Manifest
$ rpki-client -vvf repo-rpki.idnic.net/repo/20a78c06-1d6e-43b6-bf30-860cebddfb32/0/957CC5B55223EC29F2E71324C678334C4348BE02.mft
File: 957CC5B55223EC29F2E71324C678334C4348BE02.mft (raw, json)
Hash identifier: rUY06n0dTxalk/Qv3vaIiEass6PNSnS+0F/pm8YjgoA=
Subject key identifier: 96:D5:23:00:B3:5D:30:37:06:A3:84:C7:00:F4:2F:3E:B4:4F:8C:84
Authority key identifier: 95:7C:C5:B5:52:23:EC:29:F2:E7:13:24:C6:78:33:4C:43:48:BE:02
Certificate issuer: /CN=957CC5B55223EC29F2E71324C678334C4348BE02
Certificate serial: 7550F788F756B6F99463B74B0E4AE1D2D1BC79C3
Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/957CC5B55223EC29F2E71324C678334C4348BE02.cer
Subject info access: rsync://repo-rpki.idnic.net/repo/20a78c06-1d6e-43b6-bf30-860cebddfb32/0/957CC5B55223EC29F2E71324C678334C4348BE02.mft
Manifest number: 022F
Signing time: Wed 29 Apr 2026 05:21:00 +0000
Manifest this update: Wed 29 Apr 2026 05:16:00 +0000
Manifest next update: Sat 02 May 2026 12:14:00 +0000
Files and hashes: 1: 957CC5B55223EC29F2E71324C678334C4348BE02.crl (hash: BdJs+AsiCSjcXh7XboCBLGxN8WnR8PDV1cvfA9S/3pE=)
2: 3130332e3134372e3131362e302f32332d3234203d3e203137373639.roa (hash: sKfx76+Sncyrs9mYumqkFI6ie1K7xxqfJijMwgYJ3J8=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
75:50:f7:88:f7:56:b6:f9:94:63:b7:4b:0e:4a:e1:d2:d1:bc:79:c3
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=957CC5B55223EC29F2E71324C678334C4348BE02
Validity
Not Before: Apr 29 05:16:00 2026 GMT
Not After : May 2 12:14:00 2026 GMT
Subject: CN=96D52300B35D303706A384C700F42F3EB44F8C84
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ad:33:cc:05:e0:23:e5:0a:2e:54:85:39:37:a4:
b2:61:3b:a1:fe:76:e6:05:36:f6:b3:1d:13:91:9b:
6d:4a:08:09:06:eb:3a:3c:a6:a2:f4:8d:0e:3a:cb:
1b:38:2c:f7:9c:df:2a:fe:f6:bc:07:aa:0d:57:85:
24:46:8c:5e:c8:66:aa:e7:0a:5b:2e:4b:af:69:c8:
75:a2:74:59:84:43:58:39:86:10:bd:53:c8:c3:6d:
56:4b:6b:a3:01:b2:04:06:55:4e:ea:dc:5a:d2:4e:
65:b9:83:b7:0a:68:a9:c6:51:8c:10:3f:46:ad:3d:
70:0b:0e:a6:24:08:7c:32:10:20:e4:98:e8:2a:95:
39:a8:06:67:cf:39:f3:31:e0:37:f2:04:49:69:38:
67:2c:78:a2:78:25:41:55:e3:55:91:2c:4f:f3:a7:
63:76:2d:f2:10:99:6a:b3:6f:05:56:4c:21:f4:3f:
47:6c:b1:5e:2a:0c:b1:89:be:4f:9b:c2:5b:ba:7a:
7e:5f:65:af:cb:3e:48:a9:7f:63:bf:46:13:66:fe:
81:c7:bc:45:bf:34:79:79:22:bf:af:a3:89:12:da:
a1:02:a8:ee:a4:bd:44:f0:ef:79:6a:45:4d:c9:d7:
73:29:3b:82:9c:51:c2:ad:a3:38:01:34:9f:5f:61:
9f:93
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
96:D5:23:00:B3:5D:30:37:06:A3:84:C7:00:F4:2F:3E:B4:4F:8C:84
X509v3 Authority Key Identifier:
keyid:95:7C:C5:B5:52:23:EC:29:F2:E7:13:24:C6:78:33:4C:43:48:BE:02
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://repo-rpki.idnic.net/repo/20a78c06-1d6e-43b6-bf30-860cebddfb32/0/957CC5B55223EC29F2E71324C678334C4348BE02.crl
Authority Information Access:
CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/957CC5B55223EC29F2E71324C678334C4348BE02.cer
Subject Information Access:
Signed Object - URI:rsync://repo-rpki.idnic.net/repo/20a78c06-1d6e-43b6-bf30-860cebddfb32/0/957CC5B55223EC29F2E71324C678334C4348BE02.mft
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
37:8a:8b:9d:71:25:92:0c:5c:94:49:44:7d:9f:eb:10:2a:6b:
10:e3:bb:55:ff:de:b2:58:da:8c:b8:0a:aa:fd:ed:eb:00:39:
e5:ab:21:d6:06:da:19:c4:3b:79:8f:5c:5d:17:2d:bc:00:79:
88:6f:91:37:a1:e5:87:45:bb:74:c1:d0:66:5e:a2:a6:92:a1:
79:49:c3:fa:c4:89:3e:fe:e1:57:32:59:1c:e9:26:aa:44:68:
f5:fd:ce:6c:0c:a2:dc:ed:9c:80:0a:ed:1c:07:f4:cc:7b:ef:
7a:cf:39:d8:3e:e9:40:1e:85:22:f3:ac:05:81:c5:27:da:9f:
10:df:c7:1e:15:73:ec:c4:66:03:68:57:58:88:4c:c0:fa:74:
c9:cb:32:8c:49:c6:08:dc:69:dc:42:66:8f:05:16:fc:03:b1:
20:cb:cc:f2:e2:6f:b8:ba:14:cb:f6:96:f2:1f:de:35:7c:4d:
50:dd:b0:2c:6b:e0:28:2f:c1:1a:1c:43:56:b1:bc:32:97:65:
70:ab:d9:0c:6e:e1:6b:bd:6d:4a:b4:b1:bb:f8:a2:73:54:2f:
2a:0c:19:c8:5b:e6:62:6f:3d:18:76:09:44:47:af:0c:0a:8f:
34:0f:bb:75:c0:47:1e:64:49:6b:2f:af:80:f8:5c:88:91:0a:
ea:41:28:2b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jun 3 03:15:46 2026 by rpki-client