Manifest
$ rpki-client -vvf repo-rpki.idnic.net/repo/6b2041f1-4ce6-49b4-83a5-315f20e4e2c3/0/940E05E54E6B685EFBC6114D1E913804318364AB.mft
File: 940E05E54E6B685EFBC6114D1E913804318364AB.mft (raw, json)
Hash identifier: U2HECwIVmZxXidbHUNQzSQR1Tqlru46CxV1nmIm1CWA=
Subject key identifier: 37:01:C0:D0:06:65:B0:9E:A3:74:FD:6B:83:1E:83:8F:5D:C1:97:87
Authority key identifier: 94:0E:05:E5:4E:6B:68:5E:FB:C6:11:4D:1E:91:38:04:31:83:64:AB
Certificate issuer: /CN=940E05E54E6B685EFBC6114D1E913804318364AB
Certificate serial: 1DD81DC5DFEF2A3744E479F4B56ED237D40AC7E8
Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/940E05E54E6B685EFBC6114D1E913804318364AB.cer
Subject info access: rsync://repo-rpki.idnic.net/repo/6b2041f1-4ce6-49b4-83a5-315f20e4e2c3/0/940E05E54E6B685EFBC6114D1E913804318364AB.mft
Manifest number: 0201
Signing time: Mon 27 Apr 2026 14:00:51 +0000
Manifest this update: Mon 27 Apr 2026 13:55:51 +0000
Manifest next update: Thu 30 Apr 2026 19:19:51 +0000
Files and hashes: 1: 940E05E54E6B685EFBC6114D1E913804318364AB.crl (hash: 2WQg6Yar8Wn8uIvinvQF4VLC+oscsBwsUMTM6jXuIC0=)
2: 3130332e3136362e3136302e302f32342d3234203d3e20313431393532.roa (hash: rsfEnPVSsycki+njgiCyWYWgAdgVcyumzNfOTNHS8n4=)
3: 3130332e3136362e3136312e302f32342d3234203d3e20313431393532.roa (hash: NqLs/FneIiTV/W/DgkmvwBtBvCh5S71ZEnAkqfC2LTI=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
1d:d8:1d:c5:df:ef:2a:37:44:e4:79:f4:b5:6e:d2:37:d4:0a:c7:e8
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=940E05E54E6B685EFBC6114D1E913804318364AB
Validity
Not Before: Apr 27 13:55:51 2026 GMT
Not After : Apr 30 19:19:51 2026 GMT
Subject: CN=3701C0D00665B09EA374FD6B831E838F5DC19787
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c6:69:72:f4:aa:5e:93:ae:ee:11:9d:c4:92:ab:
46:7f:87:1c:ef:ef:a5:a6:81:29:2f:3b:04:37:8a:
9f:1c:62:da:08:01:64:24:b6:13:1f:e1:8e:71:9a:
d6:04:9a:c5:3e:0e:70:00:d3:df:13:19:06:c2:5a:
4d:46:74:7d:17:7b:30:9c:26:e3:83:4c:ed:ad:42:
1f:cc:20:59:b1:a6:e6:99:90:01:91:ce:2d:41:fd:
cf:29:03:14:a8:69:37:84:28:32:cd:90:2c:a2:cd:
4d:02:cd:d0:98:15:78:d9:ed:41:33:83:3c:56:dc:
ff:7f:a5:e5:6a:be:ad:97:dd:80:31:b6:65:ad:68:
af:9a:6f:27:c1:5a:6d:8c:84:13:31:63:85:6d:6d:
2c:fc:73:c2:8a:85:aa:3d:52:75:2d:1b:81:56:c9:
69:28:54:93:62:e1:5c:c4:15:10:5f:ac:50:78:99:
be:dc:66:6c:79:da:e2:c1:7a:60:fc:92:02:05:d1:
37:5d:6d:ff:ad:19:8c:06:aa:96:0c:a7:f7:65:27:
3d:7e:ef:bd:9e:48:1c:7b:49:11:03:13:d5:38:14:
77:a5:c5:77:e0:d9:ca:60:74:59:2b:2e:c4:74:94:
7c:5c:a4:59:e9:bd:7f:00:37:c0:d8:7d:ce:8d:a2:
2d:9f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
37:01:C0:D0:06:65:B0:9E:A3:74:FD:6B:83:1E:83:8F:5D:C1:97:87
X509v3 Authority Key Identifier:
keyid:94:0E:05:E5:4E:6B:68:5E:FB:C6:11:4D:1E:91:38:04:31:83:64:AB
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://repo-rpki.idnic.net/repo/6b2041f1-4ce6-49b4-83a5-315f20e4e2c3/0/940E05E54E6B685EFBC6114D1E913804318364AB.crl
Authority Information Access:
CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/940E05E54E6B685EFBC6114D1E913804318364AB.cer
Subject Information Access:
Signed Object - URI:rsync://repo-rpki.idnic.net/repo/6b2041f1-4ce6-49b4-83a5-315f20e4e2c3/0/940E05E54E6B685EFBC6114D1E913804318364AB.mft
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
95:64:39:5b:de:20:dc:ea:04:a8:cd:67:01:ba:11:52:9b:94:
f8:a9:11:4e:d3:64:8b:ac:cb:48:76:78:ac:da:06:dc:f1:1e:
ed:0f:05:bc:b2:a8:fb:8f:71:19:40:27:b2:2b:76:6e:73:aa:
7c:98:93:b7:24:13:d7:8a:22:60:c4:08:ae:a8:63:47:7f:1f:
b9:1e:15:88:a0:ff:6e:0b:b2:56:56:54:a6:17:1a:b4:cc:9d:
d7:c6:80:c5:f1:84:48:02:fa:e9:04:80:0a:e0:30:f3:4e:87:
2c:d6:b5:7e:84:ea:69:8c:4e:ef:c7:a6:29:13:94:4a:1e:cd:
09:6d:67:7a:d5:df:0a:84:3e:ca:34:41:35:a8:f1:e9:d6:e8:
ac:67:07:73:d2:06:4e:0c:c7:b5:06:69:33:08:ad:db:20:41:
0e:fc:73:3f:85:ab:b6:64:e6:6d:28:50:5e:a6:8f:b1:d8:5c:
e1:ae:5d:3a:36:12:20:cd:4d:d8:4d:87:1f:d0:85:68:cb:da:
13:62:e8:28:a7:3e:f4:19:c4:d8:65:5a:b1:dd:a0:9a:f7:37:
89:57:c6:5e:3d:99:11:e2:94:16:b7:d7:e4:da:35:67:56:5f:
76:db:ea:11:ec:06:be:8e:ba:e0:34:39:4f:e2:e9:37:3f:3a:
28:d2:26:33
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jun 3 03:11:17 2026 by rpki-client