Manifest
$ rpki-client -vvf repo-rpki.idnic.net/repo/3ce68b50-0e9e-4ae6-8253-5bc2cd121373/0/D1B66995F6731665A12AD2B52E7F91081C8D799C.mft
File: D1B66995F6731665A12AD2B52E7F91081C8D799C.mft (raw, json)
Hash identifier: iNMpxEBPRC/rqqwFP5uYe8j2J8Jbs13sT3bDyVg/qgQ=
Subject key identifier: 9C:55:AF:EC:99:28:AA:A9:F4:26:80:B3:6A:FF:EA:50:BF:C4:94:84
Authority key identifier: D1:B6:69:95:F6:73:16:65:A1:2A:D2:B5:2E:7F:91:08:1C:8D:79:9C
Certificate issuer: /CN=D1B66995F6731665A12AD2B52E7F91081C8D799C
Certificate serial: 5CBF78DC833E4DB09693FCF14CAA0E1A91B89344
Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/D1B66995F6731665A12AD2B52E7F91081C8D799C.cer
Subject info access: rsync://repo-rpki.idnic.net/repo/3ce68b50-0e9e-4ae6-8253-5bc2cd121373/0/D1B66995F6731665A12AD2B52E7F91081C8D799C.mft
Manifest number: 04
Signing time: Tue 28 Apr 2026 17:02:45 +0000
Manifest this update: Tue 28 Apr 2026 16:57:45 +0000
Manifest next update: Sat 02 May 2026 03:35:45 +0000
Files and hashes: 1: D1B66995F6731665A12AD2B52E7F91081C8D799C.crl (hash: TSxYaswpoFhEs6wTB0AdbLcE1vP8PKhXufNvBoJCZ5c=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
5c:bf:78:dc:83:3e:4d:b0:96:93:fc:f1:4c:aa:0e:1a:91:b8:93:44
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=D1B66995F6731665A12AD2B52E7F91081C8D799C
Validity
Not Before: Apr 28 16:57:45 2026 GMT
Not After : May 2 03:35:45 2026 GMT
Subject: CN=9C55AFEC9928AAA9F42680B36AFFEA50BFC49484
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:eb:68:bf:f9:19:c5:8d:a7:b1:59:f2:0d:7b:97:
3b:59:8a:61:fe:ab:04:51:4e:01:83:82:9e:1d:10:
b7:93:69:83:50:0e:fa:8a:21:08:4d:c4:30:26:2b:
c8:51:df:f8:3a:01:7b:34:df:6c:12:06:33:e2:f3:
4d:59:59:68:bc:67:6a:4c:4c:8f:51:f7:7f:6b:0c:
10:08:f8:88:9e:b4:66:dd:96:50:9a:14:5d:ab:d1:
bc:32:70:58:be:6c:8c:ec:5d:be:30:38:d9:7b:ff:
36:83:5a:00:18:eb:1e:53:88:3e:cd:d2:36:d0:11:
58:bb:e8:d9:eb:cd:28:47:0a:31:bb:42:3a:14:1a:
95:13:c4:4a:f9:98:8f:8f:d8:84:f9:69:29:0b:ab:
86:56:66:48:74:02:52:c8:2c:61:70:66:ca:0e:a3:
34:f9:f2:38:7e:f5:9e:eb:90:d0:2b:9d:ce:bd:b6:
92:2b:dd:1d:e3:c0:30:a6:fd:86:12:9a:47:87:86:
3d:05:41:f7:06:85:8a:fb:92:ba:06:c8:55:ed:a0:
54:30:e8:22:74:70:be:ba:68:a7:37:e6:e1:4a:a8:
1a:09:af:99:64:08:85:cc:dd:95:d1:22:f7:cb:01:
da:14:27:3a:0a:85:1e:68:a0:ef:84:cf:8a:35:da:
a7:7d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
9C:55:AF:EC:99:28:AA:A9:F4:26:80:B3:6A:FF:EA:50:BF:C4:94:84
X509v3 Authority Key Identifier:
keyid:D1:B6:69:95:F6:73:16:65:A1:2A:D2:B5:2E:7F:91:08:1C:8D:79:9C
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://repo-rpki.idnic.net/repo/3ce68b50-0e9e-4ae6-8253-5bc2cd121373/0/D1B66995F6731665A12AD2B52E7F91081C8D799C.crl
Authority Information Access:
CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/D1B66995F6731665A12AD2B52E7F91081C8D799C.cer
Subject Information Access:
Signed Object - URI:rsync://repo-rpki.idnic.net/repo/3ce68b50-0e9e-4ae6-8253-5bc2cd121373/0/D1B66995F6731665A12AD2B52E7F91081C8D799C.mft
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
9c:65:7f:72:45:f0:85:ab:f0:b9:8a:ef:7c:8f:81:ff:ed:a5:
fa:41:4a:ca:c8:dd:5f:7a:12:6b:7c:49:74:3b:65:4d:88:ad:
62:36:f9:6c:83:c5:5a:29:d1:e4:88:b7:f9:d6:31:42:5d:be:
eb:23:9a:06:99:cc:1f:14:d8:9f:a9:6d:97:9c:60:ec:75:8e:
aa:f7:cf:c5:44:cb:32:38:59:1c:ec:f5:4b:a4:db:ba:a6:2c:
e3:76:6a:e9:ca:d4:95:1e:ed:1d:1f:b3:b5:a6:0f:2e:46:75:
17:59:60:43:cb:d6:87:ad:c2:0c:09:45:a8:7f:de:39:a3:60:
d7:3c:07:a7:74:9a:41:08:87:e6:4e:f4:6d:21:f9:f7:d3:64:
a6:32:40:a1:bb:69:3c:9c:45:b3:5e:55:a1:35:f1:81:c6:bf:
0a:2f:8f:68:a0:15:82:25:4d:d9:fe:10:6c:06:6c:3e:3e:1f:
35:51:35:fe:46:70:1b:63:13:4e:ce:6a:3d:5e:0d:3f:b0:17:
f9:ce:6e:b1:dc:9b:0b:0e:ca:b4:67:25:e3:d6:25:9b:f6:ea:
9b:0f:89:e5:55:29:4b:72:e6:8e:b9:fa:41:01:38:69:31:13:
4c:3a:bf:c5:48:2b:17:bc:6e:fa:ad:7e:8b:a7:61:26:65:36:
d7:be:fe:f5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jun 3 03:06:26 2026 by rpki-client