Manifest
$ rpki-client -vvf repo-rpki.idnic.net/repo/a5deca82-89ab-4582-8e82-8ec8a51fec42/0/71876CD3DD087E9543A347F614A4D24A87A40F95.mft
File: 71876CD3DD087E9543A347F614A4D24A87A40F95.mft (raw, json)
Hash identifier: jxahiuZpVkER9coK7ahCAxKSy4xGgJSIW0kj0v2wAU4=
Subject key identifier: F3:B8:0A:25:6D:B2:3B:E7:57:03:00:D0:7A:24:B8:17:59:FE:16:39
Authority key identifier: 71:87:6C:D3:DD:08:7E:95:43:A3:47:F6:14:A4:D2:4A:87:A4:0F:95
Certificate issuer: /CN=71876CD3DD087E9543A347F614A4D24A87A40F95
Certificate serial: 3E0E1A4CE09562787E141AB8F68D31BDA54890FB
Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/71876CD3DD087E9543A347F614A4D24A87A40F95.cer
Subject info access: rsync://repo-rpki.idnic.net/repo/a5deca82-89ab-4582-8e82-8ec8a51fec42/0/71876CD3DD087E9543A347F614A4D24A87A40F95.mft
Manifest number: 0218
Signing time: Mon 27 Apr 2026 17:11:28 +0000
Manifest this update: Mon 27 Apr 2026 17:06:28 +0000
Manifest next update: Fri 01 May 2026 04:27:28 +0000
Files and hashes: 1: 3130332e3130372e3230362e302f32342d3234203d3e20313431313238.roa (hash: o+ObFNPOeoy9QHMr9JkuLi0Oplv3Nwb5WNwb7QDMg90=)
2: 71876CD3DD087E9543A347F614A4D24A87A40F95.crl (hash: +Wl6dd8UA8JJiS+J1p2hMybgsh9zZzbnFl4nqgeOdA8=)
3: 3130332e3135382e3133302e302f32342d3234203d3e20313431313238.roa (hash: InJPaa/K/Tdw95KsetWVBO6eC2FHgWnfV4A1F9baTg0=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
3e:0e:1a:4c:e0:95:62:78:7e:14:1a:b8:f6:8d:31:bd:a5:48:90:fb
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=71876CD3DD087E9543A347F614A4D24A87A40F95
Validity
Not Before: Apr 27 17:06:28 2026 GMT
Not After : May 1 04:27:28 2026 GMT
Subject: CN=F3B80A256DB23BE7570300D07A24B81759FE1639
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e7:94:f6:7c:4d:4e:e1:b5:3d:26:c1:09:e5:35:
3f:31:fe:56:45:c7:21:d5:fc:cd:be:01:33:27:ed:
a9:45:43:a5:a5:20:69:3b:0f:2d:21:4a:3b:e9:23:
9e:33:8e:32:7e:48:a2:08:6d:6a:ce:d2:b0:85:16:
b2:21:dd:93:fb:a9:45:4f:2f:67:33:50:0e:f6:0d:
98:27:98:b0:6b:f3:7b:18:ca:59:f5:d4:65:2f:fe:
c3:8e:76:4d:85:30:fd:f8:d3:d3:59:e2:f9:a5:88:
b0:59:64:6c:b0:7a:11:75:a7:86:3a:c4:a5:65:e9:
05:bb:c2:43:1a:1d:8d:45:06:e2:74:0e:36:ff:0f:
94:5c:6d:26:0e:f6:32:4c:a4:3c:73:4b:31:01:13:
65:f1:e4:47:be:79:ef:0b:f1:0c:bc:df:c9:78:b1:
7d:f7:85:e2:ed:f4:69:89:1a:a2:2f:41:5a:00:a2:
4e:33:9f:d0:43:a4:ca:99:21:2e:47:73:e3:5f:b8:
af:36:a5:d1:54:7c:7f:ca:a1:e0:b3:5d:df:44:1d:
82:b4:8b:d7:56:aa:cb:eb:7b:53:6f:e5:09:cb:27:
81:3b:24:94:b9:3f:3e:0f:b4:03:a8:5c:76:2c:67:
b2:28:ea:f0:53:40:a6:fb:87:35:e1:a8:89:55:62:
ef:09
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F3:B8:0A:25:6D:B2:3B:E7:57:03:00:D0:7A:24:B8:17:59:FE:16:39
X509v3 Authority Key Identifier:
keyid:71:87:6C:D3:DD:08:7E:95:43:A3:47:F6:14:A4:D2:4A:87:A4:0F:95
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://repo-rpki.idnic.net/repo/a5deca82-89ab-4582-8e82-8ec8a51fec42/0/71876CD3DD087E9543A347F614A4D24A87A40F95.crl
Authority Information Access:
CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/71876CD3DD087E9543A347F614A4D24A87A40F95.cer
Subject Information Access:
Signed Object - URI:rsync://repo-rpki.idnic.net/repo/a5deca82-89ab-4582-8e82-8ec8a51fec42/0/71876CD3DD087E9543A347F614A4D24A87A40F95.mft
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
15:c7:a6:f4:2a:63:a2:e9:7b:c4:35:69:45:7b:89:ed:b5:80:
79:31:3d:65:dc:42:b3:be:b7:01:c0:6a:8c:9e:05:66:91:d5:
49:46:1d:89:fc:18:66:01:c6:4c:59:20:4a:51:6d:f0:be:2d:
ac:de:e4:37:ea:25:5b:a0:2b:5b:21:ee:1b:db:77:9c:a4:f8:
07:3b:e3:b8:4a:ba:a8:b6:5d:6a:c8:3a:3e:fc:86:a2:e3:24:
bc:fd:19:b2:2a:c6:56:b4:5a:42:ae:f5:81:46:13:1e:15:c2:
78:72:7e:0e:e2:1c:50:34:93:2e:32:b8:03:66:ba:10:b8:77:
c7:ca:a7:88:03:12:fc:91:b5:e9:3d:1f:ca:50:0c:48:ae:b6:
45:0d:9c:a6:48:b2:a4:ae:0f:69:13:fe:7e:4c:3f:22:18:a6:
24:5b:a7:6a:f7:db:b8:70:e0:aa:33:6a:5e:fd:dd:08:ed:1e:
91:4e:8b:bc:37:36:6f:e2:8f:62:a9:89:e4:cc:e2:ce:e4:29:
bc:ba:35:7d:bd:5b:d4:0a:5e:19:bd:3d:09:c2:e4:ab:eb:39:
c8:13:83:12:34:84:b0:c8:65:c3:65:de:68:84:12:11:26:42:
12:49:31:ea:00:4a:ab:ea:db:63:9b:f2:de:d7:63:99:45:1e:
7a:92:d5:51
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jun 3 03:08:03 2026 by rpki-client