Manifest
$ rpki-client -vvf repo-rpki.idnic.net/repo/17e8dd40-bb94-4d43-b889-8a098d7f45ac/0/21F8D88DCD7D814618247F203F04126E51C2D65E.mft
File: 21F8D88DCD7D814618247F203F04126E51C2D65E.mft (raw, json)
Hash identifier: HSDcBODKPG6MV5YxqA9+Z7d44yfGSKIJEvCcXGWrV2E=
Subject key identifier: 9B:84:C1:01:FF:63:89:69:EF:8F:B8:80:CA:4C:0E:68:09:F3:C0:8E
Authority key identifier: 21:F8:D8:8D:CD:7D:81:46:18:24:7F:20:3F:04:12:6E:51:C2:D6:5E
Certificate issuer: /CN=21F8D88DCD7D814618247F203F04126E51C2D65E
Certificate serial: 2648793EB59792E0C1A2D503BC49F236B3977208
Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/21F8D88DCD7D814618247F203F04126E51C2D65E.cer
Subject info access: rsync://repo-rpki.idnic.net/repo/17e8dd40-bb94-4d43-b889-8a098d7f45ac/0/21F8D88DCD7D814618247F203F04126E51C2D65E.mft
Manifest number: 0275
Signing time: Wed 29 Apr 2026 00:51:58 +0000
Manifest this update: Wed 29 Apr 2026 00:46:58 +0000
Manifest next update: Sat 02 May 2026 03:27:58 +0000
Files and hashes: 1: 21F8D88DCD7D814618247F203F04126E51C2D65E.crl (hash: HlBxNgI2Eo4MZ2jYhsoVKuNJ314kho44b2QH4SJEd2o=)
2: 3130332e342e3234302e302f32342d3234203d3e20313439363834.roa (hash: zDhU5/5RfI0V8ymqm/BDcf0iSN5UmSfxRPVbXBCBMFk=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
26:48:79:3e:b5:97:92:e0:c1:a2:d5:03:bc:49:f2:36:b3:97:72:08
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=21F8D88DCD7D814618247F203F04126E51C2D65E
Validity
Not Before: Apr 29 00:46:58 2026 GMT
Not After : May 2 03:27:58 2026 GMT
Subject: CN=9B84C101FF638969EF8FB880CA4C0E6809F3C08E
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d5:74:26:76:21:35:6e:35:c0:ac:d4:90:8a:5d:
e5:bf:b5:62:a7:d2:8c:0e:a4:e6:d0:bd:49:35:0f:
ed:e8:8a:7c:b6:cc:14:30:26:4a:03:0a:52:4e:bd:
3c:ae:df:11:63:48:fa:5c:54:ae:84:ad:bb:d2:d5:
e8:28:21:2d:00:b8:d2:bb:a6:b7:65:a1:c9:86:1c:
0b:4f:10:79:2f:74:55:90:67:00:8e:f9:35:7b:e6:
15:f8:0c:13:07:c4:fe:2b:68:66:01:77:c5:b6:d7:
dc:be:b3:a7:1a:b5:cd:68:5f:f7:3e:de:a6:48:c7:
00:f3:ee:c2:ef:d7:ba:63:44:de:11:03:a1:5e:32:
33:03:d0:2e:7d:72:9e:76:e9:26:e5:1c:5f:b4:65:
f7:59:cd:a3:c9:9d:bf:fb:95:ae:b0:0a:4c:a5:81:
6e:f9:f1:86:20:7e:31:52:04:e0:8f:a6:f9:ac:ba:
95:b0:0e:83:eb:1f:8e:39:75:9d:76:aa:79:a0:b1:
d7:58:82:8f:6b:3b:7b:58:fd:0a:96:43:df:93:9e:
91:53:c0:91:13:e9:23:88:6d:1d:0a:40:2d:5a:13:
25:e4:b3:9c:92:68:0c:61:bf:cb:77:b5:66:8c:c0:
2e:ed:65:09:ca:b9:77:c0:a8:c8:53:fe:5b:ee:b8:
85:8d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
9B:84:C1:01:FF:63:89:69:EF:8F:B8:80:CA:4C:0E:68:09:F3:C0:8E
X509v3 Authority Key Identifier:
keyid:21:F8:D8:8D:CD:7D:81:46:18:24:7F:20:3F:04:12:6E:51:C2:D6:5E
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://repo-rpki.idnic.net/repo/17e8dd40-bb94-4d43-b889-8a098d7f45ac/0/21F8D88DCD7D814618247F203F04126E51C2D65E.crl
Authority Information Access:
CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/21F8D88DCD7D814618247F203F04126E51C2D65E.cer
Subject Information Access:
Signed Object - URI:rsync://repo-rpki.idnic.net/repo/17e8dd40-bb94-4d43-b889-8a098d7f45ac/0/21F8D88DCD7D814618247F203F04126E51C2D65E.mft
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
17:f2:fe:0d:a3:56:bd:ea:f2:04:8d:fa:66:52:5e:2d:99:ad:
3d:20:6a:fe:85:ab:67:19:c7:f5:7b:1d:c0:8b:9c:af:59:a0:
0c:9b:2b:e3:c2:2c:36:32:47:59:8e:0b:51:d9:f0:5f:43:ce:
b9:d3:a7:bd:37:7f:f3:75:0c:17:0f:81:24:22:3b:01:1d:71:
7b:9c:56:79:b1:ec:23:9f:46:79:8c:ab:dc:c1:ab:d9:93:44:
20:cf:81:bb:9e:1a:34:ec:8f:b7:c2:74:50:ac:f8:23:87:ac:
90:7e:3c:8d:e4:d6:1d:92:13:55:26:7e:34:c2:c9:b4:1d:86:
92:62:a8:27:b5:84:fe:39:d5:a5:a6:70:ba:ab:dd:cc:93:22:
93:60:dc:53:28:5e:5c:8f:15:0e:70:28:fa:eb:f2:2a:f8:5b:
27:b3:aa:79:5b:90:9b:d5:d9:90:9c:5a:46:da:5d:f3:de:f5:
bb:f1:fb:dd:8a:98:71:4a:65:d3:db:90:2a:23:4c:4f:37:9a:
d9:6a:cb:19:7c:15:35:86:4b:ea:5f:9f:cd:93:3e:c4:db:f8:
e9:d3:55:1b:fd:dd:9b:4c:7b:59:26:c6:9a:d8:4c:67:2f:f8:
72:b7:a5:9d:3a:08:61:b2:53:09:2d:d9:e1:a8:c4:ca:ca:ca:
0b:df:89:43
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jun 3 03:07:43 2026 by rpki-client