8d/0/47571F0366875B7351B244D25CB7E8258FB33E93.mft File: 47571F0366875B7351B244D25CB7E8258FB33E93.mft (raw, json) Hash identifier: 2ceBEHGKDyfwuh1kMGtrnaLBIrOQQj/Z6u78pHs2UL8= Subject key identifier: F3:DB:BF:0F:9B:EB:22:C4:78:DA:3B:3A:1B:4A:7F:91:FA:C7:B5:32 Authority key identifier: 47:57:1F:03:66:87:5B:73:51:B2:44:D2:5C:B7:E8:25:8F:B3:3E:93 Certificate issuer: /CN=47571F0366875B7351B244D25CB7E8258FB33E93 Certificate serial: 1FBE675645CA40C600E08E32E882BBAAFB46F053 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/47571F0366875B7351B244D25CB7E8258FB33E93.cer Subject info access: rsync://repo-rpki.idnic.net/repo/cf2975d5-f990-484e-9460-f136b4551f8d/0/47571F0366875B7351B244D25CB7E8258FB33E93.mft Manifest number: AE Signing time: Tue 02 Dec 2025 08:27:45 +0000 Manifest this update: Tue 02 Dec 2025 08:22:45 +0000 Manifest next update: Fri 05 Dec 2025 17:25:45 +0000 Files and hashes: 1: 3136302e3138372e3136342e302f32342d3234203d3e20313439393333.roa (hash: EQmwZNedUjq2O/AJCi3gmfSvtjSzhrTVmBFbfysjDew=) 2: 47571F0366875B7351B244D25CB7E8258FB33E93.crl (hash: TKMF3urAgjLrJuCP+kOu8njmACxhS+KVlqqfvwOzuRg=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/cf2975d5-f990-484e-9460-f136b4551f8d/0/47571F0366875B7351B244D25CB7E8258FB33E93.crl rsync://repo-rpki.idnic.net/repo/cf2975d5-f990-484e-9460-f136b4551f8d/0/47571F0366875B7351B244D25CB7E8258FB33E93.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/47571F0366875B7351B244D25CB7E8258FB33E93.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/60F8BE9C16625C424B269EE06C64A83BAB8506D4.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/60F8BE9C16625C424B269EE06C64A83BAB8506D4.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/YPi-nBZiXEJLJp7gbGSoO6uFBtQ.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 05 Dec 2025 17:25:45 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1f:be:67:56:45:ca:40:c6:00:e0:8e:32:e8:82:bb:aa:fb:46:f0:53 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=47571F0366875B7351B244D25CB7E8258FB33E93 Validity Not Before: Dec 2 08:22:45 2025 GMT Not After : Dec 5 17:25:45 2025 GMT Subject: CN=F3DBBF0F9BEB22C478DA3B3A1B4A7F91FAC7B532 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d4:b4:0c:ed:f1:35:4d:b8:32:b5:33:38:0a:ad: 58:dc:df:d5:bc:4c:81:c0:a0:b4:c4:0b:1c:f3:01: 15:05:92:a7:0f:66:32:f0:45:2c:be:1c:88:de:22: 91:64:fc:cf:76:f5:b5:37:bc:63:f2:c3:67:11:cd: eb:49:b9:8c:1f:98:67:27:85:ee:70:0a:63:c6:bc: 5a:a0:55:90:52:81:ba:10:38:a9:d1:84:4e:56:09: 54:d7:05:ea:ac:7f:17:9c:55:f3:ae:eb:6e:f9:df: 1e:09:f1:de:13:fb:84:f2:07:84:88:cf:d0:cf:6b: a4:9e:81:81:84:31:7a:7b:ac:f2:f5:33:2c:85:ea: 15:8c:2f:f8:37:c2:29:97:e7:91:f7:74:3d:f1:34: f8:9a:54:fb:fb:eb:fa:aa:df:a1:b6:cb:8c:0e:a5: 7f:db:34:d9:a5:89:50:e2:c0:39:9a:46:64:91:04: 2f:24:b5:18:49:fb:1a:5f:03:80:05:2f:2d:57:4a: 1f:5f:93:39:04:30:94:58:a7:8c:e5:0a:9b:c4:a5: 3b:48:f6:67:a8:45:c5:40:cb:27:00:19:01:ed:9b: 5c:73:7d:3d:71:1c:98:50:96:39:df:77:20:de:26: dc:59:70:55:3e:25:40:eb:3e:68:f3:7f:07:ff:1b: 47:59 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: F3:DB:BF:0F:9B:EB:22:C4:78:DA:3B:3A:1B:4A:7F:91:FA:C7:B5:32 X509v3 Authority Key Identifier: keyid:47:57:1F:03:66:87:5B:73:51:B2:44:D2:5C:B7:E8:25:8F:B3:3E:93 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/cf2975d5-f990-484e-9460-f136b4551f8d/0/47571F0366875B7351B244D25CB7E8258FB33E93.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/47571F0366875B7351B244D25CB7E8258FB33E93.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/cf2975d5-f990-484e-9460-f136b4551f8d/0/47571F0366875B7351B244D25CB7E8258FB33E93.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 91:50:59:8c:27:f0:97:26:87:b0:61:4f:68:5d:d7:6c:bc:4c: 4a:26:f9:cc:63:d3:45:b5:89:a9:22:2a:6a:7c:9c:f0:d5:2e: 95:30:8a:d4:1f:65:e5:cf:ad:dd:c7:2e:70:e7:c1:4d:72:c2: 5e:7c:1f:3b:76:cc:f2:6b:b4:c9:8d:b5:9d:ba:8f:49:ff:11: 35:32:9e:d6:9f:f7:6e:a8:84:af:88:0f:40:03:08:86:e7:c5: a4:a8:c9:e7:db:c2:b6:cd:08:33:83:57:b5:6d:c6:c8:d4:f6: e1:9e:28:2a:ef:eb:b5:05:a5:d2:61:f9:10:05:77:2f:75:50: 00:d4:ee:45:f3:ae:a0:3e:75:ed:54:4e:22:a4:4a:89:f1:85: 45:6c:ad:95:c4:92:0d:e1:46:33:ea:2c:47:32:66:7a:09:e1: 4d:07:dc:b0:c7:d7:a5:da:f1:88:76:b5:42:83:20:05:1d:d6: c3:cf:ab:5b:7c:e0:f9:02:5b:86:e7:08:59:7e:e9:4f:53:3a: 7a:39:27:46:b8:60:8a:6f:23:0f:f6:ed:84:85:3e:7d:77:d9: 71:d8:98:fc:69:4e:5e:1e:9f:b1:e5:e1:fa:a4:2e:cc:00:d4: 47:8a:12:ba:1b:8c:6e:5a:b4:5a:82:82:4d:6d:bc:a3:7b:49: 29:6d:a8:37 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUH75nVkXKQMYA4I4y6IK7qvtG8FMwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoNDc1NzFGMDM2Njg3NUI3MzUxQjI0NEQyNUNCN0U4MjU4 RkIzM0U5MzAeFw0yNTEyMDIwODIyNDVaFw0yNTEyMDUxNzI1NDVaMDMxMTAvBgNV BAMTKEYzREJCRjBGOUJFQjIyQzQ3OERBM0IzQTFCNEE3RjkxRkFDN0I1MzIwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDUtAzt8TVNuDK1MzgKrVjc39W8 TIHAoLTECxzzARUFkqcPZjLwRSy+HIjeIpFk/M929bU3vGPyw2cRzetJuYwfmGcn he5wCmPGvFqgVZBSgboQOKnRhE5WCVTXBeqsfxecVfOu62753x4J8d4T+4TyB4SI z9DPa6SegYGEMXp7rPL1MyyF6hWML/g3wimX55H3dD3xNPiaVPv76/qq36G2y4wO pX/bNNmliVDiwDmaRmSRBC8ktRhJ+xpfA4AFLy1XSh9fkzkEMJRYp4zlCpvEpTtI 9meoRcVAyycAGQHtm1xzfT1xHJhQljnfdyDeJtxZcFU+JUDrPmjzfwf/G0dZAgMB AAGjggI8MIICODAdBgNVHQ4EFgQU89u/D5vrIsR42js6G0p/kfrHtTIwHwYDVR0j BBgwFoAUR1cfA2aHW3NRskTSXLfoJY+zPpMwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby9j ZjI5NzVkNS1mOTkwLTQ4NGUtOTQ2MC1mMTM2YjQ1NTFmOGQvMC80NzU3MUYwMzY2 ODc1QjczNTFCMjQ0RDI1Q0I3RTgyNThGQjMzRTkzLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzEvNDc1NzFGMDM2Njg3NUI3MzUxQjI0NEQyNUNCN0U4MjU4RkIz M0U5My5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vY2YyOTc1ZDUtZjk5MC00ODRlLTk0 NjAtZjEzNmI0NTUxZjhkLzAvNDc1NzFGMDM2Njg3NUI3MzUxQjI0NEQyNUNCN0U4 MjU4RkIzM0U5My5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAJFQWYwn8Jcmh7BhT2hd12y8TEom+cxj00W1 iakiKmp8nPDVLpUwitQfZeXPrd3HLnDnwU1ywl58Hzt2zPJrtMmNtZ26j0n/ETUy ntaf926ohK+ID0ADCIbnxaSoyefbwrbNCDODV7VtxsjU9uGeKCrv67UFpdJh+RAF dy91UADU7kXzrqA+de1UTiKkSonxhUVsrZXEkg3hRjPqLEcyZnoJ4U0H3LDH16Xa 8Yh2tUKDIAUd1sPPq1t84PkCW4bnCFl+6U9TOno5J0a4YIpvIw/27YSFPn132XHY mPxpTl4en7Hl4fqkLswA1EeKErobjG5atFqCgk1tvKN7SSltqDc= -----END CERTIFICATE-----Generated at Wed Dec 3 18:15:19 2025 by rpki-client