Manifest
$ rpki-client -vvf repo-rpki.idnic.net/repo/e47cd5a2-a742-450c-b190-500e754520de/1/DF3717861F6521730921F11365C5A826CFF24DAA.mft
File: DF3717861F6521730921F11365C5A826CFF24DAA.mft (raw, json)
Hash identifier: gavoewMlTUFqJflXgjhaf9KT/WG5tTmxlhMuuPgEqMA=
Subject key identifier: 5A:E3:CD:C4:69:36:34:F7:1D:14:27:82:4C:BB:90:36:8B:08:FD:98
Authority key identifier: DF:37:17:86:1F:65:21:73:09:21:F1:13:65:C5:A8:26:CF:F2:4D:AA
Certificate issuer: /CN=DF3717861F6521730921F11365C5A826CFF24DAA
Certificate serial: 1C7EAA727F162E144198FAAC2B7D4B674DCC0339
Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/DF3717861F6521730921F11365C5A826CFF24DAA.cer
Subject info access: rsync://repo-rpki.idnic.net/repo/e47cd5a2-a742-450c-b190-500e754520de/1/DF3717861F6521730921F11365C5A826CFF24DAA.mft
Manifest number: 0177
Signing time: Mon 27 Apr 2026 16:20:00 +0000
Manifest this update: Mon 27 Apr 2026 16:15:00 +0000
Manifest next update: Thu 30 Apr 2026 17:00:00 +0000
Files and hashes: 1: 323030313a6466333a356263303a3a2f34382d3438203d3e20313532303832.roa (hash: xala12s6NGlWdt+lWB7nCyXhpdJkrQpRN4xo94j8YNU=)
2: DF3717861F6521730921F11365C5A826CFF24DAA.crl (hash: YZDA+UroI8Gd6JUY71ws/X8Add6iFRX8HmKHu5KEMuI=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
1c:7e:aa:72:7f:16:2e:14:41:98:fa:ac:2b:7d:4b:67:4d:cc:03:39
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=DF3717861F6521730921F11365C5A826CFF24DAA
Validity
Not Before: Apr 27 16:15:00 2026 GMT
Not After : Apr 30 17:00:00 2026 GMT
Subject: CN=5AE3CDC4693634F71D1427824CBB90368B08FD98
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d5:23:9d:a6:ce:c1:fb:f1:e2:76:bf:8e:e4:50:
a6:d9:c2:4f:41:a8:26:2f:1d:00:2a:60:44:e6:18:
93:70:80:e1:cb:e2:86:43:ac:20:82:ba:8e:ea:72:
bb:12:56:ee:b9:3a:02:15:0d:d4:b3:cc:b4:3d:65:
b0:1d:8b:5a:27:ab:c6:35:17:b7:56:74:d3:73:8d:
a4:2b:33:84:a1:a5:90:d2:5c:41:94:d1:9e:d5:91:
44:1f:7b:45:c8:ac:73:4d:46:49:08:20:b4:6c:1d:
bf:e3:7a:91:fa:2e:a6:48:4f:e6:5c:5b:60:48:34:
17:e9:e1:80:3d:b3:f5:79:45:13:dd:27:e2:3a:f0:
21:88:1a:ed:d4:e2:da:2a:e0:f7:ff:3e:3d:de:d7:
d1:25:8b:ea:cc:0c:4f:4a:7f:82:1f:ce:2f:d6:de:
bd:fb:e3:f9:5f:67:f7:d9:b2:15:ff:b2:27:e4:34:
e1:95:e3:b7:45:3e:aa:5a:a5:f8:b4:49:3b:54:90:
5e:13:4b:19:2a:95:df:e2:58:f8:42:08:8f:e7:95:
95:c5:d7:af:ea:02:8e:92:3f:90:95:39:32:4b:d0:
72:72:ab:ea:11:67:fc:cb:aa:8e:e3:73:99:9c:bd:
14:99:dd:1b:34:1c:a0:cb:5f:cf:c6:f1:09:74:37:
60:91
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
5A:E3:CD:C4:69:36:34:F7:1D:14:27:82:4C:BB:90:36:8B:08:FD:98
X509v3 Authority Key Identifier:
keyid:DF:37:17:86:1F:65:21:73:09:21:F1:13:65:C5:A8:26:CF:F2:4D:AA
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://repo-rpki.idnic.net/repo/e47cd5a2-a742-450c-b190-500e754520de/1/DF3717861F6521730921F11365C5A826CFF24DAA.crl
Authority Information Access:
CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/DF3717861F6521730921F11365C5A826CFF24DAA.cer
Subject Information Access:
Signed Object - URI:rsync://repo-rpki.idnic.net/repo/e47cd5a2-a742-450c-b190-500e754520de/1/DF3717861F6521730921F11365C5A826CFF24DAA.mft
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
61:63:ae:d6:12:2b:cc:6c:ce:3b:d9:96:ef:bb:d2:c1:bc:6a:
42:82:b4:d6:0a:ad:ac:ca:fb:68:f5:a3:d6:cd:a5:92:38:1c:
71:84:e2:c7:e0:12:a6:11:89:d7:63:7e:ba:86:ec:77:c8:f1:
35:66:a1:97:ea:49:74:e6:f6:09:7e:c3:44:5d:da:41:4c:85:
b2:fb:71:4d:41:55:27:4c:e9:47:1b:03:33:dd:d6:29:01:77:
75:63:56:00:1c:3f:46:b2:13:dc:d1:2d:4c:a4:e9:3a:45:59:
4e:f7:a5:5e:9a:8b:12:5a:fa:30:f5:ca:3d:39:fb:8c:5a:52:
1d:ce:b0:df:7b:82:47:6a:3f:a4:6c:7d:e6:a7:6a:d5:0d:96:
63:6a:10:4e:dd:46:db:00:11:c9:23:4c:6d:1c:01:ec:9b:f0:
ba:b3:3d:66:cd:e0:37:1f:5f:54:4d:ff:9b:d3:11:84:e3:4d:
aa:17:0f:7a:5b:d4:02:28:de:59:dc:c2:af:bf:23:f3:d9:bc:
a0:18:d6:7c:d4:f0:34:2d:4c:73:12:15:1a:19:7c:f9:2f:0e:
06:4a:10:ad:c1:1b:00:f3:fe:35:61:d5:8f:0d:d9:b8:3c:a7:
51:37:19:48:b9:35:b2:b0:f5:a8:42:89:20:36:ac:b7:22:2d:
f6:13:1e:af
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jul 19 05:02:52 2026 by rpki-client