Manifest
$ rpki-client -vvf repo-rpki.idnic.net/repo/85ee40dc-51ba-4769-8619-2289cce9629e/0/688610C731A4E7A1D35B3E264DF9A05873F1E6C1.mft
File: 688610C731A4E7A1D35B3E264DF9A05873F1E6C1.mft (raw, json)
Hash identifier: yI8c0CTVNpqse1FK0iQXxIZPYZ5t3JVDOycsnTE9M9Y=
Subject key identifier: 1D:EF:AA:FE:D6:F1:E4:94:89:3A:A8:2B:42:03:A2:17:00:F6:4A:5C
Authority key identifier: 68:86:10:C7:31:A4:E7:A1:D3:5B:3E:26:4D:F9:A0:58:73:F1:E6:C1
Certificate issuer: /CN=688610C731A4E7A1D35B3E264DF9A05873F1E6C1
Certificate serial: 60D8FAFACC43AF16EC97D513E06ED4BFC6DDF413
Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/688610C731A4E7A1D35B3E264DF9A05873F1E6C1.cer
Subject info access: rsync://repo-rpki.idnic.net/repo/85ee40dc-51ba-4769-8619-2289cce9629e/0/688610C731A4E7A1D35B3E264DF9A05873F1E6C1.mft
Manifest number: 03D0
Signing time: Tue 28 Apr 2026 06:20:05 +0000
Manifest this update: Tue 28 Apr 2026 06:15:05 +0000
Manifest next update: Fri 01 May 2026 17:15:05 +0000
Files and hashes: 1: 3130332e3136382e32382e302f32342d3234203d3e20313432333132.roa (hash: mBYH8gEsLmD3y+qkk4G3qCPY2je4uGHtFmuvsJ2F9co=)
2: 688610C731A4E7A1D35B3E264DF9A05873F1E6C1.crl (hash: +GocSP5XPz9lhUk4fwJ8w9jpckzIFJFi9Z1QMVuBiE0=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
60:d8:fa:fa:cc:43:af:16:ec:97:d5:13:e0:6e:d4:bf:c6:dd:f4:13
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=688610C731A4E7A1D35B3E264DF9A05873F1E6C1
Validity
Not Before: Apr 28 06:15:05 2026 GMT
Not After : May 1 17:15:05 2026 GMT
Subject: CN=1DEFAAFED6F1E494893AA82B4203A21700F64A5C
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b4:b1:fa:82:2c:05:2d:c0:0b:67:e2:26:3d:3d:
fc:d7:e5:42:a5:9f:ff:c1:9b:6b:86:3e:33:dd:d4:
65:85:37:21:45:50:dc:a3:74:dc:8d:77:a5:11:da:
50:e5:2c:99:c2:d4:ad:fb:43:44:ed:99:ae:a3:4e:
66:8a:d3:2c:f1:da:0e:37:1a:a0:10:4f:ca:07:2e:
b4:25:60:49:e1:58:fc:49:a8:ff:ad:54:0c:6c:b0:
c0:a3:fc:16:a6:7a:74:a5:24:f0:9b:43:13:94:18:
c7:08:64:3a:40:bb:cc:64:a5:95:7f:71:f9:0d:68:
b3:a5:58:f4:f4:b0:10:16:1a:20:c8:af:5b:49:23:
9c:3e:fa:4c:c0:a3:39:dd:b9:1f:2f:4c:8c:e0:8b:
c1:65:5a:f8:ec:97:9c:7c:3e:d5:5b:cc:dd:eb:de:
0f:d1:2c:aa:de:89:1b:1c:d2:97:e5:1e:02:01:82:
ed:39:1e:37:d9:44:91:fc:93:da:bd:08:69:e9:04:
88:6e:57:ab:88:89:ba:6e:b5:ba:fb:ef:29:8f:ef:
b5:ee:1b:1e:ce:7c:f8:c7:1e:61:f0:fa:ef:91:36:
27:25:a5:ba:20:e6:2c:7d:a4:08:f7:1e:f7:a9:71:
60:ad:03:c6:6b:16:ae:50:37:b2:63:d0:78:f7:b7:
04:ed
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
1D:EF:AA:FE:D6:F1:E4:94:89:3A:A8:2B:42:03:A2:17:00:F6:4A:5C
X509v3 Authority Key Identifier:
keyid:68:86:10:C7:31:A4:E7:A1:D3:5B:3E:26:4D:F9:A0:58:73:F1:E6:C1
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://repo-rpki.idnic.net/repo/85ee40dc-51ba-4769-8619-2289cce9629e/0/688610C731A4E7A1D35B3E264DF9A05873F1E6C1.crl
Authority Information Access:
CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/688610C731A4E7A1D35B3E264DF9A05873F1E6C1.cer
Subject Information Access:
Signed Object - URI:rsync://repo-rpki.idnic.net/repo/85ee40dc-51ba-4769-8619-2289cce9629e/0/688610C731A4E7A1D35B3E264DF9A05873F1E6C1.mft
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
2a:52:cb:e2:b4:14:9b:23:f3:85:ef:3f:29:3e:4a:0d:ea:7e:
b6:a9:ad:3d:1d:38:bb:18:19:d8:4e:2e:5d:2f:dd:e6:47:9c:
9b:62:43:96:34:d9:b3:de:ef:37:75:f0:96:c8:52:65:23:8b:
69:e6:08:00:62:e4:f4:79:77:74:36:47:3c:37:34:e0:c6:ed:
ba:9c:ce:70:a6:57:e8:a5:0b:a9:2a:f4:81:02:aa:70:9a:ad:
61:af:24:a2:7b:18:00:d0:5e:2a:70:53:76:f0:32:4f:38:1a:
32:c6:34:63:3d:b1:74:47:9d:22:cd:76:ab:22:91:4c:70:cf:
4b:5c:4d:62:1b:8f:bd:7c:23:3c:33:e1:3e:60:3e:c4:1c:28:
b6:55:96:3c:12:00:94:ac:52:77:76:6e:07:3a:5b:d7:42:2c:
b5:55:11:6e:e0:c8:13:b5:08:ea:8b:63:2e:3a:7e:aa:d1:1c:
4d:27:49:c0:a9:1d:c5:c4:fa:ea:e0:da:25:a9:1c:45:a5:93:
31:83:5d:ba:f8:b6:e5:ed:42:49:b6:b0:12:d3:96:73:7d:07:
1f:c3:16:9c:d7:9e:33:7d:06:63:01:b2:9b:6f:e6:12:0d:e9:
27:c8:dc:a8:b0:7e:1e:26:0e:5b:7c:86:33:a4:e7:a0:60:b6:
51:cf:d8:2a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jun 3 03:09:13 2026 by rpki-client