Manifest
$ rpki-client -vvf repo-rpki.idnic.net/repo/0401b2d1-01ca-40e8-bf77-986159867a04/0/43A0899A11D5A51202F1304338672AF19B201A74.mft
File: 43A0899A11D5A51202F1304338672AF19B201A74.mft (raw, json)
Hash identifier: Qx0GsY20lycJz/JCrYpMBbKzWrU5uD5dxcOsvZYyTsE=
Subject key identifier: 8E:E1:D1:D4:B4:7D:0B:45:4F:C0:A2:03:DC:CC:19:0F:74:67:18:28
Authority key identifier: 43:A0:89:9A:11:D5:A5:12:02:F1:30:43:38:67:2A:F1:9B:20:1A:74
Certificate issuer: /CN=43A0899A11D5A51202F1304338672AF19B201A74
Certificate serial: 537DA6AB249BE623746BDFDB394DD7AD5A49D634
Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/43A0899A11D5A51202F1304338672AF19B201A74.cer
Subject info access: rsync://repo-rpki.idnic.net/repo/0401b2d1-01ca-40e8-bf77-986159867a04/0/43A0899A11D5A51202F1304338672AF19B201A74.mft
Manifest number: 0445
Signing time: Wed 29 Apr 2026 04:02:17 +0000
Manifest this update: Wed 29 Apr 2026 03:57:17 +0000
Manifest next update: Sat 02 May 2026 09:11:17 +0000
Files and hashes: 1: 3130332e32392e3231322e302f32322d3234203d3e203538333737.roa (hash: YYshjWJChQ7GjjLm5x5OoEwBOuUfUWvc0tdshb8NzOU=)
2: 43A0899A11D5A51202F1304338672AF19B201A74.crl (hash: gXUSff9rdpgRS5Cb8jKY4FBRkqPvGCz2mdy/7CxMAfQ=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
53:7d:a6:ab:24:9b:e6:23:74:6b:df:db:39:4d:d7:ad:5a:49:d6:34
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=43A0899A11D5A51202F1304338672AF19B201A74
Validity
Not Before: Apr 29 03:57:17 2026 GMT
Not After : May 2 09:11:17 2026 GMT
Subject: CN=8EE1D1D4B47D0B454FC0A203DCCC190F74671828
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d7:f8:08:91:3a:7c:f7:db:a8:f5:fa:2d:e1:a0:
45:47:17:4b:1e:ce:06:17:d3:e2:2b:29:dc:e0:af:
ed:ab:1d:79:b3:64:c5:db:e4:46:c6:29:71:8f:32:
c6:58:90:fa:89:b0:6f:69:c4:62:50:ec:4f:45:03:
01:6b:dc:d1:77:6b:3d:9e:a8:96:7a:9e:94:4d:76:
43:6e:4d:75:e1:bd:e1:58:7d:61:30:44:d0:a3:8f:
32:93:31:6d:76:51:62:cb:d1:fc:3d:e9:d1:4c:22:
37:02:7c:9a:de:e7:2e:1c:0f:74:e6:ac:29:35:53:
f9:1d:f0:78:3d:1f:e2:5c:b8:3d:5d:29:d2:81:c0:
31:0f:94:06:a0:ca:de:2f:f8:e4:d1:69:4f:65:c8:
5d:8a:db:bc:7d:8a:83:4e:c4:db:1c:98:4c:72:41:
6f:3e:ff:a4:cc:b1:f4:5e:85:06:dc:e1:23:a4:26:
01:7b:b9:53:cc:6a:77:5b:db:bf:c3:35:95:41:f2:
68:3f:4d:00:49:51:79:75:0c:10:dc:7f:a6:48:f0:
e8:85:14:84:8a:6f:1c:03:08:08:27:43:ff:d8:bb:
19:f8:a8:e3:74:a4:36:94:d1:cb:ac:71:0b:bc:69:
59:5d:be:4c:31:46:11:85:15:97:47:01:ce:50:4e:
1e:27
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
8E:E1:D1:D4:B4:7D:0B:45:4F:C0:A2:03:DC:CC:19:0F:74:67:18:28
X509v3 Authority Key Identifier:
keyid:43:A0:89:9A:11:D5:A5:12:02:F1:30:43:38:67:2A:F1:9B:20:1A:74
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://repo-rpki.idnic.net/repo/0401b2d1-01ca-40e8-bf77-986159867a04/0/43A0899A11D5A51202F1304338672AF19B201A74.crl
Authority Information Access:
CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/43A0899A11D5A51202F1304338672AF19B201A74.cer
Subject Information Access:
Signed Object - URI:rsync://repo-rpki.idnic.net/repo/0401b2d1-01ca-40e8-bf77-986159867a04/0/43A0899A11D5A51202F1304338672AF19B201A74.mft
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
6a:7c:5c:1b:46:96:68:f1:51:ac:e1:c0:95:e5:45:b7:5b:d4:
3c:62:17:64:e3:6b:a0:cc:28:59:bb:69:9f:b0:4d:23:d2:38:
ff:36:9f:1d:6a:3b:7d:d3:e1:d9:3c:9b:94:7f:a3:bf:b9:fb:
fe:c5:dc:1b:a1:0e:c3:7f:5c:86:89:f8:9b:45:74:db:c0:ca:
3a:64:04:71:77:4a:1f:03:80:88:93:ed:c9:96:6d:bb:d0:f5:
3d:63:00:e7:81:b2:9f:79:97:e8:93:cd:f8:71:51:48:f3:1c:
4b:a7:d4:36:fa:2f:22:45:98:7d:62:df:1f:8d:df:cc:cb:b6:
9d:18:36:59:a9:b4:3f:68:03:35:83:93:89:b5:0c:da:5c:1e:
e3:08:38:77:46:c1:ee:04:e4:04:af:52:d6:f7:af:9a:f7:8f:
3b:ac:d3:3b:5f:68:07:12:cd:0b:e3:e9:62:d2:8c:a0:c0:e6:
13:f9:25:d3:88:fd:90:d5:35:67:da:2c:8d:4c:cb:41:c9:30:
ef:32:65:0f:4a:64:b5:95:48:6d:ab:24:e8:93:29:07:5f:5f:
36:5e:06:02:ff:bc:18:34:c0:15:e3:89:45:a0:e1:ad:62:76:
ab:5b:b6:82:64:63:03:f8:5b:43:e3:01:df:3a:85:1f:8a:d8:
b0:0c:3e:34
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jun 3 03:11:43 2026 by rpki-client