Manifest
$ rpki-client -vvf repo-rpki.idnic.net/repo/44b27303-9e3d-4d42-af25-6a0f11808f27/0/8C888E996588527BC5EF8ABD293676C3463A1A22.mft
File: 8C888E996588527BC5EF8ABD293676C3463A1A22.mft (raw, json)
Hash identifier: iuURO+o48xFu/P7TA/goLUWxRZSfplxR6yQrT8LjDo0=
Subject key identifier: 96:8C:06:A2:1F:4B:03:2F:79:D5:4D:E0:52:C0:0E:9C:5C:C6:A2:81
Authority key identifier: 8C:88:8E:99:65:88:52:7B:C5:EF:8A:BD:29:36:76:C3:46:3A:1A:22
Certificate issuer: /CN=8C888E996588527BC5EF8ABD293676C3463A1A22
Certificate serial: 7F0BB4753CBFC877083814424757FE9670ECF36E
Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/8C888E996588527BC5EF8ABD293676C3463A1A22.cer
Subject info access: rsync://repo-rpki.idnic.net/repo/44b27303-9e3d-4d42-af25-6a0f11808f27/0/8C888E996588527BC5EF8ABD293676C3463A1A22.mft
Manifest number: 029F
Signing time: Tue 28 Apr 2026 17:41:50 +0000
Manifest this update: Tue 28 Apr 2026 17:36:50 +0000
Manifest next update: Sat 02 May 2026 01:42:50 +0000
Files and hashes: 1: 3130332e39372e342e302f32322d3234203d3e20313336313237.roa (hash: cSbzW37UFSp4uDE4SjobLjyIHBQEPum3WY749moxuxA=)
2: 3130332e39372e342e302f32342d3234203d3e20313336313237.roa (hash: oyn1Uio0Qvr9sm/GPuAcnqkMPKHi72fQr6RvUU829kw=)
3: 3130332e39372e362e302f32342d3234203d3e20313336313237.roa (hash: TtoAt5XF5k/VvO7s/IJgg3qpfYPoYBpMQ3uw/EaHESY=)
4: 3130332e39372e352e302f32342d3234203d3e20313336313237.roa (hash: WKEiaTlm3HRRnumgx69gRc0fNHyTzs1yLm0l6WuuEfo=)
5: 8C888E996588527BC5EF8ABD293676C3463A1A22.crl (hash: Gggq5JaqCYu+a/IOiYP+6SWl8FlMGwHSZ3nTaK+iJRk=)
6: 3130332e39372e372e302f32342d3234203d3e20313336313237.roa (hash: Qqqk2T1cKP78pedxPHc7hCxMQjf7DnhA0KfJusumKno=)
7: 323430313a383034303a3a2f33322d3332203d3e20313336313237.roa (hash: UuD6w5FXiXpEb3WA0CSDEKfMUpwCYuxys7TXvAGTTaE=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
7f:0b:b4:75:3c:bf:c8:77:08:38:14:42:47:57:fe:96:70:ec:f3:6e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8C888E996588527BC5EF8ABD293676C3463A1A22
Validity
Not Before: Apr 28 17:36:50 2026 GMT
Not After : May 2 01:42:50 2026 GMT
Subject: CN=968C06A21F4B032F79D54DE052C00E9C5CC6A281
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:be:c2:21:bd:5a:6f:f9:20:7c:0e:79:31:d1:a8:
b4:7d:98:fa:53:b8:0b:3c:51:ee:fe:d2:e8:17:18:
32:ce:c5:ec:2b:1b:0d:c4:21:87:c6:29:4f:f3:fa:
42:b0:31:c3:12:58:f4:7a:98:84:56:15:b1:5b:d8:
12:55:a7:e0:19:4a:af:48:67:c2:6b:06:bd:13:74:
e8:10:17:08:48:c6:5c:db:7c:5e:c8:90:6e:c2:b8:
b4:6b:b7:7a:0a:58:0e:08:2d:d9:29:90:80:6f:fc:
3b:62:3c:d4:ed:5e:85:5a:57:ef:c3:6c:b7:d5:4f:
0e:b2:d3:a2:7b:6d:bc:eb:ac:82:f8:de:d6:82:6d:
79:f3:2b:c1:d0:c1:81:b6:73:44:e9:ab:f4:dc:a6:
7b:9d:b1:50:1c:9e:11:f7:b4:63:0c:c6:fa:c2:aa:
9c:71:2c:4a:33:76:8e:15:47:d0:a6:5d:34:a0:f2:
11:ca:61:ea:9e:b3:55:d7:ca:5d:b3:fe:19:5c:df:
0a:5f:82:b0:ca:d0:f8:1c:a9:91:a4:d4:78:7d:82:
ed:92:d2:04:4d:2e:e0:6a:65:89:ff:99:01:57:7f:
9d:69:9d:32:fd:6a:e1:4c:23:49:b4:37:5d:43:ff:
b5:39:05:43:1a:61:ef:54:f1:30:e5:ba:c9:6f:d9:
5f:9f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
96:8C:06:A2:1F:4B:03:2F:79:D5:4D:E0:52:C0:0E:9C:5C:C6:A2:81
X509v3 Authority Key Identifier:
keyid:8C:88:8E:99:65:88:52:7B:C5:EF:8A:BD:29:36:76:C3:46:3A:1A:22
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://repo-rpki.idnic.net/repo/44b27303-9e3d-4d42-af25-6a0f11808f27/0/8C888E996588527BC5EF8ABD293676C3463A1A22.crl
Authority Information Access:
CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/8C888E996588527BC5EF8ABD293676C3463A1A22.cer
Subject Information Access:
Signed Object - URI:rsync://repo-rpki.idnic.net/repo/44b27303-9e3d-4d42-af25-6a0f11808f27/0/8C888E996588527BC5EF8ABD293676C3463A1A22.mft
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
2d:1e:70:9f:34:f7:5e:c4:fc:5a:59:df:f0:42:fb:83:df:75:
f7:c9:06:a6:c0:b4:42:f8:08:24:ec:f4:62:4e:f9:89:4e:16:
a9:ab:0e:76:48:99:37:67:f3:50:0e:6d:c9:84:18:c0:72:e3:
6e:35:16:f2:04:31:a6:c4:97:16:c1:6c:03:3b:7e:66:f7:50:
e6:7b:6d:79:94:e7:eb:d9:1d:d1:c1:fc:1e:2c:79:13:f7:07:
8a:62:e0:f5:7d:c3:e0:e6:91:c6:8c:85:ff:c6:0d:40:e1:20:
a2:48:79:0f:ff:21:61:a4:92:30:f2:ed:bb:1d:8e:24:8f:c1:
3d:fd:8f:c2:12:57:b4:0d:09:47:6b:dc:1e:d0:52:82:4f:92:
92:d1:07:a7:6e:f9:53:30:10:b3:0d:a7:6c:72:5e:f1:45:ef:
81:9f:77:91:c9:24:69:5e:c6:43:5f:37:23:32:6f:79:14:0c:
b9:5f:37:c6:49:36:9f:03:69:f1:fa:4f:14:5c:ab:92:be:96:
2a:b4:36:15:3d:5b:0e:d0:e3:78:18:b2:6c:b9:a1:ae:e5:49:
95:93:fc:b4:4d:31:64:25:fb:a6:f9:5b:b8:1d:ac:31:56:67:
6d:c4:ea:47:f8:d5:70:a5:2d:70:ff:29:c4:59:53:fb:8f:82:
d1:36:32:32
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jun 3 03:16:01 2026 by rpki-client