Manifest
$ rpki-client -vvf repo-rpki.idnic.net/repo/5e61f86e-07f0-4c60-adc0-fc68816ac866/0/9A25028550A48EFF7C98BF816A8488BE884E6B4A.mft
File: 9A25028550A48EFF7C98BF816A8488BE884E6B4A.mft (raw, json)
Hash identifier: s/OYYsaFec4vScPUAwJkOkk5wUO3YUQQYUgEjx/9+ZY=
Subject key identifier: 41:A1:27:3F:D9:B2:16:5B:68:83:3C:4D:F1:BA:86:07:B4:61:3F:AF
Authority key identifier: 9A:25:02:85:50:A4:8E:FF:7C:98:BF:81:6A:84:88:BE:88:4E:6B:4A
Certificate issuer: /CN=9A25028550A48EFF7C98BF816A8488BE884E6B4A
Certificate serial: 01C9C19F198E7227384F87DBF7BBD16AB1CBB1AF
Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/9A25028550A48EFF7C98BF816A8488BE884E6B4A.cer
Subject info access: rsync://repo-rpki.idnic.net/repo/5e61f86e-07f0-4c60-adc0-fc68816ac866/0/9A25028550A48EFF7C98BF816A8488BE884E6B4A.mft
Manifest number: 03D2
Signing time: Tue 28 Apr 2026 19:41:59 +0000
Manifest this update: Tue 28 Apr 2026 19:36:59 +0000
Manifest next update: Fri 01 May 2026 23:37:59 +0000
Files and hashes: 1: 3130332e35352e3231362e302f32342d3234203d3e20313333383234.roa (hash: kxgspDzYS/DkH6ZTyH3CIKOfMPet4y8hTk8yqtZ6GPI=)
2: 9A25028550A48EFF7C98BF816A8488BE884E6B4A.crl (hash: 4f/8Eu0fsNaavOPS1uZtl+D14B07z9nCazjM6/c5Yb4=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:c9:c1:9f:19:8e:72:27:38:4f:87:db:f7:bb:d1:6a:b1:cb:b1:af
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=9A25028550A48EFF7C98BF816A8488BE884E6B4A
Validity
Not Before: Apr 28 19:36:59 2026 GMT
Not After : May 1 23:37:59 2026 GMT
Subject: CN=41A1273FD9B2165B68833C4DF1BA8607B4613FAF
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b6:b4:6e:fc:1e:ea:b9:35:4c:ee:98:2a:09:09:
60:ed:76:87:4b:c2:d0:7e:09:35:70:22:4c:9d:e2:
aa:58:1a:68:76:27:d5:9f:f8:cd:75:95:9b:2c:4f:
3c:c9:11:b2:0c:48:48:5e:a3:c1:3b:93:40:19:29:
8e:66:2c:cb:1d:d0:b1:71:c4:cd:75:0d:94:68:3b:
93:ee:49:db:7f:b6:40:fd:18:e0:d5:ee:94:54:9d:
0f:9b:d2:7b:2c:22:2c:b8:e1:00:cc:1a:d1:c3:2e:
77:f1:de:5a:cf:1f:04:a9:7f:a9:35:75:32:99:5f:
fb:1f:70:62:28:c5:85:dc:1b:cf:61:3f:61:f1:58:
56:2d:19:08:3f:b8:ac:83:75:a5:98:fd:28:cf:53:
e2:fd:2c:7d:23:e9:cf:e5:a5:73:52:0d:1a:3a:18:
a7:09:09:20:07:4e:c2:ad:f7:d8:e1:25:70:1c:a7:
fa:3d:26:a4:5f:7f:77:b1:67:a6:fb:03:70:c3:78:
e0:a4:c6:70:f2:d1:67:7a:81:87:6b:8b:74:f0:16:
1d:24:04:03:b9:76:67:be:40:93:26:15:73:87:80:
2d:6a:33:5f:3a:8f:86:aa:85:00:98:b1:df:7f:15:
86:5e:c8:d1:df:e6:fd:a7:e5:96:bd:53:b5:25:fa:
95:15
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
41:A1:27:3F:D9:B2:16:5B:68:83:3C:4D:F1:BA:86:07:B4:61:3F:AF
X509v3 Authority Key Identifier:
keyid:9A:25:02:85:50:A4:8E:FF:7C:98:BF:81:6A:84:88:BE:88:4E:6B:4A
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://repo-rpki.idnic.net/repo/5e61f86e-07f0-4c60-adc0-fc68816ac866/0/9A25028550A48EFF7C98BF816A8488BE884E6B4A.crl
Authority Information Access:
CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/9A25028550A48EFF7C98BF816A8488BE884E6B4A.cer
Subject Information Access:
Signed Object - URI:rsync://repo-rpki.idnic.net/repo/5e61f86e-07f0-4c60-adc0-fc68816ac866/0/9A25028550A48EFF7C98BF816A8488BE884E6B4A.mft
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
07:78:d9:0c:18:8a:69:6e:b7:31:86:f8:e2:a3:0d:5f:f6:13:
02:80:cf:a4:ef:75:31:c9:4a:82:f8:af:61:0d:74:63:ab:9c:
04:79:63:cd:d4:f4:7e:a2:ae:a1:85:41:0d:97:61:55:87:5a:
7b:90:84:d8:61:22:52:02:87:a1:2a:a4:a1:93:6e:f4:5c:5f:
96:58:cd:f7:24:b3:94:3d:42:4a:d9:2b:5b:ff:11:c6:f5:b7:
bc:0a:f2:d5:1b:84:10:05:f6:bb:25:94:43:47:fe:1d:31:48:
59:05:33:d0:89:66:1e:0c:ff:8c:de:bd:19:06:63:fc:55:00:
39:25:2f:57:64:b7:22:a6:c8:c2:c4:36:e5:7d:fa:20:3d:b8:
dc:33:1c:16:e7:19:ac:6f:51:cd:f5:f7:e9:98:63:80:bb:30:
6c:90:cf:d7:5c:e4:f3:5b:5b:50:74:ba:48:57:8c:59:b3:bc:
20:2c:df:76:fb:12:1a:7b:b0:81:37:d4:90:f4:29:60:37:5f:
c7:d9:21:26:b1:4e:0a:b4:25:0b:e1:92:e8:32:23:e3:d6:22:
62:e2:74:9d:a2:2a:07:9a:fb:f9:31:5f:0a:d7:da:a1:66:c1:
8a:f0:7e:45:79:91:78:f2:0f:1e:83:74:cd:99:b5:30:1a:7e:
c1:80:dc:98
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jun 3 03:09:04 2026 by rpki-client