Manifest
$ rpki-client -vvf repo-rpki.idnic.net/repo/57be8b7c-232f-47e8-9cdd-8817d39b70ea/0/843FDF32A52D11795BBFB0918ABF926E0A210870.mft
File: 843FDF32A52D11795BBFB0918ABF926E0A210870.mft (raw, json)
Hash identifier: 19GtlqAbNqop9udF10flSuxWPMfu3mmoHtjtMrseI1g=
Subject key identifier: 2B:D7:2B:0B:77:BC:C4:CE:EE:BA:71:A7:6A:84:B0:F5:F6:85:8C:79
Authority key identifier: 84:3F:DF:32:A5:2D:11:79:5B:BF:B0:91:8A:BF:92:6E:0A:21:08:70
Certificate issuer: /CN=843FDF32A52D11795BBFB0918ABF926E0A210870
Certificate serial: 77850C59E1D8E274D9FC89F3721D5DD16F4726EA
Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/843FDF32A52D11795BBFB0918ABF926E0A210870.cer
Subject info access: rsync://repo-rpki.idnic.net/repo/57be8b7c-232f-47e8-9cdd-8817d39b70ea/0/843FDF32A52D11795BBFB0918ABF926E0A210870.mft
Manifest number: 0166
Signing time: Tue 28 Apr 2026 13:22:38 +0000
Manifest this update: Tue 28 Apr 2026 13:17:38 +0000
Manifest next update: Fri 01 May 2026 13:48:38 +0000
Files and hashes: 1: 843FDF32A52D11795BBFB0918ABF926E0A210870.crl (hash: avnVLqpzmmRAI8IXUoJM26J4bG7PQxj2Ve6j10NY4s8=)
2: 3231302e38372e3132342e302f32332d3234203d3e20313532303539.roa (hash: EWhTaEy0kSyTN6Oh9f79SCw3rvXkaSbLCftfTIrzMKE=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
77:85:0c:59:e1:d8:e2:74:d9:fc:89:f3:72:1d:5d:d1:6f:47:26:ea
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=843FDF32A52D11795BBFB0918ABF926E0A210870
Validity
Not Before: Apr 28 13:17:38 2026 GMT
Not After : May 1 13:48:38 2026 GMT
Subject: CN=2BD72B0B77BCC4CEEEBA71A76A84B0F5F6858C79
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9d:2f:15:d0:08:59:8f:fc:3c:19:8e:78:49:6a:
5d:b7:22:ac:3f:f4:8a:b8:76:11:2e:f2:a3:2b:53:
6d:33:d6:3c:42:4a:6b:ae:74:55:f9:3b:45:36:db:
64:cd:d9:07:5a:57:a4:f3:ff:40:9c:98:4d:a5:5c:
7f:f0:61:bd:a3:4a:f9:7c:c9:2c:d9:6b:a3:18:94:
49:de:f9:ba:3b:bf:44:a5:b6:a6:49:9f:af:4a:a0:
b4:de:66:89:ce:44:bf:8c:1c:5a:ee:53:74:af:76:
ea:a6:81:2a:a0:d1:45:13:4b:aa:f6:3e:e3:f1:0e:
19:47:bb:6f:50:0e:04:bc:5d:0d:c3:0b:f8:8c:ba:
40:6e:00:91:ff:08:38:e8:54:6f:90:1b:50:8d:e6:
dc:a1:25:a8:e0:e8:83:60:3c:a3:6e:35:91:67:2a:
5e:44:c7:0a:d0:82:29:d8:5e:07:e7:67:b9:45:95:
4b:a9:8b:91:35:a3:91:d9:f8:f5:a0:1b:8f:d2:9a:
39:46:6c:f9:7b:13:bd:56:63:f9:6b:20:02:90:cc:
57:51:c4:cf:e8:3f:43:4c:e9:39:2e:a6:00:15:ea:
af:67:bd:d7:71:41:55:cb:67:4e:e1:fd:2a:6b:69:
a0:c9:9d:e2:f1:85:9c:6a:07:f0:d4:cc:da:95:4f:
ce:df
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
2B:D7:2B:0B:77:BC:C4:CE:EE:BA:71:A7:6A:84:B0:F5:F6:85:8C:79
X509v3 Authority Key Identifier:
keyid:84:3F:DF:32:A5:2D:11:79:5B:BF:B0:91:8A:BF:92:6E:0A:21:08:70
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://repo-rpki.idnic.net/repo/57be8b7c-232f-47e8-9cdd-8817d39b70ea/0/843FDF32A52D11795BBFB0918ABF926E0A210870.crl
Authority Information Access:
CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/843FDF32A52D11795BBFB0918ABF926E0A210870.cer
Subject Information Access:
Signed Object - URI:rsync://repo-rpki.idnic.net/repo/57be8b7c-232f-47e8-9cdd-8817d39b70ea/0/843FDF32A52D11795BBFB0918ABF926E0A210870.mft
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
12:40:e7:7b:97:03:e3:44:5e:db:30:8b:51:71:63:b3:37:32:
d4:2b:49:49:00:de:b9:1a:b3:3e:de:63:13:2c:0d:e5:75:62:
9e:7b:e0:db:be:eb:7c:5f:39:fa:39:65:44:ee:3e:b4:4f:f1:
93:fa:e0:35:b4:87:5f:20:1a:c0:da:7a:2a:e6:56:a4:91:2b:
c5:b3:ce:81:36:d8:a5:53:f2:c4:60:d1:7b:b0:5a:3b:99:d9:
63:a1:24:c0:47:cb:67:c7:6a:84:ef:d0:7c:cf:f1:2a:98:0a:
7c:dd:c1:fe:d1:82:eb:a2:1d:d5:e6:2b:d4:79:10:7a:ed:7c:
cb:df:11:23:90:c4:ff:33:ab:78:b8:b9:a6:ee:bc:c8:52:68:
f9:fa:b2:f4:55:3b:f8:f0:9e:54:c6:d1:4f:3d:d5:a1:7b:a7:
5a:e4:62:4c:5f:f5:cf:9f:10:89:d5:a3:8b:30:38:d6:c5:00:
5c:6d:89:ee:8f:76:5a:2b:86:91:c3:e0:6d:34:0e:06:6c:0a:
dd:77:ea:c6:79:8b:1a:79:62:ec:2c:bb:4a:7b:d8:49:bd:dd:
d5:10:f6:c9:31:7f:3b:67:d2:74:1b:87:a0:9d:84:50:13:76:
a5:0e:01:03:21:df:a2:00:80:c5:b6:56:fc:c8:ec:31:51:d2:
7c:b9:79:36
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jun 3 03:37:37 2026 by rpki-client