
Manifest
$ rpki-client -vvf repo-rpki.idnic.net/repo/6752b3c2-3f30-4040-8b05-83821777048f/0/DF685596DAF9D3654A2E2F21CE11AA0BB80E45D1.mft
File: DF685596DAF9D3654A2E2F21CE11AA0BB80E45D1.mft (raw, json)
Hash identifier: J0CwhNKqpFxiC1kZCWZ5nqCBYzWlduJ9JTgPzLIlaFs=
Subject key identifier: 24:99:B3:B8:33:61:88:54:81:59:7F:80:66:05:C1:C9:A0:6D:A8:F1
Authority key identifier: DF:68:55:96:DA:F9:D3:65:4A:2E:2F:21:CE:11:AA:0B:B8:0E:45:D1
Certificate issuer: /CN=DF685596DAF9D3654A2E2F21CE11AA0BB80E45D1
Certificate serial: 2C1543F0F8CC5631CF1D3ACBDCD21864772E0E4E
Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/DF685596DAF9D3654A2E2F21CE11AA0BB80E45D1.cer
Subject info access: rsync://repo-rpki.idnic.net/repo/6752b3c2-3f30-4040-8b05-83821777048f/0/DF685596DAF9D3654A2E2F21CE11AA0BB80E45D1.mft
Manifest number: 03B8
Signing time: Tue 28 Apr 2026 23:20:44 +0000
Manifest this update: Tue 28 Apr 2026 23:15:44 +0000
Manifest next update: Sat 02 May 2026 04:20:44 +0000
Files and hashes: 1: 3130332e3136392e3235342e302f32332d3233203d3e20313432333730.roa (hash: srBAQJfy8a0mnQ4T5/dKNZU30VzR+202z4VgmppP6JM=)
2: 3130332e3136392e3235342e302f32342d3234203d3e20313432333730.roa (hash: 4C3lNSjc1OP8wE40y1T2v3j6x3XPnMRVmG/J/aIJFiE=)
3: 3130332e3136392e3235352e302f32342d3234203d3e20313432333730.roa (hash: kxE+YtkjQwMwVt4zg/wVK2OFJkZkHoSNen/DvmhHfJg=)
4: DF685596DAF9D3654A2E2F21CE11AA0BB80E45D1.crl (hash: 7FBykF85UA1+USxEODk1TCzmKFJRkOTkK6791WteAhA=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
2c:15:43:f0:f8:cc:56:31:cf:1d:3a:cb:dc:d2:18:64:77:2e:0e:4e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=DF685596DAF9D3654A2E2F21CE11AA0BB80E45D1
Validity
Not Before: Apr 28 23:15:44 2026 GMT
Not After : May 2 04:20:44 2026 GMT
Subject: CN=2499B3B83361885481597F806605C1C9A06DA8F1
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c4:17:3a:70:75:9a:95:c1:87:b7:09:43:da:58:
ad:cf:a7:92:db:9d:86:04:01:74:b2:a0:8e:62:d9:
5b:d4:c0:a2:95:32:9e:75:3d:7b:6d:65:64:88:c0:
c4:dc:8e:8e:0b:5b:78:b1:bc:25:e9:43:f6:f4:ca:
1b:4a:06:ae:49:29:ee:b8:67:3a:c2:41:fd:fe:5c:
8b:a9:df:c1:9d:cb:2e:32:eb:62:5a:7f:8e:52:f3:
74:59:5d:be:02:32:9d:5f:52:fc:2e:c3:e4:a4:74:
12:a8:7e:bc:46:ef:76:04:71:09:83:af:d3:83:e0:
53:df:fd:06:81:60:78:42:37:d4:2f:ae:1a:5f:48:
ff:40:88:9d:d9:f4:66:86:2c:7f:df:97:38:41:89:
cd:ae:97:51:d5:4d:9d:26:73:16:df:72:bb:38:f4:
8e:fd:e6:52:36:3b:37:34:01:9c:b0:d7:40:66:e7:
c6:db:81:15:bd:b1:db:eb:c3:fb:20:10:a5:0c:66:
07:24:e9:63:45:76:e0:31:64:7a:ea:73:c9:b6:fe:
27:9c:46:e7:4b:40:f3:00:aa:e6:12:cd:23:c3:a2:
5b:83:0f:f0:79:da:93:d4:c2:96:f6:f5:90:fa:50:
b5:08:5d:9c:03:b8:c8:bf:14:a0:e9:58:dc:07:09:
31:ff
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
24:99:B3:B8:33:61:88:54:81:59:7F:80:66:05:C1:C9:A0:6D:A8:F1
X509v3 Authority Key Identifier:
keyid:DF:68:55:96:DA:F9:D3:65:4A:2E:2F:21:CE:11:AA:0B:B8:0E:45:D1
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://repo-rpki.idnic.net/repo/6752b3c2-3f30-4040-8b05-83821777048f/0/DF685596DAF9D3654A2E2F21CE11AA0BB80E45D1.crl
Authority Information Access:
CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/DF685596DAF9D3654A2E2F21CE11AA0BB80E45D1.cer
Subject Information Access:
Signed Object - URI:rsync://repo-rpki.idnic.net/repo/6752b3c2-3f30-4040-8b05-83821777048f/0/DF685596DAF9D3654A2E2F21CE11AA0BB80E45D1.mft
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
a7:8d:76:27:34:d8:fa:d8:3c:11:ce:17:04:e5:c3:9a:39:51:
4d:54:ca:78:b7:b5:6a:69:66:18:19:61:c1:c0:e5:b4:bc:04:
02:ba:c9:e0:f7:ff:99:9e:23:60:c1:52:18:10:10:59:56:d9:
40:0c:f4:b9:45:0d:d2:c8:89:4f:f3:ab:01:8b:4a:a6:6e:bb:
13:b0:c9:1d:ab:c8:14:3c:46:93:c6:cd:5f:32:4b:ff:fc:6d:
66:cc:48:00:f4:e2:67:b2:14:10:40:1d:dd:7b:9a:05:44:7f:
fc:05:e5:3a:2b:f5:2f:7c:39:de:76:ca:fd:34:e3:bf:21:8f:
ff:13:6d:dc:a6:5e:6a:ec:ab:35:f2:a3:d1:1e:90:0a:e5:f6:
eb:5f:d7:80:42:3b:fb:f1:c5:75:cb:22:b8:77:c2:38:27:4b:
71:1a:a9:f3:70:95:64:b2:4e:c2:17:14:20:1d:0e:d6:d5:5d:
25:1f:99:fb:e2:69:50:0b:ac:1f:f0:63:5a:24:92:72:7c:05:
a7:d7:dc:37:f5:36:ce:b4:5b:1a:24:2a:4e:12:de:7c:8f:a8:
40:37:31:ce:ff:28:89:c4:af:3e:e5:f4:55:5c:b1:a7:aa:16:
b6:04:82:3f:71:00:4d:6c:e1:49:44:7c:0c:fe:06:6d:ce:cf:
9f:ce:3f:75
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jun 3 03:15:31 2026 by rpki-client