Manifest
$ rpki-client -vvf repo-rpki.idnic.net/repo/3aef786b-6226-44af-852d-1fb045c4deb3/0/DF19949CE17DC116E7B7C2248C933405B7A1AEF2.mft
File: DF19949CE17DC116E7B7C2248C933405B7A1AEF2.mft (raw, json)
Hash identifier: x8+htRJ2ecz0Rh64E3yQF5grIY2Nugzj6GPQNKxPgFg=
Subject key identifier: 81:B3:A6:35:E5:F4:85:11:89:64:4B:66:C9:B7:87:8F:98:A6:E4:AA
Authority key identifier: DF:19:94:9C:E1:7D:C1:16:E7:B7:C2:24:8C:93:34:05:B7:A1:AE:F2
Certificate issuer: /CN=DF19949CE17DC116E7B7C2248C933405B7A1AEF2
Certificate serial: 47CA1F94409A7F341FFD276DC6A5397CF4E7CD3B
Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/DF19949CE17DC116E7B7C2248C933405B7A1AEF2.cer
Subject info access: rsync://repo-rpki.idnic.net/repo/3aef786b-6226-44af-852d-1fb045c4deb3/0/DF19949CE17DC116E7B7C2248C933405B7A1AEF2.mft
Manifest number: 02AC
Signing time: Tue 28 Apr 2026 10:43:56 +0000
Manifest this update: Tue 28 Apr 2026 10:38:56 +0000
Manifest next update: Fri 01 May 2026 13:39:56 +0000
Files and hashes: 1: DF19949CE17DC116E7B7C2248C933405B7A1AEF2.crl (hash: rTghRMFZD3MWgOT+PMAK7AOp8QtMQc5XOWakalbr6w4=)
2: 3130332e3136362e3233342e302f32342d3234203d3e20313430343037.roa (hash: 2lTJuwgktOu4lo9SNeOCA4rDFu8XBUgqcawUv+9j6hA=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
47:ca:1f:94:40:9a:7f:34:1f:fd:27:6d:c6:a5:39:7c:f4:e7:cd:3b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=DF19949CE17DC116E7B7C2248C933405B7A1AEF2
Validity
Not Before: Apr 28 10:38:56 2026 GMT
Not After : May 1 13:39:56 2026 GMT
Subject: CN=81B3A635E5F4851189644B66C9B7878F98A6E4AA
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9f:da:1a:41:96:7f:cd:58:1c:71:70:ba:49:98:
e7:b0:9f:41:99:33:5d:a3:9c:9b:43:62:79:29:64:
04:f6:fe:d9:59:16:8c:1c:50:f4:9b:30:fc:fb:b9:
8e:85:01:0b:f9:2d:73:bb:70:07:af:b0:9c:3c:ba:
b0:a8:a5:78:bb:36:6f:3a:02:de:3c:cf:76:73:92:
fb:fd:8e:d5:ba:73:4d:c9:6d:f5:40:96:49:2f:01:
aa:50:cc:ef:96:69:36:b3:73:a5:f5:40:4d:18:1e:
a1:cf:13:51:7f:a1:be:54:2f:8c:b6:10:14:29:ea:
10:ef:17:a3:d2:ca:b7:d9:24:3f:72:8e:2a:42:18:
b9:40:2d:b4:f4:53:81:1f:31:a3:81:79:8f:e4:e3:
15:77:ea:24:1f:62:f8:29:e9:16:6a:45:3f:39:20:
81:40:ca:cd:a2:8f:95:f8:bb:69:77:9f:39:81:f3:
64:77:0e:8d:de:cb:89:42:7f:12:15:48:8f:fa:89:
6f:e4:ce:e6:a2:02:d7:d2:37:69:d5:57:6d:01:1b:
4d:26:62:d6:44:ed:2b:bb:90:3d:29:d4:3f:65:df:
b1:dc:fa:9b:e1:65:bd:66:62:b0:a3:3f:1c:f6:5e:
a5:a3:53:b6:7b:b1:39:c6:8c:8d:b8:dd:1f:91:39:
97:ef
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
81:B3:A6:35:E5:F4:85:11:89:64:4B:66:C9:B7:87:8F:98:A6:E4:AA
X509v3 Authority Key Identifier:
keyid:DF:19:94:9C:E1:7D:C1:16:E7:B7:C2:24:8C:93:34:05:B7:A1:AE:F2
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://repo-rpki.idnic.net/repo/3aef786b-6226-44af-852d-1fb045c4deb3/0/DF19949CE17DC116E7B7C2248C933405B7A1AEF2.crl
Authority Information Access:
CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/DF19949CE17DC116E7B7C2248C933405B7A1AEF2.cer
Subject Information Access:
Signed Object - URI:rsync://repo-rpki.idnic.net/repo/3aef786b-6226-44af-852d-1fb045c4deb3/0/DF19949CE17DC116E7B7C2248C933405B7A1AEF2.mft
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
17:72:fe:33:b6:c0:08:cf:44:8b:48:d1:76:0d:5d:d9:6f:c3:
bf:12:ff:bd:23:9b:66:24:dc:2e:a0:34:38:5e:7e:d8:e6:df:
f9:c1:94:7d:cd:9a:a7:ee:fe:35:8b:62:90:59:1e:01:68:77:
2e:e9:3b:41:d9:29:1a:45:f8:ca:00:74:98:65:e7:19:2f:39:
11:a7:f2:43:2b:0f:a6:d9:ec:4a:58:50:15:14:a2:8f:02:e2:
48:d7:49:0c:3a:9a:e7:6a:ea:7e:a3:1a:28:0d:bf:5c:28:a2:
77:c1:a7:3a:bf:48:b2:5d:6b:91:45:62:d4:74:4d:91:a8:28:
c5:55:e2:25:27:93:b4:79:c6:00:56:5d:a1:68:fc:a1:09:80:
30:a3:b4:da:f3:8d:59:c9:20:12:e1:56:46:54:48:21:78:be:
aa:db:e6:c2:0a:71:e4:00:36:f0:a5:76:65:b9:a7:4b:62:75:
cc:f1:2f:e5:32:d6:96:21:87:2d:d2:96:fe:fe:93:ab:96:e0:
78:ea:7c:95:78:77:18:3b:0d:3e:a2:a4:38:cc:d1:f0:6c:f2:
2a:6a:7b:cc:a9:ed:d8:e3:00:1e:92:9c:e6:e9:f1:9a:8e:a2:
10:ff:8b:b8:6b:4e:ef:b9:80:86:ee:30:09:4b:b2:51:da:fb:
a3:30:9c:ee
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jun 3 03:33:01 2026 by rpki-client