Manifest
$ rpki-client -vvf repo-rpki.idnic.net/repo/1b7e0bc0-761b-4ec3-8f42-82981b91a97a/0/2CFD5BDDD1DBA6D9402874D6223ABD7EEEE01605.mft
File: 2CFD5BDDD1DBA6D9402874D6223ABD7EEEE01605.mft (raw, json)
Hash identifier: WlMkZGopoyu06Qb4kWymCgBPvXiw/CrXwMwLzdxBN50=
Subject key identifier: AF:0F:CF:9E:C0:72:6A:86:8E:43:0F:28:85:C2:F5:C2:F8:AE:6C:AF
Authority key identifier: 2C:FD:5B:DD:D1:DB:A6:D9:40:28:74:D6:22:3A:BD:7E:EE:E0:16:05
Certificate issuer: /CN=2CFD5BDDD1DBA6D9402874D6223ABD7EEEE01605
Certificate serial: 47D452B64B5C5A204AA3073B0DAF610CC82F1A67
Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/2CFD5BDDD1DBA6D9402874D6223ABD7EEEE01605.cer
Subject info access: rsync://repo-rpki.idnic.net/repo/1b7e0bc0-761b-4ec3-8f42-82981b91a97a/0/2CFD5BDDD1DBA6D9402874D6223ABD7EEEE01605.mft
Manifest number: 0140
Signing time: Mon 27 Apr 2026 10:30:43 +0000
Manifest this update: Mon 27 Apr 2026 10:25:43 +0000
Manifest next update: Thu 30 Apr 2026 13:57:43 +0000
Files and hashes: 1: 2CFD5BDDD1DBA6D9402874D6223ABD7EEEE01605.crl (hash: tNwAcDphY1xrC5BadS+eVdcX3AmQ118wQx2A7y/PyIk=)
2: 32372e3132342e36372e302f32342d3234203d3e20313532303339.roa (hash: s05NUxO3OCK6ljSM126JzvbuefrUbP5vbV9fxoiHqUw=)
3: 32372e3132342e36362e302f32342d3234203d3e20313532303339.roa (hash: EMSMLydCIMgCCDM5A6KpCinITeakN2yfPogDrJvRIew=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
47:d4:52:b6:4b:5c:5a:20:4a:a3:07:3b:0d:af:61:0c:c8:2f:1a:67
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2CFD5BDDD1DBA6D9402874D6223ABD7EEEE01605
Validity
Not Before: Apr 27 10:25:43 2026 GMT
Not After : Apr 30 13:57:43 2026 GMT
Subject: CN=AF0FCF9EC0726A868E430F2885C2F5C2F8AE6CAF
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d0:de:bd:2e:6e:b3:b4:be:68:d3:17:0e:1f:12:
35:4c:b8:e1:83:9e:98:2e:44:9c:d1:80:ea:6a:f2:
cc:dd:9e:7b:93:b6:f3:9f:2b:21:fa:e1:4c:86:a7:
8a:9e:56:b4:89:e6:9e:d3:59:4f:de:7d:a5:11:98:
b2:c9:eb:54:d3:45:93:1d:36:71:d4:81:4e:80:d2:
bd:cb:10:01:e7:db:a1:4f:24:a3:2f:fa:fa:6f:b8:
25:aa:7d:82:f3:fa:38:33:d2:b0:e6:63:a1:c4:ee:
b4:0a:9e:d7:81:26:a5:ff:9e:34:0f:ee:c6:41:9b:
00:36:37:59:91:c3:7c:28:d1:42:02:d2:22:6c:b3:
b2:36:70:2c:77:27:ae:74:73:f7:7a:31:0d:75:ac:
6c:26:23:d7:b7:0e:4b:c8:b8:b4:ec:12:6f:5a:61:
67:da:de:e4:f4:36:26:43:bc:81:a4:89:41:a8:ba:
b0:80:a3:fa:0b:74:f5:83:50:03:f5:f7:6b:09:8b:
8b:5e:f6:ca:df:84:4a:10:13:22:86:68:c2:41:73:
eb:40:8d:fc:60:55:e2:aa:ce:a8:1a:53:f8:a3:ca:
ef:34:e4:59:ee:74:66:24:fb:66:5b:29:58:36:fb:
79:50:cd:b5:11:74:e4:b6:eb:b3:0e:cc:8a:01:40:
cb:4f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
AF:0F:CF:9E:C0:72:6A:86:8E:43:0F:28:85:C2:F5:C2:F8:AE:6C:AF
X509v3 Authority Key Identifier:
keyid:2C:FD:5B:DD:D1:DB:A6:D9:40:28:74:D6:22:3A:BD:7E:EE:E0:16:05
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://repo-rpki.idnic.net/repo/1b7e0bc0-761b-4ec3-8f42-82981b91a97a/0/2CFD5BDDD1DBA6D9402874D6223ABD7EEEE01605.crl
Authority Information Access:
CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/2CFD5BDDD1DBA6D9402874D6223ABD7EEEE01605.cer
Subject Information Access:
Signed Object - URI:rsync://repo-rpki.idnic.net/repo/1b7e0bc0-761b-4ec3-8f42-82981b91a97a/0/2CFD5BDDD1DBA6D9402874D6223ABD7EEEE01605.mft
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
d9:92:0b:70:64:3e:7d:b8:74:70:53:8a:e6:72:58:53:ce:e9:
29:a0:ed:a1:53:a0:0e:19:7a:a8:95:f7:dd:d5:e9:b7:8d:bb:
a6:2d:f0:27:68:ff:bf:2e:67:24:f9:ec:53:7b:93:44:f5:df:
e7:a3:07:d9:4b:93:85:e9:74:f5:fe:99:5f:b2:54:88:ef:b5:
ff:85:9c:98:35:e2:b6:5b:d3:b0:7f:06:81:d6:62:36:14:1f:
28:8e:67:9a:b9:e6:af:73:4a:8c:56:34:15:46:13:f3:56:52:
aa:39:88:98:b0:cc:27:db:df:36:7e:d3:fc:0f:3d:fc:71:e9:
46:19:d7:80:da:4e:ae:db:3f:9e:cf:dd:49:b4:a2:55:93:f8:
d7:2e:6a:02:6b:c7:c7:e2:d1:e6:4e:4f:ef:b2:c0:aa:17:2f:
90:26:6c:b5:88:ca:d2:1a:3d:30:6e:9e:ff:1f:0d:08:a0:62:
f1:39:33:d6:b7:63:2a:f6:29:f9:98:11:40:13:b8:57:32:37:
17:a5:f8:fe:40:0d:cc:19:d1:0a:dd:90:3d:d4:2d:ed:50:68:
4f:bc:a5:17:8e:fd:63:95:25:9f:27:6f:b1:dd:86:ac:bb:25:
d3:a1:d1:02:30:f6:70:e5:d0:6f:ea:84:a2:56:f8:ac:f2:45:
21:93:b4:11
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jun 3 03:22:06 2026 by rpki-client