Manifest
$ rpki-client -vvf repo-rpki.idnic.net/repo/3ab1a790-dced-464a-895d-9035a0cc5f2f/0/5F22D2084F774B68D9DE9763397B5657A96F36CE.mft
File: 5F22D2084F774B68D9DE9763397B5657A96F36CE.mft (raw, json)
Hash identifier: GVErKbkjVFu1rcYUt2q2Gruz2FFOUdQEPAAO3ZajXTg=
Subject key identifier: 5D:20:81:26:BA:A5:AD:CE:37:F9:66:30:8A:5B:34:A6:58:F9:97:FA
Authority key identifier: 5F:22:D2:08:4F:77:4B:68:D9:DE:97:63:39:7B:56:57:A9:6F:36:CE
Certificate issuer: /CN=5F22D2084F774B68D9DE9763397B5657A96F36CE
Certificate serial: 68958E75A208A7F7D2C8E838D1AA2F5967B8FEC6
Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/5F22D2084F774B68D9DE9763397B5657A96F36CE.cer
Subject info access: rsync://repo-rpki.idnic.net/repo/3ab1a790-dced-464a-895d-9035a0cc5f2f/0/5F22D2084F774B68D9DE9763397B5657A96F36CE.mft
Manifest number: 60
Signing time: Mon 27 Apr 2026 21:41:16 +0000
Manifest this update: Mon 27 Apr 2026 21:36:16 +0000
Manifest next update: Fri 01 May 2026 00:25:16 +0000
Files and hashes: 1: 5F22D2084F774B68D9DE9763397B5657A96F36CE.crl (hash: PQf9RK+gPNLXk1CxTlhRt3HrHjvOIbBMQQiTpVLiIng=)
2: 3130332e3235332e3131322e302f32322d3234203d3e20313332363431.roa (hash: PjhwIz9l+vRy5TLqiXRBoCVwL6OIIOTNL//mqDM3w9A=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
68:95:8e:75:a2:08:a7:f7:d2:c8:e8:38:d1:aa:2f:59:67:b8:fe:c6
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5F22D2084F774B68D9DE9763397B5657A96F36CE
Validity
Not Before: Apr 27 21:36:16 2026 GMT
Not After : May 1 00:25:16 2026 GMT
Subject: CN=5D208126BAA5ADCE37F966308A5B34A658F997FA
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ae:33:ca:5d:75:29:e8:0b:60:23:4e:c0:df:78:
e6:3c:e5:2a:54:dd:87:7a:00:db:58:c4:16:11:d5:
42:73:cb:cf:ed:b0:79:b9:49:53:b0:80:62:db:05:
48:c4:e1:d7:b0:9c:a1:05:9e:85:39:63:22:59:4c:
66:78:69:4a:80:5c:35:8c:7b:63:f3:07:a4:a8:36:
6c:4c:7c:87:12:b9:1f:7e:d4:8d:60:51:ea:7e:50:
51:18:ac:5a:64:23:e8:98:41:03:2c:d4:db:90:54:
5a:76:7b:d8:ae:cf:00:0f:0e:7f:6e:97:8f:2d:16:
30:32:3b:df:4f:db:02:81:b8:1d:8c:d2:31:a5:99:
81:56:9f:22:5b:70:2d:cb:1c:9f:7e:52:17:21:20:
1c:f1:cf:c6:88:51:e6:de:c7:bd:44:1f:f7:7f:37:
f2:d3:d4:91:84:d4:cc:98:30:f8:87:8d:23:2f:a0:
ab:fc:06:12:6a:8d:9c:91:53:f3:92:e2:d1:b5:81:
dc:8e:89:26:b3:6f:ea:85:67:87:8b:ee:f5:91:f9:
ec:b3:d0:f5:e5:5a:0f:5d:cb:02:f4:ec:91:b5:d6:
29:18:6e:8c:bf:07:3f:af:13:31:70:0b:00:6e:d3:
39:63:cf:67:74:d8:75:2a:4b:ac:0f:f8:49:32:a5:
bd:bf
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
5D:20:81:26:BA:A5:AD:CE:37:F9:66:30:8A:5B:34:A6:58:F9:97:FA
X509v3 Authority Key Identifier:
keyid:5F:22:D2:08:4F:77:4B:68:D9:DE:97:63:39:7B:56:57:A9:6F:36:CE
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://repo-rpki.idnic.net/repo/3ab1a790-dced-464a-895d-9035a0cc5f2f/0/5F22D2084F774B68D9DE9763397B5657A96F36CE.crl
Authority Information Access:
CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/5F22D2084F774B68D9DE9763397B5657A96F36CE.cer
Subject Information Access:
Signed Object - URI:rsync://repo-rpki.idnic.net/repo/3ab1a790-dced-464a-895d-9035a0cc5f2f/0/5F22D2084F774B68D9DE9763397B5657A96F36CE.mft
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
bd:eb:a4:86:5b:5d:b8:01:fb:54:83:20:df:d5:18:b1:d6:0e:
7a:a5:40:27:e2:8a:e7:e8:cc:64:cc:b2:cd:e2:92:b0:07:6a:
5e:b6:49:b7:d0:80:53:1e:68:63:87:31:34:40:9c:14:f3:2e:
e4:52:d4:4c:83:48:93:db:d7:41:89:8c:1b:99:65:68:d3:bd:
b8:13:92:93:99:da:1a:74:0c:e7:b3:39:39:47:bc:50:66:e1:
42:03:79:e5:eb:42:9b:bc:79:e6:ed:c7:86:14:29:66:50:4e:
b0:fc:e7:16:60:47:c7:84:b8:17:4e:a9:f3:79:2e:58:03:ce:
01:96:b0:76:ab:c6:5b:f7:e7:df:63:1b:f1:0e:20:99:1e:9e:
88:5d:e2:a8:4b:87:e8:0b:32:b3:a5:33:c5:47:0e:fd:42:30:
d3:5f:5d:92:83:50:b4:f6:f4:de:d2:31:a2:f1:5d:57:59:42:
1f:5d:c4:14:cb:c3:fd:a9:99:38:3b:d1:35:67:bd:f6:a6:19:
4f:d4:93:76:db:85:22:cd:7a:c9:0d:50:7b:c0:e0:da:2c:ad:
d2:4a:d4:b2:dd:6d:6a:ff:d7:f5:89:3d:f3:46:ef:38:06:45:
fb:81:72:89:df:e7:9f:29:3c:64:b9:97:40:b6:a5:23:19:57:
af:5e:80:dd
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jul 19 05:07:55 2026 by rpki-client