Manifest
$ rpki-client -vvf repo-rpki.idnic.net/repo/ef3d4da9-182f-4a73-a110-4c8bff894fbc/0/625D3D358DEFDD65359387A6A36775411462B4D4.mft
File: 625D3D358DEFDD65359387A6A36775411462B4D4.mft (raw, json)
Hash identifier: driwQxgNR9f1v6JZfAeg9ydhrSTlDNUKoHaXTBn9TWc=
Subject key identifier: 50:6A:A3:D1:65:4C:E2:36:14:6A:B3:94:EC:28:3D:FB:86:23:1C:55
Authority key identifier: 62:5D:3D:35:8D:EF:DD:65:35:93:87:A6:A3:67:75:41:14:62:B4:D4
Certificate issuer: /CN=625D3D358DEFDD65359387A6A36775411462B4D4
Certificate serial: 620CB8E435FE4BAB98C524133AA8675FFB49C09C
Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/625D3D358DEFDD65359387A6A36775411462B4D4.cer
Subject info access: rsync://repo-rpki.idnic.net/repo/ef3d4da9-182f-4a73-a110-4c8bff894fbc/0/625D3D358DEFDD65359387A6A36775411462B4D4.mft
Manifest number: 0294
Signing time: Wed 29 Apr 2026 07:20:53 +0000
Manifest this update: Wed 29 Apr 2026 07:15:53 +0000
Manifest next update: Sat 02 May 2026 08:02:53 +0000
Files and hashes: 1: 625D3D358DEFDD65359387A6A36775411462B4D4.crl (hash: PINBZYd8L6i2Afp/cnvaK3YZXNEzzlbsM+6SFFuUsfM=)
2: 3130332e3138362e382e302f32332d3234203d3e20313339393737.roa (hash: TA1eUafUeiJYILhH4HYViFTtOG1Yb421QDz2gzPo4kU=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
62:0c:b8:e4:35:fe:4b:ab:98:c5:24:13:3a:a8:67:5f:fb:49:c0:9c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=625D3D358DEFDD65359387A6A36775411462B4D4
Validity
Not Before: Apr 29 07:15:53 2026 GMT
Not After : May 2 08:02:53 2026 GMT
Subject: CN=506AA3D1654CE236146AB394EC283DFB86231C55
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b6:0c:82:84:78:69:84:57:a1:cb:b7:c1:f6:f3:
ee:48:8c:0d:67:ad:e2:6b:76:8d:1f:28:2f:1d:b7:
48:74:36:28:3a:bb:cc:f4:f3:b4:a4:24:1d:cd:b1:
85:f4:03:00:af:aa:1f:f0:68:9a:11:aa:77:fd:33:
97:8c:0b:b3:73:b1:30:6c:cb:ea:7e:9b:ef:ba:fc:
08:47:2b:38:2a:35:6a:e6:55:68:dd:3e:38:3a:d5:
d8:82:0a:cf:89:ba:08:82:d1:03:50:a5:c9:c6:ae:
d1:0c:88:e0:c1:9c:0b:f9:cd:7e:43:c6:25:70:4d:
62:8d:de:31:d0:3c:39:69:0c:d6:af:2e:bf:4d:1a:
a9:aa:f4:49:a5:77:76:81:cc:04:fb:05:87:58:06:
c8:13:9b:f9:0e:7f:a2:8f:7d:d8:20:ac:3c:fe:03:
1b:a7:95:b9:ca:26:45:c0:2d:32:6d:c2:29:ce:f2:
da:85:d4:71:da:b0:83:b1:17:bd:c0:38:cc:35:9c:
69:96:fa:48:26:5a:25:26:49:29:2b:e8:f1:3f:c1:
25:2e:cc:7e:95:00:7e:6d:06:21:c9:e6:9c:b7:6a:
95:f2:6d:98:a2:ce:19:b2:39:ba:3c:bc:a1:1a:86:
a1:e6:0a:13:af:f3:f7:46:17:78:89:22:b8:3b:ce:
af:75
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
50:6A:A3:D1:65:4C:E2:36:14:6A:B3:94:EC:28:3D:FB:86:23:1C:55
X509v3 Authority Key Identifier:
keyid:62:5D:3D:35:8D:EF:DD:65:35:93:87:A6:A3:67:75:41:14:62:B4:D4
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://repo-rpki.idnic.net/repo/ef3d4da9-182f-4a73-a110-4c8bff894fbc/0/625D3D358DEFDD65359387A6A36775411462B4D4.crl
Authority Information Access:
CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/625D3D358DEFDD65359387A6A36775411462B4D4.cer
Subject Information Access:
Signed Object - URI:rsync://repo-rpki.idnic.net/repo/ef3d4da9-182f-4a73-a110-4c8bff894fbc/0/625D3D358DEFDD65359387A6A36775411462B4D4.mft
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
8c:1e:0f:c6:29:ca:fc:c8:c6:c8:51:66:57:72:6c:47:82:56:
78:9e:ed:dc:ca:92:f4:8d:04:36:6a:b0:7d:98:40:f9:70:50:
09:3c:f9:64:2b:52:2e:22:f5:ec:fe:2e:fb:bb:38:cb:58:4c:
37:8d:ff:44:49:72:9f:2c:01:ab:90:a5:95:85:1b:7a:98:a6:
db:d3:50:77:8d:5d:97:0f:ab:d1:25:59:80:90:68:80:36:ea:
b2:16:e4:36:2d:ba:93:f8:47:d2:80:0d:8d:0d:1f:80:fe:55:
64:67:76:9e:d7:4a:07:dd:81:20:9e:52:bc:66:df:20:eb:0a:
3e:d4:8c:8d:1e:23:50:05:d5:98:6b:00:c2:af:79:ab:bc:8f:
33:87:13:e2:85:f2:71:f9:8c:81:74:82:8e:dd:60:3f:ea:96:
3d:73:35:12:0e:90:64:7c:77:2b:b9:a6:80:d3:1f:77:b8:60:
59:e1:47:b6:33:aa:74:6d:d5:d1:4d:85:cc:fa:8c:88:74:5c:
af:6f:5c:5c:35:f5:9e:35:d3:b1:f9:77:5b:06:0a:89:db:d0:
14:bf:cf:83:64:a8:ae:20:d4:fb:3f:45:c9:73:85:2c:ab:47:
51:bb:49:3c:28:9f:19:71:07:24:0a:3c:06:37:af:1e:27:fe:
55:5c:4c:41
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jun 3 03:44:40 2026 by rpki-client