Manifest
$ rpki-client -vvf repo-rpki.idnic.net/repo/16c0cd5d-d085-4e2f-b230-7b7e66d1393f/0/677D4AA669244DA65D976651DB5D051EEBDD0644.mft
File: 677D4AA669244DA65D976651DB5D051EEBDD0644.mft (raw, json)
Hash identifier: tGCyJaJuFE3BJK8mA2B7oNSgpBXiIF9tYH1D0JvcOgg=
Subject key identifier: CC:90:82:95:F8:D3:81:52:76:88:B9:85:62:AA:E1:1C:C0:EC:97:F3
Authority key identifier: 67:7D:4A:A6:69:24:4D:A6:5D:97:66:51:DB:5D:05:1E:EB:DD:06:44
Certificate issuer: /CN=677D4AA669244DA65D976651DB5D051EEBDD0644
Certificate serial: 50D46A8C56F421EA5A56443E4F7D27DA56E02759
Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/677D4AA669244DA65D976651DB5D051EEBDD0644.cer
Subject info access: rsync://repo-rpki.idnic.net/repo/16c0cd5d-d085-4e2f-b230-7b7e66d1393f/0/677D4AA669244DA65D976651DB5D051EEBDD0644.mft
Manifest number: 023C
Signing time: Tue 28 Apr 2026 09:22:04 +0000
Manifest this update: Tue 28 Apr 2026 09:17:04 +0000
Manifest next update: Fri 01 May 2026 17:38:04 +0000
Files and hashes: 1: 3130332e31382e3138342e302f32332d3234203d3e20313530323330.roa (hash: F7Gs7c34XXwy69oloBM+A2EWyB4TbouNV2bsholc9KU=)
2: 677D4AA669244DA65D976651DB5D051EEBDD0644.crl (hash: +sJq3c6KgU1PM8D9zSn5kz1W77JWeLeE9Dm0nxMKX5w=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
50:d4:6a:8c:56:f4:21:ea:5a:56:44:3e:4f:7d:27:da:56:e0:27:59
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=677D4AA669244DA65D976651DB5D051EEBDD0644
Validity
Not Before: Apr 28 09:17:04 2026 GMT
Not After : May 1 17:38:04 2026 GMT
Subject: CN=CC908295F8D381527688B98562AAE11CC0EC97F3
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b9:bf:a5:33:de:11:02:1c:00:28:86:c5:b6:5c:
8a:b6:8f:56:30:5d:88:0f:f4:2b:f3:ee:47:5b:a5:
43:3f:c8:bd:55:2a:64:30:f7:79:1b:6e:56:d6:d9:
46:df:4b:60:44:7f:0a:c7:0b:fe:88:d0:29:54:2b:
f4:5f:44:2f:e8:51:58:a8:d8:38:a8:23:84:cf:af:
4d:4a:ac:47:e1:67:b5:6f:39:cc:2a:04:c2:3a:d1:
e5:f5:50:b3:cc:a5:69:88:81:11:9c:c1:ce:dd:95:
dc:29:7a:28:d8:fd:dd:81:c6:d9:fd:79:e1:0f:25:
85:c2:7b:25:36:5c:84:b4:cd:47:5a:1f:c2:a9:57:
9e:24:88:73:41:f8:f3:ba:e9:9c:ce:69:4e:13:66:
01:a5:a9:d4:94:14:13:1c:fc:69:a0:cd:b8:c5:92:
ed:5e:e7:2e:32:b5:91:24:b0:52:8c:44:d5:01:53:
a5:bb:66:63:94:52:4c:96:92:64:04:b9:3e:8d:45:
4d:a7:62:ce:22:43:7e:4f:43:03:5f:fb:60:56:f4:
3f:6b:7b:3e:7b:dd:83:d9:a5:7e:49:b4:f0:52:4e:
b7:60:c2:e7:45:05:6e:e4:2d:dc:e0:33:4a:65:58:
c0:f5:43:a9:70:6d:0f:53:19:51:5a:de:67:1b:f0:
a6:39
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
CC:90:82:95:F8:D3:81:52:76:88:B9:85:62:AA:E1:1C:C0:EC:97:F3
X509v3 Authority Key Identifier:
keyid:67:7D:4A:A6:69:24:4D:A6:5D:97:66:51:DB:5D:05:1E:EB:DD:06:44
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://repo-rpki.idnic.net/repo/16c0cd5d-d085-4e2f-b230-7b7e66d1393f/0/677D4AA669244DA65D976651DB5D051EEBDD0644.crl
Authority Information Access:
CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/677D4AA669244DA65D976651DB5D051EEBDD0644.cer
Subject Information Access:
Signed Object - URI:rsync://repo-rpki.idnic.net/repo/16c0cd5d-d085-4e2f-b230-7b7e66d1393f/0/677D4AA669244DA65D976651DB5D051EEBDD0644.mft
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
a4:18:bf:62:ee:db:d5:5d:03:f3:f6:a7:54:26:ba:40:82:1c:
24:fb:01:f0:26:53:32:d1:70:6d:da:f3:d3:71:a6:9a:35:c1:
87:e2:63:55:00:21:d5:c5:a5:59:a3:9e:6d:7a:32:d7:74:85:
53:90:46:ef:5a:8b:c5:bd:6d:48:33:63:79:bd:13:5c:1d:86:
52:cb:ee:c6:5f:96:1c:62:21:44:95:d5:68:9f:17:5b:b8:c7:
55:19:7b:23:a1:c4:e7:5b:61:09:43:c8:6a:61:f0:90:c5:e1:
6b:9b:da:75:a7:41:8d:fe:55:e9:c2:2b:b6:9c:27:5b:ae:ba:
66:23:cb:60:d3:96:a5:df:26:2f:f9:e4:5e:32:60:b9:23:cf:
d4:05:09:d1:6a:ea:60:10:62:ea:1a:0e:2e:27:ab:5f:eb:d9:
8f:f4:98:3c:d4:49:76:9f:43:14:e9:bb:a3:77:68:d7:f7:b8:
06:f1:e5:31:2e:ee:3c:04:f5:fc:b5:4e:81:97:fd:b6:a0:e5:
a7:e0:b2:fe:fc:f3:b3:de:c1:41:ca:87:28:46:0a:9c:c8:21:
f9:98:b1:34:f4:21:52:d8:87:75:c2:28:b6:d5:e2:97:dc:be:
51:e6:64:7b:8c:a9:b3:a2:ef:85:47:f9:1b:55:03:28:82:d3:
bb:34:6f:48
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jun 3 04:06:35 2026 by rpki-client