Manifest
$ rpki-client -vvf repo-rpki.idnic.net/repo/5ae2b8b3-dec8-41cf-a16d-e1171561d725/0/D9D0730DB51295FEC5BD480CDD42B5E8517C8FDB.mft
File: D9D0730DB51295FEC5BD480CDD42B5E8517C8FDB.mft (raw, json)
Hash identifier: O6fk/xtBI++2hBpd4rc6jr/xYFxd5na7ojzHrXu7x30=
Subject key identifier: 35:FF:DE:BD:74:B1:54:D4:A5:C5:61:46:63:AC:80:24:96:59:74:6B
Authority key identifier: D9:D0:73:0D:B5:12:95:FE:C5:BD:48:0C:DD:42:B5:E8:51:7C:8F:DB
Certificate issuer: /CN=D9D0730DB51295FEC5BD480CDD42B5E8517C8FDB
Certificate serial: 49DE8D871B54ADECFE930E13CD26C35B5E5036A2
Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/D9D0730DB51295FEC5BD480CDD42B5E8517C8FDB.cer
Subject info access: rsync://repo-rpki.idnic.net/repo/5ae2b8b3-dec8-41cf-a16d-e1171561d725/0/D9D0730DB51295FEC5BD480CDD42B5E8517C8FDB.mft
Manifest number: 029C
Signing time: Mon 27 Apr 2026 16:52:18 +0000
Manifest this update: Mon 27 Apr 2026 16:47:18 +0000
Manifest next update: Thu 30 Apr 2026 23:46:18 +0000
Files and hashes: 1: D9D0730DB51295FEC5BD480CDD42B5E8517C8FDB.crl (hash: KgFnicLtrjayyrXrJzYFLBDmVjo11Ri3sNnKqi+p9/4=)
2: 3130332e3138332e3235302e302f32332d3234203d3e2034383030.roa (hash: pN4ghT04j5zTe3lEB7yWGrreTGcCSMxjpmVgBxWJn+Y=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
49:de:8d:87:1b:54:ad:ec:fe:93:0e:13:cd:26:c3:5b:5e:50:36:a2
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=D9D0730DB51295FEC5BD480CDD42B5E8517C8FDB
Validity
Not Before: Apr 27 16:47:18 2026 GMT
Not After : Apr 30 23:46:18 2026 GMT
Subject: CN=35FFDEBD74B154D4A5C5614663AC80249659746B
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e4:ad:61:73:f3:4b:f5:0d:f6:6b:c0:ca:83:3e:
28:6d:fa:f5:65:93:17:e7:48:72:e8:36:90:38:86:
2e:12:3e:54:b7:f4:cf:85:d4:29:f0:df:ca:b3:06:
14:9b:bb:34:ba:44:a6:df:3e:9d:ba:a7:8a:23:f2:
16:ee:ab:51:29:f0:09:23:01:40:5a:70:54:36:29:
0e:b1:33:5a:53:a8:ce:8f:55:1f:fd:7f:aa:9a:c6:
1a:a0:6c:41:82:83:70:91:1f:96:7f:9c:17:27:02:
6a:0f:25:9f:06:f8:c1:6d:f8:c1:94:b7:23:e0:a2:
88:02:35:a9:92:62:4b:2b:84:51:31:a6:18:6e:1d:
4a:84:97:67:59:4a:b7:1c:a9:5a:1a:cf:89:6f:08:
01:86:e0:1f:11:f5:e6:ec:a2:9b:b1:c2:6f:b0:f5:
fb:0b:a5:98:7e:05:00:7c:16:51:05:c6:20:78:52:
87:4c:ca:f1:ff:92:0f:dc:d0:5a:98:dd:3d:a5:1e:
f1:af:a0:a3:d9:a6:97:c1:f4:18:0c:aa:f4:f6:17:
28:03:1c:5e:01:01:15:96:59:13:64:f6:dd:9a:6d:
74:fc:3d:ff:26:ab:7f:9c:74:bc:f5:f9:a1:f6:04:
a0:cd:48:f1:01:57:81:90:45:5e:1d:44:bc:43:80:
be:97
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
35:FF:DE:BD:74:B1:54:D4:A5:C5:61:46:63:AC:80:24:96:59:74:6B
X509v3 Authority Key Identifier:
keyid:D9:D0:73:0D:B5:12:95:FE:C5:BD:48:0C:DD:42:B5:E8:51:7C:8F:DB
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://repo-rpki.idnic.net/repo/5ae2b8b3-dec8-41cf-a16d-e1171561d725/0/D9D0730DB51295FEC5BD480CDD42B5E8517C8FDB.crl
Authority Information Access:
CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/D9D0730DB51295FEC5BD480CDD42B5E8517C8FDB.cer
Subject Information Access:
Signed Object - URI:rsync://repo-rpki.idnic.net/repo/5ae2b8b3-dec8-41cf-a16d-e1171561d725/0/D9D0730DB51295FEC5BD480CDD42B5E8517C8FDB.mft
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
09:49:ac:0e:45:6e:f3:b7:c1:da:2e:b7:b9:08:7a:a0:68:69:
fc:c7:3e:38:13:64:93:0a:ac:96:a4:ea:81:f9:0e:bf:8a:93:
f6:fb:ff:82:fd:ed:72:95:f0:3a:bd:de:64:81:a7:dd:ff:ca:
9d:02:a1:62:ba:6e:72:4c:8b:42:7d:0e:2b:68:23:d4:59:0d:
21:8a:1f:e9:4e:bf:dd:72:aa:96:d2:59:0e:f4:85:dc:a1:02:
c9:99:7d:99:90:95:bc:96:b7:16:e9:69:56:76:ad:8d:53:6a:
ab:e9:ac:55:7c:df:06:3f:27:eb:80:e0:b1:d4:5a:a5:ea:f4:
f3:48:c5:36:f2:3f:7c:d0:64:80:fd:15:34:68:e2:13:a3:2e:
55:0e:79:5b:1a:a7:00:53:1f:d2:2c:65:ab:5e:91:d8:d9:df:
b9:cf:e2:d0:7f:68:87:36:9e:50:d8:c3:4c:25:a6:77:cb:d9:
6c:33:d1:ae:9d:12:5d:2f:b3:f5:b1:09:05:9d:9d:13:3a:1e:
fe:ef:c2:86:68:8d:cb:c1:03:7c:38:4e:01:90:13:60:59:22:
6c:59:03:15:53:03:24:8e:e7:4e:9e:b0:b4:3a:a6:82:0c:ec:
6e:9d:05:a3:56:10:23:53:49:61:cc:31:9b:cf:bb:98:94:87:
4c:ad:cf:3c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jul 19 04:47:37 2026 by rpki-client