Manifest
$ rpki-client -vvf repo-rpki.idnic.net/repo/f5efc413-2709-483e-a314-c5d0663df932/0/23475A86BB5C515DDD7753B6555E267A3F5C28F4.mft
File: 23475A86BB5C515DDD7753B6555E267A3F5C28F4.mft (raw, json)
Hash identifier: deSWd6pKBsHX1uG8FhJa1Q03C2MeayrHwKxAH7QKiAQ=
Subject key identifier: 41:E1:E2:F2:95:FE:91:F5:86:B7:75:8B:FE:B6:46:6F:4C:0A:72:21
Authority key identifier: 23:47:5A:86:BB:5C:51:5D:DD:77:53:B6:55:5E:26:7A:3F:5C:28:F4
Certificate issuer: /CN=23475A86BB5C515DDD7753B6555E267A3F5C28F4
Certificate serial: 340F657E5906D459428F0E407D11A3C80CEC9CCE
Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/23475A86BB5C515DDD7753B6555E267A3F5C28F4.cer
Subject info access: rsync://repo-rpki.idnic.net/repo/f5efc413-2709-483e-a314-c5d0663df932/0/23475A86BB5C515DDD7753B6555E267A3F5C28F4.mft
Manifest number: FC
Signing time: Mon 27 Apr 2026 14:20:47 +0000
Manifest this update: Mon 27 Apr 2026 14:15:47 +0000
Manifest next update: Thu 30 Apr 2026 17:36:47 +0000
Files and hashes: 1: 3136302e32322e33302e302f32342d3234203d3e20313532373938.roa (hash: /K4mylpcHmr+sO+7dTgSimoSvEZOrC1jLffnv1dbPQ8=)
2: 3136302e32322e33312e302f32342d3234203d3e20313532373938.roa (hash: 5aPZi9EHvbfyOxIPMTjzibe1Bxih6lwkA1KW+hUQT4E=)
3: 23475A86BB5C515DDD7753B6555E267A3F5C28F4.crl (hash: cLv7y+SS6D5EAwxQagL8KyKC4pNkW5ZdzGl2nQ+oX10=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
34:0f:65:7e:59:06:d4:59:42:8f:0e:40:7d:11:a3:c8:0c:ec:9c:ce
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=23475A86BB5C515DDD7753B6555E267A3F5C28F4
Validity
Not Before: Apr 27 14:15:47 2026 GMT
Not After : Apr 30 17:36:47 2026 GMT
Subject: CN=41E1E2F295FE91F586B7758BFEB6466F4C0A7221
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b0:ac:13:f0:25:5b:14:72:69:43:02:55:9a:48:
73:6c:c1:39:8c:d4:36:60:2d:7e:34:01:f9:d0:85:
84:3a:65:c5:07:85:58:a4:9c:4d:ee:8d:d6:a8:31:
b2:f9:a9:db:ed:13:73:53:7c:64:3b:5a:ed:2d:ee:
c9:b8:ff:43:c9:7e:c8:72:03:de:a2:a4:6e:94:a2:
54:2f:c2:7f:d2:04:aa:43:c0:a0:ce:99:90:21:d6:
c6:45:58:3c:47:b9:ae:cf:65:bd:9b:8d:7b:f2:12:
dd:d0:01:20:e3:b4:71:30:54:90:43:13:6b:8f:35:
bf:1c:76:62:d0:c7:71:2c:e2:e4:61:f8:2c:f8:70:
3c:2e:03:b6:25:4c:5c:c7:61:56:94:0e:aa:64:2c:
ed:a3:c2:be:06:a3:5b:ba:09:ca:c0:bd:be:70:f2:
b3:06:be:fc:74:8f:53:00:d6:ab:21:74:7a:94:f7:
f9:e4:fd:fc:5a:97:0b:4d:ca:ec:d2:a2:cb:c3:05:
c6:9f:9c:cd:d4:c4:63:ad:60:cc:49:03:2a:8c:75:
f4:31:6d:ec:56:8e:a2:fb:bd:44:95:20:8c:ba:53:
a8:f7:b3:5f:00:09:21:0e:d0:2a:33:50:89:5f:60:
6d:94:6b:b2:7d:0b:55:f5:25:2d:30:de:82:50:fe:
4c:a7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
41:E1:E2:F2:95:FE:91:F5:86:B7:75:8B:FE:B6:46:6F:4C:0A:72:21
X509v3 Authority Key Identifier:
keyid:23:47:5A:86:BB:5C:51:5D:DD:77:53:B6:55:5E:26:7A:3F:5C:28:F4
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://repo-rpki.idnic.net/repo/f5efc413-2709-483e-a314-c5d0663df932/0/23475A86BB5C515DDD7753B6555E267A3F5C28F4.crl
Authority Information Access:
CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/23475A86BB5C515DDD7753B6555E267A3F5C28F4.cer
Subject Information Access:
Signed Object - URI:rsync://repo-rpki.idnic.net/repo/f5efc413-2709-483e-a314-c5d0663df932/0/23475A86BB5C515DDD7753B6555E267A3F5C28F4.mft
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
12:f0:b7:29:d7:54:9c:b6:9d:e5:4c:70:ee:eb:69:17:09:55:
a0:e6:68:7e:e6:9a:8f:5d:4c:94:dd:49:9a:80:55:e0:f2:49:
e1:44:be:2d:d4:b4:c3:d9:96:69:52:61:4a:50:d0:bd:13:10:
f5:2e:99:a6:67:b0:77:ee:cb:66:09:7b:e2:d7:b0:62:13:cf:
5e:eb:c2:ed:d2:f5:0b:b8:45:d3:83:ed:60:1a:24:6b:03:db:
c0:16:9b:ed:60:e7:c4:af:7c:ed:e4:d8:f6:63:52:3a:1b:b2:
bd:8d:f4:c9:6c:92:39:12:94:df:d8:76:af:25:27:5a:3a:6e:
c0:77:cf:62:67:34:93:3e:54:c7:3d:e5:4e:b2:26:88:16:76:
47:e3:01:9b:0b:da:2a:cb:0f:b5:44:6b:b5:eb:64:3b:f6:0f:
ba:a9:a7:fc:e4:47:e8:9e:42:77:ec:dc:b3:8b:5f:fb:8b:f1:
3a:da:c7:df:ba:54:1a:57:ac:57:81:6c:62:4e:75:7b:5d:44:
ef:52:af:13:56:5a:9d:52:05:fb:b0:f0:af:52:bf:14:bf:d7:
f0:68:25:53:6b:73:bc:78:f7:8c:dd:a3:1c:84:75:f2:fc:52:
a4:e1:98:36:da:33:f8:0d:67:c7:87:31:0a:4f:fd:49:9e:30:
76:2b:01:99
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jun 24 04:16:40 2026 by rpki-client