This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

$ rpki-client -vvf repo-rpki.idnic.net/repo/eb81bcea-b70f-4374-924b-b6c778109837/0/CA47BA6D9780611AEA68BC9BF72724AE94799AA6.mft
File: CA47BA6D9780611AEA68BC9BF72724AE94799AA6.mft (raw, json)
Hash identifier: NJXKWZrGXnk97pPgzIMJLXx9FNqievex/uJGTPm394s=
Subject key identifier: EF:0F:79:77:71:1F:2C:E3:60:AD:A3:C5:22:EB:C9:2C:C4:E0:56:20
Authority key identifier: CA:47:BA:6D:97:80:61:1A:EA:68:BC:9B:F7:27:24:AE:94:79:9A:A6
Certificate issuer: /CN=CA47BA6D9780611AEA68BC9BF72724AE94799AA6
Certificate serial: 62EC53095A6F64F9DD5847809E920D6F30B4C9D9
Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/CA47BA6D9780611AEA68BC9BF72724AE94799AA6.cer
Subject info access: rsync://repo-rpki.idnic.net/repo/eb81bcea-b70f-4374-924b-b6c778109837/0/CA47BA6D9780611AEA68BC9BF72724AE94799AA6.mft
Manifest number: 02AD
Signing time: Mon 02 Feb 2026 07:20:48 +0000
Manifest this update: Mon 02 Feb 2026 07:15:48 +0000
Manifest next update: Thu 05 Feb 2026 17:07:48 +0000
Files and hashes: 1: CA47BA6D9780611AEA68BC9BF72724AE94799AA6.crl (hash: aOejKLHQrTplm86i1gYYgSXVg2wqAIWbbUlzw/g0tSY=)
2: 3130332e3130382e3234302e302f32322d3232203d3e20313336383535.roa (hash: 7eJhfA1U72MfmI6Gl9X8Bc7KFQEL+NhfB3ZqMIqrEaA=)
3: 3130332e3130382e3234322e302f32342d3234203d3e20313336383535.roa (hash: 3PkfuBqgUsXvYP/cBasxl1kYosVT98po9pZBDusnWb4=)
4: 3130332e3130382e3234312e302f32342d3234203d3e20313333373936.roa (hash: kunQ1kMqm5dCsvOsI1+HGGCtiZ5NKsilDdmi0e2JkQE=)
Validation: OK
Signature path: rsync://repo-rpki.idnic.net/repo/eb81bcea-b70f-4374-924b-b6c778109837/0/CA47BA6D9780611AEA68BC9BF72724AE94799AA6.crl
rsync://repo-rpki.idnic.net/repo/eb81bcea-b70f-4374-924b-b6c778109837/0/CA47BA6D9780611AEA68BC9BF72724AE94799AA6.mft
rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/CA47BA6D9780611AEA68BC9BF72724AE94799AA6.cer
rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl
rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Thu 05 Feb 2026 05:24:03 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
62:ec:53:09:5a:6f:64:f9:dd:58:47:80:9e:92:0d:6f:30:b4:c9:d9
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=CA47BA6D9780611AEA68BC9BF72724AE94799AA6
Validity
Not Before: Feb 2 07:15:48 2026 GMT
Not After : Feb 5 17:07:48 2026 GMT
Subject: CN=EF0F7977711F2CE360ADA3C522EBC92CC4E05620
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:da:91:80:ae:a0:70:f8:0d:0a:db:d4:bd:34:43:
b4:8d:e8:5f:35:03:86:58:b6:b7:25:a5:7f:2d:69:
d4:5d:e6:ff:30:10:34:ce:45:19:72:49:0d:22:2b:
bd:72:7f:bd:a4:ed:4a:b8:45:06:c5:0b:9e:18:1e:
06:1d:7a:e2:c3:d4:c7:1d:50:5b:8c:3e:bf:3b:fc:
c4:b8:60:35:86:c4:f8:0d:14:23:ee:eb:a8:a6:b9:
44:5d:24:77:bd:e0:da:90:55:78:95:fb:c8:f1:3d:
4b:bb:40:84:59:8f:13:32:45:d8:0a:2b:a5:47:0c:
5e:ac:5e:a2:d1:c1:df:f4:02:5d:f7:5d:1b:fe:7f:
16:56:a2:0f:66:9f:a2:bd:64:75:b6:ae:7c:37:36:
04:f9:9d:6e:a7:ab:94:23:bb:86:7a:73:38:c2:53:
b8:d3:90:e5:14:6e:da:a8:e4:f1:b4:2a:3d:24:f2:
5e:b9:92:7e:da:5f:e7:73:da:ff:c7:20:06:a2:2d:
05:73:91:68:40:8d:1b:86:6e:b4:90:c0:95:d9:49:
42:cf:b7:13:fc:d9:de:38:ae:d4:5f:39:da:9c:e5:
4f:8d:ab:20:1b:70:1c:49:e0:1e:ac:20:7e:ac:4f:
21:d2:4e:00:cf:43:d5:3d:25:14:e4:77:00:d3:db:
99:91
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
EF:0F:79:77:71:1F:2C:E3:60:AD:A3:C5:22:EB:C9:2C:C4:E0:56:20
X509v3 Authority Key Identifier:
keyid:CA:47:BA:6D:97:80:61:1A:EA:68:BC:9B:F7:27:24:AE:94:79:9A:A6
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://repo-rpki.idnic.net/repo/eb81bcea-b70f-4374-924b-b6c778109837/0/CA47BA6D9780611AEA68BC9BF72724AE94799AA6.crl
Authority Information Access:
CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/CA47BA6D9780611AEA68BC9BF72724AE94799AA6.cer
Subject Information Access:
Signed Object - URI:rsync://repo-rpki.idnic.net/repo/eb81bcea-b70f-4374-924b-b6c778109837/0/CA47BA6D9780611AEA68BC9BF72724AE94799AA6.mft
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
49:8b:c6:38:bb:a9:1f:bd:52:4a:27:64:49:19:c3:9f:b6:35:
07:3b:41:08:64:d1:bb:b0:67:fc:1d:69:09:ab:b5:7d:c0:9b:
7d:7e:aa:7d:f1:86:0d:00:1c:5a:74:8e:b6:bf:16:ef:88:3a:
5f:3b:b5:a4:74:c3:1d:5d:96:ef:84:cb:7c:cb:0e:6a:78:a3:
67:4d:7c:47:db:28:42:5b:d3:32:1d:b7:f3:44:df:6c:8d:45:
07:d3:1f:fe:20:18:cc:93:16:08:4e:ec:15:40:0e:27:24:a0:
b0:a9:96:d9:88:ae:bf:4c:86:65:da:b8:a4:78:50:57:a1:3f:
82:8c:3a:71:38:d1:b8:95:f0:ee:39:ce:38:fe:b2:d5:7d:62:
4d:df:c2:d5:fb:ad:bc:e5:75:59:a4:2f:d8:32:eb:54:7e:22:
8f:b0:a3:37:f0:35:5b:7f:07:ee:4e:d5:0d:0c:36:04:35:b9:
d9:18:80:31:ea:d3:27:84:1f:14:35:c8:93:ef:41:b7:c9:fc:
91:af:ed:94:ca:a5:00:8b:4c:01:1e:ac:45:d8:e9:72:1d:ba:
b2:c0:44:90:1e:a0:16:e2:15:6e:73:53:14:ff:52:9c:82:dd:
6f:f8:e0:8f:43:e9:27:7b:80:66:3e:39:f7:aa:c6:e1:37:1a:
15:f9:bd:c0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Feb 2 10:06:06 2026 by rpki-client