Manifest
$ rpki-client -vvf repo-rpki.idnic.net/repo/64aae3f0-9c70-42fc-ae3e-bb590046b0fe/0/601D123430DAF9288A7DFD628F892DB5691B88F3.mft
File: 601D123430DAF9288A7DFD628F892DB5691B88F3.mft (raw, json)
Hash identifier: oQA0pTkzIQry5VUunrYU7GJoNy3s+UkQ9lksSzbQxL0=
Subject key identifier: 82:5D:97:87:0A:20:65:3D:99:96:7C:C9:D2:4E:62:15:F7:72:50:EE
Authority key identifier: 60:1D:12:34:30:DA:F9:28:8A:7D:FD:62:8F:89:2D:B5:69:1B:88:F3
Certificate issuer: /CN=601D123430DAF9288A7DFD628F892DB5691B88F3
Certificate serial: 52423A46CD173417C973A267C790962565598EA1
Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/601D123430DAF9288A7DFD628F892DB5691B88F3.cer
Subject info access: rsync://repo-rpki.idnic.net/repo/64aae3f0-9c70-42fc-ae3e-bb590046b0fe/0/601D123430DAF9288A7DFD628F892DB5691B88F3.mft
Manifest number: 01FA
Signing time: Tue 28 Apr 2026 15:00:45 +0000
Manifest this update: Tue 28 Apr 2026 14:55:45 +0000
Manifest next update: Fri 01 May 2026 18:49:45 +0000
Files and hashes: 1: 601D123430DAF9288A7DFD628F892DB5691B88F3.crl (hash: nG1R1RMzneShfNT/Mk2K+uLQzhRZEu/4bSnfGFSaASk=)
2: 3130332e3136352e3235302e302f32332d3234203d3e20313431393337.roa (hash: ItQ4yaHK0oJdabwYqYAR0lnERMhE/LKV2oMBDYLcbSg=)
3: 323030313a6466323a323263303a3a2f34382d3438203d3e20313431393337.roa (hash: 3IuUvfgQ/fSDFjAbV/bWpFSL1cWNQrNqsIN58CdOTAo=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
52:42:3a:46:cd:17:34:17:c9:73:a2:67:c7:90:96:25:65:59:8e:a1
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=601D123430DAF9288A7DFD628F892DB5691B88F3
Validity
Not Before: Apr 28 14:55:45 2026 GMT
Not After : May 1 18:49:45 2026 GMT
Subject: CN=825D97870A20653D99967CC9D24E6215F77250EE
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e2:76:7a:01:1f:aa:3e:dc:0c:63:c1:ff:fb:9f:
97:76:b6:43:db:38:d1:f7:8e:a9:ed:4b:db:6d:7d:
dc:c3:11:32:ce:b0:f0:8b:43:0f:d0:cf:d7:d3:bf:
58:62:76:c6:8e:21:05:83:a6:dd:2b:b1:d9:fd:b9:
08:bf:7e:98:dc:bd:33:fc:b8:77:bf:a1:9d:d5:a6:
8e:b3:c2:3c:f8:71:5a:2e:0e:80:f2:10:d5:98:a4:
d2:4f:81:01:77:03:fe:e8:ad:7d:d1:cf:04:73:3c:
71:c9:ad:ee:56:f0:7b:b5:51:52:d2:6a:92:51:86:
c0:bc:d8:97:9f:b6:c6:7e:58:14:d4:7c:95:df:43:
a6:ab:a3:f7:0d:a9:2e:53:c5:7f:89:51:b6:6d:33:
1c:c2:db:41:d7:67:25:a1:92:f0:91:ed:85:c2:93:
a1:56:9b:dc:1c:a3:68:58:c1:2f:21:68:4b:bd:e0:
40:d4:1c:7d:f2:dd:54:67:bb:cb:42:27:55:21:b9:
5c:80:76:ed:a4:f2:9a:fd:53:b3:02:f2:ca:0f:32:
7d:4b:1b:63:2a:ef:84:5c:e2:d3:df:81:56:4f:34:
69:9e:bd:b4:0d:23:ee:6a:41:0b:ce:a8:25:37:16:
10:97:10:f7:fb:91:15:7a:d5:c1:7e:52:1a:5d:9e:
65:ef
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
82:5D:97:87:0A:20:65:3D:99:96:7C:C9:D2:4E:62:15:F7:72:50:EE
X509v3 Authority Key Identifier:
keyid:60:1D:12:34:30:DA:F9:28:8A:7D:FD:62:8F:89:2D:B5:69:1B:88:F3
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://repo-rpki.idnic.net/repo/64aae3f0-9c70-42fc-ae3e-bb590046b0fe/0/601D123430DAF9288A7DFD628F892DB5691B88F3.crl
Authority Information Access:
CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/601D123430DAF9288A7DFD628F892DB5691B88F3.cer
Subject Information Access:
Signed Object - URI:rsync://repo-rpki.idnic.net/repo/64aae3f0-9c70-42fc-ae3e-bb590046b0fe/0/601D123430DAF9288A7DFD628F892DB5691B88F3.mft
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
34:9e:ce:ff:9d:ec:a4:e2:2f:7c:2c:18:34:08:e4:64:7a:5c:
e6:b4:a4:35:1b:92:ca:75:e2:37:1e:6e:7e:02:61:97:53:fe:
1c:5f:99:07:a4:84:3b:4b:ac:78:1d:e1:26:ab:d0:bc:fe:2b:
ae:0a:31:0a:25:9d:7d:fb:cd:8f:6b:2a:70:56:f0:1a:96:57:
05:c1:d3:40:a1:3f:16:0d:dc:69:1a:9c:41:3e:85:be:d1:bd:
e7:e1:53:88:f4:3d:36:4e:02:8d:b0:eb:cc:eb:5a:50:27:95:
89:2f:10:04:0c:76:18:55:c9:a0:fc:9b:9e:c6:e7:97:ce:ce:
23:d8:10:fd:f2:8a:2c:5a:98:c8:57:9b:1c:be:f2:45:02:7b:
08:84:64:2a:ef:6c:80:ee:46:91:24:d7:69:4f:75:3e:2d:a0:
2a:da:15:67:53:2a:b0:b1:2c:f1:8b:b0:e6:12:b8:12:cc:ec:
8f:97:dd:9b:66:f1:39:6e:05:1b:81:65:87:47:dc:55:18:ac:
6d:a2:9a:a5:75:5c:94:12:8d:c0:cc:ca:5d:c6:ad:c9:bf:f9:
96:ab:98:69:10:ae:61:6b:af:b4:ba:25:01:f4:28:58:cc:55:
9e:aa:f5:cb:b3:8f:2d:a7:91:48:68:f1:66:cf:ca:b3:34:e4:
db:00:64:dd
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jun 3 03:51:38 2026 by rpki-client