Manifest
$ rpki-client -vvf repo-rpki.idnic.net/repo/7b5ecd74-4424-4d40-96a1-7fd763011944/0/658CE677CBFABF819AD1DE1FB865B1A2FD17C487.mft
File: 658CE677CBFABF819AD1DE1FB865B1A2FD17C487.mft (raw, json)
Hash identifier: xBzmY0bGx/dbKWV7Tn8M+MCQv7miRSIzH9C6AAsJkZc=
Subject key identifier: AC:D1:41:D9:A8:B5:C0:2F:B5:F6:77:16:4B:14:5A:89:B7:BB:4E:CA
Authority key identifier: 65:8C:E6:77:CB:FA:BF:81:9A:D1:DE:1F:B8:65:B1:A2:FD:17:C4:87
Certificate issuer: /CN=658CE677CBFABF819AD1DE1FB865B1A2FD17C487
Certificate serial: 3EC030C9458F1BA462456305B446CE9879B6EA34
Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/658CE677CBFABF819AD1DE1FB865B1A2FD17C487.cer
Subject info access: rsync://repo-rpki.idnic.net/repo/7b5ecd74-4424-4d40-96a1-7fd763011944/0/658CE677CBFABF819AD1DE1FB865B1A2FD17C487.mft
Manifest number: 0391
Signing time: Wed 29 Apr 2026 10:04:50 +0000
Manifest this update: Wed 29 Apr 2026 09:59:50 +0000
Manifest next update: Sat 02 May 2026 17:25:50 +0000
Files and hashes: 1: 3130332e3135302e3137352e302f32342d3234203d3e20313430333936.roa (hash: hHkoG39qzjYq+PqBdjh7WAFfm8g8AD1zROK0CoXxjRw=)
2: 323430363a3663303a3a2f33322d3438203d3e20313430333936.roa (hash: xR28xhgfPaocTNljEccnigENCimK3oapTJgJUkyM5nM=)
3: 658CE677CBFABF819AD1DE1FB865B1A2FD17C487.crl (hash: 2XSt+NwZWM5y8pwM12HHai3iN9bFWB96bOxIB7vPjO8=)
4: 3130332e3135302e3137342e302f32342d3234203d3e20313430333936.roa (hash: AVUnfzqrbeXvBd5BraZJwmqr2wTn8R4ubDG+bOW20aI=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
3e:c0:30:c9:45:8f:1b:a4:62:45:63:05:b4:46:ce:98:79:b6:ea:34
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=658CE677CBFABF819AD1DE1FB865B1A2FD17C487
Validity
Not Before: Apr 29 09:59:50 2026 GMT
Not After : May 2 17:25:50 2026 GMT
Subject: CN=ACD141D9A8B5C02FB5F677164B145A89B7BB4ECA
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:94:c8:b7:5d:e5:00:ce:80:a8:db:b8:cf:fe:9b:
db:92:7c:e1:53:5d:05:3e:f2:50:9f:d5:6c:c4:d9:
a4:74:85:5f:18:68:a5:3a:f8:d7:07:6d:a0:e5:a8:
0d:22:37:cb:5b:07:44:22:fd:2c:75:3c:67:09:44:
4b:bd:fd:31:a1:b6:db:be:b0:1c:e8:73:30:b9:9c:
6b:53:0e:1c:29:5e:49:a3:80:f1:08:94:66:af:3f:
dc:cc:d2:ec:a7:9c:2f:f5:8b:76:57:79:64:bd:b2:
6f:1e:5c:38:ce:a2:f2:a2:b5:d0:06:f5:70:c0:ea:
42:f6:21:d2:09:d4:28:28:7b:89:42:a7:20:b1:ce:
d1:51:37:2e:12:8f:04:a1:6a:98:ab:2c:ad:9b:9f:
de:fc:13:4c:28:2c:5d:99:ac:0b:ec:51:b7:13:e6:
ed:d6:c0:87:b3:2d:30:9e:dd:50:25:7b:a4:c6:d6:
e1:3a:f1:67:d0:35:67:6c:19:7b:b1:e0:3f:a1:b2:
ff:a4:be:6a:d3:4c:0f:da:0c:28:16:89:40:11:ee:
4f:00:49:47:70:be:38:3a:a9:a8:c6:d7:1e:20:76:
8f:c7:73:41:72:c9:42:57:1a:64:d6:92:e1:c4:bf:
72:d4:0b:e4:8c:01:a2:95:8c:ea:cd:07:c5:a5:3d:
f8:43
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
AC:D1:41:D9:A8:B5:C0:2F:B5:F6:77:16:4B:14:5A:89:B7:BB:4E:CA
X509v3 Authority Key Identifier:
keyid:65:8C:E6:77:CB:FA:BF:81:9A:D1:DE:1F:B8:65:B1:A2:FD:17:C4:87
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://repo-rpki.idnic.net/repo/7b5ecd74-4424-4d40-96a1-7fd763011944/0/658CE677CBFABF819AD1DE1FB865B1A2FD17C487.crl
Authority Information Access:
CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/658CE677CBFABF819AD1DE1FB865B1A2FD17C487.cer
Subject Information Access:
Signed Object - URI:rsync://repo-rpki.idnic.net/repo/7b5ecd74-4424-4d40-96a1-7fd763011944/0/658CE677CBFABF819AD1DE1FB865B1A2FD17C487.mft
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
e0:8a:75:63:5b:39:6e:ec:ae:ea:43:88:38:0b:80:30:08:3f:
cd:f5:63:9e:1a:f1:55:77:9b:82:4e:4f:86:7a:2b:de:02:55:
07:f6:1d:02:cd:62:95:79:f0:89:e8:e8:e1:63:34:62:77:dc:
e4:a4:ac:3c:7e:44:eb:70:45:67:fa:8e:77:72:eb:3c:90:5d:
e5:12:5f:ff:af:9f:cc:e7:ed:5e:32:74:05:09:c1:c4:25:d5:
a6:e3:e4:d4:be:e2:2e:cb:55:60:ec:eb:b3:04:20:ec:f8:4f:
1e:d3:f2:1c:c4:f7:50:a1:99:c5:9a:f7:ef:dc:34:c3:68:9e:
5c:59:b8:20:e6:b1:ac:94:42:55:b1:09:fa:93:d6:b6:2b:a4:
bd:4a:c0:df:57:44:5b:0a:2c:89:a6:34:0b:55:6c:10:fa:85:
4b:f2:72:be:24:14:20:2a:27:06:b3:0a:9f:cf:8f:30:f7:a3:
2e:ae:74:1f:74:23:56:d0:37:55:63:b4:94:92:06:44:e3:38:
f5:80:41:76:3c:87:60:e9:cf:6d:1e:5a:09:82:e6:b6:09:67:
7f:31:12:c6:3a:1c:16:2f:0c:e4:ba:b5:aa:83:d6:31:0d:e4:
e2:41:32:30:a5:23:dc:d7:4a:08:5f:e1:92:00:63:c0:d5:30:
39:52:0b:d2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jun 3 03:11:51 2026 by rpki-client