This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

$ rpki-client -vvf repo-rpki.idnic.net/repo/dce9f43d-08ba-4d02-8f38-74732f15cd8c/0/47E5E36B848613534A65DDE4FBA27AB59A745B50.mft
File: 47E5E36B848613534A65DDE4FBA27AB59A745B50.mft (raw, json)
Hash identifier: +PpWn0UQy034EnAHnR2NSfjSSQpokYPYsAMKlktPppU=
Subject key identifier: 30:00:43:9E:E2:65:0A:89:85:56:11:E5:F7:7F:B7:31:71:77:BB:C2
Authority key identifier: 47:E5:E3:6B:84:86:13:53:4A:65:DD:E4:FB:A2:7A:B5:9A:74:5B:50
Certificate issuer: /CN=47E5E36B848613534A65DDE4FBA27AB59A745B50
Certificate serial: 48C8D6C41DF3087C833DC5039EF567E04D3E7E0C
Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/47E5E36B848613534A65DDE4FBA27AB59A745B50.cer
Subject info access: rsync://repo-rpki.idnic.net/repo/dce9f43d-08ba-4d02-8f38-74732f15cd8c/0/47E5E36B848613534A65DDE4FBA27AB59A745B50.mft
Manifest number: 0271
Signing time: Sat 31 Jan 2026 07:41:58 +0000
Manifest this update: Sat 31 Jan 2026 07:36:58 +0000
Manifest next update: Tue 03 Feb 2026 19:26:58 +0000
Files and hashes: 1: 3130332e3138362e33332e302f32342d3234203d3e20313439363930.roa (hash: qSOluZYhHbh5qhe9XFML1T+yjS4Nr+V42eVROiXrJCc=)
2: 47E5E36B848613534A65DDE4FBA27AB59A745B50.crl (hash: 81gQTBz0Vt/INuVAZDqs/6Ox8TKjk/zNBMw48Hmi3Us=)
3: 3130332e3138362e33322e302f32342d3234203d3e20313439363930.roa (hash: +RzIkKcclhhmS8GwfpMzHJYL3/aslCxP9ofzAqZe73s=)
Validation: OK
Signature path: rsync://repo-rpki.idnic.net/repo/dce9f43d-08ba-4d02-8f38-74732f15cd8c/0/47E5E36B848613534A65DDE4FBA27AB59A745B50.crl
rsync://repo-rpki.idnic.net/repo/dce9f43d-08ba-4d02-8f38-74732f15cd8c/0/47E5E36B848613534A65DDE4FBA27AB59A745B50.mft
rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/47E5E36B848613534A65DDE4FBA27AB59A745B50.cer
rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl
rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Tue 03 Feb 2026 19:26:58 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
48:c8:d6:c4:1d:f3:08:7c:83:3d:c5:03:9e:f5:67:e0:4d:3e:7e:0c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=47E5E36B848613534A65DDE4FBA27AB59A745B50
Validity
Not Before: Jan 31 07:36:58 2026 GMT
Not After : Feb 3 19:26:58 2026 GMT
Subject: CN=3000439EE2650A89855611E5F77FB7317177BBC2
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ad:f2:35:19:62:81:94:19:fb:d9:ab:3c:01:0d:
eb:44:62:49:30:a9:3f:78:c6:f5:d1:e3:fe:f8:b9:
e5:53:cc:60:2d:45:ba:b8:75:1e:b4:b9:71:8b:3d:
ee:47:3f:1c:c0:f5:77:b4:69:3d:bf:43:b2:5d:50:
d7:d9:4c:0f:b1:1d:5a:c0:ab:3f:d8:02:e5:4c:b5:
d4:9f:59:ca:c0:6c:73:bf:21:9c:98:d3:61:1a:42:
cc:be:f5:22:f7:8b:b8:55:82:72:bd:0b:43:0f:b8:
b5:12:cf:b6:0c:23:5b:33:86:26:75:fe:9b:ea:48:
8a:bc:09:9f:39:89:d8:43:0e:a8:fd:38:4e:19:88:
de:81:c7:28:a8:1b:06:88:94:b4:6e:bd:0e:f3:43:
69:28:76:7c:7c:16:a9:1f:98:98:5c:28:4c:34:d3:
58:5a:37:e5:28:2b:35:92:a4:2e:68:38:d4:8e:04:
8c:cb:42:20:87:b1:9f:bb:e3:38:0f:19:37:73:18:
e6:f9:7f:9a:48:60:25:1d:7c:59:76:9c:30:7a:63:
de:2b:c9:02:54:51:c9:af:bf:83:ec:57:f2:28:51:
18:49:f6:73:b7:04:aa:b3:68:96:4a:2f:32:36:0b:
d3:e7:56:0c:03:5b:a4:2a:dc:c3:db:eb:48:8e:e5:
b4:c7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
30:00:43:9E:E2:65:0A:89:85:56:11:E5:F7:7F:B7:31:71:77:BB:C2
X509v3 Authority Key Identifier:
keyid:47:E5:E3:6B:84:86:13:53:4A:65:DD:E4:FB:A2:7A:B5:9A:74:5B:50
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://repo-rpki.idnic.net/repo/dce9f43d-08ba-4d02-8f38-74732f15cd8c/0/47E5E36B848613534A65DDE4FBA27AB59A745B50.crl
Authority Information Access:
CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/47E5E36B848613534A65DDE4FBA27AB59A745B50.cer
Subject Information Access:
Signed Object - URI:rsync://repo-rpki.idnic.net/repo/dce9f43d-08ba-4d02-8f38-74732f15cd8c/0/47E5E36B848613534A65DDE4FBA27AB59A745B50.mft
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
a9:44:38:d0:ee:fa:52:c7:95:b6:56:39:60:0c:00:28:38:c6:
46:92:bc:ed:80:9e:b0:5d:ce:0e:a3:36:f4:a5:33:87:b8:e5:
1b:33:c4:44:01:3f:f2:41:5c:cf:43:37:e3:7d:10:95:86:9a:
f0:ab:79:bd:61:0e:65:44:87:e3:80:2a:40:24:a8:b1:8c:cf:
13:fe:15:7c:6f:a7:17:47:65:c5:8f:e7:38:cf:4c:7d:6b:4c:
82:37:69:e2:dc:b6:e8:94:b6:57:9f:51:99:a9:7e:fa:ad:ee:
1e:85:40:ff:d2:e1:c8:f0:67:da:f5:e5:cf:21:e8:0d:94:f9:
1e:4c:80:68:fc:9f:ec:3f:6a:19:5d:13:49:b7:b8:88:1b:9b:
e3:ac:9e:d7:db:c0:31:80:f7:4f:93:4a:1f:f1:33:c2:7e:06:
9b:1d:7d:d9:37:8a:c1:df:ea:7e:b9:2b:45:09:31:85:74:e6:
84:85:58:07:c3:23:38:9d:f7:eb:af:73:9c:91:dd:19:9b:d3:
7f:1c:46:67:16:2d:f1:ce:96:e0:21:69:5e:cc:78:66:76:4a:
e2:9e:b6:55:0a:1b:c3:3c:75:c2:8e:85:80:eb:be:97:e9:1e:
8e:61:60:d0:68:d7:ed:1e:9b:c5:45:2d:07:0f:09:55:a4:d4:
29:74:80:38
-----BEGIN CERTIFICATE-----
MIIFMjCCBBqgAwIBAgIUSMjWxB3zCHyDPcUDnvVn4E0+fgwwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoNDdFNUUzNkI4NDg2MTM1MzRBNjVEREU0RkJBMjdBQjU5
QTc0NUI1MDAeFw0yNjAxMzEwNzM2NThaFw0yNjAyMDMxOTI2NThaMDMxMTAvBgNV
BAMTKDMwMDA0MzlFRTI2NTBBODk4NTU2MTFFNUY3N0ZCNzMxNzE3N0JCQzIwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCt8jUZYoGUGfvZqzwBDetEYkkw
qT94xvXR4/74ueVTzGAtRbq4dR60uXGLPe5HPxzA9Xe0aT2/Q7JdUNfZTA+xHVrA
qz/YAuVMtdSfWcrAbHO/IZyY02EaQsy+9SL3i7hVgnK9C0MPuLUSz7YMI1szhiZ1
/pvqSIq8CZ85idhDDqj9OE4ZiN6BxyioGwaIlLRuvQ7zQ2kodnx8FqkfmJhcKEw0
01haN+UoKzWSpC5oONSOBIzLQiCHsZ+74zgPGTdzGOb5f5pIYCUdfFl2nDB6Y94r
yQJUUcmvv4PsV/IoURhJ9nO3BKqzaJZKLzI2C9PnVgwDW6Qq3MPb60iO5bTHAgMB
AAGjggI8MIICODAdBgNVHQ4EFgQUMABDnuJlComFVhHl93+3MXF3u8IwHwYDVR0j
BBgwFoAUR+Xja4SGE1NKZd3k+6J6tZp0W1AwDgYDVR0PAQH/BAQDAgeAMIGFBgNV
HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby9k
Y2U5ZjQzZC0wOGJhLTRkMDItOGYzOC03NDczMmYxNWNkOGMvMC80N0U1RTM2Qjg0
ODYxMzUzNEE2NURERTRGQkEyN0FCNTlBNzQ1QjUwLmNybDB0BggrBgEFBQcBAQRo
MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv
L0lETklDLUlELzIvNDdFNUUzNkI4NDg2MTM1MzRBNjVEREU0RkJBMjdBQjU5QTc0
NUI1MC5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6
Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vZGNlOWY0M2QtMDhiYS00ZDAyLThm
MzgtNzQ3MzJmMTVjZDhjLzAvNDdFNUUzNkI4NDg2MTM1MzRBNjVEREU0RkJBMjdB
QjU5QTc0NUI1MC5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF
BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC
BQAwDQYJKoZIhvcNAQELBQADggEBAKlEONDu+lLHlbZWOWAMACg4xkaSvO2AnrBd
zg6jNvSlM4e45RszxEQBP/JBXM9DN+N9EJWGmvCreb1hDmVEh+OAKkAkqLGMzxP+
FXxvpxdHZcWP5zjPTH1rTII3aeLctuiUtlefUZmpfvqt7h6FQP/S4cjwZ9r15c8h
6A2U+R5MgGj8n+w/ahldE0m3uIgbm+OsntfbwDGA90+TSh/xM8J+Bpsdfdk3isHf
6n65K0UJMYV05oSFWAfDIzid9+uvc5yR3Rmb038cRmcWLfHOluAhaV7MeGZ2SuKe
tlUKG8M8dcKOhYDrvpfpHo5hYNBo1+0em8VFLQcPCVWk1Cl0gDg=
-----END CERTIFICATE-----
Generated at Mon Feb 2 20:56:41 2026 by rpki-client