Manifest
$ rpki-client -vvf repo-rpki.idnic.net/repo/378bbfd4-67b4-498d-8411-e964c5fe1172/0/CD4EAC0306D06F2109F2679DC9F52F7DE597590D.mft
File: CD4EAC0306D06F2109F2679DC9F52F7DE597590D.mft (raw, json)
Hash identifier: beob4KzCyM0mkhiJbhn8VURxm1OFz7hJxzwpzygx8Xo=
Subject key identifier: 48:AD:99:CE:90:FC:14:7B:50:0F:DD:5C:29:72:3F:29:01:2C:90:80
Authority key identifier: CD:4E:AC:03:06:D0:6F:21:09:F2:67:9D:C9:F5:2F:7D:E5:97:59:0D
Certificate issuer: /CN=CD4EAC0306D06F2109F2679DC9F52F7DE597590D
Certificate serial: 25A5C7F9D5A6C2A4C92648505568AF4E9728F46D
Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/CD4EAC0306D06F2109F2679DC9F52F7DE597590D.cer
Subject info access: rsync://repo-rpki.idnic.net/repo/378bbfd4-67b4-498d-8411-e964c5fe1172/0/CD4EAC0306D06F2109F2679DC9F52F7DE597590D.mft
Manifest number: 01D7
Signing time: Tue 28 Apr 2026 11:22:18 +0000
Manifest this update: Tue 28 Apr 2026 11:17:18 +0000
Manifest next update: Fri 01 May 2026 18:40:18 +0000
Files and hashes: 1: 3130332e3135362e35372e302f32342d3234203d3e20313431303833.roa (hash: BNm4FeS1Hy8093alaKfg8lFhpNJD56zx9nRuLqGJBeM=)
2: CD4EAC0306D06F2109F2679DC9F52F7DE597590D.crl (hash: WCaObLb9q7b/7r19Rjd+GuH9VjDGoqNCISWf5n9FCrA=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
25:a5:c7:f9:d5:a6:c2:a4:c9:26:48:50:55:68:af:4e:97:28:f4:6d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=CD4EAC0306D06F2109F2679DC9F52F7DE597590D
Validity
Not Before: Apr 28 11:17:18 2026 GMT
Not After : May 1 18:40:18 2026 GMT
Subject: CN=48AD99CE90FC147B500FDD5C29723F29012C9080
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c6:69:7e:a8:fc:db:aa:84:f8:30:d4:c9:19:27:
22:ab:8e:12:3e:9b:2f:78:6e:38:22:37:3f:a0:3b:
f1:c8:e8:de:eb:fc:69:7f:da:45:c2:73:19:c3:c6:
5e:10:33:b0:f4:db:d4:b6:cd:00:dc:b3:89:bf:b5:
b0:fe:3a:2b:c3:d1:47:f6:c2:bc:2b:c1:97:e9:6e:
15:cb:12:09:e2:33:bb:31:74:34:8b:f5:a5:6d:57:
7b:b2:54:49:a2:29:c2:94:e1:ae:6a:93:33:cb:9e:
66:f4:1c:58:ef:6a:61:06:17:bb:00:5d:ea:1d:a6:
f0:cb:9c:7b:8f:af:e2:f6:1a:78:3b:38:e3:69:2b:
70:f4:20:81:d2:01:ad:ec:7b:2c:1e:9d:47:45:15:
0e:a1:c4:86:f9:d2:07:cf:7b:94:b0:8c:85:ab:65:
80:05:50:2f:2d:c2:bc:60:3e:1c:b3:6e:b9:5d:84:
20:18:fa:45:5f:a7:44:39:b9:31:a2:be:29:1e:a2:
c2:82:70:1b:8e:17:be:18:43:25:ab:1c:41:37:31:
d3:cd:b2:aa:30:42:c0:f7:e6:9e:8b:7d:37:50:80:
39:ad:bb:f8:65:69:39:f1:1d:59:49:80:00:14:cd:
db:24:38:49:75:27:ae:8d:00:a5:61:56:41:ed:77:
11:87
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
48:AD:99:CE:90:FC:14:7B:50:0F:DD:5C:29:72:3F:29:01:2C:90:80
X509v3 Authority Key Identifier:
keyid:CD:4E:AC:03:06:D0:6F:21:09:F2:67:9D:C9:F5:2F:7D:E5:97:59:0D
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://repo-rpki.idnic.net/repo/378bbfd4-67b4-498d-8411-e964c5fe1172/0/CD4EAC0306D06F2109F2679DC9F52F7DE597590D.crl
Authority Information Access:
CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/CD4EAC0306D06F2109F2679DC9F52F7DE597590D.cer
Subject Information Access:
Signed Object - URI:rsync://repo-rpki.idnic.net/repo/378bbfd4-67b4-498d-8411-e964c5fe1172/0/CD4EAC0306D06F2109F2679DC9F52F7DE597590D.mft
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
22:45:b0:4f:8d:8c:8c:3d:cd:a8:ea:99:eb:98:10:a9:82:67:
e6:66:42:38:f7:b1:2b:dc:15:03:a4:b6:a4:9b:29:3c:20:0a:
0a:33:04:94:ca:c4:e7:cb:3c:2b:70:81:61:7d:01:0c:ad:c2:
e2:9d:6b:32:b5:15:fa:5c:59:a3:e4:25:02:2f:7e:eb:10:d6:
c3:55:fb:f8:24:3c:50:47:ad:39:c8:3b:68:02:c1:16:89:bf:
60:70:b9:78:ac:e3:fd:ec:d9:ea:95:93:01:db:30:cf:88:de:
97:39:13:eb:58:2c:11:36:da:16:7b:25:ee:f5:89:fe:3c:15:
e6:c9:2b:d0:7b:42:0c:40:21:22:cc:d6:51:d0:9e:bf:f2:d8:
5a:64:47:6c:db:cd:1c:2f:b8:de:2d:a7:38:a6:8b:66:5a:b0:
11:5e:4d:5e:69:9d:90:ec:0c:ff:29:b3:bf:ba:8f:42:da:22:
5e:ed:7b:c2:30:9b:92:de:f9:02:90:e2:d8:0b:c6:73:21:89:
e8:cc:ca:05:bf:d1:73:41:02:86:1a:19:e8:1a:b4:d2:58:56:
c5:97:38:e9:1b:24:0e:77:d0:33:11:a8:ee:fd:a5:14:8d:ae:
71:f0:15:b8:6f:48:d4:e1:0b:f8:c3:b4:cf:ce:12:7f:e1:40:
d6:c0:31:0e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jun 3 03:36:54 2026 by rpki-client