Manifest
$ rpki-client -vvf repo-rpki.idnic.net/repo/51292911-da7d-4636-b153-02a4b66205b5/0/42CD38BF795E0099BD3E143DD8383778ADEAE850.mft
File: 42CD38BF795E0099BD3E143DD8383778ADEAE850.mft (raw, json)
Hash identifier: SUAk3OEZtxf2Xdw0pTBI2my6Ur1/l9Mg6vHJzwqLRxI=
Subject key identifier: CA:4C:90:F3:8F:AC:44:C9:1A:1B:BE:F2:9E:D4:96:F0:96:51:89:05
Authority key identifier: 42:CD:38:BF:79:5E:00:99:BD:3E:14:3D:D8:38:37:78:AD:EA:E8:50
Certificate issuer: /CN=42CD38BF795E0099BD3E143DD8383778ADEAE850
Certificate serial: 5062B61BC655FC97F6DE90779F21110E197D659B
Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/42CD38BF795E0099BD3E143DD8383778ADEAE850.cer
Subject info access: rsync://repo-rpki.idnic.net/repo/51292911-da7d-4636-b153-02a4b66205b5/0/42CD38BF795E0099BD3E143DD8383778ADEAE850.mft
Manifest number: 053A
Signing time: Tue 28 Apr 2026 19:32:09 +0000
Manifest this update: Tue 28 Apr 2026 19:27:09 +0000
Manifest next update: Sat 02 May 2026 02:14:09 +0000
Files and hashes: 1: 3130332e3135382e39372e302f32342d3234203d3e20313431313330.roa (hash: EWWFrGWk8wRtOz9/UzZazsAdPEBVpBh7hezsdiFevxg=)
2: 42CD38BF795E0099BD3E143DD8383778ADEAE850.crl (hash: fDnXFY714nXPCDZi08ugyrvEbTsnRNKaAvc8byNDIIE=)
3: 3130332e3135382e39362e302f32342d3234203d3e20313431313330.roa (hash: QMIo9UWJEyfgKZ8vcrZkyTvmeP7BIt+ZlmY9Lk3KGaA=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
50:62:b6:1b:c6:55:fc:97:f6:de:90:77:9f:21:11:0e:19:7d:65:9b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=42CD38BF795E0099BD3E143DD8383778ADEAE850
Validity
Not Before: Apr 28 19:27:09 2026 GMT
Not After : May 2 02:14:09 2026 GMT
Subject: CN=CA4C90F38FAC44C91A1BBEF29ED496F096518905
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c1:06:72:22:6d:24:37:84:ec:10:d1:5c:29:e4:
1e:ad:46:f5:b7:91:36:02:3a:e0:7c:94:68:fc:5a:
f7:0e:8d:0e:b4:1e:64:de:c3:26:b4:86:19:38:b6:
5c:13:6b:3c:44:49:80:5e:1f:56:b9:f5:07:0e:0f:
51:aa:ad:f1:bd:e4:66:f0:a3:64:0b:4a:25:46:69:
c2:31:97:52:98:47:c6:53:f2:45:98:27:fe:99:f4:
61:f2:21:1d:27:95:ba:d7:c4:74:cf:6f:94:b3:f5:
93:6d:65:9e:56:0f:1a:d7:02:06:48:58:c1:ca:53:
62:34:ed:65:8c:8d:71:d2:1f:61:f3:4a:c7:78:19:
4c:c6:52:73:ef:43:62:b1:3d:aa:b6:47:1c:dc:19:
cc:dd:58:6e:27:9a:fe:29:72:e6:cd:a5:ac:52:fa:
90:aa:30:6c:2a:3f:34:0e:06:13:50:ea:9e:20:95:
42:08:82:9c:39:9a:9c:5e:e5:24:72:fd:cb:c8:09:
e5:af:da:7e:ce:e1:1d:9d:b3:c9:ab:30:c9:88:00:
1d:df:61:89:5a:83:41:93:83:0f:ff:95:6c:63:01:
47:c7:a3:57:f5:e2:98:4a:cf:fd:e3:3d:ff:a6:02:
c9:6b:a0:c1:c9:1e:7e:6e:8f:25:80:e7:14:56:b3:
0c:e3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
CA:4C:90:F3:8F:AC:44:C9:1A:1B:BE:F2:9E:D4:96:F0:96:51:89:05
X509v3 Authority Key Identifier:
keyid:42:CD:38:BF:79:5E:00:99:BD:3E:14:3D:D8:38:37:78:AD:EA:E8:50
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://repo-rpki.idnic.net/repo/51292911-da7d-4636-b153-02a4b66205b5/0/42CD38BF795E0099BD3E143DD8383778ADEAE850.crl
Authority Information Access:
CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/42CD38BF795E0099BD3E143DD8383778ADEAE850.cer
Subject Information Access:
Signed Object - URI:rsync://repo-rpki.idnic.net/repo/51292911-da7d-4636-b153-02a4b66205b5/0/42CD38BF795E0099BD3E143DD8383778ADEAE850.mft
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
83:e2:c7:7e:8f:a9:dd:f2:37:b2:69:75:10:79:41:1f:4c:be:
ad:9b:b5:61:71:14:ed:58:d9:91:25:ba:d0:1c:e1:4f:12:50:
68:88:c7:52:37:06:96:ac:fc:3e:a3:2c:e1:71:d5:10:53:4c:
33:b3:8e:18:8b:fc:e2:b5:50:e4:85:cf:2d:0d:12:ab:f1:1d:
a6:cb:7a:37:7e:77:42:97:87:65:3e:d5:a3:3a:a7:12:b2:eb:
7c:28:55:e3:c5:93:d0:4d:cc:da:e9:43:bd:6a:63:48:09:cd:
a3:30:fe:89:15:e7:2e:cd:04:7f:69:34:d1:da:23:5a:71:6a:
23:43:fc:02:b1:7e:cf:a0:f8:44:b5:35:28:4a:c1:0a:1a:75:
04:51:44:e8:57:b7:62:c1:30:85:07:39:9c:5b:5e:46:e5:3a:
d4:db:37:d1:3a:82:0f:75:10:22:88:11:52:e9:77:f4:a4:70:
d1:03:a2:bf:cc:2f:17:a2:f5:af:ae:31:f2:f7:57:e6:aa:f3:
5b:da:6b:f6:fa:2a:e8:7c:61:ff:b0:c0:ac:84:1a:e5:a5:85:
59:0f:d5:c5:58:8c:3c:6f:96:3e:27:ae:63:0e:0e:81:78:6a:
a6:0a:55:20:55:78:c1:7b:46:0f:3c:2a:4c:43:de:f5:9e:6e:
5a:d9:ac:4a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jun 3 03:09:02 2026 by rpki-client