Manifest
$ rpki-client -vvf repo-rpki.idnic.net/repo/d2502205-5c54-47db-ae6f-9d48e183241c/0/96C41CFE277F686E3476A533FDAE5A0F411173D9.mft
File: 96C41CFE277F686E3476A533FDAE5A0F411173D9.mft (raw, json)
Hash identifier: 4emvTtsiZ/CY/uVnyw2l1Zxi8+07ivtEXuKolahxZkw=
Subject key identifier: A7:0E:9F:20:1D:C0:D9:16:C5:F4:92:F7:6C:14:01:2F:50:2E:11:14
Authority key identifier: 96:C4:1C:FE:27:7F:68:6E:34:76:A5:33:FD:AE:5A:0F:41:11:73:D9
Certificate issuer: /CN=96C41CFE277F686E3476A533FDAE5A0F411173D9
Certificate serial: 4EC662E48546A88051D23F914FCFD0B5E8D4F967
Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/96C41CFE277F686E3476A533FDAE5A0F411173D9.cer
Subject info access: rsync://repo-rpki.idnic.net/repo/d2502205-5c54-47db-ae6f-9d48e183241c/0/96C41CFE277F686E3476A533FDAE5A0F411173D9.mft
Manifest number: 020A
Signing time: Mon 27 Apr 2026 17:21:31 +0000
Manifest this update: Mon 27 Apr 2026 17:16:31 +0000
Manifest next update: Fri 01 May 2026 00:43:31 +0000
Files and hashes: 1: 3130332e3133382e3231382e302f32332d3234203d3e20313338383534.roa (hash: wlFQ0Mhp/1XnwwUvAj+JZIZYp8c/czLKraMQXNmD1R0=)
2: 96C41CFE277F686E3476A533FDAE5A0F411173D9.crl (hash: jQPb5kduVI5maLZAWQFhMdvbXe70DD/+Od0/DibTlPA=)
3: 323430343a643563303a3a2f33322d3438203d3e20313338383534.roa (hash: d/oqyDi4sv5f7bgdGzOv2LunD1qLNy94sxilYJ9cVe0=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
4e:c6:62:e4:85:46:a8:80:51:d2:3f:91:4f:cf:d0:b5:e8:d4:f9:67
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=96C41CFE277F686E3476A533FDAE5A0F411173D9
Validity
Not Before: Apr 27 17:16:31 2026 GMT
Not After : May 1 00:43:31 2026 GMT
Subject: CN=A70E9F201DC0D916C5F492F76C14012F502E1114
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d2:ad:5b:ad:e1:96:90:cc:f1:32:dc:da:bd:0a:
39:58:8d:72:54:6b:b8:6f:e7:75:53:c7:35:43:e0:
33:92:bb:b4:1d:ba:9b:97:1a:7e:ba:42:9d:53:29:
c1:c0:aa:21:b1:a4:83:91:39:89:83:de:86:80:e7:
8e:5f:32:25:20:07:76:3e:b3:6b:e9:f9:9d:35:6a:
a0:cd:02:0c:0b:0e:48:d5:dc:86:2e:a3:d9:94:a4:
f4:ee:27:43:5b:e4:87:9d:59:10:ea:05:5f:19:22:
ec:38:c9:71:fd:cd:d7:07:e9:c3:71:5c:68:73:ea:
1b:65:48:7b:cb:7a:97:08:5b:6d:ac:88:6b:c5:78:
f7:ab:9e:91:f0:9f:54:19:67:6b:87:84:fe:0c:5b:
56:66:f2:dd:58:c1:3b:86:c6:18:fc:5c:7f:a5:cc:
79:dc:20:e8:df:b9:9d:b0:8f:f6:6c:78:9a:27:5e:
60:b9:ba:8d:30:e7:eb:5e:bd:57:e6:7c:4d:d8:af:
47:ca:ba:1d:b9:ef:c1:8f:f0:65:28:09:ed:5a:47:
b8:b4:b5:0f:f1:c0:9f:32:f9:12:8f:59:ed:a7:2e:
8c:84:7e:4a:41:92:26:20:60:15:45:02:2d:a2:9e:
80:ce:42:aa:a7:f0:e2:4b:d5:f7:4f:9f:4e:1a:fd:
89:9b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A7:0E:9F:20:1D:C0:D9:16:C5:F4:92:F7:6C:14:01:2F:50:2E:11:14
X509v3 Authority Key Identifier:
keyid:96:C4:1C:FE:27:7F:68:6E:34:76:A5:33:FD:AE:5A:0F:41:11:73:D9
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://repo-rpki.idnic.net/repo/d2502205-5c54-47db-ae6f-9d48e183241c/0/96C41CFE277F686E3476A533FDAE5A0F411173D9.crl
Authority Information Access:
CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/96C41CFE277F686E3476A533FDAE5A0F411173D9.cer
Subject Information Access:
Signed Object - URI:rsync://repo-rpki.idnic.net/repo/d2502205-5c54-47db-ae6f-9d48e183241c/0/96C41CFE277F686E3476A533FDAE5A0F411173D9.mft
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
06:17:fe:84:e8:30:09:b7:97:5e:b7:6c:a6:23:28:9b:c8:5f:
3b:a1:68:8c:6c:f9:ad:e6:3a:aa:96:a9:02:bd:97:25:06:a9:
d8:88:50:0c:39:85:e7:ce:d6:5c:38:4d:30:09:ef:ec:7f:14:
cb:63:6d:7b:a5:a1:5d:fc:5d:b2:a1:6e:92:f8:ab:e4:7a:9c:
6b:29:7b:a3:fc:9e:3d:29:a3:d2:ca:80:e7:3f:d9:3d:e6:b4:
20:27:04:3b:00:84:5d:0f:e9:2a:a2:97:dc:e9:92:13:35:a9:
7d:a0:72:0b:3f:e8:52:c2:c7:95:be:3d:c9:e9:c1:05:9b:ca:
18:b7:b3:2b:8d:99:8c:0d:e9:d9:54:36:14:b9:cf:85:fe:7f:
3d:c3:60:40:49:00:ad:da:a2:be:3b:9b:1b:2b:c4:e5:d4:d1:
ad:00:4d:43:7f:a0:27:b3:11:4f:ec:6b:e9:b2:fb:c9:27:39:
69:79:69:0b:c2:17:33:ad:4e:e5:db:43:a7:89:d3:96:8a:40:
49:f9:3b:ab:a1:a8:16:e0:e7:f3:84:4f:9c:c0:f7:06:ca:81:
86:6a:0d:17:cc:90:b4:c5:7c:d5:7e:fa:79:f5:b6:b8:5b:e5:
b2:51:5a:dc:7c:96:4f:3e:9c:8f:94:92:6a:d9:90:f6:83:00:
a6:12:9d:df
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jul 19 04:58:04 2026 by rpki-client