Manifest
$ rpki-client -vvf repo-rpki.idnic.net/repo/4288762c-3fc5-49cc-949a-594b331a13a1/0/8958EB1EA0022DEF783D17F1C5B6F0C54B0F5F1E.mft
File: 8958EB1EA0022DEF783D17F1C5B6F0C54B0F5F1E.mft (raw, json)
Hash identifier: xPjIB6AKbkJEUVCvAI2gCocUVj2un8F5DyQmedFHpgY=
Subject key identifier: 47:69:15:67:7D:28:49:5E:AB:1D:C2:EC:C7:D0:BD:D4:47:A4:04:C0
Authority key identifier: 89:58:EB:1E:A0:02:2D:EF:78:3D:17:F1:C5:B6:F0:C5:4B:0F:5F:1E
Certificate issuer: /CN=8958EB1EA0022DEF783D17F1C5B6F0C54B0F5F1E
Certificate serial: 485DF5E17A3B21D75C959FD97CE38749C76C3D97
Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/8958EB1EA0022DEF783D17F1C5B6F0C54B0F5F1E.cer
Subject info access: rsync://repo-rpki.idnic.net/repo/4288762c-3fc5-49cc-949a-594b331a13a1/0/8958EB1EA0022DEF783D17F1C5B6F0C54B0F5F1E.mft
Manifest number: 016E
Signing time: Mon 27 Apr 2026 13:40:04 +0000
Manifest this update: Mon 27 Apr 2026 13:35:04 +0000
Manifest next update: Thu 30 Apr 2026 19:23:04 +0000
Files and hashes: 1: 3230322e34372e3136302e302f32342d3234203d3e20313532303736.roa (hash: SOoZmysbJDZktqnuTuwq0n/y13DKsF/IrNzLNUAhqCQ=)
2: 8958EB1EA0022DEF783D17F1C5B6F0C54B0F5F1E.crl (hash: UI5iqolb7MmKqZhfyhrEXrd/CRGI9IXPfBT3bCqww98=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
48:5d:f5:e1:7a:3b:21:d7:5c:95:9f:d9:7c:e3:87:49:c7:6c:3d:97
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8958EB1EA0022DEF783D17F1C5B6F0C54B0F5F1E
Validity
Not Before: Apr 27 13:35:04 2026 GMT
Not After : Apr 30 19:23:04 2026 GMT
Subject: CN=476915677D28495EAB1DC2ECC7D0BDD447A404C0
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e0:9d:fc:38:58:09:81:4f:8b:53:88:df:59:28:
ec:00:8e:da:82:e0:be:e7:38:92:3b:1c:02:40:e6:
75:5a:d3:4c:45:4d:36:db:fc:7c:fe:c8:95:91:25:
33:71:2f:e4:1c:fd:c2:77:b7:30:34:a9:65:6b:9f:
a4:cd:0a:1e:96:c2:07:0c:05:a1:15:64:87:8f:d1:
62:35:a0:b6:e3:c0:88:bf:d2:28:c8:1f:5e:76:f4:
0f:fd:a9:37:8f:90:dd:1c:c5:58:39:d5:f3:ea:a5:
69:5c:0b:e1:37:72:fa:d0:d2:32:18:50:2b:7f:93:
82:75:0e:0a:35:59:5c:dd:2f:c9:a2:ae:b8:e1:70:
8a:2b:91:0a:bb:fa:3e:cc:23:05:31:35:7c:b4:a6:
86:da:54:60:8e:ea:ec:25:42:8f:e2:9b:d3:cc:3b:
d8:b7:6e:43:e2:62:93:b6:b5:af:f6:41:6d:13:fe:
81:ad:5a:24:9a:2d:ca:05:c3:a0:67:de:39:d6:34:
76:c6:90:9a:1d:83:d6:96:4a:07:fd:ed:88:0b:6f:
89:f7:8a:5b:aa:08:f5:39:69:db:c5:1d:38:16:a2:
2b:6b:b1:dd:ed:b5:a8:6e:dd:db:bc:95:42:21:b1:
e7:1f:76:35:94:da:72:32:c2:3f:39:a0:4f:07:41:
38:37
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
47:69:15:67:7D:28:49:5E:AB:1D:C2:EC:C7:D0:BD:D4:47:A4:04:C0
X509v3 Authority Key Identifier:
keyid:89:58:EB:1E:A0:02:2D:EF:78:3D:17:F1:C5:B6:F0:C5:4B:0F:5F:1E
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://repo-rpki.idnic.net/repo/4288762c-3fc5-49cc-949a-594b331a13a1/0/8958EB1EA0022DEF783D17F1C5B6F0C54B0F5F1E.crl
Authority Information Access:
CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/8958EB1EA0022DEF783D17F1C5B6F0C54B0F5F1E.cer
Subject Information Access:
Signed Object - URI:rsync://repo-rpki.idnic.net/repo/4288762c-3fc5-49cc-949a-594b331a13a1/0/8958EB1EA0022DEF783D17F1C5B6F0C54B0F5F1E.mft
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
68:13:a8:b0:6c:9f:5f:49:39:1d:86:8b:a4:92:a3:5d:2f:7d:
c0:20:66:ad:71:79:31:31:52:f7:5c:79:88:44:c7:46:50:56:
11:07:70:69:86:d5:71:f4:8d:69:2c:b4:c0:bd:66:6d:1b:f6:
e5:42:02:89:6d:be:d4:19:c2:6a:3d:ea:23:87:49:84:73:be:
7a:19:e1:7a:bc:87:31:62:84:37:61:7b:8e:e9:4c:01:32:a3:
f2:7f:b6:a7:44:83:c7:77:6c:37:46:1a:6b:66:c6:29:e7:09:
ff:0c:8d:1e:7a:62:eb:b1:d6:92:82:50:b6:af:ca:27:b3:b4:
b4:d2:62:37:4d:86:93:55:4d:d5:c0:18:0e:3d:85:fb:1e:7a:
19:f9:38:fc:ed:49:27:54:ef:d7:40:ce:0e:a3:09:33:54:b4:
cc:7f:0a:c2:7b:40:0d:75:54:1d:ab:99:f3:2c:60:82:27:e0:
c6:a6:6b:7e:c9:74:21:82:45:25:77:48:66:81:dc:3d:84:47:
2f:da:30:9d:6d:3c:c3:5f:da:93:0b:ce:9d:2f:0a:56:9a:e9:
a5:98:6e:41:ce:2f:14:3c:5c:68:45:50:31:fd:f6:3e:72:d5:
9e:50:16:8c:2b:e6:50:f8:65:27:09:b5:65:61:3e:c0:de:59:
03:4e:bc:26
-----BEGIN CERTIFICATE-----
MIIFMjCCBBqgAwIBAgIUSF314Xo7IddclZ/ZfOOHScdsPZcwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoODk1OEVCMUVBMDAyMkRFRjc4M0QxN0YxQzVCNkYwQzU0
QjBGNUYxRTAeFw0yNjA0MjcxMzM1MDRaFw0yNjA0MzAxOTIzMDRaMDMxMTAvBgNV
BAMTKDQ3NjkxNTY3N0QyODQ5NUVBQjFEQzJFQ0M3RDBCREQ0NDdBNDA0QzAwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDgnfw4WAmBT4tTiN9ZKOwAjtqC
4L7nOJI7HAJA5nVa00xFTTbb/Hz+yJWRJTNxL+Qc/cJ3tzA0qWVrn6TNCh6WwgcM
BaEVZIeP0WI1oLbjwIi/0ijIH1529A/9qTePkN0cxVg51fPqpWlcC+E3cvrQ0jIY
UCt/k4J1Dgo1WVzdL8mirrjhcIorkQq7+j7MIwUxNXy0pobaVGCO6uwlQo/im9PM
O9i3bkPiYpO2ta/2QW0T/oGtWiSaLcoFw6Bn3jnWNHbGkJodg9aWSgf97YgLb4n3
iluqCPU5advFHTgWoitrsd3ttahu3du8lUIhsecfdjWU2nIywj85oE8HQTg3AgMB
AAGjggI8MIICODAdBgNVHQ4EFgQUR2kVZ30oSV6rHcLsx9C91EekBMAwHwYDVR0j
BBgwFoAUiVjrHqACLe94PRfxxbbwxUsPXx4wDgYDVR0PAQH/BAQDAgeAMIGFBgNV
HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby80
Mjg4NzYyYy0zZmM1LTQ5Y2MtOTQ5YS01OTRiMzMxYTEzYTEvMC84OTU4RUIxRUEw
MDIyREVGNzgzRDE3RjFDNUI2RjBDNTRCMEY1RjFFLmNybDB0BggrBgEFBQcBAQRo
MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv
L0lETklDLUlELzIvODk1OEVCMUVBMDAyMkRFRjc4M0QxN0YxQzVCNkYwQzU0QjBG
NUYxRS5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6
Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vNDI4ODc2MmMtM2ZjNS00OWNjLTk0
OWEtNTk0YjMzMWExM2ExLzAvODk1OEVCMUVBMDAyMkRFRjc4M0QxN0YxQzVCNkYw
QzU0QjBGNUYxRS5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF
BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC
BQAwDQYJKoZIhvcNAQELBQADggEBAGgTqLBsn19JOR2Gi6SSo10vfcAgZq1xeTEx
UvdceYhEx0ZQVhEHcGmG1XH0jWkstMC9Zm0b9uVCAoltvtQZwmo96iOHSYRzvnoZ
4Xq8hzFihDdhe47pTAEyo/J/tqdEg8d3bDdGGmtmxinnCf8MjR56Yuux1pKCULav
yieztLTSYjdNhpNVTdXAGA49hfseehn5OPztSSdU79dAzg6jCTNUtMx/CsJ7QA11
VB2rmfMsYIIn4Mama37JdCGCRSV3SGaB3D2ERy/aMJ1tPMNf2pMLzp0vClaa6aWY
bkHOLxQ8XGhFUDH99j5y1Z5QFowr5lD4ZScJtWVhPsDeWQNOvCY=
-----END CERTIFICATE-----
Generated at Wed Jun 3 03:11:42 2026 by rpki-client