Manifest
$ rpki-client -vvf repo-rpki.idnic.net/repo/281ef440-5a5f-4a4f-b509-b103245c5cf1/0/A71BAA66623847B7BD9EA7C40BCBCA855E52E8EB.mft
File: A71BAA66623847B7BD9EA7C40BCBCA855E52E8EB.mft (raw, json)
Hash identifier: pZYkNawAxVBF6Td0sqcu4An7voxKYWiIj7BnbOiBlhA=
Subject key identifier: 86:94:DB:AE:53:38:C9:DB:BB:88:CB:B0:55:5A:C4:89:2B:25:2B:D6
Authority key identifier: A7:1B:AA:66:62:38:47:B7:BD:9E:A7:C4:0B:CB:CA:85:5E:52:E8:EB
Certificate issuer: /CN=A71BAA66623847B7BD9EA7C40BCBCA855E52E8EB
Certificate serial: 709E3DD3A1774BE7339055D9E704D09290C0826B
Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/A71BAA66623847B7BD9EA7C40BCBCA855E52E8EB.cer
Subject info access: rsync://repo-rpki.idnic.net/repo/281ef440-5a5f-4a4f-b509-b103245c5cf1/0/A71BAA66623847B7BD9EA7C40BCBCA855E52E8EB.mft
Manifest number: 0115
Signing time: Mon 27 Apr 2026 12:11:07 +0000
Manifest this update: Mon 27 Apr 2026 12:06:07 +0000
Manifest next update: Thu 30 Apr 2026 15:23:07 +0000
Files and hashes: 1: 3136302e32302e33362e302f32332d3234203d3e20313532373631.roa (hash: e3Ye+8KBt0e+GgLTg5uGXR8hoI4RqWYobVVv7ZziGMY=)
2: A71BAA66623847B7BD9EA7C40BCBCA855E52E8EB.crl (hash: KG/zNLF/7cqLG/zBRr5JoYMD8L9P7UtlzO9DdgeRTYE=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
70:9e:3d:d3:a1:77:4b:e7:33:90:55:d9:e7:04:d0:92:90:c0:82:6b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A71BAA66623847B7BD9EA7C40BCBCA855E52E8EB
Validity
Not Before: Apr 27 12:06:07 2026 GMT
Not After : Apr 30 15:23:07 2026 GMT
Subject: CN=8694DBAE5338C9DBBB88CBB0555AC4892B252BD6
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c4:31:21:1c:1a:2d:19:8e:72:54:7c:84:e1:a3:
90:38:62:52:be:3a:a8:e0:d2:2f:85:26:86:cf:58:
3d:7a:dd:b2:24:e5:2a:c9:ed:d4:a2:1b:fb:da:28:
ad:34:48:60:54:2f:1e:4c:6e:0b:bc:92:80:f8:26:
46:e7:a4:aa:1e:bc:3d:76:5c:62:bf:7d:6d:10:74:
7a:7e:85:ca:c7:f6:88:7b:c9:fd:c0:2c:b6:53:db:
7d:44:35:c6:c3:cc:27:72:72:15:c1:bb:43:aa:cd:
41:e3:62:c1:ab:08:84:99:e6:01:cb:43:13:6d:6a:
6e:60:92:b1:9e:cc:2e:ed:d4:31:31:28:09:cc:02:
db:e4:a1:f8:c6:58:f3:65:25:d9:ea:77:84:8d:38:
05:83:4a:65:f8:b8:05:b9:e9:51:f5:85:b1:77:82:
7e:1b:2c:1a:c4:c8:39:a4:03:99:a9:2c:d3:92:12:
d1:18:67:84:86:b1:42:a2:62:f3:5f:dc:1a:77:2b:
c7:38:27:2c:f4:0f:ba:cf:15:e9:2d:d5:d4:6c:00:
1f:5f:70:9a:c5:30:cf:3e:9f:fe:cb:b9:29:07:dd:
cb:4f:18:ee:3b:f2:c0:a1:84:83:e6:7d:34:be:3f:
2a:5d:c2:72:37:20:ee:78:c6:55:78:41:24:17:6a:
61:c9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
86:94:DB:AE:53:38:C9:DB:BB:88:CB:B0:55:5A:C4:89:2B:25:2B:D6
X509v3 Authority Key Identifier:
keyid:A7:1B:AA:66:62:38:47:B7:BD:9E:A7:C4:0B:CB:CA:85:5E:52:E8:EB
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://repo-rpki.idnic.net/repo/281ef440-5a5f-4a4f-b509-b103245c5cf1/0/A71BAA66623847B7BD9EA7C40BCBCA855E52E8EB.crl
Authority Information Access:
CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/A71BAA66623847B7BD9EA7C40BCBCA855E52E8EB.cer
Subject Information Access:
Signed Object - URI:rsync://repo-rpki.idnic.net/repo/281ef440-5a5f-4a4f-b509-b103245c5cf1/0/A71BAA66623847B7BD9EA7C40BCBCA855E52E8EB.mft
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
53:82:bc:4b:67:0d:77:18:47:5a:57:eb:13:2c:b4:75:76:8f:
58:aa:65:ad:e1:8f:c8:6a:1e:47:2f:45:76:ed:c0:a1:83:ec:
d6:48:0b:7e:1b:d4:62:81:cc:89:69:fa:69:6d:26:01:45:75:
c0:2c:a1:12:63:3f:e2:b5:ac:ca:e9:d0:e4:d0:a2:65:e2:06:
46:67:fd:5d:ef:0a:c9:ba:dd:65:46:19:77:f8:3f:03:af:e1:
08:28:48:c9:3c:8b:06:3b:4a:d6:74:4a:6c:f4:d6:50:ed:eb:
c2:eb:7b:fa:6d:ea:c5:96:04:75:74:00:e7:1c:9c:f8:92:cc:
f8:8d:8d:8b:d9:bb:c1:b9:69:f4:c8:c3:e9:7d:b2:93:c5:54:
f1:8d:6c:56:7f:d7:75:5b:74:ad:ed:8d:43:04:76:96:6c:85:
55:a3:6b:80:c3:ed:69:44:d3:66:18:16:bf:8f:e5:5b:db:08:
6b:78:aa:b9:8c:fc:ed:ca:85:61:d5:75:8e:8c:46:e7:d3:d2:
3b:5c:18:c9:4e:b2:3a:44:68:48:ed:fb:04:e7:94:18:f9:b2:
cd:72:12:85:f8:30:7f:e2:51:a6:8d:a0:28:39:7e:a1:b9:b8:
e6:79:8c:6b:b0:04:a9:9a:72:b9:54:54:9d:9c:bc:e1:b3:5d:
04:82:26:1c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jun 24 04:17:53 2026 by rpki-client