Manifest
$ rpki-client -vvf repo-rpki.idnic.net/repo/57f6e57b-4c26-442b-8afc-0329eedafb72/0/CBB5E8D87996C4897C9F5DC0CB32864F4F0C5A7A.mft
File: CBB5E8D87996C4897C9F5DC0CB32864F4F0C5A7A.mft (raw, json)
Hash identifier: FkIHXnMYIkj6FnNMBHwnJ6upKtZ3nJWna7se0Nl6cPg=
Subject key identifier: 3D:59:06:3B:E5:4B:0D:BC:39:61:16:47:BA:2E:00:05:5A:F8:87:33
Authority key identifier: CB:B5:E8:D8:79:96:C4:89:7C:9F:5D:C0:CB:32:86:4F:4F:0C:5A:7A
Certificate issuer: /CN=CBB5E8D87996C4897C9F5DC0CB32864F4F0C5A7A
Certificate serial: 1AC2877FDCAFD344E9D117976670174F3406C712
Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/CBB5E8D87996C4897C9F5DC0CB32864F4F0C5A7A.cer
Subject info access: rsync://repo-rpki.idnic.net/repo/57f6e57b-4c26-442b-8afc-0329eedafb72/0/CBB5E8D87996C4897C9F5DC0CB32864F4F0C5A7A.mft
Manifest number: 0211
Signing time: Mon 27 Apr 2026 12:52:01 +0000
Manifest this update: Mon 27 Apr 2026 12:47:01 +0000
Manifest next update: Thu 30 Apr 2026 22:31:01 +0000
Files and hashes: 1: CBB5E8D87996C4897C9F5DC0CB32864F4F0C5A7A.crl (hash: Xu2muOpp/CkO/cFpF1VsrTDJbGzgKnyN9+nlN1UZ82U=)
2: 3130332e3132392e36382e302f32332d3234203d3e20313335343738.roa (hash: g7r/RVB4oSYAg9bJf585oALndM8Pi1RvbkwVKzFMHo8=)
3: 3130332e3132392e37302e302f32332d3234203d3e20313335343738.roa (hash: QJsx8t/jy2szp1HmLXfAbg7UbUXdGC8z/gTpNC266lo=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
1a:c2:87:7f:dc:af:d3:44:e9:d1:17:97:66:70:17:4f:34:06:c7:12
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=CBB5E8D87996C4897C9F5DC0CB32864F4F0C5A7A
Validity
Not Before: Apr 27 12:47:01 2026 GMT
Not After : Apr 30 22:31:01 2026 GMT
Subject: CN=3D59063BE54B0DBC39611647BA2E00055AF88733
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c2:07:6e:35:e3:c0:6b:04:17:60:30:e8:c2:89:
3d:7b:f8:07:ab:ae:46:d3:5c:a8:c2:fc:f6:83:62:
3a:aa:51:94:cb:ad:67:72:af:c2:37:0d:0c:d3:19:
22:1f:1a:e5:0f:73:39:cc:19:a9:f6:e8:83:9e:97:
f9:93:08:4c:97:22:ca:d2:be:b6:ee:c1:c8:6c:77:
45:56:1c:cf:87:3a:c8:11:d4:82:38:e5:4a:77:b9:
91:76:d0:98:98:bb:09:49:72:c7:4c:ce:be:c4:7d:
0a:11:6d:eb:57:87:ef:b7:6a:c9:9b:fc:b6:9a:f4:
9e:7e:fa:81:65:02:ef:76:1e:cc:ea:6a:55:ad:96:
80:1f:01:27:cd:66:97:e0:68:fd:a9:d4:ee:b9:a7:
7d:d9:eb:0c:85:ef:4d:7a:c0:b3:d2:27:04:b7:07:
30:ac:07:59:a8:7a:96:2d:04:3d:94:42:65:d8:d0:
c2:99:07:aa:6c:81:b0:b6:4c:21:e8:63:22:93:56:
c8:5e:6c:23:33:c5:8d:a8:25:a4:2e:c1:e8:ef:c5:
ca:04:ba:26:2f:e3:90:64:90:11:4d:9a:7f:7d:60:
af:c1:d4:49:b8:e0:aa:7e:10:2f:24:1f:cf:02:de:
bf:20:bb:25:5d:2e:02:1a:a1:36:12:71:2d:9b:60:
82:c3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
3D:59:06:3B:E5:4B:0D:BC:39:61:16:47:BA:2E:00:05:5A:F8:87:33
X509v3 Authority Key Identifier:
keyid:CB:B5:E8:D8:79:96:C4:89:7C:9F:5D:C0:CB:32:86:4F:4F:0C:5A:7A
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://repo-rpki.idnic.net/repo/57f6e57b-4c26-442b-8afc-0329eedafb72/0/CBB5E8D87996C4897C9F5DC0CB32864F4F0C5A7A.crl
Authority Information Access:
CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/CBB5E8D87996C4897C9F5DC0CB32864F4F0C5A7A.cer
Subject Information Access:
Signed Object - URI:rsync://repo-rpki.idnic.net/repo/57f6e57b-4c26-442b-8afc-0329eedafb72/0/CBB5E8D87996C4897C9F5DC0CB32864F4F0C5A7A.mft
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
1f:af:67:cc:f3:da:99:1d:be:6f:f1:f0:1b:25:2c:bb:43:a0:
5a:14:4d:e1:dd:38:50:34:ac:f3:03:5e:fd:f9:16:8a:ff:e6:
bd:d2:9c:93:78:38:7f:6c:01:a6:6d:23:c6:74:0e:4a:a7:94:
00:a1:b3:32:3e:1c:9b:43:c6:a0:60:36:fd:90:da:d5:47:d2:
a8:ca:99:3b:c1:89:5c:73:95:c9:19:cb:b3:b5:af:ea:5c:97:
ce:f6:ea:a1:04:a2:e9:5f:58:dd:a7:e2:74:a6:0d:86:af:cc:
26:ca:30:dd:3b:a5:87:7c:dc:16:c5:c0:5c:1c:ce:0b:b8:2a:
ee:bc:9c:a6:49:ba:27:a5:f2:7c:4d:df:76:3c:50:70:27:7d:
a5:f3:e1:71:36:b8:1b:2d:8c:87:56:b4:23:18:de:8b:00:f7:
80:a2:30:69:09:cd:0b:db:6a:b7:a0:4e:79:f6:94:0c:ce:d3:
c7:e8:a9:56:5e:c7:b3:f2:ff:1f:a7:ea:f8:05:76:44:34:fe:
cc:73:9a:35:3a:4a:9a:24:cf:c1:e7:73:4b:d0:0c:87:62:11:
66:c8:09:14:88:34:d8:11:cc:e9:0a:cb:e2:57:52:4d:ad:f4:
ec:b3:1d:c0:8b:4a:1c:8e:dd:9b:b1:4c:d4:4c:2e:f6:24:a5:
fd:69:1c:29
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jun 3 03:22:46 2026 by rpki-client