Manifest
$ rpki-client -vvf repo-rpki.idnic.net/repo/3a406cdb-1791-478d-9d28-9e37a6f809cc/0/2D0745D26E59440CB71FAFE996834493DA753248.mft
File: 2D0745D26E59440CB71FAFE996834493DA753248.mft (raw, json)
Hash identifier: hBHJyg700hJ6sd0e1gdW7t0FNFOYAORZ9cZDMonLVic=
Subject key identifier: 71:33:62:2C:ED:F9:AA:9F:33:79:47:FD:E9:25:1A:88:F4:00:39:68
Authority key identifier: 2D:07:45:D2:6E:59:44:0C:B7:1F:AF:E9:96:83:44:93:DA:75:32:48
Certificate issuer: /CN=2D0745D26E59440CB71FAFE996834493DA753248
Certificate serial: 4113104DCB6AEBA26381B1BFA009DAC9C7A86159
Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/2D0745D26E59440CB71FAFE996834493DA753248.cer
Subject info access: rsync://repo-rpki.idnic.net/repo/3a406cdb-1791-478d-9d28-9e37a6f809cc/0/2D0745D26E59440CB71FAFE996834493DA753248.mft
Manifest number: 0240
Signing time: Tue 28 Apr 2026 00:30:59 +0000
Manifest this update: Tue 28 Apr 2026 00:25:59 +0000
Manifest next update: Fri 01 May 2026 04:29:59 +0000
Files and hashes: 1: 2D0745D26E59440CB71FAFE996834493DA753248.crl (hash: y3s9FwO3U3bn+cH1jcVzLB2mN8IcnNCAdNYdZ/Ly260=)
2: 3130332e37332e3135382e302f32342d3234203d3e203234343239.roa (hash: s7xt6atAlnuk0NCp/3UKrnkCS/YpsE7vKEiGKhHlUBE=)
3: 3130332e37332e3135392e302f32342d3234203d3e20313338383836.roa (hash: nxYZnXzCnu/G6Di5JhS1WLXdlQHk8fuEdbh3UpU3Jf8=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
41:13:10:4d:cb:6a:eb:a2:63:81:b1:bf:a0:09:da:c9:c7:a8:61:59
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2D0745D26E59440CB71FAFE996834493DA753248
Validity
Not Before: Apr 28 00:25:59 2026 GMT
Not After : May 1 04:29:59 2026 GMT
Subject: CN=7133622CEDF9AA9F337947FDE9251A88F4003968
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:fb:20:7c:6c:ca:6c:2e:6d:33:31:4d:33:4d:d4:
37:c2:0d:cd:b6:7f:03:aa:c5:be:5f:3c:eb:dd:65:
f4:29:cc:29:a1:b9:81:a5:6e:97:3d:f6:f8:d1:1c:
ab:38:bc:ed:92:7d:c1:ca:3c:0c:6d:e7:a6:28:29:
d9:83:1a:a9:d1:ef:37:dc:35:44:9c:65:26:39:96:
c6:3a:20:98:a3:93:cd:46:5a:64:ae:04:fa:37:82:
35:93:0c:82:d7:df:34:ed:79:ab:7b:5d:9b:b0:31:
14:56:6c:65:23:72:04:ff:48:1e:db:31:d5:57:97:
d3:a0:73:e7:37:2b:47:15:d6:66:b5:d2:ad:66:f4:
4b:27:79:aa:ba:76:c8:1e:8b:ed:8d:e5:44:1e:b9:
1c:3d:23:07:06:45:59:a9:23:86:14:c3:36:f2:1c:
7c:03:c7:f2:21:87:bd:25:a1:f6:da:1f:8c:69:80:
6a:53:9b:da:dd:10:d4:7b:82:30:d6:cb:ec:84:35:
68:be:c6:61:1f:ff:e2:1b:73:eb:4c:7e:29:b7:35:
c2:c2:1c:80:66:48:bf:c0:6c:4a:b0:d4:b2:6b:35:
b4:ed:e6:f6:ee:0d:f0:a0:c2:d9:26:2c:a1:79:2c:
2e:c9:ad:42:f6:e1:ff:a8:ac:80:57:88:fe:f7:f1:
cb:6b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
71:33:62:2C:ED:F9:AA:9F:33:79:47:FD:E9:25:1A:88:F4:00:39:68
X509v3 Authority Key Identifier:
keyid:2D:07:45:D2:6E:59:44:0C:B7:1F:AF:E9:96:83:44:93:DA:75:32:48
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://repo-rpki.idnic.net/repo/3a406cdb-1791-478d-9d28-9e37a6f809cc/0/2D0745D26E59440CB71FAFE996834493DA753248.crl
Authority Information Access:
CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/2D0745D26E59440CB71FAFE996834493DA753248.cer
Subject Information Access:
Signed Object - URI:rsync://repo-rpki.idnic.net/repo/3a406cdb-1791-478d-9d28-9e37a6f809cc/0/2D0745D26E59440CB71FAFE996834493DA753248.mft
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
4a:a4:ca:cd:42:9c:19:f2:b0:ed:64:e7:cf:66:56:aa:0e:c9:
d9:cd:e6:73:6b:25:d4:d2:18:1b:ed:90:6e:98:26:89:6e:26:
fe:9b:41:58:90:59:f7:65:aa:b8:d0:d5:a8:7b:05:c5:11:9b:
c7:da:45:df:d3:08:5d:72:98:fd:97:6a:47:47:75:89:80:4b:
d3:7a:72:68:35:8a:4b:25:89:47:a1:37:ba:34:f1:ab:14:b1:
a8:1a:5b:e2:58:61:ba:44:68:23:e1:0f:51:76:bf:27:cc:b8:
9b:c2:5d:12:d2:6f:9d:e3:d8:4b:b8:f3:a1:86:37:10:a2:ee:
79:9f:8e:ac:f9:b1:28:7d:46:33:84:02:a0:c2:e6:3c:74:78:
e0:e8:d4:f6:db:fa:af:b8:3a:43:ce:10:7d:11:e1:aa:b0:4f:
91:c1:13:aa:35:b5:75:e6:4b:a6:fa:a0:c6:96:b5:f9:eb:f1:
a0:3a:3c:5c:69:b2:35:b9:9b:78:72:54:26:8c:24:93:47:a5:
5e:01:ba:c9:7a:aa:e6:e5:9e:e0:18:e1:25:4b:78:f2:f1:0e:
0d:5f:b8:4f:b4:36:4f:85:c1:89:f3:c8:91:98:37:0b:a6:fa:
86:2a:73:fd:e5:56:ac:3e:05:48:81:b2:50:57:d4:5c:e8:b9:
7e:ef:b5:15
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jun 3 03:08:52 2026 by rpki-client