This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf repo-rpki.idnic.net/repo/eb81bcea-b70f-4374-924b-b6c778109837/0/CA47BA6D9780611AEA68BC9BF72724AE94799AA6.mft File: CA47BA6D9780611AEA68BC9BF72724AE94799AA6.mft (raw, json) Hash identifier: +BwzWUO5S629BDaqh5LpUcoeH/8ITcM5F0L7G0uFcVA= Subject key identifier: DA:AA:21:F0:D6:C1:9D:73:CA:94:B1:B1:55:14:6F:C9:91:F0:A1:98 Authority key identifier: CA:47:BA:6D:97:80:61:1A:EA:68:BC:9B:F7:27:24:AE:94:79:9A:A6 Certificate issuer: /CN=CA47BA6D9780611AEA68BC9BF72724AE94799AA6 Certificate serial: 309E73A0E5B2B5054B070E8699B6F131A9F03B78 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/CA47BA6D9780611AEA68BC9BF72724AE94799AA6.cer Subject info access: rsync://repo-rpki.idnic.net/repo/eb81bcea-b70f-4374-924b-b6c778109837/0/CA47BA6D9780611AEA68BC9BF72724AE94799AA6.mft Manifest number: 0292 Signing time: Tue 02 Dec 2025 18:50:48 +0000 Manifest this update: Tue 02 Dec 2025 18:45:48 +0000 Manifest next update: Sat 06 Dec 2025 02:54:48 +0000 Files and hashes: 1: CA47BA6D9780611AEA68BC9BF72724AE94799AA6.crl (hash: 7svX0kdHZKhXMGkaRr0vDdf8AxLXSY6iwLo9/FDw7Ac=) 2: 3130332e3130382e3234302e302f32322d3232203d3e20313336383535.roa (hash: 7eJhfA1U72MfmI6Gl9X8Bc7KFQEL+NhfB3ZqMIqrEaA=) 3: 3130332e3130382e3234312e302f32342d3234203d3e20313333373936.roa (hash: kunQ1kMqm5dCsvOsI1+HGGCtiZ5NKsilDdmi0e2JkQE=) 4: 3130332e3130382e3234322e302f32342d3234203d3e20313336383535.roa (hash: 3PkfuBqgUsXvYP/cBasxl1kYosVT98po9pZBDusnWb4=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/eb81bcea-b70f-4374-924b-b6c778109837/0/CA47BA6D9780611AEA68BC9BF72724AE94799AA6.crl rsync://repo-rpki.idnic.net/repo/eb81bcea-b70f-4374-924b-b6c778109837/0/CA47BA6D9780611AEA68BC9BF72724AE94799AA6.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/CA47BA6D9780611AEA68BC9BF72724AE94799AA6.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 06 Dec 2025 02:54:48 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 30:9e:73:a0:e5:b2:b5:05:4b:07:0e:86:99:b6:f1:31:a9:f0:3b:78 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=CA47BA6D9780611AEA68BC9BF72724AE94799AA6 Validity Not Before: Dec 2 18:45:48 2025 GMT Not After : Dec 6 02:54:48 2025 GMT Subject: CN=DAAA21F0D6C19D73CA94B1B155146FC991F0A198 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c8:05:92:f6:88:38:df:2d:db:b5:ca:af:ed:12: 3f:4e:57:ac:03:96:02:97:5e:76:93:79:23:f6:a3: b2:04:0d:2e:aa:79:98:fc:1d:e5:f0:63:2d:bc:26: da:77:06:1a:c4:0f:8e:37:75:16:de:7e:57:68:ef: eb:1e:47:7a:0c:85:cd:07:c5:7c:57:94:60:10:9b: 7a:f8:47:c8:26:81:ca:91:68:ca:b2:2c:b9:18:42: 14:f5:ed:90:6d:fe:a3:1b:75:97:53:3d:58:4c:ba: be:59:62:34:cd:17:6c:9b:98:2c:1a:20:4a:87:2e: 21:48:05:af:86:84:b7:2c:64:55:44:cc:ba:69:5c: 3c:69:9f:ec:04:73:81:0c:fa:da:cf:fb:7b:a3:3e: fb:da:26:ee:6a:ad:b2:ba:cb:26:c5:20:b9:f6:96: 7a:b1:05:85:84:37:8e:ab:b0:8c:7b:16:44:88:82: 65:09:ab:2f:2c:c0:b3:4a:ad:5a:99:f4:12:1f:b9: 17:eb:f4:18:ce:17:89:8c:f6:f8:29:16:f1:0d:f8: 83:de:cf:a5:4c:1e:26:5d:a8:e0:58:b1:2a:58:5f: ab:3f:e9:92:b5:a7:f5:7f:64:b3:f6:5a:b8:08:f7: 66:22:1e:b7:3b:a4:e6:ff:5b:ce:b6:e2:48:62:fa: 6c:a9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: DA:AA:21:F0:D6:C1:9D:73:CA:94:B1:B1:55:14:6F:C9:91:F0:A1:98 X509v3 Authority Key Identifier: keyid:CA:47:BA:6D:97:80:61:1A:EA:68:BC:9B:F7:27:24:AE:94:79:9A:A6 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/eb81bcea-b70f-4374-924b-b6c778109837/0/CA47BA6D9780611AEA68BC9BF72724AE94799AA6.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/CA47BA6D9780611AEA68BC9BF72724AE94799AA6.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/eb81bcea-b70f-4374-924b-b6c778109837/0/CA47BA6D9780611AEA68BC9BF72724AE94799AA6.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 37:e5:71:a9:97:e0:cb:1f:3e:c9:7a:8b:ed:63:fb:0d:97:eb: dc:d4:07:76:0d:8d:83:1c:04:1e:17:4d:a0:58:90:a0:52:f9: 84:69:96:ca:03:5e:c8:e9:8d:da:a8:4b:d0:06:8a:bf:50:0e: a2:01:66:17:87:0a:93:51:25:7e:57:df:bf:b4:e0:04:96:9c: 23:bf:de:d9:76:1c:5e:35:47:79:ea:ff:e1:a2:68:eb:f9:26: 12:d5:58:6f:d0:6a:30:d3:52:60:b1:08:ae:83:b3:32:4c:c0: cf:57:6b:96:10:46:ff:7e:53:f4:73:1b:b0:31:6d:39:64:e8: 47:de:df:e8:68:b4:94:59:da:f4:9e:9f:ce:3d:aa:f1:b3:ae: bf:39:3e:2e:69:8f:bf:37:c3:9b:5f:d0:6d:37:66:05:94:17: 94:1f:66:31:38:a9:43:16:e5:fb:68:9c:69:3a:ba:3c:84:9c: 5c:23:da:47:35:65:a7:d5:ab:69:14:88:14:68:9d:d2:30:12: d1:7d:7e:fe:a9:f6:1d:d5:c5:27:23:14:c1:31:52:f9:1e:1b: aa:17:46:0e:44:39:67:1a:03:e9:76:a9:f8:cc:87:63:8b:d6: 7a:fd:89:1d:e2:85:37:89:7e:fc:b4:6e:a5:8d:b5:86:33:e9: f7:3b:cb:1d -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUMJ5zoOWytQVLBw6GmbbxManwO3gwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoQ0E0N0JBNkQ5NzgwNjExQUVBNjhCQzlCRjcyNzI0QUU5 NDc5OUFBNjAeFw0yNTEyMDIxODQ1NDhaFw0yNTEyMDYwMjU0NDhaMDMxMTAvBgNV BAMTKERBQUEyMUYwRDZDMTlENzNDQTk0QjFCMTU1MTQ2RkM5OTFGMEExOTgwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDIBZL2iDjfLdu1yq/tEj9OV6wD lgKXXnaTeSP2o7IEDS6qeZj8HeXwYy28Jtp3BhrED443dRbefldo7+seR3oMhc0H xXxXlGAQm3r4R8gmgcqRaMqyLLkYQhT17ZBt/qMbdZdTPVhMur5ZYjTNF2ybmCwa IEqHLiFIBa+GhLcsZFVEzLppXDxpn+wEc4EM+trP+3ujPvvaJu5qrbK6yybFILn2 lnqxBYWEN46rsIx7FkSIgmUJqy8swLNKrVqZ9BIfuRfr9BjOF4mM9vgpFvEN+IPe z6VMHiZdqOBYsSpYX6s/6ZK1p/V/ZLP2WrgI92YiHrc7pOb/W8624khi+mypAgMB AAGjggI8MIICODAdBgNVHQ4EFgQU2qoh8NbBnXPKlLGxVRRvyZHwoZgwHwYDVR0j BBgwFoAUyke6bZeAYRrqaLyb9yckrpR5mqYwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby9l YjgxYmNlYS1iNzBmLTQzNzQtOTI0Yi1iNmM3NzgxMDk4MzcvMC9DQTQ3QkE2RDk3 ODA2MTFBRUE2OEJDOUJGNzI3MjRBRTk0Nzk5QUE2LmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvQ0E0N0JBNkQ5NzgwNjExQUVBNjhCQzlCRjcyNzI0QUU5NDc5 OUFBNi5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vZWI4MWJjZWEtYjcwZi00Mzc0LTky NGItYjZjNzc4MTA5ODM3LzAvQ0E0N0JBNkQ5NzgwNjExQUVBNjhCQzlCRjcyNzI0 QUU5NDc5OUFBNi5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBADflcamX4MsfPsl6i+1j+w2X69zUB3YNjYMc BB4XTaBYkKBS+YRplsoDXsjpjdqoS9AGir9QDqIBZheHCpNRJX5X37+04ASWnCO/ 3tl2HF41R3nq/+GiaOv5JhLVWG/QajDTUmCxCK6DszJMwM9Xa5YQRv9+U/RzG7Ax bTlk6Efe3+hotJRZ2vSen849qvGzrr85Pi5pj783w5tf0G03ZgWUF5QfZjE4qUMW 5ftonGk6ujyEnFwj2kc1ZafVq2kUiBRondIwEtF9fv6p9h3VxScjFMExUvkeG6oX Rg5EOWcaA+l2qfjMh2OL1nr9iR3ihTeJfvy0bqWNtYYz6fc7yx0= -----END CERTIFICATE-----Generated at Wed Dec 3 13:57:57 2025 by rpki-client