Manifest
$ rpki-client -vvf repo-rpki.idnic.net/repo/11828067-e7c1-4964-8428-599033d74296/0/12A8210E6A91A93DDB92F594D7E47728131BC2DA.mft
File: 12A8210E6A91A93DDB92F594D7E47728131BC2DA.mft (raw, json)
Hash identifier: flEwxQETLJtO0zZ7X6ELXdRlZ0qtx+aN5l58pirRP/s=
Subject key identifier: 60:35:89:F4:C2:62:CD:EA:A7:E0:DF:80:7D:DC:CF:B2:31:A3:AA:B9
Authority key identifier: 12:A8:21:0E:6A:91:A9:3D:DB:92:F5:94:D7:E4:77:28:13:1B:C2:DA
Certificate issuer: /CN=12A8210E6A91A93DDB92F594D7E47728131BC2DA
Certificate serial: 69A1EDA881E29AED40E6A17117106892047EA488
Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/12A8210E6A91A93DDB92F594D7E47728131BC2DA.cer
Subject info access: rsync://repo-rpki.idnic.net/repo/11828067-e7c1-4964-8428-599033d74296/0/12A8210E6A91A93DDB92F594D7E47728131BC2DA.mft
Manifest number: 0156
Signing time: Tue 28 Apr 2026 04:42:13 +0000
Manifest this update: Tue 28 Apr 2026 04:37:13 +0000
Manifest next update: Fri 01 May 2026 11:01:13 +0000
Files and hashes: 1: 34352e3132332e3134332e302f32342d3234203d3e20343532303233.roa (hash: Xv8kcXDJ6WYMmWOyH4eBz+tykqWc30YT1h8G2TY977E=)
2: 12A8210E6A91A93DDB92F594D7E47728131BC2DA.crl (hash: A2sfQKH/ZmS6WVY2lcDDfB0wZIw7QP9rxeo10LVK6rg=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
69:a1:ed:a8:81:e2:9a:ed:40:e6:a1:71:17:10:68:92:04:7e:a4:88
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=12A8210E6A91A93DDB92F594D7E47728131BC2DA
Validity
Not Before: Apr 28 04:37:13 2026 GMT
Not After : May 1 11:01:13 2026 GMT
Subject: CN=603589F4C262CDEAA7E0DF807DDCCFB231A3AAB9
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d4:25:b7:5e:69:97:39:5e:c4:3e:98:5e:bf:30:
84:15:42:5d:c7:5e:49:57:62:48:15:d7:35:50:0c:
84:ed:5f:3e:7c:2e:e3:bc:33:bc:38:10:06:72:ee:
fb:0d:82:fd:af:8a:b9:88:9e:8a:38:88:06:ec:38:
3d:03:96:c9:6f:c7:8f:eb:f7:ba:f7:fd:e4:dd:83:
86:3b:88:16:44:00:6a:41:41:57:f6:45:fa:1d:d2:
ba:90:7c:db:8d:c6:2f:20:d0:7e:78:2a:35:cd:20:
d5:e9:da:f7:63:4f:3e:5c:6a:a6:fa:6e:8b:54:a7:
16:70:11:bd:eb:b1:b9:05:70:2d:3b:29:81:0e:75:
ed:54:61:29:70:44:a1:fc:26:0b:77:8a:97:05:fc:
78:ed:09:e1:6f:35:d6:39:bf:01:15:a7:e3:f8:c0:
24:20:ed:04:dc:32:6e:bf:01:81:be:0a:9c:21:f8:
80:43:54:eb:e0:c2:21:2b:9a:76:78:5e:fb:ad:e9:
27:59:6f:ff:9f:76:a5:60:c8:1e:10:ac:e8:28:11:
3c:82:cc:56:59:a2:19:63:62:35:78:b2:f0:70:b8:
52:ce:53:68:0d:cb:c5:25:8e:82:94:4a:36:30:be:
c9:6b:3b:61:75:25:8b:25:83:fb:e2:be:87:57:8b:
96:19
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
60:35:89:F4:C2:62:CD:EA:A7:E0:DF:80:7D:DC:CF:B2:31:A3:AA:B9
X509v3 Authority Key Identifier:
keyid:12:A8:21:0E:6A:91:A9:3D:DB:92:F5:94:D7:E4:77:28:13:1B:C2:DA
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://repo-rpki.idnic.net/repo/11828067-e7c1-4964-8428-599033d74296/0/12A8210E6A91A93DDB92F594D7E47728131BC2DA.crl
Authority Information Access:
CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/12A8210E6A91A93DDB92F594D7E47728131BC2DA.cer
Subject Information Access:
Signed Object - URI:rsync://repo-rpki.idnic.net/repo/11828067-e7c1-4964-8428-599033d74296/0/12A8210E6A91A93DDB92F594D7E47728131BC2DA.mft
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
10:f1:df:da:59:8c:74:1b:ba:df:ee:c8:ca:c9:bf:7c:d2:e3:
89:fd:84:b5:6d:fb:63:61:39:9b:77:e4:87:fc:dd:5c:33:52:
37:06:c5:67:14:62:63:b3:f3:af:2f:b8:e9:7f:6f:36:64:3f:
7b:9c:51:1d:c9:2f:00:12:be:4e:5d:ce:ae:59:64:0d:b5:a3:
c0:77:d7:f1:c4:3f:04:9d:71:0d:1b:4e:b9:38:0d:2e:ff:55:
77:ef:af:c6:d9:e8:c8:6d:5e:d9:4c:38:af:0d:9b:ce:8a:8f:
42:7b:8a:3f:2d:e1:ee:c0:2e:fc:7d:ca:2e:18:c0:6c:f4:5b:
94:e4:66:54:f4:c3:67:dc:32:19:ad:3e:9c:5f:a1:9c:a1:d2:
7b:ed:99:3b:59:2b:13:5f:c2:2e:36:0e:eb:b9:51:70:6c:43:
10:3d:c4:e8:38:d2:a8:59:57:5d:b4:3e:0d:47:73:42:0c:d4:
46:67:da:c7:fe:b7:67:bb:0d:93:dc:ce:8c:35:ee:9a:2e:a8:
08:7e:56:80:8d:11:30:5c:64:6b:f8:61:1f:0b:79:e2:90:37:
ca:84:66:af:fc:a6:18:a9:9f:37:b7:ae:3b:31:d3:cb:7e:40:
f6:bd:b1:f8:d1:69:c1:ab:de:af:84:a4:9f:f1:7c:ff:04:dc:
f1:f0:1b:36
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jun 3 03:08:27 2026 by rpki-client