Manifest
$ rpki-client -vvf repo-rpki.idnic.net/repo/1b6c614f-d0ff-41a9-92d0-3a213581537b/0/A0021383E40D55B69009CDEA313E654C3CE463B0.mft
File: A0021383E40D55B69009CDEA313E654C3CE463B0.mft (raw, json)
Hash identifier: xDpa6/yPd0BFNn2PC6vgNJTXLUoy/Ap3ZAZboNvZab8=
Subject key identifier: D3:09:F7:A3:16:1D:C8:A0:53:C8:7A:01:C5:F1:06:17:A6:96:48:6B
Authority key identifier: A0:02:13:83:E4:0D:55:B6:90:09:CD:EA:31:3E:65:4C:3C:E4:63:B0
Certificate issuer: /CN=A0021383E40D55B69009CDEA313E654C3CE463B0
Certificate serial: 01716ABD8D6A69796FAB89D34BE4F19EDD2C10A5
Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/A0021383E40D55B69009CDEA313E654C3CE463B0.cer
Subject info access: rsync://repo-rpki.idnic.net/repo/1b6c614f-d0ff-41a9-92d0-3a213581537b/0/A0021383E40D55B69009CDEA313E654C3CE463B0.mft
Manifest number: 04BE
Signing time: Tue 28 Apr 2026 06:11:53 +0000
Manifest this update: Tue 28 Apr 2026 06:06:53 +0000
Manifest next update: Fri 01 May 2026 12:33:53 +0000
Files and hashes: 1: A0021383E40D55B69009CDEA313E654C3CE463B0.crl (hash: 1XdAhCksQWKnKe75fRr3Dy8mlhs6n6BBdQ6Ysyo+S1k=)
2: 3130332e3135382e3139322e302f32342d3234203d3e20313439373035.roa (hash: fHqvbSw+kBSfkBDzTpDrPMpXwZgb+p5OG9oIzvIH1tQ=)
3: 3130332e3135382e3139332e302f32342d3234203d3e20313439373035.roa (hash: HTUmi9PKF3bXW8+hzkMCAvJVqEuGNdGX60rcZCcQMPw=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:71:6a:bd:8d:6a:69:79:6f:ab:89:d3:4b:e4:f1:9e:dd:2c:10:a5
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A0021383E40D55B69009CDEA313E654C3CE463B0
Validity
Not Before: Apr 28 06:06:53 2026 GMT
Not After : May 1 12:33:53 2026 GMT
Subject: CN=D309F7A3161DC8A053C87A01C5F10617A696486B
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c0:ce:df:f9:37:00:30:71:da:bc:3b:03:bd:6b:
c8:9b:ae:b9:e2:f3:64:8f:86:34:0c:5b:3b:17:ae:
9b:10:9f:c7:8d:ad:af:74:40:0d:04:be:dd:27:e5:
ca:ee:95:17:76:3b:db:e4:fb:76:37:a2:34:1a:81:
6e:9b:a4:61:e7:9f:07:dc:23:39:79:ec:33:00:8a:
22:16:73:63:49:25:c9:b7:1f:50:c5:bc:e2:67:98:
65:aa:f3:ee:c0:a8:33:3f:d3:73:cf:19:f4:9a:d1:
2a:63:de:5e:0a:ed:f8:18:d9:c5:9d:80:81:fd:e9:
f8:44:bf:0b:1f:18:f1:63:83:4b:62:25:a0:5c:9c:
60:dc:10:4b:c8:3a:82:4c:5c:45:ce:32:ba:ae:e1:
93:fd:48:0c:cc:0b:e6:54:ef:ac:a3:05:05:35:ee:
11:e1:b0:97:5c:b6:45:ea:18:ef:fb:6c:df:0f:ed:
37:30:e1:7f:09:9d:4f:b5:19:1d:b1:58:be:8d:72:
3b:5e:4e:bf:ba:73:ac:fb:cc:61:cc:f6:fd:af:0d:
91:52:b1:c7:83:1f:f7:3e:86:f9:ea:66:d4:36:8a:
d1:d2:86:90:dd:07:93:53:26:a5:49:a1:3d:cc:0e:
e4:f6:0c:3c:6b:1c:2e:af:b5:ff:c3:55:16:40:c9:
a2:4d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D3:09:F7:A3:16:1D:C8:A0:53:C8:7A:01:C5:F1:06:17:A6:96:48:6B
X509v3 Authority Key Identifier:
keyid:A0:02:13:83:E4:0D:55:B6:90:09:CD:EA:31:3E:65:4C:3C:E4:63:B0
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://repo-rpki.idnic.net/repo/1b6c614f-d0ff-41a9-92d0-3a213581537b/0/A0021383E40D55B69009CDEA313E654C3CE463B0.crl
Authority Information Access:
CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/A0021383E40D55B69009CDEA313E654C3CE463B0.cer
Subject Information Access:
Signed Object - URI:rsync://repo-rpki.idnic.net/repo/1b6c614f-d0ff-41a9-92d0-3a213581537b/0/A0021383E40D55B69009CDEA313E654C3CE463B0.mft
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
59:7b:bc:05:84:d3:16:24:42:54:65:bb:97:f8:5a:84:33:b2:
b6:ca:dd:7d:01:ce:6b:78:bb:49:8e:79:aa:81:f2:7a:0f:dd:
1c:c9:13:b1:0a:21:96:f8:08:fe:30:6b:48:1d:2b:53:c8:ea:
4c:f0:a4:0c:68:1a:06:b6:d2:11:05:a3:6e:3b:a3:a6:b2:0b:
3b:94:28:5f:9f:13:2a:4a:14:1e:c3:89:ed:cf:25:c5:14:14:
72:e5:d3:e7:79:34:45:58:11:4e:c2:96:fe:8e:bc:ab:f4:fc:
c6:9f:5c:17:75:28:c0:a1:90:74:eb:af:d6:30:e4:db:4c:db:
17:0e:da:0e:dd:ee:0d:11:7e:2f:5f:bf:25:a2:6f:98:5f:48:
25:f9:61:73:61:cb:9c:4d:21:a4:72:bb:b0:b9:8b:cf:a6:59:
f2:a9:47:18:df:ba:ab:9e:34:a9:aa:f2:4a:f8:bb:ef:28:1f:
ab:a7:a9:ca:22:00:cd:37:b6:6f:00:15:a9:fb:a3:07:b5:21:
d7:e4:f5:85:c3:6c:99:2f:bc:b2:02:4f:04:60:76:90:4d:12:
65:85:c4:b3:09:a6:57:83:fd:03:1a:34:33:70:cd:1c:b7:fd:
38:b2:c0:47:2b:33:5a:be:55:04:89:7a:d2:ee:fe:78:73:d1:
c9:7d:fd:d0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jun 3 03:09:20 2026 by rpki-client