Manifest
$ rpki-client -vvf repo-rpki.idnic.net/repo/59157ced-e82c-4334-903a-cccbbe9cfe89/0/67749A065BBCF1E57768F4207E1B2FE788604D47.mft
File: 67749A065BBCF1E57768F4207E1B2FE788604D47.mft (raw, json)
Hash identifier: 03UZ7lIJZX24QmycfgycWzIVqseuSH+D/9t0JYaPAVI=
Subject key identifier: 2B:47:33:ED:88:C0:C3:1A:42:B4:8C:0D:94:51:04:BF:02:11:64:A6
Authority key identifier: 67:74:9A:06:5B:BC:F1:E5:77:68:F4:20:7E:1B:2F:E7:88:60:4D:47
Certificate issuer: /CN=67749A065BBCF1E57768F4207E1B2FE788604D47
Certificate serial: 03938590318A217967A11DD9C90C3A42F3FF6593
Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/67749A065BBCF1E57768F4207E1B2FE788604D47.cer
Subject info access: rsync://repo-rpki.idnic.net/repo/59157ced-e82c-4334-903a-cccbbe9cfe89/0/67749A065BBCF1E57768F4207E1B2FE788604D47.mft
Manifest number: 01D5
Signing time: Tue 28 Apr 2026 14:51:21 +0000
Manifest this update: Tue 28 Apr 2026 14:46:21 +0000
Manifest next update: Sat 02 May 2026 00:48:21 +0000
Files and hashes: 1: 3130332e3139332e3134372e302f32342d3234203d3e20313530393836.roa (hash: E0irVGESu7KDeCq0jiZnRBIori5M3Ejegufg1mVhq5I=)
2: 67749A065BBCF1E57768F4207E1B2FE788604D47.crl (hash: HmaTy+9i2LTeQ7ILnVo0aZWadEvpceGsdKs/5i1BZp4=)
3: 3130332e3139332e3134362e302f32342d3234203d3e20313530393836.roa (hash: cUEVfE37WxdT4kHnIzexzxRMipeP3G60x6uiLR24DxM=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
03:93:85:90:31:8a:21:79:67:a1:1d:d9:c9:0c:3a:42:f3:ff:65:93
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=67749A065BBCF1E57768F4207E1B2FE788604D47
Validity
Not Before: Apr 28 14:46:21 2026 GMT
Not After : May 2 00:48:21 2026 GMT
Subject: CN=2B4733ED88C0C31A42B48C0D945104BF021164A6
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:fb:f1:41:af:3a:be:0f:44:ce:b0:75:37:a3:7b:
e8:f1:15:7b:f7:f0:97:12:46:53:90:c0:6f:25:18:
34:0f:3d:ee:10:3f:d9:3f:9a:bd:c0:be:7f:dd:1d:
46:ea:d9:51:d5:cf:df:96:70:62:e5:3f:f2:bb:ec:
9d:e8:68:8d:7d:ce:f4:78:db:ba:9c:60:fd:24:47:
92:cb:df:10:43:29:f6:cd:2b:0f:49:cb:27:15:13:
42:81:5c:10:6f:99:96:0c:bd:d0:52:8d:6f:0c:04:
c8:b1:ec:ce:78:1e:a9:36:e9:b9:d2:e4:97:19:95:
af:90:2b:e3:e3:ef:26:d9:a6:12:d4:6e:d2:41:7b:
49:ad:6f:f7:89:55:44:a9:3b:f9:31:fd:52:95:37:
29:3c:92:3d:23:a1:6d:70:42:0f:76:e0:4f:f6:20:
bb:93:97:4e:9b:ed:d6:d2:f3:19:ec:ec:c7:0f:1d:
74:ef:5d:89:96:83:39:28:29:08:13:81:1f:b8:b5:
96:51:e4:08:9a:a9:19:f3:b1:cf:c3:7c:76:20:a4:
0b:8e:a2:07:2f:90:7c:38:53:c0:f1:b4:62:71:29:
12:07:ef:34:39:3f:0b:aa:dc:4e:01:15:00:03:92:
c6:8c:f2:0c:1b:4d:58:07:09:21:e8:8f:4f:89:d8:
d8:d9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
2B:47:33:ED:88:C0:C3:1A:42:B4:8C:0D:94:51:04:BF:02:11:64:A6
X509v3 Authority Key Identifier:
keyid:67:74:9A:06:5B:BC:F1:E5:77:68:F4:20:7E:1B:2F:E7:88:60:4D:47
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://repo-rpki.idnic.net/repo/59157ced-e82c-4334-903a-cccbbe9cfe89/0/67749A065BBCF1E57768F4207E1B2FE788604D47.crl
Authority Information Access:
CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/67749A065BBCF1E57768F4207E1B2FE788604D47.cer
Subject Information Access:
Signed Object - URI:rsync://repo-rpki.idnic.net/repo/59157ced-e82c-4334-903a-cccbbe9cfe89/0/67749A065BBCF1E57768F4207E1B2FE788604D47.mft
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
27:f9:22:79:bc:4a:7a:34:79:37:92:e8:07:63:e4:8f:a6:2f:
6d:bf:ca:d9:4d:c9:07:30:99:ec:48:32:f4:e4:f2:95:81:c7:
f8:56:b2:a5:18:ec:78:52:3c:a2:95:90:62:c9:d6:dd:de:af:
d0:73:25:a4:b2:fb:aa:4b:69:46:49:81:03:f6:99:35:a4:00:
70:09:63:58:a5:14:73:64:da:bc:82:49:09:07:ff:77:67:04:
3e:44:47:ea:9e:b8:b0:fa:a3:f0:e0:30:8b:64:81:ed:06:54:
67:90:f7:63:6f:41:34:89:47:67:c5:c2:1e:8e:58:98:59:b7:
95:01:8f:86:90:f1:f9:74:40:62:5d:46:1c:cc:a7:ec:a9:60:
4d:39:28:18:8a:b0:52:77:f3:07:d3:b1:5d:d6:69:50:59:90:
ca:4e:9b:c3:9a:95:0b:f6:c3:83:dc:f3:75:d0:0f:db:1b:97:
b5:64:0f:e0:57:7d:1a:af:32:37:fe:cb:fa:0e:be:51:52:d4:
4b:9b:05:a1:04:92:0c:b7:5d:99:7f:07:7b:0c:be:bf:e7:c1:
46:74:d2:db:7d:53:05:3a:d7:25:7a:6b:92:4b:d1:59:68:98:
65:d6:12:cf:07:35:8d:c9:7d:ba:5b:30:50:d1:dc:6b:c3:38:
89:2b:81:72
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jun 3 03:21:33 2026 by rpki-client