Manifest
$ rpki-client -vvf repo-rpki.idnic.net/repo/2a9302ce-17e9-4039-b3f9-995e78671c24/0/DC509E8257EC53E1695B56ABC3E469E56E0E9D19.mft
File: DC509E8257EC53E1695B56ABC3E469E56E0E9D19.mft (raw, json)
Hash identifier: iwiUnEPCDn17ogAcn8MECtm2+//KMeGaqSymURPvp0U=
Subject key identifier: AF:22:E4:3A:56:B2:CE:DE:FA:7B:29:87:13:7F:3B:09:20:61:DD:37
Authority key identifier: DC:50:9E:82:57:EC:53:E1:69:5B:56:AB:C3:E4:69:E5:6E:0E:9D:19
Certificate issuer: /CN=DC509E8257EC53E1695B56ABC3E469E56E0E9D19
Certificate serial: 5844CE8532C39FB674D756773B1747ED153DBD2D
Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/DC509E8257EC53E1695B56ABC3E469E56E0E9D19.cer
Subject info access: rsync://repo-rpki.idnic.net/repo/2a9302ce-17e9-4039-b3f9-995e78671c24/0/DC509E8257EC53E1695B56ABC3E469E56E0E9D19.mft
Manifest number: 0220
Signing time: Mon 27 Apr 2026 11:00:49 +0000
Manifest this update: Mon 27 Apr 2026 10:55:49 +0000
Manifest next update: Thu 30 Apr 2026 15:24:49 +0000
Files and hashes: 1: DC509E8257EC53E1695B56ABC3E469E56E0E9D19.crl (hash: 34wQG+JCHBnIaMmbRetVFQHHQ21AE+gpImpBB9fAtqk=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
58:44:ce:85:32:c3:9f:b6:74:d7:56:77:3b:17:47:ed:15:3d:bd:2d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=DC509E8257EC53E1695B56ABC3E469E56E0E9D19
Validity
Not Before: Apr 27 10:55:49 2026 GMT
Not After : Apr 30 15:24:49 2026 GMT
Subject: CN=AF22E43A56B2CEDEFA7B2987137F3B092061DD37
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c3:9e:10:1f:d9:ac:fc:5f:07:52:88:28:f3:df:
f0:fe:ba:91:96:a0:c5:c8:40:10:c8:0a:8d:51:7e:
10:c2:ea:3f:91:7d:8a:b4:ca:64:2f:04:a9:ce:1b:
28:1a:b6:af:9f:0f:86:6d:34:66:60:87:60:3a:cf:
5a:e1:02:4c:1c:69:b7:16:37:29:79:ad:13:fb:c1:
c1:18:77:3a:10:c9:98:59:73:bf:db:0d:67:88:88:
37:96:cf:bb:34:cf:90:22:6c:e1:b2:ca:83:24:1c:
8b:dc:60:98:54:df:7c:97:02:b7:88:a8:17:1e:7f:
5b:e1:34:da:6a:fb:c0:9b:5c:a2:99:60:8a:53:b5:
19:5f:4b:dc:3b:7e:05:e0:ee:2a:b7:06:99:fc:bc:
20:4a:a0:14:d0:d9:2f:f9:bc:ed:7f:78:49:59:01:
4f:74:49:28:16:ec:da:5a:cb:c9:23:cb:49:15:d3:
b5:53:09:32:14:4f:3c:6e:fa:c6:61:d1:f1:ff:a4:
68:1f:d3:6a:9e:94:61:e2:03:8b:49:fc:7f:25:68:
5d:37:2c:3b:f9:90:bf:34:ea:79:8a:53:d4:db:cd:
9c:17:b1:79:4d:77:16:5a:97:8b:a7:c5:3c:25:37:
8e:44:ef:ce:52:f0:77:a8:16:09:52:22:ea:50:85:
80:e9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
AF:22:E4:3A:56:B2:CE:DE:FA:7B:29:87:13:7F:3B:09:20:61:DD:37
X509v3 Authority Key Identifier:
keyid:DC:50:9E:82:57:EC:53:E1:69:5B:56:AB:C3:E4:69:E5:6E:0E:9D:19
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://repo-rpki.idnic.net/repo/2a9302ce-17e9-4039-b3f9-995e78671c24/0/DC509E8257EC53E1695B56ABC3E469E56E0E9D19.crl
Authority Information Access:
CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/DC509E8257EC53E1695B56ABC3E469E56E0E9D19.cer
Subject Information Access:
Signed Object - URI:rsync://repo-rpki.idnic.net/repo/2a9302ce-17e9-4039-b3f9-995e78671c24/0/DC509E8257EC53E1695B56ABC3E469E56E0E9D19.mft
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
dd:78:ce:3e:f5:f5:64:fa:99:30:95:05:24:1e:df:c3:a2:85:
e6:65:db:a8:38:f5:2a:aa:90:63:b0:9b:ac:bf:37:74:8a:31:
b4:dd:65:c9:6a:f9:4b:23:fe:97:b8:da:dc:3a:bc:96:85:2a:
20:6a:34:c5:3b:fe:c0:43:4f:bb:73:48:6c:bf:c8:e6:2a:bb:
49:b1:74:e1:2f:d5:c1:3f:cb:7a:b1:de:58:64:0c:88:51:0f:
aa:07:f3:be:fa:62:15:f4:ae:7f:97:01:b7:74:9e:0a:ac:14:
37:77:09:75:77:6c:3f:3e:ad:90:7c:f4:d3:44:e4:e4:da:48:
b8:68:9c:7b:6e:67:d3:e7:f8:40:fe:48:22:fc:d9:ce:07:d9:
3b:57:2b:6f:16:7b:ec:5c:bb:95:ea:6f:48:c7:53:4a:13:7f:
58:3e:ff:83:bd:c1:e7:d0:5d:81:76:37:0e:ef:52:9f:db:f0:
1b:4d:25:ec:7a:fb:f4:e9:5c:db:d1:46:2c:22:95:02:57:4d:
48:21:03:4f:ac:4a:36:40:17:4a:61:7a:b4:b3:3a:31:56:82:
b9:53:a0:b4:df:59:ad:29:5c:98:04:5a:6c:5c:24:05:80:69:
02:30:c1:f9:57:e3:47:d2:a4:ed:05:c3:1d:04:1c:27:ef:7f:
03:fc:65:65
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jun 3 03:15:36 2026 by rpki-client