Manifest
$ rpki-client -vvf repo-rpki.idnic.net/repo/be11e98f-f54e-460b-88f3-bf91e0443e90/0/1FF9DE476AB686559E1C183A1B5BD4733E1B01ED.mft
File: 1FF9DE476AB686559E1C183A1B5BD4733E1B01ED.mft (raw, json)
Hash identifier: Y9nCdwgxZRN8w56Gg2g901mFKmcx51IuyiR7ZbWfmxw=
Subject key identifier: 7F:29:13:76:51:88:79:73:11:09:A6:86:50:5F:16:C9:ED:32:F0:BC
Authority key identifier: 1F:F9:DE:47:6A:B6:86:55:9E:1C:18:3A:1B:5B:D4:73:3E:1B:01:ED
Certificate issuer: /CN=1FF9DE476AB686559E1C183A1B5BD4733E1B01ED
Certificate serial: 6B85FCDAC8188F7F9EA2EC857DDF28EF777F7D7E
Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/1FF9DE476AB686559E1C183A1B5BD4733E1B01ED.cer
Subject info access: rsync://repo-rpki.idnic.net/repo/be11e98f-f54e-460b-88f3-bf91e0443e90/0/1FF9DE476AB686559E1C183A1B5BD4733E1B01ED.mft
Manifest number: 0231
Signing time: Tue 28 Apr 2026 14:51:54 +0000
Manifest this update: Tue 28 Apr 2026 14:46:54 +0000
Manifest next update: Fri 01 May 2026 22:46:54 +0000
Files and hashes: 1: 1FF9DE476AB686559E1C183A1B5BD4733E1B01ED.crl (hash: snD890P5pGjcv2SM1uxbQCRPQvZIWzMRmBDV/mMPS8M=)
2: 3130332e33362e37302e302f32342d3234203d3e20313530323037.roa (hash: HKLsheyFBInUiaRgw8Klw1MJDMbLM2+SrSvU3xYlmos=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
6b:85:fc:da:c8:18:8f:7f:9e:a2:ec:85:7d:df:28:ef:77:7f:7d:7e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=1FF9DE476AB686559E1C183A1B5BD4733E1B01ED
Validity
Not Before: Apr 28 14:46:54 2026 GMT
Not After : May 1 22:46:54 2026 GMT
Subject: CN=7F291376518879731109A686505F16C9ED32F0BC
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ab:f8:41:6d:3f:84:50:94:b9:20:20:fa:ae:7e:
e8:a1:38:9b:08:e2:6a:fb:0c:5b:70:dc:15:a2:ef:
27:92:2e:9e:99:2e:97:a7:dc:05:5b:9a:39:d3:02:
ca:96:ce:c8:54:5e:99:4b:f8:fc:0b:bb:3e:5b:c0:
3a:0b:ba:13:d7:fe:39:53:96:64:cf:75:9f:27:1f:
9f:75:e7:77:e1:30:ec:20:be:45:bb:3a:d9:2c:a8:
7e:ec:9b:3d:15:d8:5c:33:02:ae:72:a5:87:4d:19:
20:46:7d:6b:93:5f:b5:30:40:69:85:38:a2:79:03:
db:cc:f8:e5:db:31:db:33:56:cf:7b:07:94:76:7d:
55:26:aa:8e:44:0b:a2:d5:67:ed:42:75:3d:07:11:
b8:50:d0:20:45:6a:e8:57:08:3f:e7:aa:53:40:f8:
b5:95:71:9f:ac:80:25:ea:d2:bf:69:9d:af:dc:26:
0d:40:e9:7b:cf:09:39:96:5c:22:09:06:cd:f1:44:
00:73:7a:80:58:e7:41:f2:7b:23:19:f1:f2:4b:5e:
d1:db:de:53:af:90:86:f3:f5:69:ad:34:fd:a3:cb:
10:f3:6b:49:6e:f6:43:a6:cd:02:ef:00:e8:bf:76:
d8:d8:1c:82:cd:ff:7d:e8:c8:38:51:7d:1e:57:37:
ed:83
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
7F:29:13:76:51:88:79:73:11:09:A6:86:50:5F:16:C9:ED:32:F0:BC
X509v3 Authority Key Identifier:
keyid:1F:F9:DE:47:6A:B6:86:55:9E:1C:18:3A:1B:5B:D4:73:3E:1B:01:ED
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://repo-rpki.idnic.net/repo/be11e98f-f54e-460b-88f3-bf91e0443e90/0/1FF9DE476AB686559E1C183A1B5BD4733E1B01ED.crl
Authority Information Access:
CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/1FF9DE476AB686559E1C183A1B5BD4733E1B01ED.cer
Subject Information Access:
Signed Object - URI:rsync://repo-rpki.idnic.net/repo/be11e98f-f54e-460b-88f3-bf91e0443e90/0/1FF9DE476AB686559E1C183A1B5BD4733E1B01ED.mft
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
94:bf:bf:e6:c8:cd:bd:98:05:18:3f:da:f4:19:0d:a3:60:98:
65:19:36:15:bf:97:4f:7a:6a:4c:04:5f:c7:11:03:11:25:d8:
75:f7:b4:21:18:d1:f5:a6:05:d7:bb:0b:e6:d4:d1:18:76:d2:
02:71:15:8e:6d:c1:aa:4a:75:16:ae:f0:11:d2:f6:d8:98:b1:
83:39:67:e2:3f:63:1a:d1:ad:58:49:f4:a5:c5:c8:07:03:c4:
8b:2e:00:c0:3b:1f:21:01:8c:59:a2:69:d7:f7:f6:25:40:44:
5f:5f:59:b0:79:c1:10:5d:45:71:fc:63:2c:3a:ed:1c:8d:e4:
1b:71:20:22:71:2f:54:09:ff:98:9b:4a:2f:52:fe:18:d2:f4:
30:51:2a:a9:e4:61:76:cb:4b:57:92:f3:7b:a4:30:ae:96:b1:
67:80:c7:c6:30:6b:3d:1d:67:97:e3:18:f3:5c:7f:85:cd:d9:
38:17:2f:02:c1:39:88:1a:5b:2a:b4:76:57:38:06:4a:a3:40:
eb:eb:49:47:01:8a:70:94:6b:be:72:97:90:63:4f:de:48:1a:
fc:14:78:cd:b6:ea:1f:b1:f5:39:2d:58:a4:f6:7a:8b:a2:4d:
6c:56:aa:2e:a8:77:68:8b:24:df:a8:a3:15:17:28:46:2d:84:
2a:bd:31:87
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jun 3 03:09:06 2026 by rpki-client