Manifest
$ rpki-client -vvf repo-rpki.idnic.net/repo/2a8f0435-4d38-47ef-850f-51ba4617fb3d/0/DC34C8B5F438B8D4CB13F2451AD1F0955E5F7FBB.mft
File: DC34C8B5F438B8D4CB13F2451AD1F0955E5F7FBB.mft (raw, json)
Hash identifier: UbDyDBNG+z9eobpF0JtgGTYLkkylMdXWP7C/jdukP6I=
Subject key identifier: 25:23:E7:01:94:44:82:D4:65:D0:34:C5:69:BB:C4:2A:18:D9:30:3F
Authority key identifier: DC:34:C8:B5:F4:38:B8:D4:CB:13:F2:45:1A:D1:F0:95:5E:5F:7F:BB
Certificate issuer: /CN=DC34C8B5F438B8D4CB13F2451AD1F0955E5F7FBB
Certificate serial: 6AD36D92944DEEC8319B2F1CF02AB1624C2EC917
Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/DC34C8B5F438B8D4CB13F2451AD1F0955E5F7FBB.cer
Subject info access: rsync://repo-rpki.idnic.net/repo/2a8f0435-4d38-47ef-850f-51ba4617fb3d/0/DC34C8B5F438B8D4CB13F2451AD1F0955E5F7FBB.mft
Manifest number: 04F0
Signing time: Tue 28 Apr 2026 10:42:27 +0000
Manifest this update: Tue 28 Apr 2026 10:37:27 +0000
Manifest next update: Fri 01 May 2026 13:30:27 +0000
Files and hashes: 1: 323030313a6466363a313830303a3a2f34382d3438203d3e20313331373535.roa (hash: ngwq27xsuytU4jFUyyS/sbzfhiUNRTARsL/0hbNcALM=)
2: DC34C8B5F438B8D4CB13F2451AD1F0955E5F7FBB.crl (hash: 8+FtNMMNeTaX6RWWszODDemwKVqkK18tIZOGMEDSVCA=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
6a:d3:6d:92:94:4d:ee:c8:31:9b:2f:1c:f0:2a:b1:62:4c:2e:c9:17
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=DC34C8B5F438B8D4CB13F2451AD1F0955E5F7FBB
Validity
Not Before: Apr 28 10:37:27 2026 GMT
Not After : May 1 13:30:27 2026 GMT
Subject: CN=2523E701944482D465D034C569BBC42A18D9303F
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d9:25:e0:80:32:31:33:9f:c2:ea:c0:0a:4a:e4:
92:48:8a:b2:f7:6f:c3:ee:7c:65:26:65:0b:60:4c:
91:38:73:31:30:67:24:4e:39:ba:bc:14:eb:71:10:
4d:2d:c5:61:32:16:6a:b1:aa:77:a0:33:c9:05:3c:
6b:bd:a1:45:9e:3b:53:68:99:eb:50:5c:f9:53:75:
c7:2a:e4:c3:7b:36:80:54:35:a0:1d:57:cb:52:0d:
2b:d0:d1:ee:37:5f:1f:25:e1:9d:d9:03:b2:c0:67:
23:1f:bb:02:86:9a:91:1a:f3:01:19:eb:37:be:d3:
1e:08:09:d4:00:46:01:93:f8:10:49:69:0f:b7:a0:
f7:58:3b:23:49:49:c6:35:8f:0c:1e:5a:b4:65:ae:
8f:8a:9b:37:9c:a2:97:f3:f9:03:58:9b:61:ae:a3:
11:2a:99:bc:fd:d0:3b:64:9a:83:5c:74:cd:45:ae:
be:b6:2d:e3:5f:7b:66:79:5f:6f:c0:06:99:15:ad:
56:8e:ed:96:f8:30:d2:05:f5:59:1c:1e:79:b9:32:
b9:f1:bb:cb:62:f4:1d:10:ed:a4:8d:14:ee:58:b6:
ca:1f:05:21:58:f7:91:97:7e:9d:d3:31:2b:28:6f:
f7:24:97:7b:5a:96:d0:6c:d3:f8:cd:a7:0f:80:b6:
79:35
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
25:23:E7:01:94:44:82:D4:65:D0:34:C5:69:BB:C4:2A:18:D9:30:3F
X509v3 Authority Key Identifier:
keyid:DC:34:C8:B5:F4:38:B8:D4:CB:13:F2:45:1A:D1:F0:95:5E:5F:7F:BB
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://repo-rpki.idnic.net/repo/2a8f0435-4d38-47ef-850f-51ba4617fb3d/0/DC34C8B5F438B8D4CB13F2451AD1F0955E5F7FBB.crl
Authority Information Access:
CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/DC34C8B5F438B8D4CB13F2451AD1F0955E5F7FBB.cer
Subject Information Access:
Signed Object - URI:rsync://repo-rpki.idnic.net/repo/2a8f0435-4d38-47ef-850f-51ba4617fb3d/0/DC34C8B5F438B8D4CB13F2451AD1F0955E5F7FBB.mft
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
b1:b4:c2:37:0d:bf:a1:34:7b:c7:45:a8:ba:fe:19:be:04:e8:
ee:e3:17:a2:c3:0b:12:58:b9:72:98:1c:80:db:11:a9:c6:e9:
e1:e7:2d:25:f9:b4:16:ba:34:b1:3b:17:b0:53:d9:ff:0d:89:
59:12:48:5c:c2:84:77:e9:4a:6c:43:d5:fa:41:b5:cf:8f:11:
0e:0d:f4:4e:89:17:07:2c:bc:11:80:e6:e2:66:46:ad:51:e3:
7c:ba:57:25:b4:04:bb:49:ed:64:ad:4b:50:63:ea:27:05:07:
17:08:0f:2d:1d:e7:2b:69:91:b4:26:84:85:1a:0b:c3:f9:4f:
12:db:a3:15:78:30:5d:2e:1c:cc:1b:77:dd:73:7e:1e:93:e1:
a8:50:a3:54:43:ea:6f:be:bb:3d:62:dd:32:0e:09:15:73:41:
20:9f:f1:e8:dc:d5:9e:93:48:32:66:62:01:f3:81:27:6f:5b:
03:e7:f9:b7:fd:2e:2e:67:a8:79:42:83:f9:68:00:62:4d:e8:
21:a4:cd:22:dc:a3:85:a6:ac:07:90:52:a8:c1:be:77:fc:44:
b8:d6:2a:79:fa:3b:d3:e9:25:ac:b0:51:d0:ea:b2:49:3b:d0:
ac:71:36:4f:a8:b2:64:20:eb:82:44:1e:36:00:dd:11:f0:fe:
ff:e5:20:9c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jun 3 03:08:35 2026 by rpki-client