Manifest
$ rpki-client -vvf repo-rpki.idnic.net/repo/165d88f1-b9c0-485e-916e-59b7e3698da1/0/658C0D8617C2D05CE720427E1DF72FDE12C9CB9F.mft
File: 658C0D8617C2D05CE720427E1DF72FDE12C9CB9F.mft (raw, json)
Hash identifier: DDB0E7DoRPHNIf2oHm3QHLjacfr6Ugnrti42UXY3Ado=
Subject key identifier: 94:FB:BE:1B:AA:FC:BA:F8:70:19:B4:EF:85:44:09:25:D0:BC:B6:35
Authority key identifier: 65:8C:0D:86:17:C2:D0:5C:E7:20:42:7E:1D:F7:2F:DE:12:C9:CB:9F
Certificate issuer: /CN=658C0D8617C2D05CE720427E1DF72FDE12C9CB9F
Certificate serial: 38440A3EEC561005EF90BE651D6BECD849D0D187
Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/658C0D8617C2D05CE720427E1DF72FDE12C9CB9F.cer
Subject info access: rsync://repo-rpki.idnic.net/repo/165d88f1-b9c0-485e-916e-59b7e3698da1/0/658C0D8617C2D05CE720427E1DF72FDE12C9CB9F.mft
Manifest number: 024F
Signing time: Mon 27 Apr 2026 20:32:00 +0000
Manifest this update: Mon 27 Apr 2026 20:27:00 +0000
Manifest next update: Fri 01 May 2026 03:11:00 +0000
Files and hashes: 1: 3130332e3133392e32362e302f32332d3234203d3e20313338383630.roa (hash: en7yrsRqDUaal9vRU4LRRex8mQ3pcI0rlYghVnCEE78=)
2: 658C0D8617C2D05CE720427E1DF72FDE12C9CB9F.crl (hash: s3hsSvdEpae8lEYiVoKvUvQoewpfki6isz9R27jXSSk=)
3: 323430343a643863303a3a2f33322d3438203d3e20313338383630.roa (hash: iufPrZZScnO80QkyCPvSlgZqxsE8YzjDEGRWUUoEP4M=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
38:44:0a:3e:ec:56:10:05:ef:90:be:65:1d:6b:ec:d8:49:d0:d1:87
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=658C0D8617C2D05CE720427E1DF72FDE12C9CB9F
Validity
Not Before: Apr 27 20:27:00 2026 GMT
Not After : May 1 03:11:00 2026 GMT
Subject: CN=94FBBE1BAAFCBAF87019B4EF85440925D0BCB635
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a5:ad:1a:67:dd:07:a6:5d:76:3d:fd:de:ff:78:
66:f5:1d:9d:70:cf:cb:fa:5c:69:00:88:2a:f0:73:
f5:51:3f:88:b9:60:dd:3e:57:22:7c:9e:c7:fc:b7:
e0:48:23:8f:b9:ee:40:5c:5c:70:ad:0e:ac:08:c8:
98:16:2e:70:09:4a:2e:9d:58:3e:bb:29:ad:a3:0a:
f8:70:15:61:39:c5:11:f0:10:98:4c:23:c3:a3:78:
57:ee:f8:65:39:8a:a4:d3:b2:b7:68:ce:7b:d9:f8:
0a:1d:df:29:07:af:25:39:7b:36:e7:4b:5b:8e:47:
76:c5:12:be:81:26:b7:3d:d1:48:3e:27:01:83:fe:
ac:04:9f:60:9a:50:d4:a9:7b:dc:29:67:c1:af:9b:
c1:10:87:d1:1d:92:a0:c4:e2:b1:6e:f9:d6:75:7d:
74:ed:1a:ed:e1:0b:de:98:d1:d7:b1:4a:2e:1a:6f:
46:32:f0:c4:6d:41:f2:ec:a5:b2:f9:aa:b1:61:00:
fb:e8:2d:54:e8:62:5b:8c:33:51:9b:10:70:90:cf:
22:b9:89:29:8b:d9:40:03:4e:53:eb:72:98:4e:a2:
d8:54:af:b8:54:ad:6a:ba:b5:dd:20:52:63:60:f2:
d6:71:16:ee:0f:d3:e4:5d:0f:a0:a5:9d:03:1f:1a:
49:5d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
94:FB:BE:1B:AA:FC:BA:F8:70:19:B4:EF:85:44:09:25:D0:BC:B6:35
X509v3 Authority Key Identifier:
keyid:65:8C:0D:86:17:C2:D0:5C:E7:20:42:7E:1D:F7:2F:DE:12:C9:CB:9F
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://repo-rpki.idnic.net/repo/165d88f1-b9c0-485e-916e-59b7e3698da1/0/658C0D8617C2D05CE720427E1DF72FDE12C9CB9F.crl
Authority Information Access:
CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/658C0D8617C2D05CE720427E1DF72FDE12C9CB9F.cer
Subject Information Access:
Signed Object - URI:rsync://repo-rpki.idnic.net/repo/165d88f1-b9c0-485e-916e-59b7e3698da1/0/658C0D8617C2D05CE720427E1DF72FDE12C9CB9F.mft
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
65:f5:ad:67:57:5a:40:31:38:3a:a7:7b:16:bb:1e:ec:d7:22:
bc:55:b6:7e:9e:b2:61:44:65:c8:cd:2d:87:bd:57:81:76:8b:
31:f6:a9:1a:68:5a:9f:46:14:4c:f6:6e:d1:32:8b:ea:0a:1e:
9a:ab:ea:7a:67:eb:69:74:44:08:fc:eb:d6:04:c1:97:64:6c:
45:16:af:9b:be:75:66:3a:c9:be:80:b1:ec:4f:d1:26:17:9d:
f1:22:a9:3e:6d:4c:1a:88:14:e1:86:64:77:97:2e:4f:92:74:
a9:b6:be:9b:ff:38:83:42:83:50:d7:da:73:bd:69:a4:25:82:
a9:b0:5e:b9:69:72:e0:b8:2d:ed:af:04:97:df:14:4d:ce:37:
80:73:96:53:d6:04:f8:c5:bd:b4:d2:13:13:74:dd:5d:68:cf:
99:af:47:16:7e:79:0d:43:e0:96:f5:de:e3:84:7c:6d:7c:e7:
8b:24:1a:c9:4e:5f:24:ef:d3:97:24:28:93:86:c9:7b:f8:4d:
ec:82:34:e1:a5:0d:83:9e:40:cb:c5:62:1f:b0:45:a7:c0:cc:
68:da:0e:37:82:15:a8:f2:84:69:f8:d4:38:5f:5f:12:49:00:
8b:4e:4c:9f:bc:31:66:1b:a3:51:1e:92:d9:3a:87:25:d6:a7:
be:93:5b:8f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jun 3 03:14:54 2026 by rpki-client