
Manifest
$ rpki-client -vvf repo-rpki.idnic.net/repo/0456519e-ab61-4943-b3e8-10bdd6080fda/1/CFA49B8E5D9A08B7A017E5B0F887E88F99A6306C.mft
File: CFA49B8E5D9A08B7A017E5B0F887E88F99A6306C.mft (raw, json)
Hash identifier: j7TE1/a8pgna8yN3D00ayZP3b64Ddou2MXBd6DX7hYg=
Subject key identifier: 26:7D:4D:47:A8:B3:CC:67:02:8D:4F:24:5A:BC:15:7C:C9:9B:88:8B
Authority key identifier: CF:A4:9B:8E:5D:9A:08:B7:A0:17:E5:B0:F8:87:E8:8F:99:A6:30:6C
Certificate issuer: /CN=CFA49B8E5D9A08B7A017E5B0F887E88F99A6306C
Certificate serial: 7679790169CA8942BD772B31EF2CEA74C8CD32D4
Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/CFA49B8E5D9A08B7A017E5B0F887E88F99A6306C.cer
Subject info access: rsync://repo-rpki.idnic.net/repo/0456519e-ab61-4943-b3e8-10bdd6080fda/1/CFA49B8E5D9A08B7A017E5B0F887E88F99A6306C.mft
Manifest number: 0109
Signing time: Mon 27 Apr 2026 18:40:58 +0000
Manifest this update: Mon 27 Apr 2026 18:35:58 +0000
Manifest next update: Thu 30 Apr 2026 19:11:58 +0000
Files and hashes: 1: 323030313a6466343a336134303a3a2f34382d3438203d3e20313533313132.roa (hash: jKBpF5n6aRwYVRtvawTuNUoC6fB2T5xMG66T9GHPZm8=)
2: CFA49B8E5D9A08B7A017E5B0F887E88F99A6306C.crl (hash: 7AGe5myi8lYSc83J8ZuJ7inXfIPyKWeJiZbgfDx/LZI=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
76:79:79:01:69:ca:89:42:bd:77:2b:31:ef:2c:ea:74:c8:cd:32:d4
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=CFA49B8E5D9A08B7A017E5B0F887E88F99A6306C
Validity
Not Before: Apr 27 18:35:58 2026 GMT
Not After : Apr 30 19:11:58 2026 GMT
Subject: CN=267D4D47A8B3CC67028D4F245ABC157CC99B888B
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:be:3d:31:39:b0:33:32:42:4d:79:f8:03:06:0b:
92:87:1c:11:47:0b:a9:8d:bb:e2:fc:df:96:b8:25:
30:d8:1c:5f:81:be:b2:38:1e:f3:41:63:95:f9:1b:
ce:a8:4c:c1:7e:98:60:24:88:a7:b1:7c:e1:d5:b7:
8e:ff:75:29:78:f2:9c:a9:38:df:fc:b8:3a:18:5b:
ea:64:57:18:0e:6e:7c:1c:38:3f:8b:ef:db:2d:40:
be:bd:3d:66:ec:63:41:82:ba:8a:12:03:06:3d:73:
1d:ff:d7:8b:ed:24:a2:91:52:e8:80:94:5e:b7:2f:
dc:53:1c:d5:6e:a1:5a:27:7a:ea:dc:66:5c:61:31:
aa:9e:b5:49:af:39:8e:80:d5:43:fe:1d:65:b0:aa:
a4:06:4a:df:c9:09:15:74:c2:36:43:3e:6e:81:60:
ed:5b:4f:c5:4a:c9:c6:5a:76:2b:da:f8:3d:98:44:
8d:fe:9e:4d:eb:eb:4e:2b:c9:c5:dd:40:2a:2e:ae:
3e:8b:84:44:59:a3:c5:d9:f8:9b:a9:d4:98:4a:c9:
63:04:9d:9c:80:02:0b:24:d5:85:68:6e:5e:44:d0:
5d:b9:99:db:99:b4:c5:66:75:3d:2c:ea:11:67:ba:
3e:50:27:6f:9c:c2:e5:8b:32:16:f1:3c:12:7f:82:
37:9f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
26:7D:4D:47:A8:B3:CC:67:02:8D:4F:24:5A:BC:15:7C:C9:9B:88:8B
X509v3 Authority Key Identifier:
keyid:CF:A4:9B:8E:5D:9A:08:B7:A0:17:E5:B0:F8:87:E8:8F:99:A6:30:6C
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://repo-rpki.idnic.net/repo/0456519e-ab61-4943-b3e8-10bdd6080fda/1/CFA49B8E5D9A08B7A017E5B0F887E88F99A6306C.crl
Authority Information Access:
CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/CFA49B8E5D9A08B7A017E5B0F887E88F99A6306C.cer
Subject Information Access:
Signed Object - URI:rsync://repo-rpki.idnic.net/repo/0456519e-ab61-4943-b3e8-10bdd6080fda/1/CFA49B8E5D9A08B7A017E5B0F887E88F99A6306C.mft
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
92:0f:3b:f6:dd:c2:b7:26:ca:87:26:1a:67:db:f5:e9:46:db:
a2:6b:f9:61:0d:b6:d2:13:c3:a5:fa:bb:91:43:66:62:09:b7:
9e:bb:4d:35:d8:36:f0:11:2c:df:30:20:f9:87:dd:77:3c:d5:
b9:27:2b:79:05:40:95:a9:bd:06:49:4f:ea:e6:81:1c:31:0c:
54:ed:91:90:7e:fa:7b:bf:5d:61:9d:74:f8:d3:62:31:65:df:
6c:6b:4a:56:a8:26:63:c8:c7:16:46:37:ae:33:a0:78:b3:40:
a4:20:4c:d7:6f:43:bb:09:64:61:b2:56:43:40:9f:28:68:d5:
63:6e:ae:68:14:7d:3b:ee:db:5f:36:0d:d4:f3:3f:5a:81:ed:
03:33:c1:f6:3c:f4:30:1d:ca:b0:56:b7:99:a2:a9:a1:8d:02:
b7:70:f9:1a:6e:db:6f:24:a2:d1:03:e9:d9:97:b4:47:14:23:
42:d5:4c:35:58:dc:67:0c:74:b5:7e:3e:4f:81:85:d8:c4:4b:
bf:42:92:0d:ce:cf:47:c6:22:b9:bb:ad:53:95:44:4c:25:41:
8d:35:21:a1:66:05:50:61:91:17:0b:87:09:50:b3:e4:0b:ed:
4b:90:98:a2:44:5b:d1:3d:51:b5:3e:c7:a8:b2:de:9b:e7:d5:
96:2c:e9:29
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jul 19 05:03:29 2026 by rpki-client