Manifest
$ rpki-client -vvf repo-rpki.idnic.net/repo/d7b64c3e-b13d-427a-b982-4394073e5cf5/0/5DF7F909917C4DA09D7486E2B70323E7972B7675.mft
File: 5DF7F909917C4DA09D7486E2B70323E7972B7675.mft (raw, json)
Hash identifier: GdMq+W+bFeQHJVJyuR2aPASezLFJ32scOyhw8hcCTNY=
Subject key identifier: 33:E4:E1:FB:D3:99:8B:C0:4E:CC:75:F6:1D:72:63:BE:7B:6F:AC:FD
Authority key identifier: 5D:F7:F9:09:91:7C:4D:A0:9D:74:86:E2:B7:03:23:E7:97:2B:76:75
Certificate issuer: /CN=5DF7F909917C4DA09D7486E2B70323E7972B7675
Certificate serial: 775853311479ED4DE7C2E8231E8E111BA75C18FE
Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/5DF7F909917C4DA09D7486E2B70323E7972B7675.cer
Subject info access: rsync://repo-rpki.idnic.net/repo/d7b64c3e-b13d-427a-b982-4394073e5cf5/0/5DF7F909917C4DA09D7486E2B70323E7972B7675.mft
Manifest number: 0281
Signing time: Mon 27 Apr 2026 11:11:58 +0000
Manifest this update: Mon 27 Apr 2026 11:06:58 +0000
Manifest next update: Thu 30 Apr 2026 21:00:58 +0000
Files and hashes: 1: 3130332e3138362e3136372e302f32342d3234203d3e20313439373033.roa (hash: etKKSveFADWMloWFgv7k4bcqwUD/JCeti3TZy4ckvfE=)
2: 5DF7F909917C4DA09D7486E2B70323E7972B7675.crl (hash: c3bipTeLLXDnEkuOMsPxuCTLVuIp62YSik7ms7MhgpM=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
77:58:53:31:14:79:ed:4d:e7:c2:e8:23:1e:8e:11:1b:a7:5c:18:fe
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5DF7F909917C4DA09D7486E2B70323E7972B7675
Validity
Not Before: Apr 27 11:06:58 2026 GMT
Not After : Apr 30 21:00:58 2026 GMT
Subject: CN=33E4E1FBD3998BC04ECC75F61D7263BE7B6FACFD
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d5:47:3e:62:a0:b2:c3:8c:2f:0d:33:5f:b2:fc:
57:6b:16:bd:00:78:8a:75:e0:59:21:e7:da:59:a9:
20:14:d1:71:4b:10:d5:62:14:0d:5f:8e:d4:dc:63:
d4:a3:c7:1c:ae:97:26:4a:6f:66:57:39:4e:bc:5d:
a8:aa:e2:6e:a5:26:ac:ed:56:cd:ba:02:6a:95:eb:
75:44:c3:a0:1b:34:d2:68:7f:0c:e8:5c:0c:f9:33:
46:ac:6e:05:85:1c:fb:cc:c4:63:f2:37:d0:1c:94:
e6:9f:6a:2a:44:49:ef:82:1a:59:2d:82:a3:a6:eb:
85:62:7b:ac:df:60:f6:fe:6a:81:98:1f:33:44:1f:
f2:26:c3:03:8c:06:5c:1f:53:b4:c7:89:a3:b9:e5:
3d:27:fc:dc:c6:58:6e:d7:b3:e7:44:d9:a6:9e:4a:
1b:e1:25:7e:e5:ba:cd:9a:a6:08:28:ea:c0:bd:5e:
48:bd:0f:43:40:67:c9:8c:ae:16:c1:cc:d9:10:da:
f4:a3:09:75:f3:0e:32:4f:c1:73:9b:b9:c3:82:5c:
97:10:62:fa:df:d1:2d:08:ae:af:d1:9f:06:ae:84:
8d:05:fa:07:e5:d2:91:b4:df:ff:fc:23:cb:dc:6e:
08:17:73:20:4b:55:86:e0:c0:ee:81:d5:12:96:5d:
b0:8f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
33:E4:E1:FB:D3:99:8B:C0:4E:CC:75:F6:1D:72:63:BE:7B:6F:AC:FD
X509v3 Authority Key Identifier:
keyid:5D:F7:F9:09:91:7C:4D:A0:9D:74:86:E2:B7:03:23:E7:97:2B:76:75
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://repo-rpki.idnic.net/repo/d7b64c3e-b13d-427a-b982-4394073e5cf5/0/5DF7F909917C4DA09D7486E2B70323E7972B7675.crl
Authority Information Access:
CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/5DF7F909917C4DA09D7486E2B70323E7972B7675.cer
Subject Information Access:
Signed Object - URI:rsync://repo-rpki.idnic.net/repo/d7b64c3e-b13d-427a-b982-4394073e5cf5/0/5DF7F909917C4DA09D7486E2B70323E7972B7675.mft
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
dd:06:01:e6:49:66:b2:ab:26:35:95:b2:54:79:b0:10:0f:ca:
3a:ba:2d:ee:9e:1a:e5:40:84:5a:39:c7:a6:40:27:ed:80:16:
9e:3c:73:a3:66:76:97:fc:0f:ae:49:d6:e4:a9:1e:35:07:f5:
35:50:92:3e:6b:2f:cc:31:56:f4:37:fa:3d:40:ce:17:93:2e:
80:11:23:80:94:80:27:db:2f:f5:68:d1:77:67:68:1c:0f:48:
6a:14:c2:72:6b:62:6d:c7:a1:52:22:f5:d8:b4:2f:18:01:c3:
67:ec:b6:f5:e2:cc:58:86:5b:bc:e2:ed:7b:5d:3b:41:33:19:
ab:2a:0a:8c:2d:a5:b8:47:87:7a:32:53:76:d8:93:bb:b0:95:
57:8b:0e:2a:7e:f3:37:58:2e:f1:32:26:db:05:9f:55:23:a3:
fb:8c:50:74:87:6f:2b:52:83:b3:19:6f:1f:10:1f:69:e0:ef:
e1:14:ad:58:fc:b8:77:0e:b5:cd:16:68:e3:f8:be:91:b9:0b:
1b:d9:4e:5f:51:ab:25:5e:72:41:70:38:b1:4b:32:31:56:95:
4b:6c:02:98:9c:f2:99:e8:0c:a2:4a:d6:e0:7e:87:be:fa:da:
30:a4:af:13:14:a1:70:48:a0:2f:13:82:77:86:bb:96:4b:fd:
a6:df:0c:b2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jun 3 03:33:06 2026 by rpki-client