Manifest
$ rpki-client -vvf repo-rpki.idnic.net/repo/33b2ee74-8c3c-4bc3-b6fb-f35b200a20eb/0/DB1BD7851FD1A487B01283F6AE4B46E0E4935A3C.mft
File: DB1BD7851FD1A487B01283F6AE4B46E0E4935A3C.mft (raw, json)
Hash identifier: JcQ51zUW7fa9uVkkt+oc0d5XSV/P9RB7iihIW/Dn9Rc=
Subject key identifier: 4E:09:12:A6:B9:C9:21:14:CE:1F:74:2A:E1:B8:3E:AE:52:A8:BE:41
Authority key identifier: DB:1B:D7:85:1F:D1:A4:87:B0:12:83:F6:AE:4B:46:E0:E4:93:5A:3C
Certificate issuer: /CN=DB1BD7851FD1A487B01283F6AE4B46E0E4935A3C
Certificate serial: 6F6E8963B6815E77DBE34BF51E40E6A8065B8825
Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/DB1BD7851FD1A487B01283F6AE4B46E0E4935A3C.cer
Subject info access: rsync://repo-rpki.idnic.net/repo/33b2ee74-8c3c-4bc3-b6fb-f35b200a20eb/0/DB1BD7851FD1A487B01283F6AE4B46E0E4935A3C.mft
Manifest number: 0238
Signing time: Tue 28 Apr 2026 20:51:49 +0000
Manifest this update: Tue 28 Apr 2026 20:46:49 +0000
Manifest next update: Sat 02 May 2026 07:24:49 +0000
Files and hashes: 1: 3130332e36362e33382e302f32342d3234203d3e20313530323431.roa (hash: 2Vms/JsMQPaw+vYfPtEtlm+57xmqH/10AEwVvJR2JV8=)
2: DB1BD7851FD1A487B01283F6AE4B46E0E4935A3C.crl (hash: OOXRe/HYvf68PgcbpVTQn6hL8b8+74YMTH7khnYEIIc=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
6f:6e:89:63:b6:81:5e:77:db:e3:4b:f5:1e:40:e6:a8:06:5b:88:25
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=DB1BD7851FD1A487B01283F6AE4B46E0E4935A3C
Validity
Not Before: Apr 28 20:46:49 2026 GMT
Not After : May 2 07:24:49 2026 GMT
Subject: CN=4E0912A6B9C92114CE1F742AE1B83EAE52A8BE41
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d9:83:3e:15:a9:d4:21:8d:a5:fb:45:e4:fe:f5:
bd:8b:66:97:2e:be:82:df:e9:65:36:5d:70:a0:fd:
ff:44:c9:b6:2c:81:ee:17:45:5c:b5:84:57:7e:6e:
6a:a0:16:7c:ba:f7:e9:e9:c7:e3:52:df:88:62:5d:
79:f8:94:7a:34:52:69:8a:ac:e1:4b:0f:f3:ed:1d:
75:66:d4:d9:bb:bd:e1:38:24:ab:95:ee:7f:95:1e:
02:5a:80:fd:9b:5c:09:12:e1:91:5a:33:fb:c9:eb:
19:ef:c8:6f:fe:90:d8:75:31:37:da:75:ca:41:02:
1c:dd:c5:cb:82:4b:74:42:68:ef:55:a5:b3:a6:21:
68:c8:17:c1:79:47:80:f3:44:bc:3f:21:fb:8b:6b:
3b:e0:43:0c:f4:90:30:d8:68:52:42:10:e2:cc:ad:
a0:4e:79:b4:04:aa:0d:c7:de:2e:04:06:7a:a0:a5:
4d:40:11:a6:81:ef:db:3f:74:60:71:6a:72:e2:1b:
a3:c3:66:9b:6a:9e:45:40:ad:1b:99:e7:27:36:33:
ab:38:4e:e4:bb:07:ce:35:70:f3:60:3c:bd:49:4b:
ac:89:5a:a7:11:06:f9:04:fc:d3:dc:c0:80:9c:eb:
7e:5c:8e:ae:a4:aa:8d:e9:6d:2b:01:12:cf:85:44:
50:97
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
4E:09:12:A6:B9:C9:21:14:CE:1F:74:2A:E1:B8:3E:AE:52:A8:BE:41
X509v3 Authority Key Identifier:
keyid:DB:1B:D7:85:1F:D1:A4:87:B0:12:83:F6:AE:4B:46:E0:E4:93:5A:3C
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://repo-rpki.idnic.net/repo/33b2ee74-8c3c-4bc3-b6fb-f35b200a20eb/0/DB1BD7851FD1A487B01283F6AE4B46E0E4935A3C.crl
Authority Information Access:
CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/DB1BD7851FD1A487B01283F6AE4B46E0E4935A3C.cer
Subject Information Access:
Signed Object - URI:rsync://repo-rpki.idnic.net/repo/33b2ee74-8c3c-4bc3-b6fb-f35b200a20eb/0/DB1BD7851FD1A487B01283F6AE4B46E0E4935A3C.mft
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
45:95:e9:5f:c2:9a:5c:e7:f0:28:73:7a:1d:a4:96:bd:bd:5e:
a7:17:1c:27:95:14:ed:4b:15:9d:a3:99:65:13:20:85:62:eb:
07:c9:60:93:28:1b:5d:da:cd:97:1d:84:61:79:59:01:da:81:
02:6e:be:cf:e0:9a:52:ae:7c:33:da:6f:ef:85:16:bc:93:ef:
e5:89:42:3d:8f:15:2a:07:0f:72:4e:36:ca:0a:4e:00:20:52:
37:d0:52:0a:c6:26:cd:fc:d9:6c:b0:62:d3:a7:32:6f:7e:ac:
c1:28:04:f7:a7:af:78:d2:7b:98:8f:db:b3:d1:a8:c2:11:c5:
9e:4d:e3:8c:05:1c:8f:db:ba:59:1b:27:9b:d0:ad:8d:87:04:
33:11:dc:bf:da:6c:06:eb:a8:66:b7:0a:83:ab:6a:45:f7:5a:
55:49:c0:e1:e4:4e:2e:43:9e:07:34:53:09:7a:5a:a9:3d:0c:
e0:2e:d4:be:4e:15:40:3d:c0:14:2a:1b:96:78:39:e4:61:4d:
8d:ac:dd:6c:fc:68:07:25:37:a8:b1:7b:30:40:5a:43:80:f4:
57:89:3e:ef:d7:a1:e9:b1:28:3d:bb:d0:33:28:7d:fb:8d:62:
8e:e7:cb:0f:b4:5e:bc:da:64:44:b6:8b:94:a7:8c:db:71:8b:
be:1f:80:f2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jun 3 03:15:54 2026 by rpki-client