Manifest
$ rpki-client -vvf repo-rpki.idnic.net/repo/448407e3-2cb1-4c6e-8aeb-5e0d355e8c96/0/43E94F4D6572FA61C908F2C122712EB0A696EF96.mft
File: 43E94F4D6572FA61C908F2C122712EB0A696EF96.mft (raw, json)
Hash identifier: 7/o1YxUk0uY1K3gx+LBB3q6/9xHQfG4HkEa364BhpyA=
Subject key identifier: B1:AC:95:DC:33:E3:31:3D:C5:47:F8:09:E0:A0:E9:56:F9:3A:F2:57
Authority key identifier: 43:E9:4F:4D:65:72:FA:61:C9:08:F2:C1:22:71:2E:B0:A6:96:EF:96
Certificate issuer: /CN=43E94F4D6572FA61C908F2C122712EB0A696EF96
Certificate serial: 359219DCC66E2F09EA5833012EDA95D9437E33B9
Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/43E94F4D6572FA61C908F2C122712EB0A696EF96.cer
Subject info access: rsync://repo-rpki.idnic.net/repo/448407e3-2cb1-4c6e-8aeb-5e0d355e8c96/0/43E94F4D6572FA61C908F2C122712EB0A696EF96.mft
Manifest number: 018B
Signing time: Tue 28 Apr 2026 02:10:53 +0000
Manifest this update: Tue 28 Apr 2026 02:05:53 +0000
Manifest next update: Fri 01 May 2026 09:23:53 +0000
Files and hashes: 1: 43E94F4D6572FA61C908F2C122712EB0A696EF96.crl (hash: EnscLU9pNKXXnvLJMiqvR152cXoJpzoGmc/QWit+kuU=)
2: 34352e3132362e34302e302f32332d3234203d3e203634333030.roa (hash: qxQ+6T9yrSIPoh+WZqiNWh2YyFV04+QAx96S0X8/TDk=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
35:92:19:dc:c6:6e:2f:09:ea:58:33:01:2e:da:95:d9:43:7e:33:b9
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=43E94F4D6572FA61C908F2C122712EB0A696EF96
Validity
Not Before: Apr 28 02:05:53 2026 GMT
Not After : May 1 09:23:53 2026 GMT
Subject: CN=B1AC95DC33E3313DC547F809E0A0E956F93AF257
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c5:78:0b:5f:cf:d1:11:02:af:b7:34:14:33:58:
9d:96:9d:7c:09:e5:cf:1e:a7:d5:17:b5:f8:b4:0d:
82:18:be:43:bc:f8:ec:a8:97:b4:c4:44:9f:3e:ed:
77:96:fe:91:f5:65:f1:9b:86:ad:d3:b9:4b:1e:fe:
06:cc:fa:2d:33:ee:7a:52:7e:b0:7e:02:ad:63:c7:
42:29:8f:8d:91:b0:9a:ef:bf:a1:23:6b:19:d4:48:
e3:73:71:34:e8:1d:73:a4:88:e7:fb:5d:2b:ef:93:
21:91:71:e1:98:75:fa:91:75:8b:e2:ec:cd:ee:17:
d5:d4:b3:0a:64:4b:d1:4b:e3:33:be:4f:f3:cc:18:
56:56:be:72:a2:8d:64:d4:57:8c:64:6b:88:54:d8:
e6:93:8f:d0:8b:c7:3e:b1:80:28:ea:80:d4:ac:96:
df:16:83:63:29:b6:9b:15:f9:92:c1:24:17:fb:73:
c9:37:43:a7:21:b6:f7:2e:41:d1:4a:24:2e:cb:d8:
6a:96:e1:b1:9d:a1:bb:66:4a:87:a5:6d:8b:5b:64:
5b:2e:92:d1:9d:ec:1f:4b:4f:b0:a1:67:ae:1d:dc:
3e:a7:68:84:24:49:91:ab:c3:fd:5d:47:07:d0:c2:
25:f7:3f:f5:59:07:71:e1:7b:7c:26:a9:f3:6c:2d:
07:b1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B1:AC:95:DC:33:E3:31:3D:C5:47:F8:09:E0:A0:E9:56:F9:3A:F2:57
X509v3 Authority Key Identifier:
keyid:43:E9:4F:4D:65:72:FA:61:C9:08:F2:C1:22:71:2E:B0:A6:96:EF:96
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://repo-rpki.idnic.net/repo/448407e3-2cb1-4c6e-8aeb-5e0d355e8c96/0/43E94F4D6572FA61C908F2C122712EB0A696EF96.crl
Authority Information Access:
CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/43E94F4D6572FA61C908F2C122712EB0A696EF96.cer
Subject Information Access:
Signed Object - URI:rsync://repo-rpki.idnic.net/repo/448407e3-2cb1-4c6e-8aeb-5e0d355e8c96/0/43E94F4D6572FA61C908F2C122712EB0A696EF96.mft
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
11:f5:ab:46:84:ee:39:80:82:4a:ee:a0:f9:67:18:66:9b:35:
16:6c:c6:64:61:d9:d4:f2:98:be:59:49:de:cc:f3:0e:fd:ff:
f1:63:65:40:da:2f:3b:44:88:e9:58:72:dd:35:d3:61:8d:43:
5e:0c:29:30:48:b5:d5:74:56:77:df:d8:f1:f0:89:ae:86:f7:
dd:71:89:ee:02:c2:fb:05:bc:20:ed:df:08:a3:4b:96:32:fd:
4a:3b:a6:6a:35:a6:c1:1b:5a:b0:e7:7c:02:3d:83:6b:35:98:
25:ba:2a:f7:e6:1e:b9:d6:7d:ee:d8:b8:a5:ff:70:d9:9e:84:
67:47:7b:6e:42:42:00:90:0d:e7:00:ab:4a:85:3a:ee:26:83:
9f:5b:1b:d5:a3:35:5f:f3:82:4c:3e:f8:0a:d0:35:34:09:1f:
41:26:5f:92:67:36:34:cd:c0:4c:61:7f:d0:79:b0:b5:95:2f:
2c:c3:40:c3:82:c7:c1:0d:b0:01:8f:6a:ed:26:0a:99:95:89:
7e:29:09:95:18:88:ac:c8:88:4f:68:6f:f8:c6:1b:c9:e7:ce:
51:3c:cc:9b:6c:36:d7:2b:92:fd:d6:b9:c8:2e:59:d7:fe:a6:
63:78:f0:b0:30:72:fe:ab:bc:83:1c:f0:5f:c0:8f:6d:c7:97:
98:c3:d4:7e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jun 3 03:44:28 2026 by rpki-client