Manifest
$ rpki-client -vvf repo-rpki.idnic.net/repo/2273027a-096b-4e95-a656-dabe98ac6f6d/0/25F283F3EEC39D541DF359689045D2073EBB3FE0.mft
File: 25F283F3EEC39D541DF359689045D2073EBB3FE0.mft (raw, json)
Hash identifier: JDgyL3eg8bMqN8KWshp7IpZVj7jOmH6xF5bv6l9luN4=
Subject key identifier: EF:5B:5E:27:63:73:B7:45:32:98:75:C7:6D:38:82:3B:B6:D9:6B:2C
Authority key identifier: 25:F2:83:F3:EE:C3:9D:54:1D:F3:59:68:90:45:D2:07:3E:BB:3F:E0
Certificate issuer: /CN=25F283F3EEC39D541DF359689045D2073EBB3FE0
Certificate serial: 076109253444A95446C6091CDA9C165F75868F01
Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/25F283F3EEC39D541DF359689045D2073EBB3FE0.cer
Subject info access: rsync://repo-rpki.idnic.net/repo/2273027a-096b-4e95-a656-dabe98ac6f6d/0/25F283F3EEC39D541DF359689045D2073EBB3FE0.mft
Manifest number: 036A
Signing time: Mon 27 Apr 2026 14:40:52 +0000
Manifest this update: Mon 27 Apr 2026 14:35:52 +0000
Manifest next update: Thu 30 Apr 2026 19:54:52 +0000
Files and hashes: 1: 3130332e3137342e3132322e302f32342d3234203d3e20313437303936.roa (hash: JFWNh/TCjn8caLGCRcOB8LkkfKgWkq2tvrjf0Ta/M4A=)
2: 3130332e3137342e3132322e302f32332d3233203d3e20313437303936.roa (hash: ztPHo3yVGw7HPwp5p47CJrgcand2ekTtKedou9z0ERo=)
3: 25F283F3EEC39D541DF359689045D2073EBB3FE0.crl (hash: r8Ii8pkTVO6BqyoxFAHADecDWlTDcMEQ5s7pgmqVk+I=)
4: 3130332e3137342e3132332e302f32342d3234203d3e20313437303936.roa (hash: wmqYtJvU2F6eupSHLrf9mkfhLq9E6hEn7siKrmp27wo=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
07:61:09:25:34:44:a9:54:46:c6:09:1c:da:9c:16:5f:75:86:8f:01
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=25F283F3EEC39D541DF359689045D2073EBB3FE0
Validity
Not Before: Apr 27 14:35:52 2026 GMT
Not After : Apr 30 19:54:52 2026 GMT
Subject: CN=EF5B5E276373B745329875C76D38823BB6D96B2C
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c9:2a:40:43:e1:7b:33:f8:ea:3d:c1:be:29:99:
34:8d:e0:eb:55:f4:40:1e:2b:73:22:d6:af:c3:8b:
54:e9:e9:88:96:1c:9a:0b:20:69:e8:70:e6:1e:71:
b3:ac:ec:fb:1f:5d:8b:1b:d3:74:03:b6:3d:71:d0:
96:7f:b8:76:1b:68:6c:1a:d6:0b:38:bc:32:b7:a1:
31:b0:30:20:be:dd:50:25:57:89:8c:56:1b:07:fa:
fc:c2:d0:01:10:3e:cf:c3:9e:18:e8:f3:e3:8c:41:
a1:3f:8e:88:0b:de:1b:1c:29:aa:87:e5:0e:d8:7f:
74:8b:aa:a5:76:67:1a:de:c0:ee:63:af:16:ad:e5:
0d:8b:64:65:7c:1b:dc:28:fa:be:67:bc:71:cc:27:
93:34:59:42:54:5a:9c:8d:a2:a4:c5:74:aa:e4:06:
45:1b:45:1f:4b:83:84:79:fe:92:b1:7f:3b:1b:1a:
d3:cc:be:a9:f3:1e:ad:8a:d0:a6:67:3f:61:04:26:
e7:6c:4b:9a:2c:39:57:06:d5:12:1a:71:95:df:e2:
87:0f:44:b6:24:0c:a3:df:93:09:93:b1:83:e7:ae:
15:5f:38:6c:65:59:8a:46:29:be:43:68:66:ff:85:
9d:a1:a0:90:17:2e:65:e5:39:6d:17:af:bf:1b:2f:
4a:1f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
EF:5B:5E:27:63:73:B7:45:32:98:75:C7:6D:38:82:3B:B6:D9:6B:2C
X509v3 Authority Key Identifier:
keyid:25:F2:83:F3:EE:C3:9D:54:1D:F3:59:68:90:45:D2:07:3E:BB:3F:E0
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://repo-rpki.idnic.net/repo/2273027a-096b-4e95-a656-dabe98ac6f6d/0/25F283F3EEC39D541DF359689045D2073EBB3FE0.crl
Authority Information Access:
CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/25F283F3EEC39D541DF359689045D2073EBB3FE0.cer
Subject Information Access:
Signed Object - URI:rsync://repo-rpki.idnic.net/repo/2273027a-096b-4e95-a656-dabe98ac6f6d/0/25F283F3EEC39D541DF359689045D2073EBB3FE0.mft
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
1f:76:36:7a:aa:d4:e1:42:d9:00:50:48:a7:85:a7:5c:4a:13:
e2:fb:a5:05:c5:44:b6:61:d8:59:4d:24:b1:f7:a7:f9:bf:3d:
16:59:68:5e:47:b6:fd:57:0b:2b:23:c9:c4:dd:9b:ff:42:6a:
90:40:51:84:e1:1f:be:77:29:80:46:ee:9a:a6:f4:b4:23:28:
01:c1:4b:72:6c:2f:92:bc:b1:0b:fe:b6:6e:5f:95:00:a3:18:
98:40:98:f7:c0:4e:36:8e:66:0d:71:bf:e0:40:98:7f:1d:3f:
c0:61:af:f4:9f:30:89:0f:c4:49:97:4a:8f:e3:93:8a:bc:23:
0e:5c:87:a0:2a:c8:b4:14:18:55:63:b3:61:ad:c2:fe:8e:e1:
c6:bb:cb:bf:79:1e:d2:42:f2:81:97:37:12:ca:69:ab:45:4a:
a1:6b:33:c0:e7:98:8d:bc:e8:d0:83:ed:31:19:c9:6e:0e:e6:
c3:10:74:1b:1d:7c:8b:95:ab:08:cc:4a:e4:f4:cf:a5:c7:57:
61:9a:7e:c5:b1:40:5e:3f:16:89:66:11:d6:b3:81:c8:08:c7:
52:7b:32:0c:2c:12:c6:45:5e:30:63:23:12:05:d8:e8:10:31:
54:e9:f1:6a:60:bd:22:65:ab:51:38:b7:46:fe:be:41:16:db:
6a:cd:e1:e8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jun 3 03:08:28 2026 by rpki-client