This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf repo-rpki.idnic.net/repo/fe716dea-6536-4d6e-b54b-bf7f73cf6b94/0/C2759C8490CBC757371078D2CA604D6FF8EE4C19.mft File: C2759C8490CBC757371078D2CA604D6FF8EE4C19.mft (raw, json) Hash identifier: ItMk3FabVrHtg2pmAYLrnpKk9feWQO1ea/+5BEBUpps= Subject key identifier: 9D:D9:12:86:8E:0F:FB:3B:DC:22:52:99:E5:74:9F:79:92:13:E3:77 Authority key identifier: C2:75:9C:84:90:CB:C7:57:37:10:78:D2:CA:60:4D:6F:F8:EE:4C:19 Certificate issuer: /CN=C2759C8490CBC757371078D2CA604D6FF8EE4C19 Certificate serial: 39593F0B39EC33CC7CDEA5BF5A407876896E767F Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/C2759C8490CBC757371078D2CA604D6FF8EE4C19.cer Subject info access: rsync://repo-rpki.idnic.net/repo/fe716dea-6536-4d6e-b54b-bf7f73cf6b94/0/C2759C8490CBC757371078D2CA604D6FF8EE4C19.mft Manifest number: 72 Signing time: Sat 06 Dec 2025 13:30:39 +0000 Manifest this update: Sat 06 Dec 2025 13:25:39 +0000 Manifest next update: Tue 09 Dec 2025 14:29:39 +0000 Files and hashes: 1: 3130332e3130352e3131342e302f32342d3234203d3e20313431383837.roa (hash: GRwDnUc7WyoqAZz3r1fAzJ9AMbu2UxwSXF08hxNvauE=) 2: C2759C8490CBC757371078D2CA604D6FF8EE4C19.crl (hash: hcswRN17g9V2g0SCgPPLbSGVFjt3M9j6jxuwd7A65K0=) 3: 3130332e3130352e3131352e302f32342d3234203d3e20313431383837.roa (hash: x9Scc7P/cR+uB6pbraj2/Tz5zieFbUeEmVdvJxIQm/A=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/fe716dea-6536-4d6e-b54b-bf7f73cf6b94/0/C2759C8490CBC757371078D2CA604D6FF8EE4C19.crl rsync://repo-rpki.idnic.net/repo/fe716dea-6536-4d6e-b54b-bf7f73cf6b94/0/C2759C8490CBC757371078D2CA604D6FF8EE4C19.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/C2759C8490CBC757371078D2CA604D6FF8EE4C19.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 09 Dec 2025 14:29:39 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 39:59:3f:0b:39:ec:33:cc:7c:de:a5:bf:5a:40:78:76:89:6e:76:7f Signature Algorithm: sha256WithRSAEncryption Issuer: CN=C2759C8490CBC757371078D2CA604D6FF8EE4C19 Validity Not Before: Dec 6 13:25:39 2025 GMT Not After : Dec 9 14:29:39 2025 GMT Subject: CN=9DD912868E0FFB3BDC225299E5749F799213E377 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ab:f4:dc:8c:3f:2e:da:9a:37:6e:e0:4a:dd:35: 6a:0f:7b:fd:76:7e:ce:da:46:8a:87:be:05:bb:aa: 2c:dc:fd:9a:bc:9d:d7:fb:eb:f8:b8:6c:ef:4c:cf: ba:7a:c5:92:39:3e:9f:55:7c:5c:64:b1:ec:3a:21: 38:9f:8a:19:a7:30:18:a1:ac:6a:6a:d4:6f:a3:f8: f1:03:0c:e7:b4:be:12:f5:05:cd:1b:2d:16:ef:ee: 7b:de:5b:f2:25:9e:e8:34:ea:ca:44:f2:ff:e9:68: 8c:88:bb:4c:44:85:72:38:da:43:61:e3:c2:83:ce: 74:80:83:28:b1:f0:b8:b5:33:2d:02:88:59:84:03: f4:2d:a3:d5:4f:0e:cb:36:5a:9c:2f:06:32:ff:17: a8:da:d0:e6:b2:4f:cf:01:cb:c4:42:2b:b0:0d:30: e7:13:d3:8c:60:44:45:a7:ca:88:b5:39:c8:f7:4a: 5f:9a:ca:a1:9b:e8:6a:cf:d6:42:0f:90:4b:1a:cd: 2c:e4:e8:a3:ce:f9:2c:3f:cc:e9:53:ea:f4:4e:ad: 48:10:88:7d:18:3e:1a:98:b4:b7:42:23:b6:44:22: c8:1f:31:3d:9d:de:bf:14:18:0c:d3:fe:be:e3:23: 71:a4:a4:6a:e3:6d:5d:44:48:8c:ac:47:e5:17:5e: 0b:d7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 9D:D9:12:86:8E:0F:FB:3B:DC:22:52:99:E5:74:9F:79:92:13:E3:77 X509v3 Authority Key Identifier: keyid:C2:75:9C:84:90:CB:C7:57:37:10:78:D2:CA:60:4D:6F:F8:EE:4C:19 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/fe716dea-6536-4d6e-b54b-bf7f73cf6b94/0/C2759C8490CBC757371078D2CA604D6FF8EE4C19.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/C2759C8490CBC757371078D2CA604D6FF8EE4C19.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/fe716dea-6536-4d6e-b54b-bf7f73cf6b94/0/C2759C8490CBC757371078D2CA604D6FF8EE4C19.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 4c:33:42:bf:54:43:92:d0:d3:b9:e1:c0:ae:f8:a2:60:7d:7a: 82:13:81:80:65:f1:9d:e8:41:81:07:ae:6e:88:1d:e8:5d:d1: 07:d1:3a:63:8c:a3:e6:d0:4e:1c:48:ed:f5:52:58:21:3d:f2: d2:71:1b:b9:8f:38:a7:ec:96:5b:d3:31:17:54:7a:9e:2d:be: 2e:e2:cd:56:61:8c:d4:11:15:93:48:37:44:8f:7c:60:59:03: 5c:65:2b:71:23:2f:76:ad:77:81:03:ec:ee:50:dc:0c:b6:3f: 9b:80:87:2d:55:ba:7b:de:e3:c9:d0:39:de:c8:57:29:a1:25: 9e:9a:9e:16:37:ab:86:e0:6c:96:e5:a0:f0:a5:b4:d8:69:68: 60:d2:94:13:66:d6:73:71:c2:f7:6d:b9:f4:83:bd:a6:48:f6: 86:ad:8b:bc:15:36:af:70:58:c5:e1:0d:4d:15:c9:52:6b:ec: 53:92:33:02:eb:a4:5d:21:a4:b0:83:d2:e8:1e:85:59:9e:0a: eb:c4:26:ac:70:56:6d:e8:e4:d8:ac:d4:a8:4b:a3:cb:41:30: 8a:ab:e4:8f:a0:4a:b1:8b:ec:36:d4:59:a6:2e:f8:6c:20:9d: b6:85:99:4d:30:4f:a4:3f:37:9e:bf:e6:39:5e:95:3d:95:45: ce:ed:25:4b -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUOVk/CznsM8x83qW/WkB4doludn8wDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoQzI3NTlDODQ5MENCQzc1NzM3MTA3OEQyQ0E2MDRENkZG OEVFNEMxOTAeFw0yNTEyMDYxMzI1MzlaFw0yNTEyMDkxNDI5MzlaMDMxMTAvBgNV BAMTKDlERDkxMjg2OEUwRkZCM0JEQzIyNTI5OUU1NzQ5Rjc5OTIxM0UzNzcwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCr9NyMPy7amjdu4ErdNWoPe/12 fs7aRoqHvgW7qizc/Zq8ndf76/i4bO9Mz7p6xZI5Pp9VfFxksew6ITifihmnMBih rGpq1G+j+PEDDOe0vhL1Bc0bLRbv7nveW/Ilnug06spE8v/paIyIu0xEhXI42kNh 48KDznSAgyix8Li1My0CiFmEA/Qto9VPDss2WpwvBjL/F6ja0OayT88By8RCK7AN MOcT04xgREWnyoi1Ocj3Sl+ayqGb6GrP1kIPkEsazSzk6KPO+Sw/zOlT6vROrUgQ iH0YPhqYtLdCI7ZEIsgfMT2d3r8UGAzT/r7jI3GkpGrjbV1ESIysR+UXXgvXAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUndkSho4P+zvcIlKZ5XSfeZIT43cwHwYDVR0j BBgwFoAUwnWchJDLx1c3EHjSymBNb/juTBkwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby9m ZTcxNmRlYS02NTM2LTRkNmUtYjU0Yi1iZjdmNzNjZjZiOTQvMC9DMjc1OUM4NDkw Q0JDNzU3MzcxMDc4RDJDQTYwNEQ2RkY4RUU0QzE5LmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvQzI3NTlDODQ5MENCQzc1NzM3MTA3OEQyQ0E2MDRENkZGOEVF NEMxOS5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vZmU3MTZkZWEtNjUzNi00ZDZlLWI1 NGItYmY3ZjczY2Y2Yjk0LzAvQzI3NTlDODQ5MENCQzc1NzM3MTA3OEQyQ0E2MDRE NkZGOEVFNEMxOS5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAEwzQr9UQ5LQ07nhwK74omB9eoITgYBl8Z3o QYEHrm6IHehd0QfROmOMo+bQThxI7fVSWCE98tJxG7mPOKfsllvTMRdUep4tvi7i zVZhjNQRFZNIN0SPfGBZA1xlK3EjL3atd4ED7O5Q3Ay2P5uAhy1Vunve48nQOd7I VymhJZ6anhY3q4bgbJbloPCltNhpaGDSlBNm1nNxwvdtufSDvaZI9oati7wVNq9w WMXhDU0VyVJr7FOSMwLrpF0hpLCD0ugehVmeCuvEJqxwVm3o5Nis1KhLo8tBMIqr 5I+gSrGL7DbUWaYu+GwgnbaFmU0wT6Q/N56/5jlelT2VRc7tJUs= -----END CERTIFICATE-----Generated at Sun Dec 7 04:13:39 2025 by rpki-client