
Manifest
$ rpki-client -vvf repo-rpki.idnic.net/repo/1b1c9579-56ba-4a70-ba13-3b05a6ccb21e/0/F9F21F18D0C5656D8F24B3FFEE0B17A170FAD4A5.mft
File: F9F21F18D0C5656D8F24B3FFEE0B17A170FAD4A5.mft (raw, json)
Hash identifier: s42ofy4LYpTVctSeRQWTSTaIY6Oa6XzjO3D27Un+HfU=
Subject key identifier: 8D:94:5F:DE:20:2B:DF:50:FA:9B:6A:FC:74:0C:25:7A:59:3D:14:A2
Authority key identifier: F9:F2:1F:18:D0:C5:65:6D:8F:24:B3:FF:EE:0B:17:A1:70:FA:D4:A5
Certificate issuer: /CN=F9F21F18D0C5656D8F24B3FFEE0B17A170FAD4A5
Certificate serial: 4E65C49389E48082024069EDA329369226A764C8
Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/F9F21F18D0C5656D8F24B3FFEE0B17A170FAD4A5.cer
Subject info access: rsync://repo-rpki.idnic.net/repo/1b1c9579-56ba-4a70-ba13-3b05a6ccb21e/0/F9F21F18D0C5656D8F24B3FFEE0B17A170FAD4A5.mft
Manifest number: 056A
Signing time: Wed 29 Apr 2026 03:41:51 +0000
Manifest this update: Wed 29 Apr 2026 03:36:51 +0000
Manifest next update: Sat 02 May 2026 08:33:51 +0000
Files and hashes: 1: 3130332e31352e33362e302f32332d3233203d3e203538343939.roa (hash: tsFXcVi2vQ7ookPqbCA3Q2goRlJZ3P3EWx7MteHU17w=)
2: 3130332e31352e33362e302f32342d3234203d3e203538343939.roa (hash: Ib6AjQYHIsLwQhK435dkfw2SbJ0i4m47zXiCaGZl8vU=)
3: 323030313a6466303a6338303a3a2f34382d3438203d3e203538343939.roa (hash: +tOA/QTi1erDkh8xjg35ATQ0nh241kswkzy+opupzr4=)
4: F9F21F18D0C5656D8F24B3FFEE0B17A170FAD4A5.crl (hash: c8py+6LEjC4gviY3fJXOXakgKDJsAPYLaGOxpquhPrU=)
5: 3130332e31352e33372e302f32342d3234203d3e203538343939.roa (hash: zeTi7BqNqgcikPyjG0SatRxWNjs6zr4KOqjWgwcH3go=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
4e:65:c4:93:89:e4:80:82:02:40:69:ed:a3:29:36:92:26:a7:64:c8
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F9F21F18D0C5656D8F24B3FFEE0B17A170FAD4A5
Validity
Not Before: Apr 29 03:36:51 2026 GMT
Not After : May 2 08:33:51 2026 GMT
Subject: CN=8D945FDE202BDF50FA9B6AFC740C257A593D14A2
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e1:ae:f9:0a:41:83:29:0f:92:d2:8d:17:b1:1d:
69:f2:90:f7:cd:21:6e:b8:8b:a7:e9:db:49:a5:a2:
d1:27:82:a6:3e:e2:c8:9f:db:1b:7a:b7:bf:09:96:
c5:4e:30:f8:85:c5:56:4d:51:f7:66:5e:9c:b3:3e:
0b:b4:75:a6:02:cb:db:7c:78:4c:ce:f2:ae:c8:02:
68:15:96:66:24:44:95:ce:6c:32:f9:f4:b4:de:8b:
d9:34:76:82:79:aa:7e:b4:e8:34:2c:f9:ce:3c:9d:
83:85:80:0e:4e:ea:bf:06:f9:7e:2b:a9:e3:0e:d0:
0f:6f:76:08:79:8a:d1:b4:32:a8:12:b9:17:9f:07:
9b:a6:ca:b7:20:87:4e:41:ce:94:13:58:ec:6d:85:
f0:e8:96:6a:c9:a6:d5:3a:c2:a7:3f:d5:10:4d:79:
fa:65:28:fc:67:3d:10:de:49:eb:4d:9b:5c:b2:85:
17:08:b6:e1:ab:c9:ad:a9:3e:6e:b3:95:79:08:c0:
67:39:fe:1d:0d:0a:5c:c1:cb:10:c9:72:e8:a0:19:
58:23:23:ff:aa:82:fb:e0:79:ff:3d:91:1a:ea:f2:
fe:95:ca:4a:06:6d:0f:29:5a:ae:38:ff:e7:f9:8c:
78:0e:bf:2b:04:c0:2e:3a:94:d9:6d:45:29:63:c7:
77:ed
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
8D:94:5F:DE:20:2B:DF:50:FA:9B:6A:FC:74:0C:25:7A:59:3D:14:A2
X509v3 Authority Key Identifier:
keyid:F9:F2:1F:18:D0:C5:65:6D:8F:24:B3:FF:EE:0B:17:A1:70:FA:D4:A5
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://repo-rpki.idnic.net/repo/1b1c9579-56ba-4a70-ba13-3b05a6ccb21e/0/F9F21F18D0C5656D8F24B3FFEE0B17A170FAD4A5.crl
Authority Information Access:
CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/F9F21F18D0C5656D8F24B3FFEE0B17A170FAD4A5.cer
Subject Information Access:
Signed Object - URI:rsync://repo-rpki.idnic.net/repo/1b1c9579-56ba-4a70-ba13-3b05a6ccb21e/0/F9F21F18D0C5656D8F24B3FFEE0B17A170FAD4A5.mft
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
56:5c:1a:73:99:b6:6d:4e:19:7c:7b:fe:3a:93:99:21:f1:be:
56:bf:96:18:1a:86:fe:22:a9:4f:b8:fa:63:f4:85:ca:61:c9:
85:47:4a:a3:ff:80:3d:ed:b3:9e:d1:30:bc:51:33:da:8f:ba:
7a:40:97:40:ff:76:84:87:80:0e:bb:46:12:13:e5:7e:cb:28:
02:06:02:f6:72:4c:c2:00:b1:8f:bf:6a:06:d4:d4:77:29:42:
e8:6a:9e:94:62:d5:40:87:f1:0a:75:bc:69:a1:67:29:e2:63:
10:a5:a2:a8:ac:9f:05:9a:d2:02:01:9c:e4:12:b3:65:a2:b3:
28:f5:1e:80:25:af:7c:3f:45:0b:91:ec:c2:f1:12:74:22:91:
fe:1c:ef:03:e6:9c:9e:e2:5e:b6:32:a4:a2:b8:1f:cf:58:4e:
6a:37:d9:b1:d3:8c:35:01:c6:b1:a8:95:74:79:d8:e3:a7:f2:
a2:f8:df:79:3e:cf:6c:91:a9:de:bb:c3:06:08:c3:b0:ff:ee:
ba:6d:61:21:4c:cb:d7:d0:03:7c:62:1d:9a:bf:d0:26:01:28:
8a:da:c9:d1:8d:e9:70:ee:2c:3b:6f:b2:99:53:64:f0:71:63:
32:40:2b:7e:14:0c:7c:3e:3d:90:a2:58:b4:3b:7b:54:24:9f:
ba:65:a1:00
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue May 19 14:59:11 2026 by rpki-client