Manifest
$ rpki-client -vvf repo-rpki.idnic.net/repo/1433a1c6-0f70-4c98-96b0-cab58126ab94/0/2D517DC024CEFCFAF80CF7FD392246894E94F12F.mft
File: 2D517DC024CEFCFAF80CF7FD392246894E94F12F.mft (raw, json)
Hash identifier: bsEnAZS2Y2Qr09ZYAnha0jwEcR0/EhubglsTVmJgOFo=
Subject key identifier: CC:98:A7:FE:B6:54:2F:F7:6D:9B:8C:47:4C:46:A9:07:41:5C:FE:9E
Authority key identifier: 2D:51:7D:C0:24:CE:FC:FA:F8:0C:F7:FD:39:22:46:89:4E:94:F1:2F
Certificate issuer: /CN=2D517DC024CEFCFAF80CF7FD392246894E94F12F
Certificate serial: 301B2761E46D5024DE21BE4201DF8416CF4CE455
Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/2D517DC024CEFCFAF80CF7FD392246894E94F12F.cer
Subject info access: rsync://repo-rpki.idnic.net/repo/1433a1c6-0f70-4c98-96b0-cab58126ab94/0/2D517DC024CEFCFAF80CF7FD392246894E94F12F.mft
Manifest number: 0159
Signing time: Mon 27 Apr 2026 04:41:35 +0000
Manifest this update: Mon 27 Apr 2026 04:36:35 +0000
Manifest next update: Thu 30 Apr 2026 15:41:35 +0000
Files and hashes: 1: 3130332e3135362e3131302e302f32342d3234203d3e20313431303839.roa (hash: lTXXqDvVb99/4yIHlkQaywB5MQKhKyYSxakzkjkU+yg=)
2: 2D517DC024CEFCFAF80CF7FD392246894E94F12F.crl (hash: T5lvspkosgEJLAE+tvMaJjguyBgE8jQCBtVuM0r560M=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
30:1b:27:61:e4:6d:50:24:de:21:be:42:01:df:84:16:cf:4c:e4:55
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2D517DC024CEFCFAF80CF7FD392246894E94F12F
Validity
Not Before: Apr 27 04:36:35 2026 GMT
Not After : Apr 30 15:41:35 2026 GMT
Subject: CN=CC98A7FEB6542FF76D9B8C474C46A907415CFE9E
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b4:2c:ab:3b:5f:e4:b2:8e:d1:9c:01:c1:2a:57:
f0:40:52:a9:27:51:b3:15:42:70:ef:6a:63:2c:5b:
70:73:50:c2:a5:a9:f9:15:9e:23:45:b7:1d:33:4d:
0c:78:13:b5:f9:42:ac:f5:bb:2c:4a:e5:e5:e8:63:
40:61:b2:d2:0a:ae:2d:1b:ed:0c:c8:a6:3f:d6:b9:
b0:de:66:83:d4:41:3a:87:7b:2f:50:3e:e3:a6:74:
2c:41:c3:46:31:8f:2d:2b:89:8c:47:a1:b9:e7:04:
d3:9a:f1:e7:3e:69:0c:d5:17:22:70:4e:5c:d6:ba:
0c:23:2f:4c:c3:af:42:b9:62:9e:e7:c8:f8:f4:7b:
07:3f:80:c1:aa:ae:28:fe:6f:e2:82:ea:f2:38:3c:
fa:07:d5:f8:c0:ec:bc:5d:57:51:51:6a:45:36:56:
cc:9f:7c:dd:ec:3e:f8:03:14:01:ad:e9:27:44:dc:
c6:c6:1e:c2:73:c9:15:72:93:cb:a8:69:64:a7:3d:
d4:d6:f6:13:bd:08:eb:9d:e0:f0:ca:36:80:3d:dc:
2c:5d:0b:d8:34:c1:2a:85:9b:c6:e1:6d:d8:53:43:
9b:8a:12:3f:a4:f5:ed:e7:29:20:33:15:89:ae:ca:
4f:90:88:09:eb:13:a7:1c:24:be:91:34:ef:b0:f5:
38:9f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
CC:98:A7:FE:B6:54:2F:F7:6D:9B:8C:47:4C:46:A9:07:41:5C:FE:9E
X509v3 Authority Key Identifier:
keyid:2D:51:7D:C0:24:CE:FC:FA:F8:0C:F7:FD:39:22:46:89:4E:94:F1:2F
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://repo-rpki.idnic.net/repo/1433a1c6-0f70-4c98-96b0-cab58126ab94/0/2D517DC024CEFCFAF80CF7FD392246894E94F12F.crl
Authority Information Access:
CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/2D517DC024CEFCFAF80CF7FD392246894E94F12F.cer
Subject Information Access:
Signed Object - URI:rsync://repo-rpki.idnic.net/repo/1433a1c6-0f70-4c98-96b0-cab58126ab94/0/2D517DC024CEFCFAF80CF7FD392246894E94F12F.mft
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
0b:3e:ce:8a:dd:ca:6f:d8:c2:86:9c:c9:7e:5d:68:78:fc:92:
95:6b:1b:e0:f1:ef:08:db:26:99:d0:94:b7:14:1f:e7:74:a8:
74:e5:55:01:03:0b:a8:0a:f9:3b:1a:b8:6c:80:18:37:ae:fb:
15:25:6e:b2:3d:23:23:49:84:b1:e9:4c:fb:52:ae:a5:75:48:
85:f8:4d:2f:1b:5a:5f:f9:a5:d8:44:72:a7:30:9d:7c:b7:2b:
4b:5b:36:6f:a6:21:10:9f:cb:cd:7b:b8:70:56:1f:1d:9d:b6:
82:37:60:3f:98:af:1c:dc:6e:e9:fd:25:5c:c3:c9:8e:5e:15:
93:da:67:12:0f:b0:31:9c:97:76:05:84:b4:c0:45:91:b2:af:
47:a5:c7:8a:55:ec:71:43:f1:bd:c7:71:9b:35:23:78:9c:71:
c1:bb:d4:b3:fb:7a:49:46:13:f8:fe:e4:86:87:e9:53:50:69:
4a:48:ee:33:b6:2b:77:8a:7d:2d:e5:e0:de:20:c2:0d:0a:9f:
60:5b:e1:5a:3d:e6:1b:50:aa:71:63:68:3d:52:89:60:9a:f6:
2b:f4:68:80:f9:5c:f3:3c:ee:46:40:7d:0f:5a:bd:b1:4a:90:
1d:62:76:46:bc:d8:6e:27:df:0c:86:28:b8:1d:c4:c2:da:18:
5d:d4:c0:76
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jun 3 03:08:26 2026 by rpki-client