
Manifest
$ rpki-client -vvf repo-rpki.idnic.net/repo/c5e5468c-0ac7-44a9-8821-28257c5a8607/0/687247CE80E62AD4B40F0B9915A1B6F3020F684C.mft
File: 687247CE80E62AD4B40F0B9915A1B6F3020F684C.mft (raw, json)
Hash identifier: JLJ9OtP12lQgRaen9+Yr6XEvSL1snrrrI2xzvsPFhLU=
Subject key identifier: B8:A0:4F:36:EA:AB:43:AE:E3:D6:8B:8E:40:42:82:EB:8D:17:E0:EC
Authority key identifier: 68:72:47:CE:80:E6:2A:D4:B4:0F:0B:99:15:A1:B6:F3:02:0F:68:4C
Certificate issuer: /CN=687247CE80E62AD4B40F0B9915A1B6F3020F684C
Certificate serial: 4E22C5559F6FAE90748E9952D10421D93A8075B0
Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/687247CE80E62AD4B40F0B9915A1B6F3020F684C.cer
Subject info access: rsync://repo-rpki.idnic.net/repo/c5e5468c-0ac7-44a9-8821-28257c5a8607/0/687247CE80E62AD4B40F0B9915A1B6F3020F684C.mft
Manifest number: 03ED
Signing time: Mon 27 Apr 2026 06:01:50 +0000
Manifest this update: Mon 27 Apr 2026 05:56:50 +0000
Manifest next update: Thu 30 Apr 2026 14:31:50 +0000
Files and hashes: 1: 687247CE80E62AD4B40F0B9915A1B6F3020F684C.crl (hash: YBHAyxXfJHPjt46kf4Istgwme37KpT5aEeA5BuJEKxE=)
2: 3130332e3136352e3235342e302f32332d3234203d3e203137393935.roa (hash: I5vk4CZVaOAQSTZi+mpaPTk3GaYie2KrNjsP/ZfsCsY=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
4e:22:c5:55:9f:6f:ae:90:74:8e:99:52:d1:04:21:d9:3a:80:75:b0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=687247CE80E62AD4B40F0B9915A1B6F3020F684C
Validity
Not Before: Apr 27 05:56:50 2026 GMT
Not After : Apr 30 14:31:50 2026 GMT
Subject: CN=B8A04F36EAAB43AEE3D68B8E404282EB8D17E0EC
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ac:5d:54:bd:8e:25:1c:7c:6f:96:02:c5:ca:dd:
13:4b:f3:42:86:62:ff:90:af:4f:80:ab:28:c4:68:
16:1d:59:3e:e2:e1:48:6e:2d:23:78:4d:f9:7d:23:
12:0a:ee:ba:ec:59:c0:3d:bc:92:9b:7f:32:19:5c:
35:1b:f2:93:97:34:4b:7d:91:d1:87:d3:b0:14:98:
c9:8e:55:2c:04:4d:95:ec:1d:b9:4b:3f:61:ca:79:
a0:ed:0a:c4:6b:55:97:d4:51:4e:31:b6:a2:dc:93:
3d:91:a4:57:28:2d:bf:88:ba:b6:a9:8c:20:0e:b3:
82:42:df:68:60:62:dc:1e:e8:1a:f9:f6:ab:56:10:
4a:1f:38:71:9b:fb:4c:41:36:0f:8d:97:ce:4f:94:
6f:f6:03:38:c1:81:96:60:0e:7e:52:63:77:d3:3a:
0f:a7:d9:5b:3b:31:ea:0a:20:b9:6e:5b:0a:ee:e2:
e2:aa:8a:22:3a:a2:bb:b4:e9:9e:75:5f:81:a1:50:
a9:b0:42:24:bd:6c:b9:5b:d6:4b:55:59:34:25:14:
cc:2d:ca:a8:8f:ee:44:20:8d:7f:52:73:71:10:1f:
04:55:16:25:1c:06:b3:5d:e5:7d:99:2e:ef:11:3e:
90:3b:98:fb:fb:83:3a:ae:d2:2b:25:6c:c8:05:f2:
6d:83
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B8:A0:4F:36:EA:AB:43:AE:E3:D6:8B:8E:40:42:82:EB:8D:17:E0:EC
X509v3 Authority Key Identifier:
keyid:68:72:47:CE:80:E6:2A:D4:B4:0F:0B:99:15:A1:B6:F3:02:0F:68:4C
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://repo-rpki.idnic.net/repo/c5e5468c-0ac7-44a9-8821-28257c5a8607/0/687247CE80E62AD4B40F0B9915A1B6F3020F684C.crl
Authority Information Access:
CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/687247CE80E62AD4B40F0B9915A1B6F3020F684C.cer
Subject Information Access:
Signed Object - URI:rsync://repo-rpki.idnic.net/repo/c5e5468c-0ac7-44a9-8821-28257c5a8607/0/687247CE80E62AD4B40F0B9915A1B6F3020F684C.mft
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
c4:df:9e:8f:e4:55:2f:65:bf:37:cb:63:31:dd:51:41:d4:d0:
fa:87:16:b8:5a:8b:3c:9a:a6:2a:cf:ee:a1:d4:34:48:37:3d:
2a:25:25:51:48:81:5a:69:3a:9a:ff:07:78:73:86:10:78:dc:
b6:95:15:a9:85:3c:1d:5b:6c:eb:f7:2b:8b:79:2c:93:30:55:
82:2c:4a:a9:9a:9a:22:d7:ff:80:90:2a:2f:ea:e8:16:b9:60:
c3:8a:34:99:48:b8:94:b5:38:94:10:60:b3:c5:04:54:76:aa:
ea:a8:25:29:69:aa:84:d5:20:fd:e6:a8:06:b8:85:40:52:d5:
a1:b2:37:d5:86:51:b9:7f:ca:48:9c:15:e9:da:ac:c9:ba:61:
de:d5:13:cb:1d:7b:04:55:fa:5f:b7:74:56:55:3f:f6:bd:3b:
0f:23:05:87:de:cb:c4:7b:3e:eb:34:5f:d4:c5:13:03:30:52:
86:7f:bd:f0:26:32:7d:76:e8:9b:82:23:ad:3e:76:38:f2:af:
0f:5c:d7:65:17:27:a8:52:ba:17:9e:f8:f3:37:7c:f3:7b:e3:
a9:47:43:f8:4a:62:9d:ba:c4:de:03:e8:28:d8:85:dc:dd:e3:
b1:23:79:82:b0:f8:45:d8:62:e8:e1:4b:c6:1d:7e:9a:67:79:
e3:ae:91:53
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jun 3 03:10:50 2026 by rpki-client