
Manifest
$ rpki-client -vvf repo-rpki.idnic.net/repo/5d59b822-5c08-46f1-b25e-758dc18e9905/0/99A17325620A243689E32E6074D5CFCA91D915EB.mft
File: 99A17325620A243689E32E6074D5CFCA91D915EB.mft (raw, json)
Hash identifier: U1MCgSonm8HeiKbTyqNRNDKbx0XB4nWV8YQELQlXALY=
Subject key identifier: 66:5C:8C:89:17:E0:0C:07:C7:CA:1F:A7:56:F3:5B:0F:5E:7D:86:3E
Authority key identifier: 99:A1:73:25:62:0A:24:36:89:E3:2E:60:74:D5:CF:CA:91:D9:15:EB
Certificate issuer: /CN=99A17325620A243689E32E6074D5CFCA91D915EB
Certificate serial: 3CAA1DD2860F330C2F5A68BB302E2E227C994573
Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/99A17325620A243689E32E6074D5CFCA91D915EB.cer
Subject info access: rsync://repo-rpki.idnic.net/repo/5d59b822-5c08-46f1-b25e-758dc18e9905/0/99A17325620A243689E32E6074D5CFCA91D915EB.mft
Manifest number: 0155
Signing time: Tue 28 Apr 2026 20:32:04 +0000
Manifest this update: Tue 28 Apr 2026 20:27:04 +0000
Manifest next update: Sat 02 May 2026 05:28:04 +0000
Files and hashes: 1: 99A17325620A243689E32E6074D5CFCA91D915EB.crl (hash: 4E+Qh6i0F7FCIwfC8Q1vIIldD4ddW/tJ8imreSUdslI=)
2: 3135372e32302e3135362e302f32332d3234203d3e20313532343131.roa (hash: 4ExRW8SIxPfkw+kC/9gMRffVKwpQRwRaUKan/meBEX4=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
3c:aa:1d:d2:86:0f:33:0c:2f:5a:68:bb:30:2e:2e:22:7c:99:45:73
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=99A17325620A243689E32E6074D5CFCA91D915EB
Validity
Not Before: Apr 28 20:27:04 2026 GMT
Not After : May 2 05:28:04 2026 GMT
Subject: CN=665C8C8917E00C07C7CA1FA756F35B0F5E7D863E
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9c:2f:ca:0a:a8:87:cf:5a:99:55:69:62:12:18:
f9:d1:10:c7:9b:cf:a9:6a:79:e2:19:b9:fe:0a:a8:
25:c6:ad:04:5d:3c:a8:b2:18:94:f1:1e:e0:1b:51:
c8:3e:d5:a3:a5:de:19:21:9e:b4:dc:e0:3b:97:27:
fb:b2:83:5b:82:37:52:5f:f7:02:66:ff:b8:a7:74:
dc:5e:28:93:ed:ee:0b:a7:95:e6:7a:94:26:4a:23:
f4:61:27:f1:27:f8:05:e7:bb:59:f0:92:f0:4b:77:
0c:f2:2e:6d:90:21:80:b8:bb:67:f3:bf:0f:3f:0c:
a7:b8:e9:db:c3:dc:69:3f:8a:e6:64:7b:f0:b6:b7:
86:cc:6a:c9:ca:59:4d:0f:32:82:99:09:0e:b6:9a:
68:2c:c6:4a:b9:b3:87:35:3a:6c:93:e6:bb:15:0f:
f8:dc:f5:4d:10:8e:df:18:45:22:61:a3:cb:21:a6:
65:03:92:a6:16:57:04:60:8c:71:a2:50:4e:3d:c0:
78:a2:ea:c8:4e:2e:d1:23:13:ae:01:35:c7:cd:be:
e4:da:c3:c2:c0:fb:0d:82:64:79:d2:70:e5:d5:35:
68:8b:50:d6:df:81:79:32:da:c2:7b:6b:50:5d:5a:
04:fd:89:97:8d:8e:32:56:2e:f7:00:b0:b2:c9:df:
f7:63
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
66:5C:8C:89:17:E0:0C:07:C7:CA:1F:A7:56:F3:5B:0F:5E:7D:86:3E
X509v3 Authority Key Identifier:
keyid:99:A1:73:25:62:0A:24:36:89:E3:2E:60:74:D5:CF:CA:91:D9:15:EB
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://repo-rpki.idnic.net/repo/5d59b822-5c08-46f1-b25e-758dc18e9905/0/99A17325620A243689E32E6074D5CFCA91D915EB.crl
Authority Information Access:
CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/99A17325620A243689E32E6074D5CFCA91D915EB.cer
Subject Information Access:
Signed Object - URI:rsync://repo-rpki.idnic.net/repo/5d59b822-5c08-46f1-b25e-758dc18e9905/0/99A17325620A243689E32E6074D5CFCA91D915EB.mft
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
2a:56:dd:3e:b5:6c:27:e7:ae:01:c5:a4:e2:c1:25:bf:15:c9:
e8:7a:bc:ec:8f:61:1e:59:15:a3:ec:3d:48:4b:1a:8f:99:5b:
a5:d0:98:0f:9b:79:49:df:62:01:a1:eb:55:8c:ca:dc:3f:d0:
63:d2:66:63:fa:ad:fb:43:b5:c6:3d:57:cd:90:ce:77:17:b0:
bb:c8:e5:45:98:81:fd:e0:6a:cd:98:9c:a0:f2:97:a6:3d:3e:
01:f6:14:41:74:99:a0:b2:dc:5f:b5:41:bc:48:a1:79:61:f9:
be:a6:fa:b7:3b:64:14:d7:cc:4a:a1:7d:6e:05:8c:b8:f3:db:
ba:46:5c:06:f7:7b:eb:3a:13:cc:cf:59:e4:82:84:90:fb:b9:
d5:aa:e3:b7:86:2c:8d:e5:26:3b:31:2f:ea:b8:af:e2:98:91:
66:f6:e5:27:5c:7f:04:35:f0:50:35:ba:31:89:3f:6f:68:91:
d5:d4:af:cd:4c:9a:1e:2c:36:bf:81:62:fa:5d:31:59:56:ea:
02:ea:12:a0:0a:7b:92:88:84:73:d9:85:7a:13:d1:a7:0a:b7:
d5:69:f8:03:09:57:f3:34:65:e5:4b:72:23:0b:df:e4:f6:89:
4d:db:70:87:7a:9e:ba:7b:2e:fb:09:b7:d3:ae:d7:53:65:2b:
a9:9e:5e:81
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jun 24 04:18:39 2026 by rpki-client