Manifest
$ rpki-client -vvf repo-rpki.idnic.net/repo/b25c7e1d-82e8-4100-b435-9954272fb7a8/0/CFE59D4C7A613AB43FC8F68E8974ABC8277B99D1.mft
File: CFE59D4C7A613AB43FC8F68E8974ABC8277B99D1.mft (raw, json)
Hash identifier: xw2d9X/B1nnHT0aWKrQ//mG6K5YiAXgJ+cNwwvYDJLk=
Subject key identifier: 1C:7A:90:E2:B1:7B:21:FD:E6:D8:31:4F:81:71:90:52:AB:65:CF:F0
Authority key identifier: CF:E5:9D:4C:7A:61:3A:B4:3F:C8:F6:8E:89:74:AB:C8:27:7B:99:D1
Certificate issuer: /CN=CFE59D4C7A613AB43FC8F68E8974ABC8277B99D1
Certificate serial: 6921E5FAFFE352B382E612997E3F94EAF123191C
Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/CFE59D4C7A613AB43FC8F68E8974ABC8277B99D1.cer
Subject info access: rsync://repo-rpki.idnic.net/repo/b25c7e1d-82e8-4100-b435-9954272fb7a8/0/CFE59D4C7A613AB43FC8F68E8974ABC8277B99D1.mft
Manifest number: 027D
Signing time: Wed 29 Apr 2026 01:31:16 +0000
Manifest this update: Wed 29 Apr 2026 01:26:16 +0000
Manifest next update: Sat 02 May 2026 08:32:16 +0000
Files and hashes: 1: 3130332e3138372e3136332e302f32342d3234203d3e20313439373434.roa (hash: /SzWYqZUMsg47vwYbafB1G0qt1wr0vCK02LHAWPClVk=)
2: CFE59D4C7A613AB43FC8F68E8974ABC8277B99D1.crl (hash: IwJGLBZKaGU20Wf7ZGSbIdjHtYyYM6EcFdsrispEC1A=)
3: 3130332e3138372e3136322e302f32332d3233203d3e20313439373434.roa (hash: SXu6y5hAHpLUxTpHQELosLw/ezbeelmjazY+x7480hw=)
4: 3130332e3138372e3136322e302f32342d3234203d3e20313439373434.roa (hash: Dn1TWs8KInIikwDEUwL4D4avm/veFQbAcGAcTpLQx70=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
69:21:e5:fa:ff:e3:52:b3:82:e6:12:99:7e:3f:94:ea:f1:23:19:1c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=CFE59D4C7A613AB43FC8F68E8974ABC8277B99D1
Validity
Not Before: Apr 29 01:26:16 2026 GMT
Not After : May 2 08:32:16 2026 GMT
Subject: CN=1C7A90E2B17B21FDE6D8314F81719052AB65CFF0
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:f4:04:99:14:1c:91:25:b3:10:3c:3d:3f:01:8b:
a0:11:79:6e:15:1b:32:e3:9d:01:e1:4c:34:54:5f:
e7:7b:64:aa:9e:a5:04:09:1b:97:c5:9f:a9:bd:6d:
79:b2:99:b9:e5:4e:92:84:99:c8:3f:22:b7:26:44:
89:ff:f8:09:8a:a6:a8:df:66:a5:66:f3:b2:5e:82:
a2:50:cb:00:4a:9e:12:ba:60:d4:45:70:35:bb:19:
eb:b7:a3:78:7d:d7:a5:d3:ec:79:ee:6d:db:f9:51:
a6:6c:7a:fe:8f:69:60:44:3b:04:0c:fb:54:31:66:
79:d3:53:80:7f:6e:34:07:47:da:e6:a5:6b:3c:f1:
49:e4:a9:63:b3:bb:a1:f4:8b:bb:b6:d3:e2:b5:44:
4a:3d:c1:2c:a0:45:f8:db:76:9a:53:1e:b7:f4:37:
d2:51:5a:07:f7:af:a2:bf:22:99:a5:57:ca:8f:d6:
86:05:49:56:2f:9b:4c:92:b3:48:f0:ca:bf:0d:3f:
9a:a9:d4:97:79:ce:bc:7f:67:44:a0:cd:c2:0a:47:
76:ef:e6:1f:be:7f:9a:33:25:ee:54:db:be:04:eb:
51:65:d8:62:18:09:60:42:eb:89:4f:7a:6a:60:33:
e3:3a:01:89:94:a1:51:3a:a6:5a:53:b6:7f:b2:74:
b9:0b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
1C:7A:90:E2:B1:7B:21:FD:E6:D8:31:4F:81:71:90:52:AB:65:CF:F0
X509v3 Authority Key Identifier:
keyid:CF:E5:9D:4C:7A:61:3A:B4:3F:C8:F6:8E:89:74:AB:C8:27:7B:99:D1
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://repo-rpki.idnic.net/repo/b25c7e1d-82e8-4100-b435-9954272fb7a8/0/CFE59D4C7A613AB43FC8F68E8974ABC8277B99D1.crl
Authority Information Access:
CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/CFE59D4C7A613AB43FC8F68E8974ABC8277B99D1.cer
Subject Information Access:
Signed Object - URI:rsync://repo-rpki.idnic.net/repo/b25c7e1d-82e8-4100-b435-9954272fb7a8/0/CFE59D4C7A613AB43FC8F68E8974ABC8277B99D1.mft
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
39:e2:47:fe:40:88:70:3a:9b:2c:b4:91:6f:20:5a:58:73:57:
7e:e9:57:dc:89:ea:65:f2:3a:e9:5f:1a:72:1e:c6:ce:97:91:
1d:e8:57:54:3a:75:af:bc:c6:5b:2f:23:a7:5d:9b:8e:2a:79:
7c:94:e3:93:5a:06:35:e4:19:8d:63:35:ac:4b:e8:9d:66:f1:
2e:08:a9:9f:91:51:28:e0:6b:10:e8:db:53:3e:9e:89:d7:bc:
d8:33:83:a6:7d:72:78:e3:b1:a9:4b:39:88:92:4c:3f:34:12:
0c:38:9a:c1:97:d5:72:a6:7c:c4:5e:dd:ea:a5:7f:ae:3f:fb:
be:e2:aa:98:45:38:b4:72:eb:8d:25:4a:0a:b4:7b:8f:1a:1e:
ad:cd:e1:ec:5f:5d:b3:2c:80:c6:76:50:09:00:6a:73:c1:41:
af:8b:d8:52:2e:fd:b3:6c:00:05:15:e6:26:f7:8d:30:8f:2b:
31:76:04:9f:a5:a6:be:d9:92:ce:95:64:e9:23:cf:4f:38:d4:
8a:86:3c:6b:45:05:07:7c:f6:9f:66:4d:ff:13:3c:20:56:5a:
85:36:52:d9:f4:dc:51:57:7e:cf:6e:24:62:36:f5:33:27:05:
1a:db:ca:7d:39:b3:cc:da:71:cd:fc:5b:ce:d3:7a:fa:f3:78:
0a:7a:8c:a7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jun 3 03:44:37 2026 by rpki-client