Manifest
$ rpki-client -vvf repo-rpki.idnic.net/repo/167375f9-e8b5-4d94-80a8-35e02dd0f6f2/0/656A72A6F38230D6A0DB097480D736B5C2FBA683.mft
File: 656A72A6F38230D6A0DB097480D736B5C2FBA683.mft (raw, json)
Hash identifier: 2fgmewIrUU+WjYa56BTPbg8OpvGRwFFBaxxaN5O0l48=
Subject key identifier: F8:3D:3A:2C:43:79:89:BB:53:60:FE:FF:59:23:D5:54:73:4E:B1:FB
Authority key identifier: 65:6A:72:A6:F3:82:30:D6:A0:DB:09:74:80:D7:36:B5:C2:FB:A6:83
Certificate issuer: /CN=656A72A6F38230D6A0DB097480D736B5C2FBA683
Certificate serial: 1099106326CC67A0EC34A145812C1657CD7D3BB6
Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/656A72A6F38230D6A0DB097480D736B5C2FBA683.cer
Subject info access: rsync://repo-rpki.idnic.net/repo/167375f9-e8b5-4d94-80a8-35e02dd0f6f2/0/656A72A6F38230D6A0DB097480D736B5C2FBA683.mft
Manifest number: 02A3
Signing time: Mon 27 Apr 2026 13:12:45 +0000
Manifest this update: Mon 27 Apr 2026 13:07:45 +0000
Manifest next update: Thu 30 Apr 2026 23:51:45 +0000
Files and hashes: 1: 3130332e3138322e37322e302f32342d3234203d3e20313439343038.roa (hash: Tr9Xm455VVFwcMWVKgFVkQjW4pXUazCaoGIyqlMivog=)
2: 656A72A6F38230D6A0DB097480D736B5C2FBA683.crl (hash: lF0N67JT+Q8ULghbttFegZ3TdOn27mrkF1tlBw7Mz0Q=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
10:99:10:63:26:cc:67:a0:ec:34:a1:45:81:2c:16:57:cd:7d:3b:b6
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=656A72A6F38230D6A0DB097480D736B5C2FBA683
Validity
Not Before: Apr 27 13:07:45 2026 GMT
Not After : Apr 30 23:51:45 2026 GMT
Subject: CN=F83D3A2C437989BB5360FEFF5923D554734EB1FB
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cd:dd:4e:6e:f4:3d:56:09:51:e1:d6:cd:fd:52:
af:3d:38:f6:12:e9:11:b3:1d:59:80:71:fb:31:d6:
61:50:0c:c7:8b:5d:48:7e:bb:c8:e6:35:9e:10:e7:
88:dc:a1:f8:b5:71:c5:a7:f8:66:a3:d3:88:a1:17:
a0:19:bb:9b:78:e3:a1:e3:9b:28:b2:7c:f4:44:18:
98:df:2f:f2:9d:89:6a:2c:7a:f2:59:27:b1:bb:a9:
6d:2a:4c:09:43:9e:fb:ce:48:0f:82:4d:10:52:e4:
e4:4f:aa:d2:35:c4:3b:cb:a7:59:5b:6f:39:39:9b:
5b:85:6b:cf:da:fb:66:6a:69:56:db:e4:3d:8f:7f:
6b:d8:62:a1:29:94:26:fc:08:29:62:b1:cb:b4:8d:
9e:bb:3a:0d:ae:bd:11:97:84:45:da:e2:21:a5:67:
fa:01:3b:45:47:32:39:71:25:52:dc:15:84:4c:4e:
c2:9f:e2:71:f0:c7:ef:71:cc:5e:2e:9d:c0:38:9f:
1c:c6:04:4f:38:e5:a4:09:e1:5f:3c:ea:9e:1d:f5:
7a:7a:3f:a8:e9:20:a9:f1:89:16:dd:a7:6e:f7:6a:
ff:bb:b8:92:38:89:d0:24:43:d3:f0:25:76:bb:df:
1c:99:91:8a:d1:5e:c7:7b:07:59:2a:55:85:ab:ff:
e6:57
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F8:3D:3A:2C:43:79:89:BB:53:60:FE:FF:59:23:D5:54:73:4E:B1:FB
X509v3 Authority Key Identifier:
keyid:65:6A:72:A6:F3:82:30:D6:A0:DB:09:74:80:D7:36:B5:C2:FB:A6:83
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://repo-rpki.idnic.net/repo/167375f9-e8b5-4d94-80a8-35e02dd0f6f2/0/656A72A6F38230D6A0DB097480D736B5C2FBA683.crl
Authority Information Access:
CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/656A72A6F38230D6A0DB097480D736B5C2FBA683.cer
Subject Information Access:
Signed Object - URI:rsync://repo-rpki.idnic.net/repo/167375f9-e8b5-4d94-80a8-35e02dd0f6f2/0/656A72A6F38230D6A0DB097480D736B5C2FBA683.mft
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
03:d5:24:bb:77:26:d8:73:bd:b7:7a:66:a4:b7:67:78:71:c5:
d8:57:09:84:77:5c:b1:ba:a5:67:bf:d7:58:4b:9b:73:3b:b1:
fd:fa:a5:c9:de:f4:c1:84:82:24:04:75:cd:cf:ef:67:21:19:
37:11:c8:e2:c7:c4:33:36:a2:fc:bc:05:7b:2d:48:4c:d5:57:
7e:f0:50:11:1f:0b:a7:a0:26:35:31:a8:f7:69:8f:e6:48:1e:
e2:61:40:0e:d3:e5:f4:60:a6:40:41:7f:92:a7:61:75:fd:8c:
af:97:54:af:ae:ca:8a:d4:c0:16:b7:ed:38:09:2e:82:36:47:
62:0f:12:ff:29:8f:3f:04:3b:01:64:f1:f0:f1:bc:98:79:75:
3b:fc:8c:33:2f:8b:0a:c7:10:3b:ef:8c:9b:c8:22:51:6f:91:
f1:3c:76:41:9a:2f:14:5b:51:9b:d3:d7:07:9e:3c:50:87:ff:
aa:b2:85:b7:ce:9b:f1:3d:76:f7:52:9b:39:c5:ed:5e:73:4a:
b2:b8:ac:0b:0f:d5:20:90:f0:80:a5:49:41:63:90:61:f4:a2:
ba:38:95:27:a9:72:b1:f3:d1:1d:6c:21:47:28:a5:05:4d:ad:
52:74:98:57:ae:2e:93:ee:eb:af:c8:dc:03:0d:0c:e2:f2:e0:
b6:e1:bc:a8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jun 3 03:14:00 2026 by rpki-client