Manifest
$ rpki-client -vvf repo-rpki.idnic.net/repo/cf72f012-a43a-4fcb-86a9-ab3e9573a8d9/0/961A52A522DEB902D9CBDDE98AF82B424422F566.mft
File: 961A52A522DEB902D9CBDDE98AF82B424422F566.mft (raw, json)
Hash identifier: WmIFyMwSHbGK/JgEyWKilVgJvxWsoN2l+zOy8zg2voU=
Subject key identifier: 6E:50:B7:31:0E:06:F6:08:7B:05:9D:55:A8:21:E6:C8:70:FB:00:0C
Authority key identifier: 96:1A:52:A5:22:DE:B9:02:D9:CB:DD:E9:8A:F8:2B:42:44:22:F5:66
Certificate issuer: /CN=961A52A522DEB902D9CBDDE98AF82B424422F566
Certificate serial: 7AB01C0A761D7AED599AB18B7A4FBE4B21FEEC60
Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/961A52A522DEB902D9CBDDE98AF82B424422F566.cer
Subject info access: rsync://repo-rpki.idnic.net/repo/cf72f012-a43a-4fcb-86a9-ab3e9573a8d9/0/961A52A522DEB902D9CBDDE98AF82B424422F566.mft
Manifest number: 0101
Signing time: Wed 29 Apr 2026 02:32:05 +0000
Manifest this update: Wed 29 Apr 2026 02:27:05 +0000
Manifest next update: Sat 02 May 2026 06:57:05 +0000
Files and hashes: 1: 3136302e32352e3132302e302f32342d3234203d3e20313533303632.roa (hash: N9c4heSXbZO9oKOiPxMzMpy/UHaeJZCIa3f88aATMcc=)
2: 961A52A522DEB902D9CBDDE98AF82B424422F566.crl (hash: h04SU8GmhUd34gD54eopy31zwNcfjp7ps99PEItpmns=)
3: 3136302e32352e3132312e302f32342d3234203d3e20313533303632.roa (hash: XtBt14fZ3818vCxS3m952cY63i6gO8+A0tVjyGHPoaU=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
7a:b0:1c:0a:76:1d:7a:ed:59:9a:b1:8b:7a:4f:be:4b:21:fe:ec:60
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=961A52A522DEB902D9CBDDE98AF82B424422F566
Validity
Not Before: Apr 29 02:27:05 2026 GMT
Not After : May 2 06:57:05 2026 GMT
Subject: CN=6E50B7310E06F6087B059D55A821E6C870FB000C
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c7:1f:42:3b:5f:8c:b5:b7:92:cd:2c:c4:28:86:
9e:73:8c:83:e5:e4:fa:5f:85:a5:9d:c1:16:e3:03:
92:ed:72:88:f0:c0:ca:f1:31:18:38:20:46:20:c9:
fa:75:b9:40:03:af:7e:fb:cb:a2:d3:88:f5:5f:e1:
11:29:5c:ec:67:a3:c8:61:e7:74:b9:4c:bd:62:f0:
86:ab:61:9b:6b:27:e3:f1:b3:8d:59:5c:80:73:8f:
aa:1e:f2:0f:dd:bd:0f:e4:59:84:bb:c9:33:f6:15:
3b:45:62:3a:7c:66:55:c6:bb:f2:f7:69:8b:a9:05:
c8:9b:da:a6:e2:9f:96:d9:4c:bc:6f:e3:80:aa:f1:
3b:eb:71:56:5c:c3:41:56:df:8f:2f:76:80:e0:76:
fb:09:5b:1d:d5:c5:e5:5d:79:db:7e:65:96:d9:88:
17:08:c8:02:64:25:d7:48:16:5d:ff:21:44:61:6e:
e5:d0:d8:ac:14:b3:54:1c:22:68:d5:7d:dd:8c:29:
42:08:15:7a:d7:67:d6:f2:9e:3b:72:0a:b9:02:76:
a0:9a:92:7f:6f:29:d0:ac:51:79:8b:da:2e:7e:bc:
65:89:1d:92:f4:8f:90:a1:de:25:67:b9:0f:86:94:
b1:e5:56:f8:a9:7d:62:71:3a:82:1f:2a:95:9e:c3:
ee:0d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
6E:50:B7:31:0E:06:F6:08:7B:05:9D:55:A8:21:E6:C8:70:FB:00:0C
X509v3 Authority Key Identifier:
keyid:96:1A:52:A5:22:DE:B9:02:D9:CB:DD:E9:8A:F8:2B:42:44:22:F5:66
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://repo-rpki.idnic.net/repo/cf72f012-a43a-4fcb-86a9-ab3e9573a8d9/0/961A52A522DEB902D9CBDDE98AF82B424422F566.crl
Authority Information Access:
CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/961A52A522DEB902D9CBDDE98AF82B424422F566.cer
Subject Information Access:
Signed Object - URI:rsync://repo-rpki.idnic.net/repo/cf72f012-a43a-4fcb-86a9-ab3e9573a8d9/0/961A52A522DEB902D9CBDDE98AF82B424422F566.mft
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
00:ea:92:98:1e:67:d0:e6:e4:19:7c:ad:2b:b2:c6:a2:29:cd:
8a:88:78:ba:f2:03:7c:15:24:2e:40:6e:15:37:f4:a6:7f:0e:
e0:e3:26:7d:d3:89:37:50:76:cd:90:b9:8c:c6:70:b0:7e:02:
2e:ef:87:07:c1:16:5d:86:92:52:eb:63:ce:19:fc:cf:16:db:
c4:ae:16:53:10:6f:83:0c:9e:3b:6f:e4:3a:d3:41:17:14:65:
b0:55:3c:c9:73:04:06:9e:49:f8:24:4c:84:c2:0f:2c:72:6c:
cd:b9:68:f7:81:8f:42:dc:b5:c7:55:e7:28:dd:b7:c2:62:6b:
19:34:e9:7f:05:54:18:be:5e:af:a1:26:c6:f9:a0:20:a5:14:
ae:48:f4:9a:14:f9:b3:57:71:cd:39:8e:ec:7a:2c:4b:e4:e5:
e3:d9:9f:1f:38:c1:6d:f7:56:17:75:9c:89:de:55:ab:fa:db:
2e:ae:42:4c:d7:61:d1:26:9a:c9:65:f3:74:81:29:bf:0a:c5:
b4:74:78:d6:1e:bb:80:e1:5f:78:76:35:11:b3:1a:c4:f3:69:
f1:b2:33:92:19:80:a1:18:a8:d4:b2:a7:5a:e0:d9:16:cb:1e:
ff:34:93:2b:2d:4f:b2:26:e9:62:0b:68:ac:ba:93:a4:be:1f:
ea:44:48:d3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jun 24 04:16:52 2026 by rpki-client