Manifest
$ rpki-client -vvf repo-rpki.idnic.net/repo/7bef6e8d-1ab0-41c4-b3ae-a200d17a821c/0/665ACFA171591B851B0550143E7029498F238AF0.mft
File: 665ACFA171591B851B0550143E7029498F238AF0.mft (raw, json)
Hash identifier: NlOG0H+dec/EbTfbEeckNuZZ3olCIehSnlSRAc8Kxjc=
Subject key identifier: 69:A3:A2:F4:6E:E4:97:3D:52:4E:62:7F:AA:53:4B:1B:5B:D5:1C:78
Authority key identifier: 66:5A:CF:A1:71:59:1B:85:1B:05:50:14:3E:70:29:49:8F:23:8A:F0
Certificate issuer: /CN=665ACFA171591B851B0550143E7029498F238AF0
Certificate serial: 02F3629DADBC7F6BB5C2A89A4B3CFA4CE37270EA
Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/665ACFA171591B851B0550143E7029498F238AF0.cer
Subject info access: rsync://repo-rpki.idnic.net/repo/7bef6e8d-1ab0-41c4-b3ae-a200d17a821c/0/665ACFA171591B851B0550143E7029498F238AF0.mft
Manifest number: 026D
Signing time: Tue 28 Apr 2026 21:20:59 +0000
Manifest this update: Tue 28 Apr 2026 21:15:59 +0000
Manifest next update: Sat 02 May 2026 08:17:59 +0000
Files and hashes: 1: 3130332e3139302e33332e302f32342d3234203d3e20313439393032.roa (hash: bU3jkKmrVDzxoMBizldCAf9o0i6XJVz0mcRCkl8jgAE=)
2: 3130332e3139302e33322e302f32342d3234203d3e20313439393032.roa (hash: UBuoyTn3HReKwfW6PcrJhW8k5cydXbUfq85IfE8g+KM=)
3: 665ACFA171591B851B0550143E7029498F238AF0.crl (hash: BjX6YgagZ9O9dKxzAM39sVqMlNRnFtDj5lt9JZaXoak=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
02:f3:62:9d:ad:bc:7f:6b:b5:c2:a8:9a:4b:3c:fa:4c:e3:72:70:ea
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=665ACFA171591B851B0550143E7029498F238AF0
Validity
Not Before: Apr 28 21:15:59 2026 GMT
Not After : May 2 08:17:59 2026 GMT
Subject: CN=69A3A2F46EE4973D524E627FAA534B1B5BD51C78
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b3:0d:5e:d3:5f:de:63:b6:4d:83:8d:dc:f7:7d:
1e:7d:a3:e2:33:a6:ac:4d:37:a7:c8:bc:8f:30:cf:
36:9b:8c:b8:b4:59:b2:c3:f0:09:ec:8d:10:cf:f0:
ac:0c:32:95:55:89:51:50:35:99:c8:96:c6:5e:8e:
e3:b9:18:4d:1c:f0:3a:69:77:34:e3:1b:77:78:10:
54:3a:9d:80:1f:00:c0:e2:f0:b5:a7:0e:48:41:77:
3c:ee:81:1c:99:ad:74:8e:5a:6f:4a:75:2c:e4:8d:
48:c8:fe:f5:93:a9:6a:c1:1b:8e:4d:fe:d0:ac:9d:
29:d2:7f:fb:ac:df:9d:c8:95:a5:9a:5a:f2:42:7c:
bd:ea:0d:d6:2c:a4:1e:af:ed:ef:d3:20:de:55:76:
c1:a9:89:61:19:f5:35:40:a1:67:9a:b4:c0:78:d9:
f0:48:2c:ec:7b:54:3c:91:4f:e2:97:25:f7:cf:82:
86:e2:f3:95:54:4c:0a:1e:ab:6b:ec:6b:58:c3:02:
e7:0a:01:fc:60:83:27:b7:2f:39:73:de:59:5e:55:
12:af:ec:bf:0f:e5:32:f3:6d:81:69:d4:b6:5b:f2:
22:75:b6:ae:b6:ac:bc:2c:15:29:bb:bb:63:f6:b9:
86:63:24:33:4f:c3:45:c4:3b:a2:9a:0f:f5:df:ac:
7e:03
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
69:A3:A2:F4:6E:E4:97:3D:52:4E:62:7F:AA:53:4B:1B:5B:D5:1C:78
X509v3 Authority Key Identifier:
keyid:66:5A:CF:A1:71:59:1B:85:1B:05:50:14:3E:70:29:49:8F:23:8A:F0
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://repo-rpki.idnic.net/repo/7bef6e8d-1ab0-41c4-b3ae-a200d17a821c/0/665ACFA171591B851B0550143E7029498F238AF0.crl
Authority Information Access:
CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/665ACFA171591B851B0550143E7029498F238AF0.cer
Subject Information Access:
Signed Object - URI:rsync://repo-rpki.idnic.net/repo/7bef6e8d-1ab0-41c4-b3ae-a200d17a821c/0/665ACFA171591B851B0550143E7029498F238AF0.mft
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
6d:21:21:6f:b7:85:3e:18:b8:ca:47:5a:1c:e5:ca:3d:c5:a7:
6e:02:59:8c:95:f3:99:a5:1c:20:16:d9:54:b9:6d:53:d0:a9:
f5:cc:d8:f5:10:ef:c9:41:ed:04:3f:b9:3a:16:e8:5f:a5:ad:
b9:ae:2a:de:db:fc:59:65:12:4e:63:b6:95:53:11:63:69:d2:
64:c9:e3:97:e2:ca:29:68:17:54:7a:70:a6:90:f7:6e:9d:b3:
65:99:93:fc:d4:f4:f9:4d:0e:3a:d9:fa:4f:04:dd:60:e8:d7:
09:c1:84:70:00:31:18:8d:45:78:73:d4:dd:b0:f9:63:94:70:
46:1b:14:24:ad:81:11:f6:98:cf:bb:aa:d9:80:b3:3c:c0:95:
e0:8f:88:f4:2c:62:db:54:fe:e5:8c:7e:d3:2f:d4:ca:d1:62:
ce:70:94:44:6a:73:3a:c7:d4:1a:38:e4:87:02:a6:c6:90:be:
48:0e:a3:e8:78:41:8f:43:62:37:aa:c7:6c:1c:e7:b0:84:be:
fe:76:ed:14:95:e7:97:6d:2f:74:20:49:e9:0f:bc:d9:1b:aa:
80:f9:5d:dd:bf:f5:21:e5:74:df:e0:a8:a6:99:77:d9:21:0c:
fd:c6:2d:83:3d:07:95:a5:38:bf:9b:13:aa:5e:3a:f7:51:52:
c8:f4:55:cc
-----BEGIN CERTIFICATE-----
MIIFMjCCBBqgAwIBAgIUAvNina28f2u1wqiaSzz6TONycOowDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoNjY1QUNGQTE3MTU5MUI4NTFCMDU1MDE0M0U3MDI5NDk4
RjIzOEFGMDAeFw0yNjA0MjgyMTE1NTlaFw0yNjA1MDIwODE3NTlaMDMxMTAvBgNV
BAMTKDY5QTNBMkY0NkVFNDk3M0Q1MjRFNjI3RkFBNTM0QjFCNUJENTFDNzgwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCzDV7TX95jtk2Djdz3fR59o+Iz
pqxNN6fIvI8wzzabjLi0WbLD8AnsjRDP8KwMMpVViVFQNZnIlsZejuO5GE0c8Dpp
dzTjG3d4EFQ6nYAfAMDi8LWnDkhBdzzugRyZrXSOWm9KdSzkjUjI/vWTqWrBG45N
/tCsnSnSf/us353IlaWaWvJCfL3qDdYspB6v7e/TIN5VdsGpiWEZ9TVAoWeatMB4
2fBILOx7VDyRT+KXJffPgobi85VUTAoeq2vsa1jDAucKAfxggye3Lzlz3lleVRKv
7L8P5TLzbYFp1LZb8iJ1tq62rLwsFSm7u2P2uYZjJDNPw0XEO6KaD/XfrH4DAgMB
AAGjggI8MIICODAdBgNVHQ4EFgQUaaOi9G7klz1STmJ/qlNLG1vVHHgwHwYDVR0j
BBgwFoAUZlrPoXFZG4UbBVAUPnApSY8jivAwDgYDVR0PAQH/BAQDAgeAMIGFBgNV
HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby83
YmVmNmU4ZC0xYWIwLTQxYzQtYjNhZS1hMjAwZDE3YTgyMWMvMC82NjVBQ0ZBMTcx
NTkxQjg1MUIwNTUwMTQzRTcwMjk0OThGMjM4QUYwLmNybDB0BggrBgEFBQcBAQRo
MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv
L0lETklDLUlELzIvNjY1QUNGQTE3MTU5MUI4NTFCMDU1MDE0M0U3MDI5NDk4RjIz
OEFGMC5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6
Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vN2JlZjZlOGQtMWFiMC00MWM0LWIz
YWUtYTIwMGQxN2E4MjFjLzAvNjY1QUNGQTE3MTU5MUI4NTFCMDU1MDE0M0U3MDI5
NDk4RjIzOEFGMC5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF
BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC
BQAwDQYJKoZIhvcNAQELBQADggEBAG0hIW+3hT4YuMpHWhzlyj3Fp24CWYyV85ml
HCAW2VS5bVPQqfXM2PUQ78lB7QQ/uToW6F+lrbmuKt7b/FllEk5jtpVTEWNp0mTJ
45fiyiloF1R6cKaQ926ds2WZk/zU9PlNDjrZ+k8E3WDo1wnBhHAAMRiNRXhz1N2w
+WOUcEYbFCStgRH2mM+7qtmAszzAleCPiPQsYttU/uWMftMv1MrRYs5wlERqczrH
1Bo45IcCpsaQvkgOo+h4QY9DYjeqx2wc57CEvv527RSV55dtL3QgSekPvNkbqoD5
Xd2/9SHldN/gqKaZd9khDP3GLYM9B5WlOL+bE6peOvdRUsj0Vcw=
-----END CERTIFICATE-----
Generated at Wed Jun 3 03:08:51 2026 by rpki-client