Manifest
$ rpki-client -vvf repo-rpki.idnic.net/repo/dd48bd04-f787-414a-a501-5138a6d6b3e1/0/71E51A9B65D8A123513A350F0D99F98D6C9B72E2.mft
File: 71E51A9B65D8A123513A350F0D99F98D6C9B72E2.mft (raw, json)
Hash identifier: M5wdfJcpDK2XlYQqTaPDio1J78Pinl6eE9bxKS/iMYM=
Subject key identifier: 9B:B5:C8:AF:76:19:7A:92:70:52:19:91:14:D5:07:51:E6:C6:19:FE
Authority key identifier: 71:E5:1A:9B:65:D8:A1:23:51:3A:35:0F:0D:99:F9:8D:6C:9B:72:E2
Certificate issuer: /CN=71E51A9B65D8A123513A350F0D99F98D6C9B72E2
Certificate serial: 681BE2E7BE9EEF83E19B7318146BE0EEC6DFF108
Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/71E51A9B65D8A123513A350F0D99F98D6C9B72E2.cer
Subject info access: rsync://repo-rpki.idnic.net/repo/dd48bd04-f787-414a-a501-5138a6d6b3e1/0/71E51A9B65D8A123513A350F0D99F98D6C9B72E2.mft
Manifest number: 0428
Signing time: Mon 27 Apr 2026 20:31:23 +0000
Manifest this update: Mon 27 Apr 2026 20:26:23 +0000
Manifest next update: Thu 30 Apr 2026 21:43:23 +0000
Files and hashes: 1: 71E51A9B65D8A123513A350F0D99F98D6C9B72E2.crl (hash: jM4kszMIVjWDpkTt541LmdZ1YMbxB+bfE9olnGuUIY4=)
2: 3130332e3130372e3138372e302f32342d3234203d3e20313337333030.roa (hash: qbGMe4OJOUlVBBlNS/T+BUhcFyXomn3ouFjeMKM/9vg=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
68:1b:e2:e7:be:9e:ef:83:e1:9b:73:18:14:6b:e0:ee:c6:df:f1:08
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=71E51A9B65D8A123513A350F0D99F98D6C9B72E2
Validity
Not Before: Apr 27 20:26:23 2026 GMT
Not After : Apr 30 21:43:23 2026 GMT
Subject: CN=9BB5C8AF76197A927052199114D50751E6C619FE
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:be:c2:12:e3:bc:3f:86:6a:61:67:8f:be:a9:fe:
cd:9d:09:65:d1:db:e9:ea:a7:23:72:3c:54:c9:00:
0e:4a:c1:91:c0:b9:84:91:bd:22:77:cd:fa:d5:6f:
08:de:bb:ee:09:79:67:5f:0a:ed:01:0d:54:13:f8:
f0:33:05:eb:61:2b:df:ae:aa:02:5d:83:8b:7d:6d:
91:18:fc:2d:e4:be:ae:81:43:aa:eb:03:41:95:70:
48:c8:a9:5d:8c:1d:e6:c5:04:be:41:41:05:27:5e:
05:9e:6b:eb:e0:0f:12:25:c4:6b:bf:fa:30:dd:bf:
f0:63:d6:db:b5:44:40:1b:1e:89:a5:fe:52:c9:07:
c4:dd:dc:9f:9e:c1:f7:a9:bd:ed:87:8d:4a:fa:8c:
09:16:f8:0d:c8:b3:7a:d3:28:01:ca:ca:72:79:69:
50:93:00:ca:33:ee:e6:0e:2e:68:e0:9d:d6:6f:0a:
00:09:ae:0f:3b:e5:dc:bb:a1:3c:40:26:5e:e0:cd:
e9:9e:58:d3:f9:ca:4f:34:bc:e4:0d:6a:55:e5:8e:
47:6c:9e:7e:d0:43:02:ca:06:96:6e:59:aa:ea:b2:
4b:d1:e4:19:bc:27:ef:49:d0:e3:99:a3:ca:ba:f7:
54:99:4c:62:ee:84:f7:36:3b:2f:86:f4:76:68:70:
d3:8d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
9B:B5:C8:AF:76:19:7A:92:70:52:19:91:14:D5:07:51:E6:C6:19:FE
X509v3 Authority Key Identifier:
keyid:71:E5:1A:9B:65:D8:A1:23:51:3A:35:0F:0D:99:F9:8D:6C:9B:72:E2
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://repo-rpki.idnic.net/repo/dd48bd04-f787-414a-a501-5138a6d6b3e1/0/71E51A9B65D8A123513A350F0D99F98D6C9B72E2.crl
Authority Information Access:
CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/71E51A9B65D8A123513A350F0D99F98D6C9B72E2.cer
Subject Information Access:
Signed Object - URI:rsync://repo-rpki.idnic.net/repo/dd48bd04-f787-414a-a501-5138a6d6b3e1/0/71E51A9B65D8A123513A350F0D99F98D6C9B72E2.mft
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
bf:96:f2:62:ff:f8:06:41:00:2e:7b:b4:bb:c7:1f:cc:82:66:
8e:1b:72:c7:e7:bb:3c:15:6d:be:97:c2:62:04:c2:9f:f4:7e:
5b:2b:fb:4e:21:3c:32:e8:b0:25:b5:9e:ba:66:1a:f2:53:cf:
62:d8:9a:27:e9:20:e4:cd:51:a1:18:21:61:1c:ed:85:e6:02:
f9:e3:ff:16:ef:89:87:c8:0f:bf:ac:15:df:53:f7:23:20:e5:
15:24:87:55:f1:b5:c0:76:b2:1b:92:70:f2:09:3c:dd:43:a3:
50:fd:d7:9c:a2:54:cd:75:37:f8:87:da:3c:06:83:4c:00:76:
af:3a:19:9a:07:2e:ad:11:55:73:33:3e:4f:de:3e:ce:f3:cc:
76:66:66:1b:e2:c4:be:e8:cf:c5:c2:96:a3:c1:90:bb:a2:42:
d7:93:b4:87:ed:33:32:d2:8a:14:34:5b:58:66:d0:ba:be:a3:
46:79:3c:ca:92:57:44:64:16:95:51:ed:a2:b1:3f:e8:1c:79:
f0:75:ee:30:04:24:d4:5d:0c:88:f4:9e:9f:02:62:28:0b:b0:
ab:b0:c6:11:eb:34:8c:10:b4:a6:48:e3:1d:ac:1e:6c:3a:78:
b5:ae:87:48:88:25:8e:aa:db:a6:72:10:40:3a:72:6c:90:21:
bc:5e:c1:27
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jun 3 03:09:06 2026 by rpki-client