This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf repo-rpki.idnic.net/repo/dce9f43d-08ba-4d02-8f38-74732f15cd8c/0/47E5E36B848613534A65DDE4FBA27AB59A745B50.mft File: 47E5E36B848613534A65DDE4FBA27AB59A745B50.mft (raw, json) Hash identifier: nLRpENywYCwI4+axzZlWYfPRl3CZbOa9FX5nnmkDkSY= Subject key identifier: 08:FE:FC:A2:DA:F8:1A:94:A6:3A:A2:9A:87:BE:B3:7F:C6:18:9E:81 Authority key identifier: 47:E5:E3:6B:84:86:13:53:4A:65:DD:E4:FB:A2:7A:B5:9A:74:5B:50 Certificate issuer: /CN=47E5E36B848613534A65DDE4FBA27AB59A745B50 Certificate serial: 1445A8EDC671492720FB2C872DACD13B388A7594 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/47E5E36B848613534A65DDE4FBA27AB59A745B50.cer Subject info access: rsync://repo-rpki.idnic.net/repo/dce9f43d-08ba-4d02-8f38-74732f15cd8c/0/47E5E36B848613534A65DDE4FBA27AB59A745B50.mft Manifest number: 025D Signing time: Thu 18 Dec 2025 10:51:57 +0000 Manifest this update: Thu 18 Dec 2025 10:46:57 +0000 Manifest next update: Sun 21 Dec 2025 15:27:57 +0000 Files and hashes: 1: 47E5E36B848613534A65DDE4FBA27AB59A745B50.crl (hash: gktj3tfpmHtQldNE9fb/slSQn57HCEixE+GFLdCmOSs=) 2: 3130332e3138362e33322e302f32342d3234203d3e20313439363930.roa (hash: WkOEvMx4pLjLVaF0ggIqh7pDPWEbi8P19IogxuTVO3k=) 3: 3130332e3138362e33332e302f32342d3234203d3e20313439363930.roa (hash: P4hdS37EWneF08stt5Krg+rWSIKfiKz6ffEd1QqCT5Q=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/dce9f43d-08ba-4d02-8f38-74732f15cd8c/0/47E5E36B848613534A65DDE4FBA27AB59A745B50.crl rsync://repo-rpki.idnic.net/repo/dce9f43d-08ba-4d02-8f38-74732f15cd8c/0/47E5E36B848613534A65DDE4FBA27AB59A745B50.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/47E5E36B848613534A65DDE4FBA27AB59A745B50.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 21 Dec 2025 15:27:57 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 14:45:a8:ed:c6:71:49:27:20:fb:2c:87:2d:ac:d1:3b:38:8a:75:94 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=47E5E36B848613534A65DDE4FBA27AB59A745B50 Validity Not Before: Dec 18 10:46:57 2025 GMT Not After : Dec 21 15:27:57 2025 GMT Subject: CN=08FEFCA2DAF81A94A63AA29A87BEB37FC6189E81 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c9:4e:ae:9a:3b:b2:fa:83:3f:d9:0c:d6:b1:e8: f2:7b:76:4f:45:01:59:ff:da:5b:f7:c4:c5:ac:f1: 9f:29:da:30:bd:d6:17:70:dd:1f:26:d1:c1:32:e9: 3f:81:ae:6e:5b:45:98:93:a7:0c:ca:0e:04:94:7b: 8a:b4:13:6a:ad:0c:c4:40:94:c3:fd:79:c7:2e:4c: 40:10:b4:a8:e6:99:1a:1e:05:c2:ca:3b:5f:a8:c4: d9:da:23:3d:46:d6:0a:99:fd:15:9b:fb:76:da:e4: bb:30:a6:b3:bc:62:47:8e:b8:44:33:b3:81:db:c7: 6e:9a:a5:9d:41:ba:27:65:4c:cc:57:96:ab:90:fb: d6:24:91:70:ee:ab:5a:e8:ed:7b:cd:61:08:18:a5: 13:ff:a9:6e:9c:83:08:0d:fc:67:75:6d:de:12:5e: 33:8b:19:8c:c1:9c:36:f5:14:95:21:dd:cd:8a:dc: 1d:cf:b6:82:3e:6c:12:55:7b:94:e0:d2:89:d2:f7: 96:33:9a:f1:2c:63:67:ba:f3:a2:5f:23:35:30:e7: bb:dd:3f:7e:1b:97:a5:4d:ad:71:8a:cc:30:2d:2a: d4:75:18:62:15:e3:80:e8:42:d3:e6:b2:9c:29:7e: dd:1c:8e:4f:53:41:b5:00:13:c7:25:9f:52:b4:72: 1e:d3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 08:FE:FC:A2:DA:F8:1A:94:A6:3A:A2:9A:87:BE:B3:7F:C6:18:9E:81 X509v3 Authority Key Identifier: keyid:47:E5:E3:6B:84:86:13:53:4A:65:DD:E4:FB:A2:7A:B5:9A:74:5B:50 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/dce9f43d-08ba-4d02-8f38-74732f15cd8c/0/47E5E36B848613534A65DDE4FBA27AB59A745B50.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/47E5E36B848613534A65DDE4FBA27AB59A745B50.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/dce9f43d-08ba-4d02-8f38-74732f15cd8c/0/47E5E36B848613534A65DDE4FBA27AB59A745B50.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 22:89:22:ef:5d:27:a6:58:06:3b:38:35:48:14:d2:bb:8d:6c: 4a:a0:89:07:e5:21:85:06:57:a5:d8:92:38:58:9c:00:ba:40: 81:77:29:63:89:e4:00:46:73:7f:ef:52:ba:a9:a6:10:42:91: 0d:8b:40:fe:81:68:41:ca:92:4a:e9:a1:1f:a9:1b:db:78:21: b2:bd:23:7e:56:7d:46:1c:5d:cd:cc:01:42:65:25:7f:36:d7: da:51:7d:a3:6a:38:ee:8f:97:76:1f:c5:dc:c9:a1:28:a3:73: 49:b9:7d:55:f3:96:91:e7:30:c7:bb:67:0f:28:62:f4:ce:7d: ab:c3:78:7e:13:1f:cc:71:12:c5:49:71:2d:df:21:a8:1e:6b: ac:98:e3:5d:37:19:84:1f:31:c5:ba:9b:5d:6f:fd:19:6e:31: e8:ae:6d:a9:7c:f9:85:95:90:e9:14:09:ee:03:0d:67:c0:16: b5:5b:a1:c7:b6:f2:fd:74:86:c0:42:29:df:71:85:d4:b3:58: f5:c9:f5:35:5a:55:7f:58:98:b2:a9:7b:bf:db:f4:5b:df:76: 5e:ba:d9:0c:3b:23:4f:6f:46:98:3a:9f:3f:b9:4c:ff:a0:0a: 66:90:4a:1c:41:e2:5e:87:e4:10:f8:2a:26:7c:77:dd:8e:6d: de:bb:46:b5 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUFEWo7cZxSScg+yyHLazROziKdZQwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoNDdFNUUzNkI4NDg2MTM1MzRBNjVEREU0RkJBMjdBQjU5 QTc0NUI1MDAeFw0yNTEyMTgxMDQ2NTdaFw0yNTEyMjExNTI3NTdaMDMxMTAvBgNV BAMTKDA4RkVGQ0EyREFGODFBOTRBNjNBQTI5QTg3QkVCMzdGQzYxODlFODEwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDJTq6aO7L6gz/ZDNax6PJ7dk9F AVn/2lv3xMWs8Z8p2jC91hdw3R8m0cEy6T+Brm5bRZiTpwzKDgSUe4q0E2qtDMRA lMP9eccuTEAQtKjmmRoeBcLKO1+oxNnaIz1G1gqZ/RWb+3ba5LswprO8YkeOuEQz s4Hbx26apZ1BuidlTMxXlquQ+9YkkXDuq1ro7XvNYQgYpRP/qW6cgwgN/Gd1bd4S XjOLGYzBnDb1FJUh3c2K3B3PtoI+bBJVe5Tg0onS95YzmvEsY2e686JfIzUw57vd P34bl6VNrXGKzDAtKtR1GGIV44DoQtPmspwpft0cjk9TQbUAE8cln1K0ch7TAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUCP78otr4GpSmOqKah76zf8YYnoEwHwYDVR0j BBgwFoAUR+Xja4SGE1NKZd3k+6J6tZp0W1AwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby9k Y2U5ZjQzZC0wOGJhLTRkMDItOGYzOC03NDczMmYxNWNkOGMvMC80N0U1RTM2Qjg0 ODYxMzUzNEE2NURERTRGQkEyN0FCNTlBNzQ1QjUwLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvNDdFNUUzNkI4NDg2MTM1MzRBNjVEREU0RkJBMjdBQjU5QTc0 NUI1MC5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vZGNlOWY0M2QtMDhiYS00ZDAyLThm MzgtNzQ3MzJmMTVjZDhjLzAvNDdFNUUzNkI4NDg2MTM1MzRBNjVEREU0RkJBMjdB QjU5QTc0NUI1MC5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBACKJIu9dJ6ZYBjs4NUgU0ruNbEqgiQflIYUG V6XYkjhYnAC6QIF3KWOJ5ABGc3/vUrqpphBCkQ2LQP6BaEHKkkrpoR+pG9t4IbK9 I35WfUYcXc3MAUJlJX8219pRfaNqOO6Pl3YfxdzJoSijc0m5fVXzlpHnMMe7Zw8o YvTOfavDeH4TH8xxEsVJcS3fIagea6yY4103GYQfMcW6m11v/RluMeiubal8+YWV kOkUCe4DDWfAFrVboce28v10hsBCKd9xhdSzWPXJ9TVaVX9YmLKpe7/b9Fvfdl66 2Qw7I09vRpg6nz+5TP+gCmaQShxB4l6H5BD4KiZ8d92Obd67RrU= -----END CERTIFICATE-----Generated at Fri Dec 19 10:53:12 2025 by rpki-client