This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf repo-rpki.idnic.net/repo/6cbea81d-85ac-40a5-a7f5-3fa362b17bcb/0/73B96F5AC43A4212760D6629FB36B21B2E801D90.mft
File:                     73B96F5AC43A4212760D6629FB36B21B2E801D90.mft (raw, json)
Hash identifier:          uM+60StqbsCS5xRdDkD/NFPdvMgzDuPaMdJcgbrNN1I=
Subject key identifier:   2C:AB:FA:CD:4E:8A:8B:84:A5:F0:3D:76:6A:EA:E0:7F:17:CC:A3:26
Authority key identifier: 73:B9:6F:5A:C4:3A:42:12:76:0D:66:29:FB:36:B2:1B:2E:80:1D:90
Certificate issuer:       /CN=73B96F5AC43A4212760D6629FB36B21B2E801D90
Certificate serial:       7EEBC28D91A7A79E3369420AFFD05D9212BCE961
Authority info access:    rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/73B96F5AC43A4212760D6629FB36B21B2E801D90.cer
Subject info access:      rsync://repo-rpki.idnic.net/repo/6cbea81d-85ac-40a5-a7f5-3fa362b17bcb/0/73B96F5AC43A4212760D6629FB36B21B2E801D90.mft
Manifest number:          0311
Signing time:             Mon 01 Dec 2025 08:51:46 +0000
Manifest this update:     Mon 01 Dec 2025 08:46:46 +0000
Manifest next update:     Thu 04 Dec 2025 19:45:46 +0000
Files and hashes:         1: 73B96F5AC43A4212760D6629FB36B21B2E801D90.crl (hash: 01Wn6xf7yMsDvMBFn8C82uAAC8Yg12NcTVnPI8EbCvI=)
                          2: 3130332e3137342e3233322e302f32332d3234203d3e20313437313035.roa (hash: oudTGBDalRCfCvgYs+K0jORqoSv3XWEHAn8WI/m8myE=)
Validation:               OK
Signature path:           rsync://repo-rpki.idnic.net/repo/6cbea81d-85ac-40a5-a7f5-3fa362b17bcb/0/73B96F5AC43A4212760D6629FB36B21B2E801D90.crl
                          rsync://repo-rpki.idnic.net/repo/6cbea81d-85ac-40a5-a7f5-3fa362b17bcb/0/73B96F5AC43A4212760D6629FB36B21B2E801D90.mft
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/73B96F5AC43A4212760D6629FB36B21B2E801D90.cer
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Thu 04 Dec 2025 19:45:46 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            7e:eb:c2:8d:91:a7:a7:9e:33:69:42:0a:ff:d0:5d:92:12:bc:e9:61
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=73B96F5AC43A4212760D6629FB36B21B2E801D90
        Validity
            Not Before: Dec  1 08:46:46 2025 GMT
            Not After : Dec  4 19:45:46 2025 GMT
        Subject: CN=2CABFACD4E8A8B84A5F03D766AEAE07F17CCA326
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d5:a6:0d:b7:68:e1:41:d7:80:02:3c:0e:e6:4a:
                    68:c0:c2:29:74:76:ac:28:32:e0:d6:b7:3a:a6:30:
                    c3:89:52:07:77:0a:37:f0:43:f1:0d:bf:00:49:35:
                    f0:0a:73:b3:a5:15:34:1d:bf:5d:40:69:77:59:d9:
                    a1:fd:77:7e:c6:aa:14:78:da:8a:ac:eb:5c:b6:58:
                    13:60:2b:6c:a6:cf:fb:8d:66:21:cd:9a:47:4f:df:
                    13:e7:30:82:63:15:55:73:b4:e4:56:00:34:e7:5a:
                    57:07:e5:f9:7c:5d:af:8a:08:7d:52:08:22:88:3c:
                    37:29:35:e3:9e:23:6d:05:f0:06:55:12:8d:a3:46:
                    80:d9:85:cf:c9:38:5a:73:e2:85:d8:ab:ae:f5:89:
                    61:40:3b:b8:4c:90:27:13:1d:ab:6b:7e:bf:2f:ce:
                    af:c5:ee:05:2f:2b:a8:c0:44:e5:5d:8a:8d:2a:8b:
                    85:7d:f9:ea:bf:23:1c:c0:fa:4b:e9:e6:cd:7b:11:
                    f5:ec:9e:dc:0c:03:19:f8:44:60:f1:3d:16:35:fd:
                    ee:5e:1b:ab:64:2c:73:2a:7c:31:e7:c7:58:77:4b:
                    a2:0d:f8:7f:44:d6:82:35:40:d6:5a:d6:55:b7:0d:
                    03:10:96:a9:f1:cd:8f:0a:67:7e:ba:06:8a:1b:d9:
                    71:23
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                2C:AB:FA:CD:4E:8A:8B:84:A5:F0:3D:76:6A:EA:E0:7F:17:CC:A3:26
            X509v3 Authority Key Identifier:
                keyid:73:B9:6F:5A:C4:3A:42:12:76:0D:66:29:FB:36:B2:1B:2E:80:1D:90

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repo-rpki.idnic.net/repo/6cbea81d-85ac-40a5-a7f5-3fa362b17bcb/0/73B96F5AC43A4212760D6629FB36B21B2E801D90.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/73B96F5AC43A4212760D6629FB36B21B2E801D90.cer

            Subject Information Access:
                Signed Object - URI:rsync://repo-rpki.idnic.net/repo/6cbea81d-85ac-40a5-a7f5-3fa362b17bcb/0/73B96F5AC43A4212760D6629FB36B21B2E801D90.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         55:c9:54:82:b2:58:a6:15:e8:7d:0c:10:31:51:8e:95:55:93:
         60:0e:b5:19:66:77:8e:f7:64:6e:e8:17:3c:0b:26:c0:60:8b:
         10:e2:d9:38:37:d6:68:9f:10:47:2a:42:a8:e7:a0:12:4d:59:
         c0:1a:f0:a5:e2:a8:91:38:8a:2d:02:46:85:07:04:52:ee:4c:
         5d:03:83:85:7f:81:6d:88:f4:f3:7c:a5:0d:ec:d8:4e:fe:cc:
         38:82:a0:1e:5e:c1:65:18:fe:2d:4c:a0:46:65:72:bc:3d:34:
         97:03:3d:15:b6:79:7d:e7:d7:46:45:9b:77:5a:6b:10:e7:3f:
         4c:89:c4:57:d1:19:d4:2a:72:98:7f:77:0b:73:01:cd:4f:c1:
         fe:11:a0:66:4b:56:5f:83:71:06:af:c0:46:65:d5:27:61:03:
         0c:7b:de:61:41:97:f1:ee:83:64:9d:50:4d:f4:42:46:9c:a7:
         dd:89:8b:ba:88:98:7d:4c:de:c9:cf:81:ff:63:1d:46:4e:3e:
         f7:5b:ee:68:04:8d:41:a9:f8:0a:a6:52:8d:85:c0:7e:2a:0c:
         62:1f:53:2f:65:f4:9f:b2:1f:ab:32:2e:73:67:a1:88:88:b5:
         dc:40:fc:4d:ab:e7:ad:ad:e1:3b:85:18:d8:7b:8d:ee:73:9b:
         31:81:59:e1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Dec 3 14:43:39 2025 by rpki-client