
Manifest
$ rpki-client -vvf repo-rpki.idnic.net/repo/582f2b38-addf-4bd3-9249-e5ba56cd052e/0/CF0CF43F294A5C8416E3F7A6FDBF077B234CA446.mft
File: CF0CF43F294A5C8416E3F7A6FDBF077B234CA446.mft (raw, json)
Hash identifier: 6nj/pdqtPXgffikIrm8vKBdF5oxkQpBqdg5Nd5c5Z/k=
Subject key identifier: D9:E9:B7:A1:08:65:B8:86:9D:A2:93:5A:20:BC:48:9A:BA:54:25:8F
Authority key identifier: CF:0C:F4:3F:29:4A:5C:84:16:E3:F7:A6:FD:BF:07:7B:23:4C:A4:46
Certificate issuer: /CN=CF0CF43F294A5C8416E3F7A6FDBF077B234CA446
Certificate serial: 02DD9F5B150136AE4FD306C517E38720994EF9E0
Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/CF0CF43F294A5C8416E3F7A6FDBF077B234CA446.cer
Subject info access: rsync://repo-rpki.idnic.net/repo/582f2b38-addf-4bd3-9249-e5ba56cd052e/0/CF0CF43F294A5C8416E3F7A6FDBF077B234CA446.mft
Manifest number: 0323
Signing time: Mon 27 Apr 2026 18:51:13 +0000
Manifest this update: Mon 27 Apr 2026 18:46:13 +0000
Manifest next update: Fri 01 May 2026 00:43:13 +0000
Files and hashes: 1: 3130332e362e3230362e302f32332d3233203d3e203538353033.roa (hash: T5UFtTORiPkpyQMb1pkITrlGjn812lML7gJ4GIu0cac=)
2: CF0CF43F294A5C8416E3F7A6FDBF077B234CA446.crl (hash: 4qnh7vfysM988I2jf0AxGkUPd0SxzdiI2oZ1KsO+81E=)
3: 3130332e362e3230342e302f32332d3233203d3e203538353033.roa (hash: jlDnq/pTWKcqQPtJ6VRZIg3zm8PHprvuxU+BKt4Gk08=)
4: 3130332e362e3230372e302f32342d3234203d3e203538353033.roa (hash: vyhZOBYCU2sLXrzusVlJ/gl2TYFXG6e7dBbtLFYwhDU=)
5: 3130332e362e3230352e302f32342d3234203d3e203538353033.roa (hash: +R3i1yikLZX3N7J8PecP2cVBYYEEV31MZ2NuNFEDBz0=)
6: 3130332e362e3230342e302f32342d3234203d3e203538353033.roa (hash: r9QPk/LpoJs29sx2oR7f3Ru6EP7Ni5LmyXyyS4T2T/Q=)
7: 3130332e362e3230342e302f32322d3232203d3e203538353033.roa (hash: eKQ/v97Slfm6pdQvkBAo8Onj1CnRgWhKWbT8e4WqBcc=)
8: 3130332e362e3230362e302f32342d3234203d3e203538353033.roa (hash: uAtBSIDdapxegHcixT/adxYVRwIH8zS1jvQsYGI4FKs=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
02:dd:9f:5b:15:01:36:ae:4f:d3:06:c5:17:e3:87:20:99:4e:f9:e0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=CF0CF43F294A5C8416E3F7A6FDBF077B234CA446
Validity
Not Before: Apr 27 18:46:13 2026 GMT
Not After : May 1 00:43:13 2026 GMT
Subject: CN=D9E9B7A10865B8869DA2935A20BC489ABA54258F
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:da:ef:e5:a4:21:8e:b9:ab:16:ee:99:c9:34:13:
fe:1c:37:d6:58:04:2f:75:cb:93:06:c2:95:85:6e:
70:04:5c:a8:e2:52:e6:41:e6:a4:a6:2b:96:d6:9e:
5f:b9:ff:ed:41:dc:d4:9f:8a:78:95:37:1c:3d:6f:
79:a4:e8:56:f9:f3:d8:a2:11:9e:14:a9:fd:48:d6:
28:53:b4:ac:64:ed:bb:6e:d1:62:72:19:56:9a:7b:
e3:ed:ee:4b:ec:e7:28:e1:e6:2a:bc:68:28:23:cb:
6d:48:42:26:ed:05:43:d4:c4:ff:57:50:89:f6:4b:
a8:2e:14:01:61:a7:7c:e9:07:1d:b1:f7:58:e5:0f:
c2:ec:62:87:78:5f:9c:3c:74:f4:4a:7a:19:77:60:
0a:27:46:b6:7b:d9:81:d4:0b:68:e4:7e:f1:fa:90:
90:7d:b8:44:74:a1:df:50:10:e5:8a:62:ef:c2:0d:
7d:ac:9e:08:14:a0:9d:16:df:84:9b:2c:91:23:eb:
32:7c:4c:c5:8e:9a:6c:05:b6:8e:0c:7b:d6:56:28:
f2:6b:79:9d:32:9f:18:f2:14:b0:52:d3:67:6d:62:
5d:c4:e6:0e:5f:2e:e4:90:03:6c:0a:20:f0:c6:cf:
90:f1:6e:42:2b:82:b3:19:e7:6c:1a:58:40:25:bb:
67:2f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D9:E9:B7:A1:08:65:B8:86:9D:A2:93:5A:20:BC:48:9A:BA:54:25:8F
X509v3 Authority Key Identifier:
keyid:CF:0C:F4:3F:29:4A:5C:84:16:E3:F7:A6:FD:BF:07:7B:23:4C:A4:46
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://repo-rpki.idnic.net/repo/582f2b38-addf-4bd3-9249-e5ba56cd052e/0/CF0CF43F294A5C8416E3F7A6FDBF077B234CA446.crl
Authority Information Access:
CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/CF0CF43F294A5C8416E3F7A6FDBF077B234CA446.cer
Subject Information Access:
Signed Object - URI:rsync://repo-rpki.idnic.net/repo/582f2b38-addf-4bd3-9249-e5ba56cd052e/0/CF0CF43F294A5C8416E3F7A6FDBF077B234CA446.mft
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
46:86:77:e0:0c:5c:ac:57:d1:0e:73:d7:7c:21:bd:7f:5b:b0:
76:6e:21:2b:d6:93:fa:df:d9:e0:b6:13:dd:1d:84:a4:bc:36:
05:a3:51:2d:77:54:e4:c5:e9:e2:d5:ee:c1:0c:88:65:28:3e:
46:b1:c0:8b:11:d5:9f:f6:0d:b3:6e:f1:57:15:21:8e:fd:b5:
84:b3:fe:f6:c7:6d:86:43:7b:05:d2:f7:5b:92:89:92:55:aa:
03:31:c7:de:46:a5:47:41:a1:41:20:86:ee:1d:5d:c1:88:2e:
46:2c:04:65:b1:19:10:33:d9:be:24:88:c4:69:b4:ed:c0:57:
b8:09:1a:28:64:42:99:7d:d8:3d:23:cf:5b:b1:c8:82:b0:34:
46:a6:6e:02:06:de:79:c7:f3:5b:5f:f5:cb:e4:87:16:46:0d:
df:c2:51:d0:88:c7:de:f0:3b:3c:05:37:80:19:cb:19:c8:a6:
a3:b1:16:53:77:3f:e3:87:c7:6e:a9:ed:38:ac:d5:f6:91:4c:
eb:cf:3b:b6:c0:b1:b1:b7:e5:78:1c:9a:9b:53:f9:f9:f3:05:
4b:53:81:fc:9c:6b:18:2d:da:d3:88:e1:37:15:c4:f6:0b:ce:
87:7c:de:73:c7:a9:16:0e:7b:7e:5c:7f:aa:ac:fe:7d:cf:e5:
2f:17:63:c4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jun 3 03:07:28 2026 by rpki-client