Manifest
$ rpki-client -vvf repo-rpki.idnic.net/repo/1e6ff38d-e547-4f73-bb30-2b14c08c89fb/0/0421CA2FC5BF656F8F905B02A3D7EE4648B22045.mft
File: 0421CA2FC5BF656F8F905B02A3D7EE4648B22045.mft (raw, json)
Hash identifier: v7NBW7/IggxKfj3FoO5cuI3wLIA6gC/FpDP3E2l0eGc=
Subject key identifier: 2B:CF:8C:86:6A:5D:1C:F6:36:2A:9C:49:07:61:A3:4F:16:C4:C6:C1
Authority key identifier: 04:21:CA:2F:C5:BF:65:6F:8F:90:5B:02:A3:D7:EE:46:48:B2:20:45
Certificate issuer: /CN=0421CA2FC5BF656F8F905B02A3D7EE4648B22045
Certificate serial: 63E9E7FFD659EC7237FC0B4B071F125287AE1264
Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/0421CA2FC5BF656F8F905B02A3D7EE4648B22045.cer
Subject info access: rsync://repo-rpki.idnic.net/repo/1e6ff38d-e547-4f73-bb30-2b14c08c89fb/0/0421CA2FC5BF656F8F905B02A3D7EE4648B22045.mft
Manifest number: 01D3
Signing time: Tue 28 Apr 2026 02:32:06 +0000
Manifest this update: Tue 28 Apr 2026 02:27:06 +0000
Manifest next update: Fri 01 May 2026 10:11:06 +0000
Files and hashes: 1: 3130332e3233312e3137312e302f32342d3234203d3e20313430343832.roa (hash: EZ3cUn//Lr+1T4x3R3lninQDcCuDNqb80eslIvKVzaE=)
2: 0421CA2FC5BF656F8F905B02A3D7EE4648B22045.crl (hash: L/hUUu0vXsj6lpuukC4K99OQ39klZzeRwxzOq+zFvVQ=)
3: 32372e3131322e37372e302f32342d3234203d3e20313430343832.roa (hash: rjc/w01l37zLAI4D1TAtAwVk+nmo3PzQu/9YBMOYPHY=)
4: 3130332e3135322e3134302e302f32332d3234203d3e20313430343832.roa (hash: 5dmBKfeza3gGUh/V2sAdhjNmfeP3Q+riH0GOcBizRKA=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
63:e9:e7:ff:d6:59:ec:72:37:fc:0b:4b:07:1f:12:52:87:ae:12:64
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0421CA2FC5BF656F8F905B02A3D7EE4648B22045
Validity
Not Before: Apr 28 02:27:06 2026 GMT
Not After : May 1 10:11:06 2026 GMT
Subject: CN=2BCF8C866A5D1CF6362A9C490761A34F16C4C6C1
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a5:28:37:20:b7:0d:a1:52:cb:e6:55:5a:21:0b:
23:66:7c:5a:fd:59:22:d4:42:1c:78:be:45:fe:4e:
56:6c:49:9d:15:94:f4:f0:3d:50:16:96:bd:0b:c8:
bc:d5:fc:41:05:23:b3:98:e1:0c:25:25:82:f3:c2:
5d:5c:4a:8f:14:4a:37:5c:3b:ee:cd:5b:97:7d:dd:
fc:65:53:90:82:23:d2:ec:0f:e6:06:d6:3e:0e:3c:
be:d5:fb:70:77:ca:12:fb:47:64:20:b0:09:13:3e:
73:b1:80:4b:91:61:f4:b7:56:ff:cf:3f:32:d9:50:
64:c1:08:20:69:18:7e:54:c9:89:f7:0d:2d:9b:38:
ed:25:4c:6f:c2:e8:9b:61:6d:39:86:6e:19:41:ab:
7f:d1:48:1c:5b:65:ee:ea:61:cb:21:6a:3a:62:e7:
94:0b:12:1d:86:21:30:b5:44:72:87:34:8b:6d:69:
4e:57:5d:14:6a:02:ab:f4:80:1b:9e:0e:dd:16:44:
8b:e2:9d:25:27:96:90:3c:4c:eb:30:43:9a:00:b6:
e9:a8:01:2d:22:1e:1c:b3:d4:f0:f9:b6:89:8c:04:
87:9c:0a:4c:95:2b:81:b1:7a:57:1f:82:1e:7e:64:
c8:dd:77:e3:ce:1d:5d:7f:a1:ff:40:d3:79:d8:ca:
d7:27
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
2B:CF:8C:86:6A:5D:1C:F6:36:2A:9C:49:07:61:A3:4F:16:C4:C6:C1
X509v3 Authority Key Identifier:
keyid:04:21:CA:2F:C5:BF:65:6F:8F:90:5B:02:A3:D7:EE:46:48:B2:20:45
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://repo-rpki.idnic.net/repo/1e6ff38d-e547-4f73-bb30-2b14c08c89fb/0/0421CA2FC5BF656F8F905B02A3D7EE4648B22045.crl
Authority Information Access:
CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/0421CA2FC5BF656F8F905B02A3D7EE4648B22045.cer
Subject Information Access:
Signed Object - URI:rsync://repo-rpki.idnic.net/repo/1e6ff38d-e547-4f73-bb30-2b14c08c89fb/0/0421CA2FC5BF656F8F905B02A3D7EE4648B22045.mft
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
09:f0:e3:08:b0:b9:6b:6d:e0:e5:b8:a2:4f:94:1c:c7:01:38:
e9:17:bc:28:44:15:c7:7f:f0:d2:7a:0e:29:13:f6:a4:fb:df:
57:22:c4:a8:f2:f5:cb:c7:6f:ea:0c:72:0f:85:49:91:14:d1:
06:99:9e:b2:10:28:34:93:4a:5c:3e:82:c5:c1:c8:16:57:cd:
c8:7a:4d:e8:ed:1f:81:63:ee:38:06:37:3f:92:fb:92:d8:e9:
56:1c:69:e3:03:72:35:dc:d8:0c:2b:f4:c0:73:ce:63:ca:fc:
57:95:cf:43:b8:cb:e0:6d:c5:28:2c:e8:2c:c0:04:d0:78:b1:
be:d2:2a:c1:6c:8f:47:52:b1:26:49:0f:5e:a2:74:76:77:46:
81:e5:3d:10:73:f7:14:64:82:d4:e2:2c:49:5a:90:eb:39:c9:
9f:b0:0f:5c:03:ca:ff:37:98:f3:36:73:28:b3:f9:84:9c:31:
38:b8:83:1e:3f:aa:8a:a3:74:35:eb:73:35:19:a0:38:c3:7a:
b1:8e:c2:c7:1b:26:73:e4:73:a9:b4:95:2a:ab:ce:92:4f:42:
39:32:57:13:43:15:f6:54:67:c4:e9:4b:0b:50:d7:7a:49:7f:
ca:05:93:49:2f:1b:07:2b:b2:62:2a:bf:9d:d1:ef:39:a3:ce:
13:c7:98:3f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jun 3 03:07:11 2026 by rpki-client