Manifest
$ rpki-client -vvf repo-rpki.idnic.net/repo/a211f347-a1e7-471d-ad20-da76aabf384c/0/67C19D4C4526841EC686B5194BEE908F203AF744.mft
File: 67C19D4C4526841EC686B5194BEE908F203AF744.mft (raw, json)
Hash identifier: eRidR5qmCeSPxjnk5DDPidBIWyIXhOUut8TTT6+SYyE=
Subject key identifier: 9F:FC:70:DC:CC:60:EE:83:48:84:57:9C:8D:F7:52:33:0A:25:68:5F
Authority key identifier: 67:C1:9D:4C:45:26:84:1E:C6:86:B5:19:4B:EE:90:8F:20:3A:F7:44
Certificate issuer: /CN=67C19D4C4526841EC686B5194BEE908F203AF744
Certificate serial: 1AC684EA6C75234368BB04E3CBF01D98309A9F1A
Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/67C19D4C4526841EC686B5194BEE908F203AF744.cer
Subject info access: rsync://repo-rpki.idnic.net/repo/a211f347-a1e7-471d-ad20-da76aabf384c/0/67C19D4C4526841EC686B5194BEE908F203AF744.mft
Manifest number: F1
Signing time: Tue 28 Apr 2026 15:01:15 +0000
Manifest this update: Tue 28 Apr 2026 14:56:15 +0000
Manifest next update: Fri 01 May 2026 19:26:15 +0000
Files and hashes: 1: 3136302e3139312e31332e302f32342d3234203d3e20313533313331.roa (hash: 6JhReV09R/tziXlQqKrU1QTNK6tqA0cKgyJJfsNVlow=)
2: 67C19D4C4526841EC686B5194BEE908F203AF744.crl (hash: AchYwTY26jWgUMx46b3Rofbhz5zu4r1KABXS+UQSJto=)
3: 3136302e3139312e31322e302f32342d3234203d3e20313533313331.roa (hash: S2w92LJoQia5t/tsWZGfIg0MD/8f0hveKgJc7kTc/Lk=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
1a:c6:84:ea:6c:75:23:43:68:bb:04:e3:cb:f0:1d:98:30:9a:9f:1a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=67C19D4C4526841EC686B5194BEE908F203AF744
Validity
Not Before: Apr 28 14:56:15 2026 GMT
Not After : May 1 19:26:15 2026 GMT
Subject: CN=9FFC70DCCC60EE834884579C8DF752330A25685F
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a6:80:e9:d3:8a:3a:e3:09:84:80:ed:3c:e7:75:
87:87:12:bb:86:e8:51:97:8a:7f:6c:eb:18:08:d3:
59:2b:61:6b:27:92:76:d1:3e:84:6b:2c:cd:02:dd:
2d:4f:04:85:28:f8:bb:06:7f:f8:ca:76:60:66:39:
d8:2e:75:f0:e9:b7:c9:c0:c9:d9:db:8c:47:39:fb:
0d:c7:77:fd:ff:19:c9:e1:f3:22:e0:20:dc:a8:ef:
73:f3:83:f2:b9:91:81:0b:2d:cb:24:90:e6:49:17:
6e:21:e7:cc:e3:18:1d:b0:d5:4d:ff:d1:e9:18:fe:
d2:cb:86:72:b7:f5:6c:ee:15:63:d1:95:f1:bc:70:
8a:62:fc:66:32:3c:4e:59:d3:80:7a:10:81:10:f8:
f5:a9:b2:6e:cd:f9:4b:b8:93:76:1b:75:d3:c1:89:
47:f6:20:59:5d:37:ce:8c:b4:ba:7b:51:0c:9a:34:
ba:08:2c:1d:36:37:e0:f4:ce:5e:fa:49:5e:2a:ea:
01:d4:43:68:03:7d:99:a6:58:e5:81:f3:95:74:52:
d9:b3:9a:c5:be:45:87:90:f2:92:72:4f:45:76:5b:
bf:58:3d:86:36:32:50:cb:7e:9b:42:24:f1:38:77:
43:45:5e:ae:91:90:42:00:8e:43:18:96:98:ba:21:
63:5b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
9F:FC:70:DC:CC:60:EE:83:48:84:57:9C:8D:F7:52:33:0A:25:68:5F
X509v3 Authority Key Identifier:
keyid:67:C1:9D:4C:45:26:84:1E:C6:86:B5:19:4B:EE:90:8F:20:3A:F7:44
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://repo-rpki.idnic.net/repo/a211f347-a1e7-471d-ad20-da76aabf384c/0/67C19D4C4526841EC686B5194BEE908F203AF744.crl
Authority Information Access:
CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/67C19D4C4526841EC686B5194BEE908F203AF744.cer
Subject Information Access:
Signed Object - URI:rsync://repo-rpki.idnic.net/repo/a211f347-a1e7-471d-ad20-da76aabf384c/0/67C19D4C4526841EC686B5194BEE908F203AF744.mft
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
78:84:87:31:ff:7c:3f:80:aa:c1:37:7d:3f:e1:e2:ac:b2:0d:
3b:4f:a3:1a:20:83:cf:e2:b9:9e:23:c6:d2:1b:db:7b:51:92:
89:d9:8e:9c:1e:9b:26:05:9f:b4:4d:9b:57:85:d8:d8:a0:13:
6d:1e:03:04:4c:cb:70:26:fb:75:3b:fa:68:ca:f7:ff:0f:8e:
ae:db:da:d1:8b:29:d5:00:67:2b:f1:51:6c:ca:89:4f:a4:80:
d1:36:25:48:af:d3:63:b8:a7:92:af:f0:17:3c:3b:ea:e0:a1:
eb:d2:09:ee:d4:9f:b1:b8:85:b8:2e:3b:76:71:bd:21:35:46:
3e:08:f7:89:39:ac:54:92:f4:df:7a:0e:c4:bf:6c:75:ec:cc:
52:e8:cc:9c:b6:4e:73:bd:01:2c:c1:ac:60:ab:c8:cf:82:fc:
72:be:81:66:58:9f:3a:b9:da:01:0b:5f:da:27:d7:8c:65:63:
0c:79:60:16:aa:b3:1d:33:97:4d:58:78:61:15:cd:38:83:ba:
b3:4d:69:e1:2d:4f:fc:85:e1:19:03:5b:5a:c0:06:c7:7f:3c:
a4:87:e6:24:21:be:dd:2d:f2:5e:e0:3c:65:cf:7f:cb:42:3c:
e4:fb:61:37:67:84:0f:9e:69:30:95:5f:88:fc:ba:20:29:5d:
6e:bf:6e:67
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jun 24 04:12:57 2026 by rpki-client