This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf repo-rpki.idnic.net/repo/c72f3db4-41e2-4028-908b-5097c9b1c1f5/0/7B29BAF4812476761482CE1C3A92188A2A8334CE.mft
File:                     7B29BAF4812476761482CE1C3A92188A2A8334CE.mft (raw, json)
Hash identifier:          fjJ2yCQyh4cwKi8HdxIjzMoP0CXztN0Z5i4H844YfXs=
Subject key identifier:   AA:1F:09:5F:34:80:8A:95:B6:18:4D:7F:6E:45:B2:D8:6B:E9:99:7C
Authority key identifier: 7B:29:BA:F4:81:24:76:76:14:82:CE:1C:3A:92:18:8A:2A:83:34:CE
Certificate issuer:       /CN=7B29BAF4812476761482CE1C3A92188A2A8334CE
Certificate serial:       752F34C4DF4CE21B4AB8113388B39DADBEB8D022
Authority info access:    rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/7B29BAF4812476761482CE1C3A92188A2A8334CE.cer
Subject info access:      rsync://repo-rpki.idnic.net/repo/c72f3db4-41e2-4028-908b-5097c9b1c1f5/0/7B29BAF4812476761482CE1C3A92188A2A8334CE.mft
Manifest number:          02C0
Signing time:             Wed 17 Dec 2025 16:00:50 +0000
Manifest this update:     Wed 17 Dec 2025 15:55:50 +0000
Manifest next update:     Sat 20 Dec 2025 18:08:50 +0000
Files and hashes:         1: 7B29BAF4812476761482CE1C3A92188A2A8334CE.crl (hash: PbqAgX0CiERxo4E2cp6HruXtOoBWubYZjs4IO1vn8z4=)
Validation:               OK
Signature path:           rsync://repo-rpki.idnic.net/repo/c72f3db4-41e2-4028-908b-5097c9b1c1f5/0/7B29BAF4812476761482CE1C3A92188A2A8334CE.crl
                          rsync://repo-rpki.idnic.net/repo/c72f3db4-41e2-4028-908b-5097c9b1c1f5/0/7B29BAF4812476761482CE1C3A92188A2A8334CE.mft
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/7B29BAF4812476761482CE1C3A92188A2A8334CE.cer
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sat 20 Dec 2025 18:08:50 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            75:2f:34:c4:df:4c:e2:1b:4a:b8:11:33:88:b3:9d:ad:be:b8:d0:22
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=7B29BAF4812476761482CE1C3A92188A2A8334CE
        Validity
            Not Before: Dec 17 15:55:50 2025 GMT
            Not After : Dec 20 18:08:50 2025 GMT
        Subject: CN=AA1F095F34808A95B6184D7F6E45B2D86BE9997C
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ba:2c:8b:96:60:43:88:a1:8e:7c:f9:50:c6:de:
                    ac:93:63:95:68:88:b2:ca:3c:46:c0:7a:00:07:c5:
                    74:4f:79:ca:44:c7:43:33:eb:c6:29:1e:04:84:45:
                    07:d7:ec:a0:8a:71:6a:4c:26:97:ee:6e:a7:4a:9e:
                    3f:35:c8:8c:b2:93:00:18:10:4a:2d:53:4d:7f:08:
                    5b:6b:06:84:a0:83:6a:01:fe:9c:15:ed:54:d7:a0:
                    f9:bb:6f:c8:c5:32:a0:5c:1e:a3:3d:e3:4e:9f:2c:
                    7a:ea:6e:00:c8:20:38:96:34:9f:7d:2d:0f:5b:bf:
                    62:c7:39:d4:63:c0:ad:d3:8c:50:4f:08:12:26:7b:
                    f6:71:d9:cd:15:37:17:e0:ef:c6:4e:c0:55:1e:5d:
                    a8:f2:79:cf:37:24:0b:89:db:0e:0f:32:bb:35:f2:
                    7e:23:44:7c:05:e9:3b:11:79:37:e7:e7:10:13:8d:
                    5b:b3:dd:48:95:fc:10:6e:96:0a:4d:56:51:37:a1:
                    c7:68:6c:15:02:5e:61:df:55:07:bd:5b:a4:df:4e:
                    49:ef:d1:39:1d:42:9b:4d:24:a7:00:c2:bc:bd:8d:
                    72:43:f5:9f:a8:ec:99:75:73:64:c0:de:00:52:62:
                    58:a4:fd:6c:4c:d7:ac:d5:4e:16:90:4d:3c:fe:97:
                    25:5d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                AA:1F:09:5F:34:80:8A:95:B6:18:4D:7F:6E:45:B2:D8:6B:E9:99:7C
            X509v3 Authority Key Identifier:
                keyid:7B:29:BA:F4:81:24:76:76:14:82:CE:1C:3A:92:18:8A:2A:83:34:CE

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repo-rpki.idnic.net/repo/c72f3db4-41e2-4028-908b-5097c9b1c1f5/0/7B29BAF4812476761482CE1C3A92188A2A8334CE.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/7B29BAF4812476761482CE1C3A92188A2A8334CE.cer

            Subject Information Access:
                Signed Object - URI:rsync://repo-rpki.idnic.net/repo/c72f3db4-41e2-4028-908b-5097c9b1c1f5/0/7B29BAF4812476761482CE1C3A92188A2A8334CE.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         1c:2b:10:21:90:f3:54:ee:a5:7d:b5:ff:a9:b9:d2:96:78:ce:
         12:71:f7:f0:00:70:db:ec:9b:0c:71:aa:f5:c2:9c:95:ea:e0:
         e7:a1:2e:70:c5:5e:d8:6d:4a:1a:e5:fe:d6:85:aa:6f:99:fb:
         ef:12:8f:41:6e:74:ad:91:a4:aa:2a:4a:b8:2b:1e:66:b0:ff:
         e4:95:eb:8b:bf:bd:cb:3e:9a:23:01:96:3f:30:9a:e8:a6:e0:
         b7:e3:c7:93:2f:88:8a:c5:04:44:33:91:4d:e7:e5:3c:30:0c:
         88:6f:a1:e4:bf:32:b1:da:f0:1f:88:e1:c7:f1:ba:92:55:cc:
         03:ff:a9:62:f5:96:a9:5f:04:24:10:ef:f7:1a:67:d2:83:10:
         b1:a0:2c:68:9f:81:c1:49:98:79:80:31:9f:1d:39:4d:20:5d:
         51:6d:0f:c7:e2:a0:8a:9c:09:2a:87:8e:14:67:d2:2d:9a:92:
         69:10:ff:a0:7e:a7:7b:ba:7e:37:df:ef:02:46:64:51:e4:a4:
         6a:b7:6a:1a:dd:f4:14:d6:4a:b4:fa:95:43:d7:f3:1a:34:f4:
         bb:49:73:c9:3f:74:f5:fd:ac:19:1b:0e:f5:90:a2:03:71:c7:
         97:fb:4e:57:d1:b2:db:4e:71:2d:20:3e:e9:17:69:c4:4b:df:
         70:08:c9:b2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Dec 19 11:16:59 2025 by rpki-client