Manifest
$ rpki-client -vvf repo-rpki.idnic.net/repo/2ffbaf71-2d57-4e4a-91d0-cac8ab0acefe/0/248C652A73F35EA32B7EC526D977784EB15D2C7D.mft
File: 248C652A73F35EA32B7EC526D977784EB15D2C7D.mft (raw, json)
Hash identifier: myoaLMoueXcn/5SZ5ZJEgEAgdUCJeSUsywlAwJNnGdQ=
Subject key identifier: 27:7C:C6:F1:27:C4:C1:13:70:49:4F:1B:9E:BE:5C:C8:37:25:FA:4E
Authority key identifier: 24:8C:65:2A:73:F3:5E:A3:2B:7E:C5:26:D9:77:78:4E:B1:5D:2C:7D
Certificate issuer: /CN=248C652A73F35EA32B7EC526D977784EB15D2C7D
Certificate serial: 53DE5AC43FE7DB27E198CA4E71DD103FFC5D1033
Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/248C652A73F35EA32B7EC526D977784EB15D2C7D.cer
Subject info access: rsync://repo-rpki.idnic.net/repo/2ffbaf71-2d57-4e4a-91d0-cac8ab0acefe/0/248C652A73F35EA32B7EC526D977784EB15D2C7D.mft
Manifest number: 0197
Signing time: Tue 28 Apr 2026 04:22:17 +0000
Manifest this update: Tue 28 Apr 2026 04:17:17 +0000
Manifest next update: Fri 01 May 2026 16:14:17 +0000
Files and hashes: 1: 3130332e39312e35352e302f32342d3234203d3e20313530323538.roa (hash: hrEA+sbnpkWh5dltJTQ7io5F8zxoqQPqvRB5+Ub+z3c=)
2: 248C652A73F35EA32B7EC526D977784EB15D2C7D.crl (hash: T2qfi/Dg4rhM3+Uo5oPCrItvkjw/jR135jkFZIlgO8Q=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
53:de:5a:c4:3f:e7:db:27:e1:98:ca:4e:71:dd:10:3f:fc:5d:10:33
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=248C652A73F35EA32B7EC526D977784EB15D2C7D
Validity
Not Before: Apr 28 04:17:17 2026 GMT
Not After : May 1 16:14:17 2026 GMT
Subject: CN=277CC6F127C4C11370494F1B9EBE5CC83725FA4E
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a3:40:dc:e4:d6:dd:f0:83:10:63:b5:f8:e1:b3:
bd:37:f2:2d:86:3e:92:e0:b4:8d:a3:39:f1:9e:c3:
7b:4a:ef:fa:b4:38:1c:ee:65:44:de:ec:9c:cc:f5:
bb:ad:d2:4d:59:4c:d5:a4:af:ad:bc:20:2e:31:a9:
97:ab:29:8e:46:f3:ae:67:d9:07:c1:33:fb:12:57:
9c:17:68:42:37:6a:06:d3:d9:96:db:ec:5e:9f:49:
0f:f4:bb:4c:1b:04:fa:1e:84:9a:a6:f8:d1:b2:46:
72:b6:09:5f:6f:d8:f4:28:06:5e:0e:d8:87:40:a5:
59:80:b3:60:c4:86:8e:ab:d9:2a:fb:34:f2:64:b9:
e7:57:8a:3a:51:32:69:93:32:9b:a2:39:39:b3:f5:
dd:d2:ed:81:33:d3:75:a1:a5:e7:d8:19:75:67:36:
31:1c:56:c7:d8:7f:b4:43:53:63:aa:69:6b:e1:09:
97:26:de:d0:6c:0b:4b:6c:7b:f4:c4:59:aa:b4:e0:
0b:f7:1f:c5:38:da:a3:81:b1:8f:de:2b:c1:d4:67:
42:bb:20:26:e8:df:b6:c8:fe:da:34:01:61:be:09:
0a:fb:72:7c:cf:3d:fa:e8:4d:64:cb:47:22:fa:4b:
34:d6:49:fb:e2:7b:c3:6e:7b:06:dc:9c:83:59:a7:
0b:6d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
27:7C:C6:F1:27:C4:C1:13:70:49:4F:1B:9E:BE:5C:C8:37:25:FA:4E
X509v3 Authority Key Identifier:
keyid:24:8C:65:2A:73:F3:5E:A3:2B:7E:C5:26:D9:77:78:4E:B1:5D:2C:7D
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://repo-rpki.idnic.net/repo/2ffbaf71-2d57-4e4a-91d0-cac8ab0acefe/0/248C652A73F35EA32B7EC526D977784EB15D2C7D.crl
Authority Information Access:
CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/248C652A73F35EA32B7EC526D977784EB15D2C7D.cer
Subject Information Access:
Signed Object - URI:rsync://repo-rpki.idnic.net/repo/2ffbaf71-2d57-4e4a-91d0-cac8ab0acefe/0/248C652A73F35EA32B7EC526D977784EB15D2C7D.mft
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
53:56:cb:3d:d0:e8:c3:b0:a3:17:19:3f:c0:43:af:cd:9e:ad:
7e:92:78:c7:fa:8b:9c:4e:bd:c6:19:95:1f:9f:4a:da:9c:7e:
fa:12:2c:ca:d3:46:0e:e9:94:64:64:45:ce:a0:43:8e:d5:9b:
63:72:be:d2:b0:ce:2f:71:86:41:89:8a:ca:4d:c0:39:77:17:
42:07:75:f5:87:9a:df:56:0d:67:e3:22:37:a6:fa:76:9f:92:
a3:14:9a:9b:ff:00:c3:89:ac:e9:86:01:f6:f3:c1:5f:4c:c6:
d0:3d:b0:36:bb:c5:2a:42:0c:ed:11:78:75:a8:c5:12:51:b5:
c1:7c:2c:26:df:a7:fc:75:3c:39:2b:e7:46:fc:0e:31:f2:01:
00:c5:54:66:7a:44:4c:f2:d0:e2:6e:1c:b1:89:9c:63:11:49:
55:61:3c:52:3a:5b:ed:34:1e:49:16:11:2d:42:15:66:f9:1a:
2c:fd:44:9f:f8:e0:d9:5b:61:7f:22:c6:fb:77:fb:92:19:80:
be:64:f6:7d:81:d4:51:19:2d:20:59:45:2f:1e:b8:3a:d5:e3:
a2:ca:05:9a:73:8c:c7:71:52:4f:23:66:ed:a0:b5:24:c7:49:
f1:93:c2:74:f1:1b:1f:81:ce:29:da:6d:de:13:66:ae:8f:65:
6b:32:a7:fb
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jun 3 03:36:35 2026 by rpki-client