This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf repo-rpki.idnic.net/repo/c72f3db4-41e2-4028-908b-5097c9b1c1f5/0/7B29BAF4812476761482CE1C3A92188A2A8334CE.mft File: 7B29BAF4812476761482CE1C3A92188A2A8334CE.mft (raw, json) Hash identifier: pI8743mBtG7jQ4L+EcTxvc9GjBAb/eUHZCxcOOHlEIc= Subject key identifier: 3F:CC:F2:E3:03:0B:88:42:4D:6A:FD:93:DE:74:F3:35:11:F5:2E:51 Authority key identifier: 7B:29:BA:F4:81:24:76:76:14:82:CE:1C:3A:92:18:8A:2A:83:34:CE Certificate issuer: /CN=7B29BAF4812476761482CE1C3A92188A2A8334CE Certificate serial: 317B708B163AA99C2225C73DAFE4BF4BF33D4843 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/7B29BAF4812476761482CE1C3A92188A2A8334CE.cer Subject info access: rsync://repo-rpki.idnic.net/repo/c72f3db4-41e2-4028-908b-5097c9b1c1f5/0/7B29BAF4812476761482CE1C3A92188A2A8334CE.mft Manifest number: 02B9 Signing time: Tue 02 Dec 2025 01:40:50 +0000 Manifest this update: Tue 02 Dec 2025 01:35:50 +0000 Manifest next update: Fri 05 Dec 2025 04:20:50 +0000 Files and hashes: 1: 7B29BAF4812476761482CE1C3A92188A2A8334CE.crl (hash: jJ0MM3pDByGDSN7ljd+9yYILimTw3J9zW44PEAoobyA=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/c72f3db4-41e2-4028-908b-5097c9b1c1f5/0/7B29BAF4812476761482CE1C3A92188A2A8334CE.crl rsync://repo-rpki.idnic.net/repo/c72f3db4-41e2-4028-908b-5097c9b1c1f5/0/7B29BAF4812476761482CE1C3A92188A2A8334CE.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/7B29BAF4812476761482CE1C3A92188A2A8334CE.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 05 Dec 2025 04:20:50 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 31:7b:70:8b:16:3a:a9:9c:22:25:c7:3d:af:e4:bf:4b:f3:3d:48:43 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=7B29BAF4812476761482CE1C3A92188A2A8334CE Validity Not Before: Dec 2 01:35:50 2025 GMT Not After : Dec 5 04:20:50 2025 GMT Subject: CN=3FCCF2E3030B88424D6AFD93DE74F33511F52E51 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c0:63:07:8d:bc:81:03:af:43:22:ab:56:55:77: 57:af:cc:eb:af:33:51:55:e4:72:77:c5:88:08:31: c9:23:1c:76:ab:d4:16:9a:19:02:1d:9a:ad:0e:81: 3f:e7:c2:69:22:aa:7e:ae:17:be:ed:de:4d:bb:2e: 51:b0:fa:b9:c2:d5:8f:14:9d:77:55:a2:f2:d6:5f: 6e:a5:ff:0a:09:31:40:af:33:b1:1b:d0:ce:ee:70: c1:73:54:1a:33:ed:f8:58:b7:6b:6c:dd:e8:53:67: b6:76:ce:27:7c:19:98:fe:2f:d5:51:ce:a5:8c:b1: e4:0d:4a:b9:2b:44:c9:51:62:7c:a7:04:10:6a:89: 8f:f7:fb:b3:b0:3d:31:2d:4f:1b:53:a0:ea:53:a7: c0:eb:a6:41:f3:22:96:92:1f:ec:04:88:aa:49:6f: 30:fe:a2:bb:ab:ea:27:36:dc:ce:db:ac:4f:2b:6b: da:58:e2:eb:03:f8:58:11:06:3a:2d:e3:fa:31:02: 39:ca:68:6d:f3:87:3d:85:f4:ed:52:ff:b5:8c:51: 2e:b9:3a:3e:aa:f7:99:4c:6b:a3:e4:f8:e5:87:13: 3b:fb:ef:f7:8d:a7:e0:43:24:e8:45:f0:aa:b0:4a: 28:88:85:05:16:28:dc:4e:9a:ed:ce:f3:95:08:33: 5b:ab Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 3F:CC:F2:E3:03:0B:88:42:4D:6A:FD:93:DE:74:F3:35:11:F5:2E:51 X509v3 Authority Key Identifier: keyid:7B:29:BA:F4:81:24:76:76:14:82:CE:1C:3A:92:18:8A:2A:83:34:CE X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/c72f3db4-41e2-4028-908b-5097c9b1c1f5/0/7B29BAF4812476761482CE1C3A92188A2A8334CE.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/7B29BAF4812476761482CE1C3A92188A2A8334CE.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/c72f3db4-41e2-4028-908b-5097c9b1c1f5/0/7B29BAF4812476761482CE1C3A92188A2A8334CE.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 2c:56:bf:fb:40:2a:00:4f:08:75:f1:da:ce:29:c8:6f:db:8f: 77:f2:24:85:00:cb:47:1f:c4:a9:ef:7e:55:33:94:df:68:77: 28:8f:2a:34:dc:26:9e:bc:e2:2d:ff:5b:48:c9:00:cb:91:6e: 7c:15:cc:63:a7:79:10:38:1e:6b:b8:05:05:b3:18:84:d5:9a: 9a:a9:22:a8:7c:6c:b7:9a:b6:aa:97:94:36:fd:47:26:a5:90: 91:d2:a2:00:08:c2:10:6c:ee:af:22:6c:1f:ad:5d:2b:49:8b: 5d:3c:21:53:11:25:34:ca:41:e8:a5:da:a9:62:3c:89:1a:cc: 47:3c:c3:ef:67:c6:1f:18:31:9d:da:38:36:2f:a5:c2:26:07: fc:3b:8d:67:4e:d9:c6:56:6d:c4:de:07:71:3c:4c:80:73:09: 9b:17:07:b5:ba:ab:0b:c0:72:0d:c2:ba:38:7b:9a:62:12:15: 53:b9:b0:fd:62:af:f5:db:6a:bd:32:26:6d:06:3f:d4:f2:04: e8:9f:aa:42:05:21:cd:ec:d0:9b:b2:67:a2:58:3b:cc:6d:ec: af:05:7b:ae:31:aa:cf:b7:b9:19:df:fc:12:36:b5:cd:ca:17: cf:0d:2d:84:a1:be:dc:9a:5a:b7:c2:9f:7c:57:68:3b:b9:b1: c0:72:75:18 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUMXtwixY6qZwiJcc9r+S/S/M9SEMwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoN0IyOUJBRjQ4MTI0NzY3NjE0ODJDRTFDM0E5MjE4OEEy QTgzMzRDRTAeFw0yNTEyMDIwMTM1NTBaFw0yNTEyMDUwNDIwNTBaMDMxMTAvBgNV BAMTKDNGQ0NGMkUzMDMwQjg4NDI0RDZBRkQ5M0RFNzRGMzM1MTFGNTJFNTEwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDAYweNvIEDr0Miq1ZVd1evzOuv M1FV5HJ3xYgIMckjHHar1BaaGQIdmq0OgT/nwmkiqn6uF77t3k27LlGw+rnC1Y8U nXdVovLWX26l/woJMUCvM7Eb0M7ucMFzVBoz7fhYt2ts3ehTZ7Z2zid8GZj+L9VR zqWMseQNSrkrRMlRYnynBBBqiY/3+7OwPTEtTxtToOpTp8DrpkHzIpaSH+wEiKpJ bzD+orur6ic23M7brE8ra9pY4usD+FgRBjot4/oxAjnKaG3zhz2F9O1S/7WMUS65 Oj6q95lMa6Pk+OWHEzv77/eNp+BDJOhF8KqwSiiIhQUWKNxOmu3O85UIM1urAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUP8zy4wMLiEJNav2T3nTzNRH1LlEwHwYDVR0j BBgwFoAUeym69IEkdnYUgs4cOpIYiiqDNM4wDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby9j NzJmM2RiNC00MWUyLTQwMjgtOTA4Yi01MDk3YzliMWMxZjUvMC83QjI5QkFGNDgx MjQ3Njc2MTQ4MkNFMUMzQTkyMTg4QTJBODMzNENFLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvN0IyOUJBRjQ4MTI0NzY3NjE0ODJDRTFDM0E5MjE4OEEyQTgz MzRDRS5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vYzcyZjNkYjQtNDFlMi00MDI4LTkw OGItNTA5N2M5YjFjMWY1LzAvN0IyOUJBRjQ4MTI0NzY3NjE0ODJDRTFDM0E5MjE4 OEEyQTgzMzRDRS5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBACxWv/tAKgBPCHXx2s4pyG/bj3fyJIUAy0cf xKnvflUzlN9odyiPKjTcJp684i3/W0jJAMuRbnwVzGOneRA4Hmu4BQWzGITVmpqp Iqh8bLeatqqXlDb9RyalkJHSogAIwhBs7q8ibB+tXStJi108IVMRJTTKQeil2qli PIkazEc8w+9nxh8YMZ3aODYvpcImB/w7jWdO2cZWbcTeB3E8TIBzCZsXB7W6qwvA cg3Cujh7mmISFVO5sP1ir/Xbar0yJm0GP9TyBOifqkIFIc3s0JuyZ6JYO8xt7K8F e64xqs+3uRnf/BI2tc3KF88NLYShvtyaWrfCn3xXaDu5scBydRg= -----END CERTIFICATE-----Generated at Wed Dec 3 14:42:38 2025 by rpki-client