Manifest
$ rpki-client -vvf repo-rpki.idnic.net/repo/67db23b7-9159-46c7-8853-06654ae47aed/0/20ABF702057AD5F01207F6C578160654EB44C914.mft
File: 20ABF702057AD5F01207F6C578160654EB44C914.mft (raw, json)
Hash identifier: 9Je5t2FXMUvqpx5NWKveUm1FfDCkM/aAoYVwaTmfT2U=
Subject key identifier: 72:C4:E4:56:C0:B2:DD:5D:DA:34:6B:64:19:84:C9:75:BC:8C:9B:01
Authority key identifier: 20:AB:F7:02:05:7A:D5:F0:12:07:F6:C5:78:16:06:54:EB:44:C9:14
Certificate issuer: /CN=20ABF702057AD5F01207F6C578160654EB44C914
Certificate serial: 03D36B49D125B09BAB7D3BD68B77F530C578E287
Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/20ABF702057AD5F01207F6C578160654EB44C914.cer
Subject info access: rsync://repo-rpki.idnic.net/repo/67db23b7-9159-46c7-8853-06654ae47aed/0/20ABF702057AD5F01207F6C578160654EB44C914.mft
Manifest number: 0235
Signing time: Wed 29 Apr 2026 08:00:44 +0000
Manifest this update: Wed 29 Apr 2026 07:55:44 +0000
Manifest next update: Sat 02 May 2026 15:20:44 +0000
Files and hashes: 1: 3130332e3230392e312e302f32342d3234203d3e20313334363530.roa (hash: xRwGFhgxeu1CAV1+gFeCQMhm4YDhoZJE8bg+uNmVg2o=)
2: 3130332e3136342e38302e302f32342d3234203d3e20313334363530.roa (hash: iIgboqPAZcJ6GkgIoGNtSVY4wHjrhyWezE3yGK9cDpI=)
3: 20ABF702057AD5F01207F6C578160654EB44C914.crl (hash: ngwdjIIyali6NUAogiSIxqC2itishUkpktUu2527Uc0=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
03:d3:6b:49:d1:25:b0:9b:ab:7d:3b:d6:8b:77:f5:30:c5:78:e2:87
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=20ABF702057AD5F01207F6C578160654EB44C914
Validity
Not Before: Apr 29 07:55:44 2026 GMT
Not After : May 2 15:20:44 2026 GMT
Subject: CN=72C4E456C0B2DD5DDA346B641984C975BC8C9B01
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:eb:05:4c:a4:52:ce:a0:15:9f:6e:bf:7f:4f:95:
f1:43:99:e0:d9:bb:2b:09:17:83:ab:bc:94:e1:78:
d4:32:fe:76:ba:d2:48:f9:d2:90:18:39:67:d4:7f:
57:c3:00:40:c3:7e:a8:ad:cf:dc:a0:69:5a:d9:8e:
64:ef:30:ab:6a:44:bc:bd:3c:6f:8c:92:53:87:7e:
f9:e4:85:33:23:be:05:de:68:56:b5:bf:50:2f:46:
22:b1:8a:ab:fb:e7:5e:82:5e:d1:3e:9a:7d:0c:8e:
f8:d8:87:de:07:f3:af:6e:af:40:16:94:ee:3e:d6:
7a:d9:58:33:ae:71:37:cb:8b:e2:ee:0f:de:61:85:
3a:57:6a:f2:ec:e4:20:09:25:47:0c:d0:2b:aa:1e:
c9:ed:d7:e9:96:04:13:39:b4:28:d1:5b:35:72:68:
03:a4:59:2d:bf:ce:db:16:9e:46:77:83:b1:1b:53:
00:a0:0e:c2:f8:fa:42:8f:1a:85:0a:dc:34:3d:54:
80:90:3c:0b:cd:d6:8f:a3:f9:65:13:0a:74:ff:39:
58:ec:c8:be:a7:0e:23:6f:ed:15:b8:27:33:3c:4a:
65:78:98:2d:3c:51:5f:18:7f:ef:a2:ab:e2:0d:22:
1e:c8:e2:6d:e5:b2:49:83:aa:25:ad:2d:7c:6d:78:
3b:6b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
72:C4:E4:56:C0:B2:DD:5D:DA:34:6B:64:19:84:C9:75:BC:8C:9B:01
X509v3 Authority Key Identifier:
keyid:20:AB:F7:02:05:7A:D5:F0:12:07:F6:C5:78:16:06:54:EB:44:C9:14
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://repo-rpki.idnic.net/repo/67db23b7-9159-46c7-8853-06654ae47aed/0/20ABF702057AD5F01207F6C578160654EB44C914.crl
Authority Information Access:
CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/20ABF702057AD5F01207F6C578160654EB44C914.cer
Subject Information Access:
Signed Object - URI:rsync://repo-rpki.idnic.net/repo/67db23b7-9159-46c7-8853-06654ae47aed/0/20ABF702057AD5F01207F6C578160654EB44C914.mft
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
a9:d0:cf:b8:5f:01:30:4e:87:77:09:88:a9:c4:3a:29:3c:7b:
e9:c4:a3:9f:b9:b2:7a:5b:2e:02:34:a9:78:49:e2:15:6e:3a:
87:91:32:a0:87:b0:51:0e:c2:82:ad:a2:e5:fa:ea:4e:74:6c:
1a:7f:b7:d2:a8:75:66:b2:07:48:49:04:32:50:bc:7b:06:b2:
2d:cd:4a:b4:b8:e2:43:7b:28:84:b8:24:04:ca:0f:a2:4f:78:
b3:83:d3:40:10:22:76:f8:f7:8e:f0:3b:a1:4b:03:28:68:73:
b7:ad:68:fc:b0:be:72:b3:b3:aa:53:e2:3e:6e:13:52:80:2f:
b6:6a:79:ba:6d:fa:72:0d:f6:9b:6d:bd:6c:45:bb:0d:1f:39:
4f:e2:3a:ff:53:ca:b6:b8:28:88:54:92:17:52:e4:19:ba:76:
a0:38:77:cb:a2:af:05:e2:12:fc:79:f0:f4:2e:13:9b:42:3f:
9c:73:40:34:a6:b6:d0:06:d3:68:f0:10:81:46:f4:6a:05:13:
cc:7b:8d:0b:9d:e8:0e:6f:46:19:83:10:41:22:45:83:92:e7:
9a:4e:3a:8b:88:18:38:b1:5a:ba:b4:90:be:8b:24:d6:12:8f:
25:ad:7d:fc:18:ee:12:68:87:ba:93:4b:c3:e9:09:77:5d:b1:
a2:d9:f2:02
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jun 3 03:12:03 2026 by rpki-client