
Manifest
$ rpki-client -vvf repo-rpki.idnic.net/repo/ea4f7934-cdc7-4082-83fb-df7d4f8219af/0/969449FF3E24842B0CECC61AB398E88F83709FC1.mft
File: 969449FF3E24842B0CECC61AB398E88F83709FC1.mft (raw, json)
Hash identifier: vsBTYstXkei5e16HEfnBzWgThcXB0ZI8N+FamW8KoNo=
Subject key identifier: 76:08:4B:53:DE:67:2A:4D:F4:2B:C9:59:EF:49:D8:D9:32:62:32:89
Authority key identifier: 96:94:49:FF:3E:24:84:2B:0C:EC:C6:1A:B3:98:E8:8F:83:70:9F:C1
Certificate issuer: /CN=969449FF3E24842B0CECC61AB398E88F83709FC1
Certificate serial: 547F8CED11C60ACB3A8A2F4FA7C30978FFC9E1A7
Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/969449FF3E24842B0CECC61AB398E88F83709FC1.cer
Subject info access: rsync://repo-rpki.idnic.net/repo/ea4f7934-cdc7-4082-83fb-df7d4f8219af/0/969449FF3E24842B0CECC61AB398E88F83709FC1.mft
Manifest number: 0155
Signing time: Tue 28 Apr 2026 13:22:17 +0000
Manifest this update: Tue 28 Apr 2026 13:17:17 +0000
Manifest next update: Fri 01 May 2026 14:08:17 +0000
Files and hashes: 1: 3135372e32302e3134352e302f32342d3234203d3e20313532343231.roa (hash: EGoAWeYOzKbfduhwyAgCeaaXls51T+6E5vcysGiLR90=)
2: 969449FF3E24842B0CECC61AB398E88F83709FC1.crl (hash: o4weXl8g5tQsBrxkMskeH4RSi5y3JjxR3BvOZnL80P8=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
54:7f:8c:ed:11:c6:0a:cb:3a:8a:2f:4f:a7:c3:09:78:ff:c9:e1:a7
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=969449FF3E24842B0CECC61AB398E88F83709FC1
Validity
Not Before: Apr 28 13:17:17 2026 GMT
Not After : May 1 14:08:17 2026 GMT
Subject: CN=76084B53DE672A4DF42BC959EF49D8D932623289
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b2:ed:07:9c:79:69:09:7f:bb:42:14:5f:ad:34:
d8:25:65:24:43:aa:c2:e3:af:f5:ad:3d:8e:5c:71:
1f:25:a5:b0:7e:4d:a4:7b:35:ed:ad:e8:e5:f4:4a:
99:fe:d7:04:db:ad:c3:35:88:1c:22:8c:cb:12:39:
df:ac:a7:cb:05:ea:e3:25:0d:62:ee:b7:a7:31:60:
54:aa:e9:b6:bd:7d:48:ab:9a:59:4f:95:01:ed:6d:
37:3c:f4:76:f0:45:c6:fd:b3:dd:9a:a0:37:3c:17:
c6:b9:d5:54:12:94:1e:7d:7d:47:2a:a1:09:6f:3b:
26:b7:4d:ea:31:ab:bd:bb:b1:1d:6e:25:d2:25:56:
31:b9:70:ce:f0:06:f7:d1:e7:40:ba:5a:a6:68:d1:
cd:06:6b:51:2a:f7:91:ec:4e:03:03:f4:e6:d6:36:
38:f8:37:9c:1a:e7:ff:47:71:32:62:f5:1b:71:20:
8f:19:56:3d:2c:21:18:dd:a9:8b:16:be:83:9e:b4:
35:63:d6:a4:4f:28:36:fb:8e:cf:1f:dc:34:e5:ac:
7e:08:65:fb:b3:fd:58:22:08:8e:ce:63:37:a2:db:
24:ff:16:e2:bc:03:8e:84:9d:55:ba:b6:98:1f:7c:
b3:d2:e3:fa:6d:fd:7d:aa:36:45:e9:ee:9e:32:8c:
8c:f5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
76:08:4B:53:DE:67:2A:4D:F4:2B:C9:59:EF:49:D8:D9:32:62:32:89
X509v3 Authority Key Identifier:
keyid:96:94:49:FF:3E:24:84:2B:0C:EC:C6:1A:B3:98:E8:8F:83:70:9F:C1
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://repo-rpki.idnic.net/repo/ea4f7934-cdc7-4082-83fb-df7d4f8219af/0/969449FF3E24842B0CECC61AB398E88F83709FC1.crl
Authority Information Access:
CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/969449FF3E24842B0CECC61AB398E88F83709FC1.cer
Subject Information Access:
Signed Object - URI:rsync://repo-rpki.idnic.net/repo/ea4f7934-cdc7-4082-83fb-df7d4f8219af/0/969449FF3E24842B0CECC61AB398E88F83709FC1.mft
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
71:8d:bd:7c:09:72:01:24:b6:3f:67:91:61:06:fd:39:8e:30:
5a:bd:b4:d9:21:8c:42:ad:e7:1f:fa:f8:33:ac:3a:84:f1:31:
d0:40:ec:f9:42:65:19:4e:8f:03:7d:ef:90:bc:eb:e3:3d:8e:
b8:bc:a3:93:92:30:86:00:05:ad:f4:15:b0:ce:ea:34:74:10:
cd:f6:0d:68:96:62:14:9c:79:87:ec:e3:dd:a3:fc:4c:44:7c:
f7:b5:5c:64:4c:ad:4f:51:33:64:0a:de:9e:a0:f8:38:5f:99:
1e:b6:ce:b5:8d:75:30:b2:0e:89:bc:56:ab:f8:d7:69:de:e5:
60:8c:54:f2:d9:a6:f2:84:30:9d:f1:c6:0e:62:67:6f:e8:d3:
c4:26:05:f9:13:ee:94:50:a5:4a:58:14:49:15:72:16:04:e1:
d4:2f:ed:5e:77:42:3b:ad:68:27:2f:59:84:2d:50:52:f7:36:
3a:3a:a0:77:98:9c:fe:cb:7c:50:5a:0e:33:08:d6:2b:3a:c0:
92:5f:7d:69:e6:38:5f:11:e8:6f:9e:b8:5c:1d:15:1c:93:9f:
6a:4e:3b:c1:57:74:bd:c4:be:20:d2:ee:ef:13:c9:b7:43:c1:
b5:a6:d4:93:3c:cd:ae:82:d5:45:b8:88:c2:96:d3:3d:14:b4:
b9:1c:14:25
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jun 24 04:11:52 2026 by rpki-client