This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf repo-rpki.idnic.net/repo/e2e96bf3-d021-4d84-90d5-c24558aa495f/0/29BE771FE6D788CA509E787787F218ADFB43DDB2.mft
File:                     29BE771FE6D788CA509E787787F218ADFB43DDB2.mft (raw, json)
Hash identifier:          rlor8vhs7lhk1rmE7ewl5trDJBoliiDJyc+5jeUlODY=
Subject key identifier:   40:C1:7C:C7:A2:C1:C5:56:95:AF:02:DE:01:CC:B1:5C:D0:D5:E9:F7
Authority key identifier: 29:BE:77:1F:E6:D7:88:CA:50:9E:78:77:87:F2:18:AD:FB:43:DD:B2
Certificate issuer:       /CN=29BE771FE6D788CA509E787787F218ADFB43DDB2
Certificate serial:       2751EB4A1647229618F742F46ED526CE96F5CD1D
Authority info access:    rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/29BE771FE6D788CA509E787787F218ADFB43DDB2.cer
Subject info access:      rsync://repo-rpki.idnic.net/repo/e2e96bf3-d021-4d84-90d5-c24558aa495f/0/29BE771FE6D788CA509E787787F218ADFB43DDB2.mft
Manifest number:          7C
Signing time:             Sat 31 Jan 2026 14:21:03 +0000
Manifest this update:     Sat 31 Jan 2026 14:16:03 +0000
Manifest next update:     Tue 03 Feb 2026 19:33:03 +0000
Files and hashes:         1: 29BE771FE6D788CA509E787787F218ADFB43DDB2.crl (hash: GiaSKGlQ9Cl5jBGb0ybFpldGR+MPhJychakCmfO9CVQ=)
Validation:               OK
Signature path:           rsync://repo-rpki.idnic.net/repo/e2e96bf3-d021-4d84-90d5-c24558aa495f/0/29BE771FE6D788CA509E787787F218ADFB43DDB2.crl
                          rsync://repo-rpki.idnic.net/repo/e2e96bf3-d021-4d84-90d5-c24558aa495f/0/29BE771FE6D788CA509E787787F218ADFB43DDB2.mft
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/29BE771FE6D788CA509E787787F218ADFB43DDB2.cer
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Tue 03 Feb 2026 19:33:03 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            27:51:eb:4a:16:47:22:96:18:f7:42:f4:6e:d5:26:ce:96:f5:cd:1d
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=29BE771FE6D788CA509E787787F218ADFB43DDB2
        Validity
            Not Before: Jan 31 14:16:03 2026 GMT
            Not After : Feb  3 19:33:03 2026 GMT
        Subject: CN=40C17CC7A2C1C55695AF02DE01CCB15CD0D5E9F7
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b6:fa:55:fb:67:f5:4e:6b:7b:0e:d9:62:9d:c6:
                    01:d6:8a:62:3d:be:34:64:d2:ff:6b:7d:77:62:b9:
                    bf:39:af:69:6c:d9:8a:9f:f4:6d:75:9a:b4:26:8d:
                    2e:07:fb:f2:a8:f9:21:c7:2e:67:1d:44:1f:30:e6:
                    d9:c6:43:8e:9c:89:ff:ba:2f:c0:27:e4:5d:8e:31:
                    4e:d2:fc:98:81:37:44:d8:2e:a2:98:be:30:4b:a9:
                    24:73:86:49:5c:83:19:78:d5:93:79:7b:2c:d8:f3:
                    0c:ca:e2:90:de:94:b8:1d:1a:84:69:67:75:bf:76:
                    03:87:fb:08:51:5c:e0:48:f2:a2:fe:55:70:fa:ff:
                    71:af:0f:ce:43:75:ce:33:98:a8:8b:3d:35:09:2d:
                    e4:63:10:9e:20:c5:c4:d8:42:10:fb:23:73:e4:d7:
                    05:52:3b:d9:47:20:4a:97:f6:26:cd:2d:95:e3:c2:
                    f5:a7:ad:fc:bb:de:91:fc:ad:72:82:85:f5:75:fa:
                    52:72:54:f8:e2:7b:6e:94:c7:31:b8:4d:20:68:ee:
                    7d:03:d8:bd:dd:b5:d6:df:49:c6:97:45:89:b7:27:
                    a6:e1:bc:4f:4b:3d:7b:ff:5f:99:37:db:cc:71:07:
                    d6:2e:a9:25:c7:47:24:37:b9:44:a9:bb:3b:cc:9f:
                    ae:e5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                40:C1:7C:C7:A2:C1:C5:56:95:AF:02:DE:01:CC:B1:5C:D0:D5:E9:F7
            X509v3 Authority Key Identifier:
                keyid:29:BE:77:1F:E6:D7:88:CA:50:9E:78:77:87:F2:18:AD:FB:43:DD:B2

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repo-rpki.idnic.net/repo/e2e96bf3-d021-4d84-90d5-c24558aa495f/0/29BE771FE6D788CA509E787787F218ADFB43DDB2.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/29BE771FE6D788CA509E787787F218ADFB43DDB2.cer

            Subject Information Access:
                Signed Object - URI:rsync://repo-rpki.idnic.net/repo/e2e96bf3-d021-4d84-90d5-c24558aa495f/0/29BE771FE6D788CA509E787787F218ADFB43DDB2.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         12:79:09:25:a7:76:9e:65:82:d9:05:b3:37:de:c8:eb:26:13:
         4d:c7:3c:88:30:d8:7e:be:76:9d:b3:74:c6:c8:67:57:4a:28:
         d9:0c:a8:c9:c2:bd:ec:15:e2:3c:d6:35:cd:35:61:25:bc:75:
         c1:94:97:74:a0:f4:56:f2:32:4d:e7:ce:69:8b:ad:c6:8b:03:
         87:59:e6:95:b2:50:06:37:25:cd:b1:9e:ab:ea:96:5c:b8:ba:
         54:c3:ec:90:c4:af:c9:25:d1:54:20:0d:3b:b5:cc:d5:d8:9d:
         fa:20:c1:9e:59:73:20:db:15:45:55:00:77:f5:51:ae:31:9c:
         c1:84:ab:15:2e:c1:0d:b8:4c:b1:ec:05:34:d6:43:fc:2a:59:
         39:01:7e:19:1a:89:6f:8a:7b:53:b7:1a:c6:3f:ce:d1:02:0f:
         a6:6e:86:0e:97:d9:5e:e0:e9:7c:b4:56:4c:dd:73:ce:8e:c7:
         6f:f4:9f:da:21:2e:73:e0:e0:0c:d8:6e:3d:66:7b:df:5e:fd:
         97:33:78:20:c3:41:18:ca:17:6f:bc:7a:4d:3d:7b:e1:28:ca:
         09:f3:d2:ce:56:bc:7a:04:25:d5:f1:36:68:f6:fb:3d:67:da:
         91:90:8d:a5:c1:d3:06:41:54:ee:db:63:72:99:7a:46:40:61:
         46:3a:b3:fa
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Feb 2 09:43:07 2026 by rpki-client