Manifest
$ rpki-client -vvf repo-rpki.idnic.net/repo/0a63b7d7-ea83-4be9-b2fc-b30eb0b44d0a/0/86C8E3A4B496EB93A6EEF684150362C295A428DD.mft
File: 86C8E3A4B496EB93A6EEF684150362C295A428DD.mft (raw, json)
Hash identifier: 3zmkubOvzgmfX+Sug8jsAhmRQuBmMLaePamzmBb0BpU=
Subject key identifier: 6A:9E:1D:81:33:F0:C1:63:28:33:62:39:3B:F0:75:D3:0E:97:F4:51
Authority key identifier: 86:C8:E3:A4:B4:96:EB:93:A6:EE:F6:84:15:03:62:C2:95:A4:28:DD
Certificate issuer: /CN=86C8E3A4B496EB93A6EEF684150362C295A428DD
Certificate serial: 2259C9D0E084A370772E5453C044DD8082097023
Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/86C8E3A4B496EB93A6EEF684150362C295A428DD.cer
Subject info access: rsync://repo-rpki.idnic.net/repo/0a63b7d7-ea83-4be9-b2fc-b30eb0b44d0a/0/86C8E3A4B496EB93A6EEF684150362C295A428DD.mft
Manifest number: 026B
Signing time: Wed 29 Apr 2026 03:01:42 +0000
Manifest this update: Wed 29 Apr 2026 02:56:42 +0000
Manifest next update: Sat 02 May 2026 07:05:42 +0000
Files and hashes: 1: 3130332e3139302e3133352e302f32342d3234203d3e203538343935.roa (hash: ZAxHbiLP6Hqcx4Z+YjqoTqhIgfPAeHtLOg2HhiZ1uS0=)
2: 3130332e3139302e3133342e302f32332d3234203d3e203538343935.roa (hash: NAu4MIqb2SIHlGa2lR/f4p07SuQ7a/mw3Vk71QHChF8=)
3: 86C8E3A4B496EB93A6EEF684150362C295A428DD.crl (hash: ddF5UOPhC0BGFzg+tD9rBXy93pcwfBoNIDN1QexEWyY=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
22:59:c9:d0:e0:84:a3:70:77:2e:54:53:c0:44:dd:80:82:09:70:23
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=86C8E3A4B496EB93A6EEF684150362C295A428DD
Validity
Not Before: Apr 29 02:56:42 2026 GMT
Not After : May 2 07:05:42 2026 GMT
Subject: CN=6A9E1D8133F0C163283362393BF075D30E97F451
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:dc:fa:ec:ce:d3:e3:ac:c0:a8:87:a1:6b:7c:f1:
fc:8e:97:72:f1:22:4e:5e:ee:62:53:9c:68:ea:3f:
9d:2d:1d:5a:94:97:ab:10:c8:19:29:3d:50:e2:d2:
3f:b4:a3:a4:e5:02:49:cb:59:9c:3a:36:c0:29:28:
90:87:62:87:bb:e1:28:be:07:5b:e8:5c:c9:23:d2:
24:bb:8c:35:43:89:5e:6b:c3:e6:0a:98:9b:42:f7:
0a:c5:d5:f8:bd:b7:e4:0e:3d:db:a8:f2:de:cc:b2:
c8:3a:d1:64:ba:66:81:cd:03:03:59:da:95:78:32:
ea:89:38:58:59:ad:d7:92:f6:ed:14:01:53:cf:cd:
6b:16:11:b7:b5:9f:78:e7:4f:6f:5a:72:58:ab:16:
b7:58:6f:14:76:7b:b8:a2:21:99:ba:bd:42:1e:19:
89:61:ab:5a:19:c3:c4:d9:1d:dc:2e:9c:5a:83:57:
05:e4:9f:12:03:6c:6c:b5:c3:42:c6:df:a5:39:73:
4e:08:4c:c2:99:fe:97:04:a6:be:68:78:c9:60:f3:
86:3b:88:9f:96:9d:83:41:b8:64:d2:d9:b1:b8:45:
03:bc:a9:6f:97:ad:f8:4b:76:d8:b3:40:7a:6c:9a:
36:5d:b2:b1:eb:9f:b6:06:56:c3:1e:a0:4f:cd:bb:
76:f7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
6A:9E:1D:81:33:F0:C1:63:28:33:62:39:3B:F0:75:D3:0E:97:F4:51
X509v3 Authority Key Identifier:
keyid:86:C8:E3:A4:B4:96:EB:93:A6:EE:F6:84:15:03:62:C2:95:A4:28:DD
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://repo-rpki.idnic.net/repo/0a63b7d7-ea83-4be9-b2fc-b30eb0b44d0a/0/86C8E3A4B496EB93A6EEF684150362C295A428DD.crl
Authority Information Access:
CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/86C8E3A4B496EB93A6EEF684150362C295A428DD.cer
Subject Information Access:
Signed Object - URI:rsync://repo-rpki.idnic.net/repo/0a63b7d7-ea83-4be9-b2fc-b30eb0b44d0a/0/86C8E3A4B496EB93A6EEF684150362C295A428DD.mft
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
a4:68:40:d4:4d:ef:b1:29:9c:6c:de:bb:73:e2:13:c1:e0:a0:
c0:8e:d3:a0:2b:79:98:70:f4:24:05:96:d2:7b:e5:57:a8:eb:
47:87:95:fc:41:cc:ba:c7:2c:3a:72:06:8b:d5:7b:28:54:b8:
5f:ca:5c:cb:52:d5:d3:fc:13:61:95:5d:e7:82:59:0e:52:36:
89:ef:58:39:68:91:de:b0:76:31:0f:a8:05:40:ad:b7:38:06:
25:6b:93:de:3f:dd:2a:aa:d8:f2:75:da:c5:92:c2:3f:98:1a:
25:15:ca:fe:c7:5b:4d:fc:7c:e0:90:5a:c4:1f:03:2e:be:88:
ad:15:7f:bd:b0:0c:e2:a9:c6:fc:bc:3f:f7:af:db:fc:65:9f:
b4:42:93:bd:b3:79:26:84:73:d1:9e:04:aa:80:4e:d8:31:af:
23:2a:20:0d:10:91:e9:c6:91:f5:62:b5:42:3d:8d:04:4c:69:
ea:d4:b3:ae:06:e0:f0:ca:73:eb:8e:44:03:f8:88:d3:d1:9d:
72:0f:33:68:12:0f:de:c9:c6:11:32:e3:48:d4:41:c4:3e:c8:
ca:a6:8e:04:5c:7a:4f:62:5a:a2:46:f5:2b:c8:66:b1:92:5a:
0f:44:e5:b3:d9:f7:88:97:41:0f:80:dd:a7:03:25:9b:f3:9d:
72:e6:d9:7d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jun 3 03:43:52 2026 by rpki-client