Manifest
$ rpki-client -vvf repo-rpki.idnic.net/repo/6aa42742-89d2-49bb-8a3e-294c368971f5/0/523EE8D6F461B8FD4106F482C46C1029B1013145.mft
File: 523EE8D6F461B8FD4106F482C46C1029B1013145.mft (raw, json)
Hash identifier: a/yOammRnVJWe5+CzNDPwKJVEBemQDSVjMBU+Vrlalc=
Subject key identifier: B9:CC:62:7D:66:8C:0D:66:6E:98:05:63:02:F1:34:B7:DA:EA:01:AA
Authority key identifier: 52:3E:E8:D6:F4:61:B8:FD:41:06:F4:82:C4:6C:10:29:B1:01:31:45
Certificate issuer: /CN=523EE8D6F461B8FD4106F482C46C1029B1013145
Certificate serial: 4AF5B74F5A66C88113B6C4FDA42FD16ACE38879A
Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/523EE8D6F461B8FD4106F482C46C1029B1013145.cer
Subject info access: rsync://repo-rpki.idnic.net/repo/6aa42742-89d2-49bb-8a3e-294c368971f5/0/523EE8D6F461B8FD4106F482C46C1029B1013145.mft
Manifest number: 0123
Signing time: Tue 28 Apr 2026 20:00:43 +0000
Manifest this update: Tue 28 Apr 2026 19:55:43 +0000
Manifest next update: Fri 01 May 2026 20:47:43 +0000
Files and hashes: 1: 523EE8D6F461B8FD4106F482C46C1029B1013145.crl (hash: DdhAWYjEgJ0p+lJk3wl/uw7cuNACP9+Z3LFxI65fdSA=)
2: 3130332e3132392e3233302e302f32332d3234203d3e20313332363339.roa (hash: H0hxzRE1P/k0NGsIoy/0kaAKznrWHPdRQxgiRW4T5Qo=)
3: 3130332e3132392e3233312e302f32342d3234203d3e20313332363339.roa (hash: jWc0sz86L+eDtr+nDMgQgH+2S7uRf5Y8Wu7u8v4zz0Q=)
4: 3130332e31392e38302e302f32332d3234203d3e20313332363339.roa (hash: z0HZjcHieRuZ5HHeSmTqSUrJvHMtgbLp6o8sJVRupVI=)
5: 3130332e31392e38302e302f32342d3234203d3e20313332363339.roa (hash: YEDjMiqzXqQQzIDtWpx+jx5Bn+2TYkAiFHsRj0775yM=)
6: 3130332e31392e38312e302f32342d3234203d3e20313332363339.roa (hash: jKwlGthiQpzXwnHyIqfnx5NGkz2sE+y3uVu40s6f6sc=)
7: 3130332e3132392e3233302e302f32342d3234203d3e20313332363339.roa (hash: zP2/XdcDOhp440RXruEyN+zWviJE7i53kBfkBKlQJ0I=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
4a:f5:b7:4f:5a:66:c8:81:13:b6:c4:fd:a4:2f:d1:6a:ce:38:87:9a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=523EE8D6F461B8FD4106F482C46C1029B1013145
Validity
Not Before: Apr 28 19:55:43 2026 GMT
Not After : May 1 20:47:43 2026 GMT
Subject: CN=B9CC627D668C0D666E98056302F134B7DAEA01AA
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:af:df:9f:30:26:51:40:cb:f9:6d:c2:39:d1:59:
8f:e9:62:aa:9a:9c:9f:75:b3:7a:9e:6e:07:6f:a2:
d7:6f:3b:4b:fb:09:35:d7:bb:20:9f:19:e6:c9:7c:
eb:52:0e:2e:9d:0e:e9:54:b8:10:0a:e8:8c:0b:e6:
1e:aa:ec:6f:a6:0a:4d:fb:a8:ce:cb:c4:0f:5d:38:
1c:26:9e:c3:7f:27:c0:bc:7a:8d:54:87:2e:af:e6:
59:2c:48:7b:61:3d:6b:2a:55:38:af:55:ab:ab:94:
08:e4:a3:66:85:d3:17:d0:b4:2a:e1:d1:58:95:33:
0e:f0:53:bc:92:3b:fc:74:9a:cd:c1:e5:20:69:56:
01:ed:56:2e:62:cb:fa:8d:fe:02:72:51:7e:65:b2:
ed:c8:dd:c4:8d:3e:5b:bf:30:87:eb:61:b8:c5:fd:
a7:ce:23:6a:ef:57:4c:aa:cf:aa:15:54:2d:2d:49:
ed:ea:f7:67:32:6f:f2:dd:28:9c:c3:73:ea:9f:1b:
f7:a0:a4:70:83:3b:8f:ab:14:0e:70:0e:6e:bb:37:
99:ca:c8:ed:f6:52:6c:73:70:e1:a0:be:ed:8e:14:
fd:50:ab:7d:70:90:92:b2:f4:7a:49:a7:b9:6d:16:
14:3b:54:fa:40:66:05:5d:f1:a6:37:2c:f3:8b:3c:
cd:81
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B9:CC:62:7D:66:8C:0D:66:6E:98:05:63:02:F1:34:B7:DA:EA:01:AA
X509v3 Authority Key Identifier:
keyid:52:3E:E8:D6:F4:61:B8:FD:41:06:F4:82:C4:6C:10:29:B1:01:31:45
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://repo-rpki.idnic.net/repo/6aa42742-89d2-49bb-8a3e-294c368971f5/0/523EE8D6F461B8FD4106F482C46C1029B1013145.crl
Authority Information Access:
CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/523EE8D6F461B8FD4106F482C46C1029B1013145.cer
Subject Information Access:
Signed Object - URI:rsync://repo-rpki.idnic.net/repo/6aa42742-89d2-49bb-8a3e-294c368971f5/0/523EE8D6F461B8FD4106F482C46C1029B1013145.mft
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
05:cc:b2:1b:3d:a6:f3:58:07:7b:15:8a:82:c2:28:ec:b1:0a:
2e:21:32:99:3b:f6:f0:b2:d1:79:c2:75:a7:02:59:22:f7:4c:
7c:ee:7a:3e:69:6b:eb:53:41:bf:13:b5:11:ee:97:30:65:23:
1e:da:49:e3:03:27:e7:b9:7e:85:f6:5e:0d:6c:a3:a4:23:b1:
16:cf:7a:88:71:63:fa:09:6a:e0:15:18:4f:7c:5b:de:b0:4a:
19:77:59:d5:f9:1a:5b:09:7f:49:38:f6:5e:3e:3e:a2:06:c4:
4e:48:c2:23:f8:47:78:e8:31:4c:3b:d7:55:1e:d3:a3:58:d0:
bf:4f:3c:26:57:f0:8f:d6:16:bb:ff:82:ab:46:35:1d:77:0b:
e3:df:16:31:fe:9e:93:c6:d3:7d:a5:17:e0:4a:0a:2d:be:c0:
0b:12:83:a0:a3:47:d9:41:d4:25:4f:50:5d:a6:2b:4f:29:9f:
57:1d:4f:ab:77:d7:5f:de:c2:73:be:6d:47:d3:f6:51:1c:2d:
8e:82:93:7c:01:bb:4b:0c:5b:8a:dc:92:be:4e:fc:9a:ad:2f:
b1:be:c2:f7:2d:ac:95:58:c4:48:ac:0d:43:fc:78:a9:cc:20:
92:fe:54:2a:c5:72:f0:ec:16:aa:86:22:bc:b6:cf:09:2f:46:
23:e3:16:1e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jun 3 03:14:27 2026 by rpki-client