Manifest
$ rpki-client -vvf repo-rpki.idnic.net/repo/b87d446c-1144-4009-bd98-0678d647f4ce/0/C816A670D0EF35D7923125F4B2671225E2E843FB.mft
File: C816A670D0EF35D7923125F4B2671225E2E843FB.mft (raw, json)
Hash identifier: BPyYhF63+hujSfhnuFqmZv5XLxuB3Lk4QOjdgE+97i4=
Subject key identifier: 5F:F1:CB:7C:C4:86:CD:39:19:E9:DC:2D:C8:4F:75:82:EA:9D:D5:A8
Authority key identifier: C8:16:A6:70:D0:EF:35:D7:92:31:25:F4:B2:67:12:25:E2:E8:43:FB
Certificate issuer: /CN=C816A670D0EF35D7923125F4B2671225E2E843FB
Certificate serial: 76748DD163327C4D744CF5CE9D6F08E906044054
Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/C816A670D0EF35D7923125F4B2671225E2E843FB.cer
Subject info access: rsync://repo-rpki.idnic.net/repo/b87d446c-1144-4009-bd98-0678d647f4ce/0/C816A670D0EF35D7923125F4B2671225E2E843FB.mft
Manifest number: 2D
Signing time: Wed 29 Apr 2026 08:23:58 +0000
Manifest this update: Wed 29 Apr 2026 08:18:58 +0000
Manifest next update: Sat 02 May 2026 19:29:58 +0000
Files and hashes: 1: C816A670D0EF35D7923125F4B2671225E2E843FB.crl (hash: D0n9wTLHKaHa2WmiyzDVbbMhimH51MTVMxxknnjipBk=)
2: 3130332e3134312e36322e302f32332d3234203d3e20313338383935.roa (hash: m788pI8kuW1mAz5aJj9/QdtxJsGtB244M/fnoZxh0tA=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
76:74:8d:d1:63:32:7c:4d:74:4c:f5:ce:9d:6f:08:e9:06:04:40:54
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=C816A670D0EF35D7923125F4B2671225E2E843FB
Validity
Not Before: Apr 29 08:18:58 2026 GMT
Not After : May 2 19:29:58 2026 GMT
Subject: CN=5FF1CB7CC486CD3919E9DC2DC84F7582EA9DD5A8
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bc:8f:ef:79:7e:88:79:08:77:ed:29:14:2c:fa:
03:08:f5:b1:4a:74:35:1d:af:e4:08:7c:5e:d1:b4:
d8:37:c2:6c:bf:5e:8d:e6:0b:0a:82:20:67:5d:16:
11:ea:f7:ae:a5:44:f7:e7:e6:e6:68:01:52:67:19:
f3:a7:4c:8d:79:07:0c:2d:d0:a9:13:35:c7:f6:6f:
53:44:98:db:93:0f:53:d1:bd:c5:9e:85:03:30:b9:
24:6b:ac:43:3e:e0:b7:3f:90:7f:72:cb:06:b2:e0:
05:fa:71:78:30:1c:55:f0:87:fd:4e:0f:d2:39:f9:
4a:0b:7f:b0:c1:36:fe:8d:49:0d:61:17:f7:6d:4c:
b7:97:54:b3:37:4b:46:35:df:cf:ef:61:df:62:2c:
06:74:d2:7c:9a:4b:ec:48:b5:7e:9c:d0:2d:84:51:
22:d9:13:da:b4:1f:4f:29:b2:98:c5:82:18:eb:69:
a4:3f:bc:b5:61:3e:11:f9:f7:e3:64:85:25:05:63:
da:d3:77:86:38:f7:d3:c6:97:9d:ff:b9:26:f4:14:
15:c8:1f:2d:19:1b:0d:2f:4c:46:a4:e3:c1:70:50:
34:a2:ea:b7:50:87:40:77:b7:4f:ff:70:3c:83:a1:
11:af:d5:91:af:ac:f5:fd:c9:35:8c:ef:d9:48:2f:
9b:2f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
5F:F1:CB:7C:C4:86:CD:39:19:E9:DC:2D:C8:4F:75:82:EA:9D:D5:A8
X509v3 Authority Key Identifier:
keyid:C8:16:A6:70:D0:EF:35:D7:92:31:25:F4:B2:67:12:25:E2:E8:43:FB
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://repo-rpki.idnic.net/repo/b87d446c-1144-4009-bd98-0678d647f4ce/0/C816A670D0EF35D7923125F4B2671225E2E843FB.crl
Authority Information Access:
CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/C816A670D0EF35D7923125F4B2671225E2E843FB.cer
Subject Information Access:
Signed Object - URI:rsync://repo-rpki.idnic.net/repo/b87d446c-1144-4009-bd98-0678d647f4ce/0/C816A670D0EF35D7923125F4B2671225E2E843FB.mft
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
83:b1:96:35:f0:f8:c1:a2:49:66:2c:25:cb:ff:74:3c:2d:af:
05:93:f2:d6:0a:88:b6:0d:e6:78:45:2a:92:ec:ff:dc:74:13:
cb:b8:a1:c8:67:d7:41:ee:35:ed:0c:cf:a6:32:22:b1:f6:2e:
0d:0b:09:ed:5d:0e:df:69:ec:23:37:62:a1:02:49:94:68:62:
20:4c:90:5d:5e:46:52:16:e7:0a:47:11:31:86:0c:9e:07:e6:
f1:5b:c0:03:0c:c4:d9:39:43:94:49:4f:a7:4d:8f:b3:bc:69:
68:b7:f0:0c:b9:45:be:a5:2b:3c:b7:26:39:de:df:b7:3e:4b:
39:21:1a:46:4b:a2:e4:c2:dd:54:05:f4:57:67:89:3a:f7:aa:
3e:6e:15:61:aa:32:b0:cb:ad:7b:9f:52:11:4b:04:f7:92:72:
61:4c:70:ad:b6:e2:2a:84:fc:83:35:d2:44:f9:92:14:85:2e:
ea:05:2e:22:ef:be:b1:ef:6e:3d:e9:ef:c9:d5:fa:1f:c1:ba:
d8:82:75:0f:bb:96:ee:1c:8f:e9:83:52:50:72:82:a9:e0:39:
7c:2e:19:78:d7:5d:6b:9f:14:23:62:62:b9:5a:2c:67:2f:04:
99:c2:d3:66:17:98:c7:9e:90:7b:1b:30:8b:70:95:dd:7d:99:
41:e3:98:0b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jun 3 03:09:17 2026 by rpki-client