Manifest
$ rpki-client -vvf repo-rpki.idnic.net/repo/d53e4af5-aaf5-46ce-b119-d7e76dae20b8/0/D76CF64B32F23D8C4EBFA02811D0B08A78C612D0.mft
File: D76CF64B32F23D8C4EBFA02811D0B08A78C612D0.mft (raw, json)
Hash identifier: a/TO8Gs9Gbi+bNYe0V0m5rwSHk1Mn/ScGj4X/C328pM=
Subject key identifier: AF:1C:CB:26:24:72:C3:FD:09:7C:2B:B3:F9:82:CC:7C:E3:D5:15:8C
Authority key identifier: D7:6C:F6:4B:32:F2:3D:8C:4E:BF:A0:28:11:D0:B0:8A:78:C6:12:D0
Certificate issuer: /CN=D76CF64B32F23D8C4EBFA02811D0B08A78C612D0
Certificate serial: 0668B67412AF009E5BA7E8167F668DFD875CB081
Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/D76CF64B32F23D8C4EBFA02811D0B08A78C612D0.cer
Subject info access: rsync://repo-rpki.idnic.net/repo/d53e4af5-aaf5-46ce-b119-d7e76dae20b8/0/D76CF64B32F23D8C4EBFA02811D0B08A78C612D0.mft
Manifest number: 024B
Signing time: Tue 28 Apr 2026 22:11:59 +0000
Manifest this update: Tue 28 Apr 2026 22:06:59 +0000
Manifest next update: Sat 02 May 2026 03:48:59 +0000
Files and hashes: 1: D76CF64B32F23D8C4EBFA02811D0B08A78C612D0.crl (hash: ssqJAwLkQRVhC2JtdcGzh2rMYrVPQABPszPHl8Y6RwI=)
2: 3130332e3136392e362e302f32332d3234203d3e20313431313037.roa (hash: wlhhz4T86+ShRU2p6Up+KvbeI0BWxilrsa27X54ni/4=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
06:68:b6:74:12:af:00:9e:5b:a7:e8:16:7f:66:8d:fd:87:5c:b0:81
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=D76CF64B32F23D8C4EBFA02811D0B08A78C612D0
Validity
Not Before: Apr 28 22:06:59 2026 GMT
Not After : May 2 03:48:59 2026 GMT
Subject: CN=AF1CCB262472C3FD097C2BB3F982CC7CE3D5158C
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:af:cd:74:1d:b8:34:3e:a2:f4:ea:8c:aa:b6:41:
89:07:60:e9:45:2d:6a:b6:08:9f:f4:42:fd:39:ea:
c7:f8:fe:d6:6a:12:cf:61:45:46:83:27:47:14:8d:
a6:a1:3c:a9:0c:0f:1f:08:f5:3f:05:be:2d:6f:cc:
d1:c0:fc:8b:ef:b1:4f:c1:51:59:4d:b9:27:03:ce:
7e:fb:22:05:17:05:ea:85:88:9c:4b:b2:a5:6c:2d:
6d:e7:41:13:81:28:4a:b1:1f:d1:94:3b:0a:49:51:
68:6d:03:ce:36:31:17:fa:af:c7:ca:2c:95:dd:45:
25:56:7b:f1:04:e0:b3:65:55:bc:6d:78:4e:45:44:
53:be:c9:d2:20:18:3f:e3:41:a1:f0:bd:0a:48:e6:
48:e5:01:fa:6e:82:09:20:92:22:fb:49:e1:ea:3d:
d8:e6:51:25:b2:6e:b0:49:7d:19:c8:27:82:be:49:
6e:d9:aa:7a:50:d1:63:18:42:57:b2:4b:b7:0e:2b:
c3:76:e4:91:f2:55:2c:d6:5d:0b:af:3e:41:db:ce:
fa:fa:81:6c:f2:25:e1:5c:13:4c:15:28:f0:d5:bc:
21:c1:69:1e:f0:ec:ca:be:bb:d0:a8:af:07:dc:14:
7b:ab:a4:3e:25:20:df:b7:ec:17:17:c9:fa:dc:50:
09:e5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
AF:1C:CB:26:24:72:C3:FD:09:7C:2B:B3:F9:82:CC:7C:E3:D5:15:8C
X509v3 Authority Key Identifier:
keyid:D7:6C:F6:4B:32:F2:3D:8C:4E:BF:A0:28:11:D0:B0:8A:78:C6:12:D0
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://repo-rpki.idnic.net/repo/d53e4af5-aaf5-46ce-b119-d7e76dae20b8/0/D76CF64B32F23D8C4EBFA02811D0B08A78C612D0.crl
Authority Information Access:
CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/D76CF64B32F23D8C4EBFA02811D0B08A78C612D0.cer
Subject Information Access:
Signed Object - URI:rsync://repo-rpki.idnic.net/repo/d53e4af5-aaf5-46ce-b119-d7e76dae20b8/0/D76CF64B32F23D8C4EBFA02811D0B08A78C612D0.mft
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
86:64:cd:f8:78:85:88:cb:2f:21:0c:ba:95:57:fa:70:9a:ca:
74:1e:d8:79:8c:25:8f:00:c3:79:e7:6a:f9:fa:e3:66:3d:4a:
36:f4:e0:33:5d:88:3b:20:eb:90:08:61:b2:24:83:49:d0:53:
25:15:13:69:b1:2d:2a:00:b7:3e:2d:fa:79:18:20:d3:1d:79:
ec:08:93:41:fb:ea:b9:7a:c0:40:4f:68:a3:1d:80:bf:e9:6c:
1d:47:8f:0b:6d:e4:cc:d6:08:e8:9e:bb:17:41:1e:3b:e9:f0:
db:22:b2:3b:66:fb:e9:83:1b:b2:4c:a9:37:24:79:b1:10:65:
55:ab:af:87:6f:44:2d:f5:1e:2e:5d:ad:be:67:66:ca:35:42:
5e:e0:a7:f8:22:27:f4:e2:83:9b:40:21:87:35:2d:fa:9c:5e:
4b:7d:59:31:30:a8:bc:e3:96:4b:06:e8:5e:c8:55:62:ee:73:
24:24:b1:41:7d:71:ef:95:80:56:b5:1c:c2:87:12:70:14:3f:
2d:ed:e3:90:9e:e4:e0:e7:e7:6a:ba:6b:94:89:fe:66:22:d6:
ba:25:16:46:36:c9:07:e7:60:11:27:5e:fc:59:10:de:9d:96:
f9:2d:57:9a:fc:a7:69:eb:2e:3a:e9:84:ed:3b:be:76:03:04:
17:cc:6b:71
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jun 3 03:44:34 2026 by rpki-client