Manifest
$ rpki-client -vvf repo-rpki.idnic.net/repo/628de86b-a26e-4b0f-a83c-05fab4a30c77/0/25F464020D9CBB8D18BC7C47169F978D24F4F1BE.mft
File: 25F464020D9CBB8D18BC7C47169F978D24F4F1BE.mft (raw, json)
Hash identifier: IDTR8OqWoqh6ZlUZzzgx5lU4/H9Esc4fIGoFAJ2SaA4=
Subject key identifier: 1B:70:93:1A:4A:B2:34:77:6B:50:40:C4:B0:D3:C2:7B:B0:53:6B:CC
Authority key identifier: 25:F4:64:02:0D:9C:BB:8D:18:BC:7C:47:16:9F:97:8D:24:F4:F1:BE
Certificate issuer: /CN=25F464020D9CBB8D18BC7C47169F978D24F4F1BE
Certificate serial: 160E0C128AD0097BBD0E245F0806EFD182AC386B
Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/25F464020D9CBB8D18BC7C47169F978D24F4F1BE.cer
Subject info access: rsync://repo-rpki.idnic.net/repo/628de86b-a26e-4b0f-a83c-05fab4a30c77/0/25F464020D9CBB8D18BC7C47169F978D24F4F1BE.mft
Manifest number: 0339
Signing time: Tue 28 Apr 2026 01:42:42 +0000
Manifest this update: Tue 28 Apr 2026 01:37:42 +0000
Manifest next update: Fri 01 May 2026 09:05:42 +0000
Files and hashes: 1: 3130332e3137362e3138302e302f32342d3234203d3e20313437313333.roa (hash: Up9LSeGrEk86AmZx1Mz4hpZPUaY/z7DkI+kYAtlMDxc=)
2: 3130332e3137362e3138312e302f32342d3234203d3e20313437313333.roa (hash: h6CeT5uHVftwL+MFbDdlezLq5p9Ihp/9/N4/ZrFunI0=)
3: 25F464020D9CBB8D18BC7C47169F978D24F4F1BE.crl (hash: IhzWj/KpS4+9QUsR8ZZ4DGkqKitn15i7rm7eqQrsFRE=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
16:0e:0c:12:8a:d0:09:7b:bd:0e:24:5f:08:06:ef:d1:82:ac:38:6b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=25F464020D9CBB8D18BC7C47169F978D24F4F1BE
Validity
Not Before: Apr 28 01:37:42 2026 GMT
Not After : May 1 09:05:42 2026 GMT
Subject: CN=1B70931A4AB234776B5040C4B0D3C27BB0536BCC
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c1:cf:00:5f:99:93:e3:20:87:3e:f6:9f:a5:19:
4f:d8:ca:ef:c7:de:03:a4:9a:6b:ee:2d:27:55:fb:
39:d5:bd:52:2b:6e:58:88:55:51:33:b8:9e:1d:90:
e1:66:8c:33:3e:0c:7c:53:65:67:ea:27:7b:9b:e5:
56:77:a9:2c:12:de:42:27:6c:72:e7:25:d9:24:cd:
80:3d:e0:8d:7c:1b:38:a7:8e:d7:1a:15:73:33:ca:
ad:8d:0a:2b:ba:97:4a:d0:36:43:b9:cd:86:8e:e6:
71:b2:e7:76:64:48:bc:ca:a0:7a:8e:e9:39:73:62:
27:9c:33:8b:4e:ec:95:01:20:c1:66:3a:72:7e:0d:
f4:7a:c4:bf:80:7f:b7:1a:b4:25:6e:da:e9:e8:45:
b7:bf:0b:d1:78:6c:ee:c6:2e:84:bf:0e:1d:de:c8:
2d:3a:b4:2a:fe:92:ce:ee:ec:ec:39:c9:93:25:57:
f0:1f:f7:75:c4:cd:a9:bc:fc:49:2e:c6:44:57:89:
b8:42:01:6f:60:38:8d:f7:d2:24:31:ba:9d:18:b4:
bd:06:1b:94:58:da:7d:8b:72:8f:ae:54:ad:ff:32:
f1:5a:f4:83:94:5c:54:2c:88:bf:f4:b0:da:8d:e0:
3d:41:7b:5b:89:64:52:70:5b:e6:14:7a:5b:f5:7f:
99:57
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
1B:70:93:1A:4A:B2:34:77:6B:50:40:C4:B0:D3:C2:7B:B0:53:6B:CC
X509v3 Authority Key Identifier:
keyid:25:F4:64:02:0D:9C:BB:8D:18:BC:7C:47:16:9F:97:8D:24:F4:F1:BE
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://repo-rpki.idnic.net/repo/628de86b-a26e-4b0f-a83c-05fab4a30c77/0/25F464020D9CBB8D18BC7C47169F978D24F4F1BE.crl
Authority Information Access:
CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/25F464020D9CBB8D18BC7C47169F978D24F4F1BE.cer
Subject Information Access:
Signed Object - URI:rsync://repo-rpki.idnic.net/repo/628de86b-a26e-4b0f-a83c-05fab4a30c77/0/25F464020D9CBB8D18BC7C47169F978D24F4F1BE.mft
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
14:52:bb:3c:c5:17:9f:73:8a:b9:ce:7a:df:4c:0d:1a:52:c7:
09:27:e5:33:72:78:15:b8:a2:73:e6:c9:3f:24:d9:a5:67:36:
41:07:c4:9d:97:a7:0f:d8:73:1d:97:d3:af:ca:90:83:80:74:
b5:1b:58:c9:4b:ed:ff:96:7f:de:e0:ac:bd:86:32:c7:c2:7e:
92:ea:63:6f:53:b9:80:1e:3c:25:30:96:f3:aa:21:e4:54:09:
dc:32:ca:f2:cf:43:ac:2b:af:8d:08:88:d2:ac:c6:92:23:03:
5b:a1:bc:8d:c8:93:20:95:47:a2:85:97:66:ee:6f:27:f5:62:
be:d8:39:3a:15:ed:7b:3d:b8:3b:81:09:fd:27:08:eb:c6:7a:
50:3e:17:be:13:3d:d2:10:8f:45:a0:eb:d2:76:6f:55:b9:a9:
0e:e6:34:dd:7a:46:de:bc:bf:f2:13:a1:25:2a:a4:ca:de:06:
da:e6:28:94:07:70:94:e2:c6:55:c8:93:0c:37:3e:2f:1d:36:
1a:a7:f7:8d:21:e4:4c:66:14:69:3b:6c:63:fe:a4:f3:e3:d5:
d5:98:32:46:63:17:42:7f:19:c2:02:81:c1:1f:c8:c8:ce:20:
cf:3b:18:f0:e6:74:59:f6:7d:79:51:25:0a:ae:e6:ef:76:90:
1f:e7:f8:bf
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jun 3 03:11:17 2026 by rpki-client