Manifest
$ rpki-client -vvf repo-rpki.idnic.net/repo/398eeb38-7746-4899-9a10-7980f8b90532/0/25DFF1C99DCDF19F3A4B9ED36FD33BAA501B87E3.mft
File: 25DFF1C99DCDF19F3A4B9ED36FD33BAA501B87E3.mft (raw, json)
Hash identifier: AoQyVRmfwvmF/xTCISarlvM1Pv2RSE8AqdSOXGZ3JmI=
Subject key identifier: 1A:89:EB:B3:B8:CC:E3:A9:40:9A:C6:79:B6:57:D3:85:E0:2D:E7:78
Authority key identifier: 25:DF:F1:C9:9D:CD:F1:9F:3A:4B:9E:D3:6F:D3:3B:AA:50:1B:87:E3
Certificate issuer: /CN=25DFF1C99DCDF19F3A4B9ED36FD33BAA501B87E3
Certificate serial: 4B196F01DBF6DA89DB4D0F641827975749A68741
Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/25DFF1C99DCDF19F3A4B9ED36FD33BAA501B87E3.cer
Subject info access: rsync://repo-rpki.idnic.net/repo/398eeb38-7746-4899-9a10-7980f8b90532/0/25DFF1C99DCDF19F3A4B9ED36FD33BAA501B87E3.mft
Manifest number: 01DE
Signing time: Mon 27 Apr 2026 22:00:59 +0000
Manifest this update: Mon 27 Apr 2026 21:55:59 +0000
Manifest next update: Fri 01 May 2026 02:34:59 +0000
Files and hashes: 1: 3130332e3138392e3232392e302f32342d3234203d3e20313437303736.roa (hash: XPXeqyo3uAeNk8HBLerrx/vohDE1OzqrjTB8SXVyR1c=)
2: 3130332e3137322e39362e302f32342d3234203d3e20313437303736.roa (hash: FzTv12UM/2i3EnGYSLbw7ffZNNwkSLTinstojsz6igs=)
3: 25DFF1C99DCDF19F3A4B9ED36FD33BAA501B87E3.crl (hash: cDN4MGPEG0zISfkmPN23RyQihAyMzR8peguA6RkF6s0=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
4b:19:6f:01:db:f6:da:89:db:4d:0f:64:18:27:97:57:49:a6:87:41
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=25DFF1C99DCDF19F3A4B9ED36FD33BAA501B87E3
Validity
Not Before: Apr 27 21:55:59 2026 GMT
Not After : May 1 02:34:59 2026 GMT
Subject: CN=1A89EBB3B8CCE3A9409AC679B657D385E02DE778
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:f8:91:d5:5c:e5:dc:0c:dc:45:98:51:2c:ae:5b:
97:56:74:bc:87:b2:de:b3:72:6d:b5:e5:3d:59:42:
b8:19:8e:93:82:28:39:c9:b6:53:b1:03:92:5b:53:
49:6a:0d:6a:01:2d:83:cb:ab:81:ba:7c:2f:f0:dd:
ae:22:57:6a:dd:87:46:5b:0c:b7:55:3e:b2:99:60:
ee:9e:02:bb:28:13:07:27:38:aa:1c:1e:2f:c0:c0:
43:93:30:4f:05:0d:35:7a:7c:0b:fa:fa:dc:9c:57:
18:8d:72:d3:f5:7f:7c:59:3b:56:16:13:ba:eb:d4:
a1:2c:f6:8d:28:42:b3:98:4a:7f:38:ac:c6:c5:ed:
9c:0a:f5:2e:60:83:c7:fa:a4:6b:e9:25:77:3d:62:
89:6c:c8:07:44:eb:95:34:ef:e5:54:60:da:50:73:
9c:2a:70:14:a4:1d:48:f3:9b:f6:4b:8c:da:02:16:
52:12:e2:28:ec:96:9e:25:fa:6c:08:ea:83:ca:c3:
8f:f6:4b:b4:47:8c:ee:0f:93:85:b2:27:57:57:a0:
2e:f9:99:d8:6c:44:b8:5c:36:fe:22:63:1c:40:c6:
f4:79:b0:44:af:70:35:0d:07:78:df:f5:c1:3c:b5:
86:94:fb:94:71:bf:5e:79:ab:8d:e5:eb:c3:bf:41:
a3:29
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
1A:89:EB:B3:B8:CC:E3:A9:40:9A:C6:79:B6:57:D3:85:E0:2D:E7:78
X509v3 Authority Key Identifier:
keyid:25:DF:F1:C9:9D:CD:F1:9F:3A:4B:9E:D3:6F:D3:3B:AA:50:1B:87:E3
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://repo-rpki.idnic.net/repo/398eeb38-7746-4899-9a10-7980f8b90532/0/25DFF1C99DCDF19F3A4B9ED36FD33BAA501B87E3.crl
Authority Information Access:
CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/25DFF1C99DCDF19F3A4B9ED36FD33BAA501B87E3.cer
Subject Information Access:
Signed Object - URI:rsync://repo-rpki.idnic.net/repo/398eeb38-7746-4899-9a10-7980f8b90532/0/25DFF1C99DCDF19F3A4B9ED36FD33BAA501B87E3.mft
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
34:15:66:2b:7b:2c:86:82:a8:75:20:b5:2d:ef:84:c1:d2:31:
79:f6:87:02:37:cb:5c:7e:28:d7:2f:e5:b9:f1:27:ef:fa:3d:
05:c4:eb:b9:7d:72:0e:f2:6a:3f:02:f4:a0:a8:11:b2:ee:24:
51:2a:02:41:f5:25:80:c2:39:87:6d:22:57:94:48:b4:86:7a:
7c:c2:76:91:d5:aa:3c:ae:a0:cb:da:bf:da:0f:e4:07:58:b5:
92:48:97:07:7b:de:43:f0:92:8e:9e:7d:39:65:83:20:ac:b4:
53:ee:61:50:55:e3:05:00:78:e2:51:5c:ca:e6:78:4e:a9:bb:
be:11:48:50:53:f3:73:d1:e8:0b:72:73:c7:7a:4c:9a:6b:6d:
97:26:67:47:68:bd:d4:99:88:c9:52:4b:38:9f:89:8e:45:da:
dc:6d:ef:f4:25:5c:81:53:4e:9c:80:7a:81:54:21:6c:b9:ba:
7c:f7:5b:f4:7f:12:4c:79:53:8b:f3:39:08:d8:d3:3d:8c:66:
52:22:9e:86:84:4a:f9:67:d6:f2:d8:85:64:f8:f2:c9:7f:4c:
fe:2f:26:2d:50:29:2a:fe:c8:5f:0d:c5:f7:d6:46:5d:59:d0:
ae:33:57:06:b5:14:fb:45:30:60:98:2e:84:fe:4b:33:34:d0:
1e:0f:29:a0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jun 3 03:29:26 2026 by rpki-client