Manifest
$ rpki-client -vvf repo-rpki.idnic.net/repo/097f5161-070f-4339-af4e-bc33fdfb67b8/0/14CF99DEFA1B9276EBEE61180DF4770177957E3B.mft
File: 14CF99DEFA1B9276EBEE61180DF4770177957E3B.mft (raw, json)
Hash identifier: AQfK/Yp2CJHS3YQQprAiMufZ3tvFe5r22GLiS2r8LDU=
Subject key identifier: FA:E0:80:7B:94:96:55:F1:87:76:D7:E2:02:5C:D9:69:1F:F7:D3:7D
Authority key identifier: 14:CF:99:DE:FA:1B:92:76:EB:EE:61:18:0D:F4:77:01:77:95:7E:3B
Certificate issuer: /CN=14CF99DEFA1B9276EBEE61180DF4770177957E3B
Certificate serial: 4AF70B77A688590235EAF270F786B698BFC51E4D
Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/14CF99DEFA1B9276EBEE61180DF4770177957E3B.cer
Subject info access: rsync://repo-rpki.idnic.net/repo/097f5161-070f-4339-af4e-bc33fdfb67b8/0/14CF99DEFA1B9276EBEE61180DF4770177957E3B.mft
Manifest number: 010B
Signing time: Mon 27 Apr 2026 16:31:12 +0000
Manifest this update: Mon 27 Apr 2026 16:26:12 +0000
Manifest next update: Thu 30 Apr 2026 18:49:12 +0000
Files and hashes: 1: 14CF99DEFA1B9276EBEE61180DF4770177957E3B.crl (hash: dmzoQJzyFa1c5JaWE3QO5AEhzG/RchEDjpPhuX/igpI=)
2: 3230322e34372e3137352e302f32342d3234203d3e20313532303333.roa (hash: XksCWCwCEfjKtaahou1lG189rxAz7b8EI9jL1IweY6M=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
4a:f7:0b:77:a6:88:59:02:35:ea:f2:70:f7:86:b6:98:bf:c5:1e:4d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=14CF99DEFA1B9276EBEE61180DF4770177957E3B
Validity
Not Before: Apr 27 16:26:12 2026 GMT
Not After : Apr 30 18:49:12 2026 GMT
Subject: CN=FAE0807B949655F18776D7E2025CD9691FF7D37D
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d5:88:7d:ee:79:27:61:52:27:48:45:e2:d0:66:
8a:a5:2c:16:76:94:b4:02:91:66:4a:5d:b3:f4:65:
79:18:3e:03:66:a7:b0:85:27:a5:3e:ed:f1:73:f5:
d7:fd:ea:64:3b:24:c8:f8:b7:58:56:57:aa:51:ca:
06:a9:66:2e:1d:48:1f:cb:3c:aa:5c:d1:06:62:56:
d1:f8:70:54:60:a6:02:bb:42:f6:52:67:bd:c7:17:
ab:29:db:06:55:b0:4e:6f:ed:b6:8b:2a:65:1a:6d:
6a:47:e1:23:c0:3d:b0:c7:05:6d:4e:88:25:04:f8:
9a:7a:df:27:ba:00:ee:bd:78:f6:04:bd:6c:e1:f7:
dc:6f:62:19:6b:bc:77:e7:b3:5d:3d:a0:df:fb:e1:
e9:63:9c:da:00:c6:c0:42:68:d7:a7:13:09:8e:e2:
68:60:9f:4a:d6:27:40:c1:0b:d8:6c:27:78:19:07:
02:21:62:89:ff:0c:e7:2d:54:78:d2:05:8b:37:a6:
c2:c1:d4:cd:11:f1:cd:ff:a3:9b:16:14:a9:08:85:
5c:01:47:76:93:b5:0c:3c:31:e1:e7:aa:a5:d9:1c:
69:b6:98:a6:24:5a:80:5d:59:fa:c6:ce:e0:f8:2c:
c6:68:ab:0a:0c:1a:e8:80:5b:64:26:cd:a3:fb:5c:
b8:eb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
FA:E0:80:7B:94:96:55:F1:87:76:D7:E2:02:5C:D9:69:1F:F7:D3:7D
X509v3 Authority Key Identifier:
keyid:14:CF:99:DE:FA:1B:92:76:EB:EE:61:18:0D:F4:77:01:77:95:7E:3B
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://repo-rpki.idnic.net/repo/097f5161-070f-4339-af4e-bc33fdfb67b8/0/14CF99DEFA1B9276EBEE61180DF4770177957E3B.crl
Authority Information Access:
CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/14CF99DEFA1B9276EBEE61180DF4770177957E3B.cer
Subject Information Access:
Signed Object - URI:rsync://repo-rpki.idnic.net/repo/097f5161-070f-4339-af4e-bc33fdfb67b8/0/14CF99DEFA1B9276EBEE61180DF4770177957E3B.mft
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
14:05:32:7c:42:64:aa:0c:e8:e5:49:f6:7f:94:a9:17:7c:70:
b3:13:7d:56:1c:eb:7a:42:7c:48:d6:63:3c:82:3f:f8:e6:4f:
32:88:1a:a5:27:39:9b:ca:be:93:03:c0:85:2a:5b:d2:1e:55:
bd:d1:75:5d:a8:da:7f:b7:83:81:2e:2e:7c:9a:03:cd:e9:9e:
a4:db:f3:02:9e:75:00:1e:3c:df:98:a6:42:06:50:36:bd:05:
b8:98:ba:05:a9:5f:d5:99:0a:e8:a7:51:24:dc:e8:83:32:66:
9a:47:3a:83:77:2d:c5:9e:15:3a:83:2c:ce:43:a9:01:86:72:
fb:54:fc:d7:6e:c5:0c:a3:17:fb:a7:df:64:a4:cb:7f:ff:e3:
27:64:18:0c:3c:50:46:87:cd:4c:5c:64:49:af:f2:b7:2c:c3:
45:c4:15:8f:f9:5d:b3:60:32:94:2d:a3:25:0c:8c:46:3c:66:
92:52:7b:57:72:93:24:97:e8:88:51:c9:67:c6:75:af:b7:05:
e0:e7:7b:05:d7:3f:b3:48:b4:f8:21:ab:d5:e8:b1:db:99:8d:
f4:a1:0d:ad:c7:7f:23:db:97:fd:80:71:62:26:8e:03:b3:d3:
a4:f7:67:10:04:a9:56:1c:a1:cf:ff:41:a8:f9:23:00:15:94:
06:7a:15:75
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jun 3 03:14:41 2026 by rpki-client