This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf repo-rpki.idnic.net/repo/fe716dea-6536-4d6e-b54b-bf7f73cf6b94/0/C2759C8490CBC757371078D2CA604D6FF8EE4C19.mft
File:                     C2759C8490CBC757371078D2CA604D6FF8EE4C19.mft (raw, json)
Hash identifier:          Onl6PiyfISRIAWtkaB9nM9pfocAzyXh8rIJKCEs3jw0=
Subject key identifier:   20:2C:B2:92:52:93:72:48:A9:4B:23:D9:D5:BD:DE:DA:70:BC:FA:05
Authority key identifier: C2:75:9C:84:90:CB:C7:57:37:10:78:D2:CA:60:4D:6F:F8:EE:4C:19
Certificate issuer:       /CN=C2759C8490CBC757371078D2CA604D6FF8EE4C19
Certificate serial:       1BD03CD3FBB4AB455A29CB93180EE49436ABA433
Authority info access:    rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/C2759C8490CBC757371078D2CA604D6FF8EE4C19.cer
Subject info access:      rsync://repo-rpki.idnic.net/repo/fe716dea-6536-4d6e-b54b-bf7f73cf6b94/0/C2759C8490CBC757371078D2CA604D6FF8EE4C19.mft
Manifest number:          70
Signing time:             Tue 02 Dec 2025 03:40:38 +0000
Manifest this update:     Tue 02 Dec 2025 03:35:38 +0000
Manifest next update:     Fri 05 Dec 2025 04:21:38 +0000
Files and hashes:         1: 3130332e3130352e3131352e302f32342d3234203d3e20313431383837.roa (hash: x9Scc7P/cR+uB6pbraj2/Tz5zieFbUeEmVdvJxIQm/A=)
                          2: C2759C8490CBC757371078D2CA604D6FF8EE4C19.crl (hash: p8Nj/BhVNR7sPnOqLK+j9xV43yMQqVLToQergLZI5RQ=)
                          3: 3130332e3130352e3131342e302f32342d3234203d3e20313431383837.roa (hash: GRwDnUc7WyoqAZz3r1fAzJ9AMbu2UxwSXF08hxNvauE=)
Validation:               OK
Signature path:           rsync://repo-rpki.idnic.net/repo/fe716dea-6536-4d6e-b54b-bf7f73cf6b94/0/C2759C8490CBC757371078D2CA604D6FF8EE4C19.crl
                          rsync://repo-rpki.idnic.net/repo/fe716dea-6536-4d6e-b54b-bf7f73cf6b94/0/C2759C8490CBC757371078D2CA604D6FF8EE4C19.mft
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/C2759C8490CBC757371078D2CA604D6FF8EE4C19.cer
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Fri 05 Dec 2025 04:21:38 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            1b:d0:3c:d3:fb:b4:ab:45:5a:29:cb:93:18:0e:e4:94:36:ab:a4:33
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=C2759C8490CBC757371078D2CA604D6FF8EE4C19
        Validity
            Not Before: Dec  2 03:35:38 2025 GMT
            Not After : Dec  5 04:21:38 2025 GMT
        Subject: CN=202CB29252937248A94B23D9D5BDDEDA70BCFA05
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:be:67:88:be:80:06:22:da:bb:5d:d5:0d:52:ad:
                    1d:be:cf:cf:d7:b0:ff:1b:e0:b8:5d:44:e9:ec:41:
                    31:af:d0:75:bb:4c:48:30:4f:b9:df:0e:e6:72:95:
                    0d:1b:53:cf:5f:bb:64:d5:aa:43:03:12:62:82:d8:
                    da:66:f4:ed:ef:18:84:72:44:e6:8b:bf:6c:25:28:
                    c8:56:29:5d:72:71:72:62:03:4a:fa:1d:a8:37:77:
                    6b:77:de:a1:ac:e7:f0:15:12:2f:cf:7f:34:94:80:
                    ef:57:68:76:ab:13:cd:96:68:e3:54:55:32:a3:dd:
                    70:91:1e:38:37:91:04:af:ad:3d:0e:8d:12:60:af:
                    74:db:ae:30:65:e8:a9:74:75:6d:69:be:0c:33:81:
                    ea:a2:a6:22:96:bd:87:bd:ae:bb:07:0e:28:65:73:
                    46:2a:4c:66:12:40:e6:41:af:aa:26:39:22:c2:0d:
                    b2:bf:48:a0:c4:ec:25:ab:cf:74:75:58:a6:30:14:
                    1c:10:43:35:11:4d:18:58:70:9d:31:c9:fb:cf:ae:
                    15:ab:15:62:4f:7b:6e:34:e5:ed:fc:76:9d:11:40:
                    63:ec:b9:69:2f:82:ab:3e:8d:c1:5e:d1:c5:ff:03:
                    c8:63:8d:39:20:a2:00:2c:e6:05:56:23:5d:8b:ff:
                    fd:41
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                20:2C:B2:92:52:93:72:48:A9:4B:23:D9:D5:BD:DE:DA:70:BC:FA:05
            X509v3 Authority Key Identifier:
                keyid:C2:75:9C:84:90:CB:C7:57:37:10:78:D2:CA:60:4D:6F:F8:EE:4C:19

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repo-rpki.idnic.net/repo/fe716dea-6536-4d6e-b54b-bf7f73cf6b94/0/C2759C8490CBC757371078D2CA604D6FF8EE4C19.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/C2759C8490CBC757371078D2CA604D6FF8EE4C19.cer

            Subject Information Access:
                Signed Object - URI:rsync://repo-rpki.idnic.net/repo/fe716dea-6536-4d6e-b54b-bf7f73cf6b94/0/C2759C8490CBC757371078D2CA604D6FF8EE4C19.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         2f:9f:ba:eb:90:b2:45:f9:6a:34:0b:42:ba:fd:ed:5c:ba:03:
         a0:88:87:3e:31:0f:33:61:59:2b:26:3b:57:9f:43:d4:af:35:
         73:d9:d6:40:c7:1e:c2:99:64:97:29:62:61:e8:57:90:75:4a:
         92:ed:ae:17:86:92:b3:2b:f2:8b:91:7f:c8:d3:19:db:47:8b:
         e9:34:53:16:c6:d5:37:35:05:b8:c1:c1:19:b1:f1:f9:d4:b4:
         54:46:aa:1b:ac:53:3c:23:c9:62:ea:4b:6d:00:97:20:e0:11:
         b3:cb:5b:a0:36:e9:16:1e:40:66:39:ca:f1:fa:af:fe:1e:73:
         9e:93:be:d9:e4:2c:94:4e:72:af:d3:9f:68:ac:d0:fa:dd:b9:
         7f:04:a4:f8:5f:1c:22:80:4b:3e:97:ff:d8:11:da:6f:91:39:
         16:0d:f8:0b:17:e6:33:12:a8:b5:e2:4c:e0:14:f0:2b:4b:3f:
         cf:d2:b2:e3:2e:ae:32:f1:fb:25:40:89:42:a0:77:f7:47:64:
         7c:f0:de:7c:7e:a5:4a:bd:47:e3:55:95:9f:fe:63:6f:ea:9e:
         c6:de:cb:1f:83:5c:24:96:85:f7:e2:f7:66:a7:62:8e:6c:66:
         40:fa:de:6f:3b:c9:ca:f6:c9:a7:4a:6a:0d:9c:8d:ec:a4:57:
         af:b0:47:8d
-----BEGIN CERTIFICATE-----
MIIFMjCCBBqgAwIBAgIUG9A80/u0q0VaKcuTGA7klDarpDMwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoQzI3NTlDODQ5MENCQzc1NzM3MTA3OEQyQ0E2MDRENkZG
OEVFNEMxOTAeFw0yNTEyMDIwMzM1MzhaFw0yNTEyMDUwNDIxMzhaMDMxMTAvBgNV
BAMTKDIwMkNCMjkyNTI5MzcyNDhBOTRCMjNEOUQ1QkRERURBNzBCQ0ZBMDUwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC+Z4i+gAYi2rtd1Q1SrR2+z8/X
sP8b4LhdROnsQTGv0HW7TEgwT7nfDuZylQ0bU89fu2TVqkMDEmKC2Npm9O3vGIRy
ROaLv2wlKMhWKV1ycXJiA0r6Hag3d2t33qGs5/AVEi/PfzSUgO9XaHarE82WaONU
VTKj3XCRHjg3kQSvrT0OjRJgr3TbrjBl6Kl0dW1pvgwzgeqipiKWvYe9rrsHDihl
c0YqTGYSQOZBr6omOSLCDbK/SKDE7CWrz3R1WKYwFBwQQzURTRhYcJ0xyfvPrhWr
FWJPe2405e38dp0RQGPsuWkvgqs+jcFe0cX/A8hjjTkgogAs5gVWI12L//1BAgMB
AAGjggI8MIICODAdBgNVHQ4EFgQUICyyklKTckipSyPZ1b3e2nC8+gUwHwYDVR0j
BBgwFoAUwnWchJDLx1c3EHjSymBNb/juTBkwDgYDVR0PAQH/BAQDAgeAMIGFBgNV
HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby9m
ZTcxNmRlYS02NTM2LTRkNmUtYjU0Yi1iZjdmNzNjZjZiOTQvMC9DMjc1OUM4NDkw
Q0JDNzU3MzcxMDc4RDJDQTYwNEQ2RkY4RUU0QzE5LmNybDB0BggrBgEFBQcBAQRo
MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv
L0lETklDLUlELzIvQzI3NTlDODQ5MENCQzc1NzM3MTA3OEQyQ0E2MDRENkZGOEVF
NEMxOS5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6
Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vZmU3MTZkZWEtNjUzNi00ZDZlLWI1
NGItYmY3ZjczY2Y2Yjk0LzAvQzI3NTlDODQ5MENCQzc1NzM3MTA3OEQyQ0E2MDRE
NkZGOEVFNEMxOS5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF
BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC
BQAwDQYJKoZIhvcNAQELBQADggEBAC+fuuuQskX5ajQLQrr97Vy6A6CIhz4xDzNh
WSsmO1efQ9SvNXPZ1kDHHsKZZJcpYmHoV5B1SpLtrheGkrMr8ouRf8jTGdtHi+k0
UxbG1Tc1BbjBwRmx8fnUtFRGqhusUzwjyWLqS20AlyDgEbPLW6A26RYeQGY5yvH6
r/4ec56TvtnkLJROcq/Tn2is0PrduX8EpPhfHCKASz6X/9gR2m+RORYN+AsX5jMS
qLXiTOAU8CtLP8/SsuMurjLx+yVAiUKgd/dHZHzw3nx+pUq9R+NVlZ/+Y2/qnsbe
yx+DXCSWhffi92anYo5sZkD63m87ycr2yadKag2cjeykV6+wR40=
-----END CERTIFICATE-----
Generated at Wed Dec 3 14:43:36 2025 by rpki-client