This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf repo-rpki.idnic.net/repo/468de91b-636b-4da4-b1d0-72632cfcf235/0/7271655D6318ECB0B797B46C6ECFBC3DD2E32504.mft
File:                     7271655D6318ECB0B797B46C6ECFBC3DD2E32504.mft (raw, json)
Hash identifier:          0fmPid5Y+Hk8AtFIaPUaLDxUi1gBqMgO827AtU6H264=
Subject key identifier:   29:A0:87:49:AD:AB:30:62:F5:CD:05:CB:AF:82:36:8F:6D:9B:2E:CC
Authority key identifier: 72:71:65:5D:63:18:EC:B0:B7:97:B4:6C:6E:CF:BC:3D:D2:E3:25:04
Certificate issuer:       /CN=7271655D6318ECB0B797B46C6ECFBC3DD2E32504
Certificate serial:       70D7DDE92011B9FE62478AC9C190D8F3DB28AE56
Authority info access:    rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/7271655D6318ECB0B797B46C6ECFBC3DD2E32504.cer
Subject info access:      rsync://repo-rpki.idnic.net/repo/468de91b-636b-4da4-b1d0-72632cfcf235/0/7271655D6318ECB0B797B46C6ECFBC3DD2E32504.mft
Manifest number:          39
Signing time:             Thu 18 Dec 2025 06:11:32 +0000
Manifest this update:     Thu 18 Dec 2025 06:06:32 +0000
Manifest next update:     Sun 21 Dec 2025 06:59:32 +0000
Files and hashes:         1: 7271655D6318ECB0B797B46C6ECFBC3DD2E32504.crl (hash: Qhtq8aYOrV+hE6A+r4jChlTFs0Y1UPWbCfLmZ420o5c=)
Validation:               OK
Signature path:           rsync://repo-rpki.idnic.net/repo/468de91b-636b-4da4-b1d0-72632cfcf235/0/7271655D6318ECB0B797B46C6ECFBC3DD2E32504.crl
                          rsync://repo-rpki.idnic.net/repo/468de91b-636b-4da4-b1d0-72632cfcf235/0/7271655D6318ECB0B797B46C6ECFBC3DD2E32504.mft
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/7271655D6318ECB0B797B46C6ECFBC3DD2E32504.cer
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sun 21 Dec 2025 06:59:32 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            70:d7:dd:e9:20:11:b9:fe:62:47:8a:c9:c1:90:d8:f3:db:28:ae:56
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=7271655D6318ECB0B797B46C6ECFBC3DD2E32504
        Validity
            Not Before: Dec 18 06:06:32 2025 GMT
            Not After : Dec 21 06:59:32 2025 GMT
        Subject: CN=29A08749ADAB3062F5CD05CBAF82368F6D9B2ECC
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c3:01:eb:76:81:47:22:05:1c:11:1e:fd:c0:bd:
                    54:51:1f:8f:1c:be:35:d6:22:29:60:49:ca:b4:8c:
                    ad:9e:0b:cd:9f:91:f3:5b:1d:81:e5:51:9e:86:ae:
                    f2:1c:d9:4d:59:b9:dc:b3:98:51:6f:62:dc:00:4a:
                    86:c3:62:08:95:8a:15:be:e2:f1:f1:94:48:b3:aa:
                    74:73:06:aa:a2:d0:ec:97:5c:82:95:ad:06:31:3a:
                    4e:a7:c0:7a:74:94:e4:96:ed:c7:24:53:e3:ab:b0:
                    56:42:ff:a1:49:e0:63:66:47:df:cc:1f:6e:95:8d:
                    26:95:1d:42:79:26:9d:ad:e4:24:37:db:a4:ad:7c:
                    f3:9c:0d:77:d9:db:a4:67:96:1b:e4:e4:41:db:2a:
                    f1:1a:91:dc:bc:01:16:7e:53:88:9b:cc:76:df:37:
                    bb:e7:4c:31:0f:57:f5:a8:4c:65:87:b8:3a:ab:e2:
                    9a:32:b5:82:4d:92:38:8e:a2:06:a8:4f:7c:85:4d:
                    25:15:66:9b:2b:f5:ab:8c:ef:1c:f9:b1:19:87:42:
                    b7:ff:ce:e5:44:e0:98:00:da:a2:e7:e8:ee:0f:11:
                    5b:59:b0:2d:60:ea:6b:51:50:22:d1:21:19:ce:11:
                    f0:02:33:e1:31:2d:ac:c2:b0:c8:3d:73:be:33:a1:
                    4f:9f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                29:A0:87:49:AD:AB:30:62:F5:CD:05:CB:AF:82:36:8F:6D:9B:2E:CC
            X509v3 Authority Key Identifier:
                keyid:72:71:65:5D:63:18:EC:B0:B7:97:B4:6C:6E:CF:BC:3D:D2:E3:25:04

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repo-rpki.idnic.net/repo/468de91b-636b-4da4-b1d0-72632cfcf235/0/7271655D6318ECB0B797B46C6ECFBC3DD2E32504.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/7271655D6318ECB0B797B46C6ECFBC3DD2E32504.cer

            Subject Information Access:
                Signed Object - URI:rsync://repo-rpki.idnic.net/repo/468de91b-636b-4da4-b1d0-72632cfcf235/0/7271655D6318ECB0B797B46C6ECFBC3DD2E32504.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         5a:01:8e:2e:ce:ad:1f:f6:4c:b9:87:39:58:da:b3:66:48:19:
         88:5b:e9:a7:55:87:ed:d8:bb:6f:d1:1d:c4:60:39:67:25:79:
         91:3c:50:e3:e8:a6:83:11:39:39:20:45:3c:90:2d:03:1c:47:
         56:5e:b7:be:6e:0b:9e:cc:c2:01:5b:c4:61:74:34:9d:09:d9:
         1c:ae:91:d5:87:60:59:da:1f:79:60:71:76:bf:c6:06:39:3d:
         70:c0:3e:ed:80:57:cb:a7:ce:6d:49:7e:34:9c:fe:20:21:2e:
         68:f0:27:20:e4:4a:d6:08:f5:eb:42:cf:00:e9:18:c7:ad:c2:
         aa:51:61:59:29:19:98:ff:97:a9:94:b3:ff:8d:cb:e3:db:70:
         56:af:bc:aa:81:29:8c:03:ac:6a:05:78:f6:2e:d2:0f:bb:44:
         ba:5d:49:cc:40:92:e4:8b:cd:eb:9f:5d:ab:61:0c:96:86:e2:
         e5:ad:4f:a1:1d:6e:dd:dc:bf:f8:ac:83:96:5f:3b:45:ab:7d:
         4e:da:53:2b:f3:c4:e7:ec:f4:d5:8d:5c:75:bb:ff:0b:50:6b:
         b4:a2:d7:66:a2:60:f3:56:d0:77:2a:a6:ca:80:8b:1c:e9:7e:
         49:10:9f:8e:b6:fc:47:59:f6:8b:7f:cd:4e:c3:3f:e3:24:fb:
         ac:3a:a2:10
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Dec 19 18:11:56 2025 by rpki-client