Manifest
$ rpki-client -vvf repo-rpki.idnic.net/repo/a39c5484-2e37-48f9-8eba-0af4ef62947d/0/968A6FAD637E47068D2FBC547FBF2C1C12F8C588.mft
File: 968A6FAD637E47068D2FBC547FBF2C1C12F8C588.mft (raw, json)
Hash identifier: 1AhleJj15vqnR0UddHTbeMM1hY8nxt9UqyKbXby5540=
Subject key identifier: 5A:90:38:EB:3F:ED:FA:54:A6:3E:6B:B0:F9:57:7A:9D:DA:90:D2:93
Authority key identifier: 96:8A:6F:AD:63:7E:47:06:8D:2F:BC:54:7F:BF:2C:1C:12:F8:C5:88
Certificate issuer: /CN=968A6FAD637E47068D2FBC547FBF2C1C12F8C588
Certificate serial: 703440CBA5E6F1C65DFA5130D3E2F74AA009A45A
Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/968A6FAD637E47068D2FBC547FBF2C1C12F8C588.cer
Subject info access: rsync://repo-rpki.idnic.net/repo/a39c5484-2e37-48f9-8eba-0af4ef62947d/0/968A6FAD637E47068D2FBC547FBF2C1C12F8C588.mft
Manifest number: 0238
Signing time: Mon 27 Apr 2026 10:12:42 +0000
Manifest this update: Mon 27 Apr 2026 10:07:42 +0000
Manifest next update: Thu 30 Apr 2026 13:42:42 +0000
Files and hashes: 1: 968A6FAD637E47068D2FBC547FBF2C1C12F8C588.crl (hash: 0FOfUVI4Mz2SVYF9laKdcBwhz7hjpCFRHSPXBUU/1Kw=)
2: 323030313a6466313a373334303a3a2f34382d3438203d3e20313530323439.roa (hash: eNkBoyVM5lmriR4TCktsibpcmvUKMiPu24PT3RZP9b8=)
3: 3130332e38372e36382e302f32342d3234203d3e20313530323439.roa (hash: 8lJPUsKlUGR1W/uo827D06TJO+cPwjSi9R8wQT4VPpg=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
70:34:40:cb:a5:e6:f1:c6:5d:fa:51:30:d3:e2:f7:4a:a0:09:a4:5a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=968A6FAD637E47068D2FBC547FBF2C1C12F8C588
Validity
Not Before: Apr 27 10:07:42 2026 GMT
Not After : Apr 30 13:42:42 2026 GMT
Subject: CN=5A9038EB3FEDFA54A63E6BB0F9577A9DDA90D293
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ae:3f:38:96:1a:1a:36:97:fa:b3:43:ff:31:26:
c0:b2:3b:7d:1d:c3:8a:6e:d2:a6:21:65:3f:3b:8c:
dd:7d:b6:78:9d:24:9a:65:63:29:56:a0:11:c1:f7:
fa:63:70:9e:50:2d:72:43:5d:50:73:ee:9b:a8:91:
6f:e4:4d:35:ef:67:68:c1:41:d5:cf:b0:ec:c0:1c:
1b:47:2e:ce:9f:f3:e6:70:46:a4:f8:7d:1b:70:8f:
3b:46:ce:a6:31:e4:8d:c3:3a:ac:84:9b:a3:3f:e6:
de:c6:c0:4d:f6:da:90:4c:5c:f2:20:40:b2:35:44:
2a:c8:5b:db:19:e5:2f:51:0c:b4:e9:a4:b5:b5:c9:
f0:23:fc:25:fd:f3:bd:24:76:36:88:96:22:8c:84:
53:08:e0:c5:62:01:4c:ac:6f:9e:35:b6:e2:57:0d:
e1:ba:65:9b:f9:18:31:6c:2d:05:b7:30:7a:1a:2d:
8a:fe:ab:57:55:be:0d:34:1b:6b:08:a4:d5:03:92:
6a:7b:66:9e:95:77:8c:58:9a:43:9d:c5:51:bc:9c:
b0:fc:36:c3:ae:2f:e5:1e:b4:6e:41:20:d7:78:df:
39:b1:6c:c5:48:73:a0:3e:f3:94:54:95:d4:44:cb:
e9:0f:e7:cb:bb:ea:2d:76:be:3e:08:d4:3e:ab:89:
65:63
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
5A:90:38:EB:3F:ED:FA:54:A6:3E:6B:B0:F9:57:7A:9D:DA:90:D2:93
X509v3 Authority Key Identifier:
keyid:96:8A:6F:AD:63:7E:47:06:8D:2F:BC:54:7F:BF:2C:1C:12:F8:C5:88
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://repo-rpki.idnic.net/repo/a39c5484-2e37-48f9-8eba-0af4ef62947d/0/968A6FAD637E47068D2FBC547FBF2C1C12F8C588.crl
Authority Information Access:
CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/968A6FAD637E47068D2FBC547FBF2C1C12F8C588.cer
Subject Information Access:
Signed Object - URI:rsync://repo-rpki.idnic.net/repo/a39c5484-2e37-48f9-8eba-0af4ef62947d/0/968A6FAD637E47068D2FBC547FBF2C1C12F8C588.mft
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
a5:87:2b:9f:12:74:3a:61:80:82:de:9c:71:99:c4:c2:f4:59:
9d:cc:e4:2b:49:70:a8:54:38:1c:ac:bf:22:f9:62:da:59:ec:
2b:00:d4:a5:61:3a:2b:19:3a:c6:30:aa:df:d6:0f:f0:f4:cd:
19:37:38:45:bc:49:ec:b8:03:05:c1:6a:ab:06:1b:5d:78:5e:
92:54:c2:56:1f:e3:b8:31:4d:67:6b:16:b7:16:ab:86:ef:8d:
fa:92:6a:0c:69:e4:8b:8b:4b:9e:9f:9d:2c:86:d6:b9:b7:07:
b4:84:35:88:a8:e5:54:2b:4e:ea:5e:ab:6a:0f:3b:97:ba:1e:
5f:b3:91:51:05:40:f1:cd:e8:84:c3:ff:2d:b5:7b:80:a0:d1:
7d:18:4e:ad:0e:3e:a7:16:7d:22:65:05:76:ee:24:a4:01:19:
ed:c1:7d:b8:41:70:40:c4:d6:48:b5:df:28:33:f8:dd:b9:88:
2d:f7:38:76:0d:6a:4c:2a:63:e0:81:61:a2:0b:aa:64:b0:69:
e0:5b:15:aa:76:08:72:b8:0b:4a:02:38:69:ed:55:26:02:6e:
67:c9:ef:23:dc:fd:0f:bb:a3:48:b8:ce:af:ef:67:66:c4:eb:
52:8a:30:9f:48:d9:f8:06:65:f7:6c:77:68:61:6c:83:e3:2a:
f2:f0:9a:b9
-----BEGIN CERTIFICATE-----
MIIFMjCCBBqgAwIBAgIUcDRAy6Xm8cZd+lEw0+L3SqAJpFowDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoOTY4QTZGQUQ2MzdFNDcwNjhEMkZCQzU0N0ZCRjJDMUMx
MkY4QzU4ODAeFw0yNjA0MjcxMDA3NDJaFw0yNjA0MzAxMzQyNDJaMDMxMTAvBgNV
BAMTKDVBOTAzOEVCM0ZFREZBNTRBNjNFNkJCMEY5NTc3QTlEREE5MEQyOTMwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCuPziWGho2l/qzQ/8xJsCyO30d
w4pu0qYhZT87jN19tnidJJplYylWoBHB9/pjcJ5QLXJDXVBz7puokW/kTTXvZ2jB
QdXPsOzAHBtHLs6f8+ZwRqT4fRtwjztGzqYx5I3DOqyEm6M/5t7GwE322pBMXPIg
QLI1RCrIW9sZ5S9RDLTppLW1yfAj/CX9870kdjaIliKMhFMI4MViAUysb541tuJX
DeG6ZZv5GDFsLQW3MHoaLYr+q1dVvg00G2sIpNUDkmp7Zp6Vd4xYmkOdxVG8nLD8
NsOuL+UetG5BINd43zmxbMVIc6A+85RUldREy+kP58u76i12vj4I1D6riWVjAgMB
AAGjggI8MIICODAdBgNVHQ4EFgQUWpA46z/t+lSmPmuw+Vd6ndqQ0pMwHwYDVR0j
BBgwFoAUlopvrWN+RwaNL7xUf78sHBL4xYgwDgYDVR0PAQH/BAQDAgeAMIGFBgNV
HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby9h
MzljNTQ4NC0yZTM3LTQ4ZjktOGViYS0wYWY0ZWY2Mjk0N2QvMC85NjhBNkZBRDYz
N0U0NzA2OEQyRkJDNTQ3RkJGMkMxQzEyRjhDNTg4LmNybDB0BggrBgEFBQcBAQRo
MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv
L0lETklDLUlELzIvOTY4QTZGQUQ2MzdFNDcwNjhEMkZCQzU0N0ZCRjJDMUMxMkY4
QzU4OC5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6
Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vYTM5YzU0ODQtMmUzNy00OGY5LThl
YmEtMGFmNGVmNjI5NDdkLzAvOTY4QTZGQUQ2MzdFNDcwNjhEMkZCQzU0N0ZCRjJD
MUMxMkY4QzU4OC5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF
BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC
BQAwDQYJKoZIhvcNAQELBQADggEBAKWHK58SdDphgILenHGZxML0WZ3M5CtJcKhU
OBysvyL5YtpZ7CsA1KVhOisZOsYwqt/WD/D0zRk3OEW8Sey4AwXBaqsGG114XpJU
wlYf47gxTWdrFrcWq4bvjfqSagxp5IuLS56fnSyG1rm3B7SENYio5VQrTupeq2oP
O5e6Hl+zkVEFQPHN6ITD/y21e4Cg0X0YTq0OPqcWfSJlBXbuJKQBGe3BfbhBcEDE
1ki13ygz+N25iC33OHYNakwqY+CBYaILqmSwaeBbFap2CHK4C0oCOGntVSYCbmfJ
7yPc/Q+7o0i4zq/vZ2bE61KKMJ9I2fgGZfdsd2hhbIPjKvLwmrk=
-----END CERTIFICATE-----
Generated at Wed Jun 3 03:17:36 2026 by rpki-client