Manifest
$ rpki-client -vvf repo-rpki.idnic.net/repo/4421985b-a0e6-4e05-bef6-fe6f5a6e2f43/0/CA704F785EA58B3F659E6E3C8F71E2D4CFD7E26C.mft
File: CA704F785EA58B3F659E6E3C8F71E2D4CFD7E26C.mft (raw, json)
Hash identifier: RNL6fwZIr33sMOxKiRhjhYC9N4dwCjUDS92JY6t/O+M=
Subject key identifier: 9D:A0:51:AF:DA:D2:31:A3:CF:30:5C:4F:5C:17:71:39:29:8F:9A:33
Authority key identifier: CA:70:4F:78:5E:A5:8B:3F:65:9E:6E:3C:8F:71:E2:D4:CF:D7:E2:6C
Certificate issuer: /CN=CA704F785EA58B3F659E6E3C8F71E2D4CFD7E26C
Certificate serial: 5896822A40E048E0F811DBE02EB2EDA9176F1C11
Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/CA704F785EA58B3F659E6E3C8F71E2D4CFD7E26C.cer
Subject info access: rsync://repo-rpki.idnic.net/repo/4421985b-a0e6-4e05-bef6-fe6f5a6e2f43/0/CA704F785EA58B3F659E6E3C8F71E2D4CFD7E26C.mft
Manifest number: 03E5
Signing time: Wed 29 Apr 2026 05:53:16 +0000
Manifest this update: Wed 29 Apr 2026 05:48:16 +0000
Manifest next update: Sat 02 May 2026 09:33:16 +0000
Files and hashes: 1: 323030313a6466303a663730303a3a2f34382d3438203d3e20313339333939.roa (hash: ylDWnunXe+P0sSpHe2ems7WUQ+PsguFxQzvub0cWxiw=)
2: 3132332e3235332e3234342e302f32322d3234203d3e20313339333939.roa (hash: jLcNXh3PdlCUsOrK8Wn6cIHJ87Bgrp1+sOpFF9srttE=)
3: 3130332e39312e32382e302f32322d3234203d3e203338343936.roa (hash: iZk4nKRAyYY4CGj+caK3PfJut3d/hrLgka43LgJ9lgQ=)
4: CA704F785EA58B3F659E6E3C8F71E2D4CFD7E26C.crl (hash: bvlcTuhqkbVNKcNfEvZhM5dMgI/UaDDZlJinYfoSNIo=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
58:96:82:2a:40:e0:48:e0:f8:11:db:e0:2e:b2:ed:a9:17:6f:1c:11
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=CA704F785EA58B3F659E6E3C8F71E2D4CFD7E26C
Validity
Not Before: Apr 29 05:48:16 2026 GMT
Not After : May 2 09:33:16 2026 GMT
Subject: CN=9DA051AFDAD231A3CF305C4F5C177139298F9A33
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d0:e9:0a:13:e7:36:9c:16:c0:de:67:ad:43:81:
46:fe:68:9c:3e:a9:b3:51:9f:e0:27:25:dc:58:b2:
87:50:e5:05:ee:1f:ec:d3:c4:61:f6:bd:69:e5:6f:
90:2b:c9:9d:c5:0c:75:c7:30:7f:af:80:18:39:bc:
ea:87:01:6c:2a:45:9c:72:ae:6e:66:c1:ac:2f:8a:
54:44:4d:5f:4a:9d:28:53:f4:91:f9:cc:21:71:ba:
d3:18:07:6e:76:d2:a5:9b:ab:7d:4e:af:51:1a:a5:
90:7e:bd:2f:c8:f1:e6:df:e0:64:4d:18:c0:1b:a9:
9a:d3:c0:50:db:f8:66:86:aa:45:23:b9:c4:d8:13:
f4:3d:76:aa:82:8a:8e:c1:53:ba:ad:6e:81:05:16:
6b:9e:70:98:6f:6e:f4:b8:e6:69:fe:28:b5:1b:fc:
ad:cf:42:09:3d:2a:6a:a7:75:5f:51:c3:9f:96:42:
47:2d:1d:44:63:98:fe:83:39:89:89:63:f0:bb:dc:
28:d6:4a:f9:9d:7a:54:a4:a4:cc:da:8b:8a:5d:1a:
b9:0c:91:09:8f:0b:79:9a:fa:e9:8b:50:8e:9a:b0:
df:85:67:62:e3:dd:64:58:6f:a7:98:e5:e0:cf:5b:
b3:95:b4:66:f7:07:ac:05:c7:fa:ed:11:70:61:ff:
67:d7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
9D:A0:51:AF:DA:D2:31:A3:CF:30:5C:4F:5C:17:71:39:29:8F:9A:33
X509v3 Authority Key Identifier:
keyid:CA:70:4F:78:5E:A5:8B:3F:65:9E:6E:3C:8F:71:E2:D4:CF:D7:E2:6C
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://repo-rpki.idnic.net/repo/4421985b-a0e6-4e05-bef6-fe6f5a6e2f43/0/CA704F785EA58B3F659E6E3C8F71E2D4CFD7E26C.crl
Authority Information Access:
CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/CA704F785EA58B3F659E6E3C8F71E2D4CFD7E26C.cer
Subject Information Access:
Signed Object - URI:rsync://repo-rpki.idnic.net/repo/4421985b-a0e6-4e05-bef6-fe6f5a6e2f43/0/CA704F785EA58B3F659E6E3C8F71E2D4CFD7E26C.mft
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
a2:95:eb:75:cf:f3:fe:ea:5d:9f:30:ec:19:4c:02:31:55:b0:
98:24:f6:8a:09:b8:91:10:93:cb:83:ea:3b:6a:a8:20:82:be:
b9:01:79:50:de:71:fa:27:5c:45:48:61:14:0d:e5:20:50:87:
17:36:a9:79:cb:8e:e3:ba:8e:18:3d:7a:2a:34:1b:d3:3b:ee:
59:39:0b:2a:56:af:2e:4b:bd:c3:7b:1c:91:b1:cc:bd:33:3c:
a8:d0:ac:70:5b:72:21:35:53:2e:39:e9:5b:a3:b0:3f:5e:46:
e9:fb:31:ea:a8:f2:d2:6c:34:57:59:3e:e5:96:d0:6b:2a:ef:
30:37:f3:e5:49:6c:2f:d0:cd:cc:cb:6b:67:ad:d3:8e:16:c4:
0a:31:6a:db:0a:62:c5:b8:62:a4:27:0f:80:8f:0f:b5:4f:54:
ff:19:9c:1b:1b:e9:3b:d1:6c:28:18:c7:5f:b6:b5:a7:82:f1:
1d:f8:3d:98:db:5a:cd:46:86:d1:ec:95:28:1f:51:ef:ee:fb:
3f:26:03:e1:5c:3b:3c:76:2e:9f:29:f8:ee:ec:95:02:aa:cf:
70:1f:98:60:af:29:f0:4d:a6:a3:d2:b9:37:bf:94:bf:a6:85:
27:50:be:a0:a5:7d:45:8c:76:86:46:a1:af:9b:a5:92:95:c9:
e0:41:5a:01
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jun 3 03:10:18 2026 by rpki-client