Manifest
$ rpki-client -vvf repo-rpki.idnic.net/repo/740883f3-457a-4c14-9577-67e150a2b12a/0/D2EA420344F486935839E03DF1B3C237F295C2DE.mft
File: D2EA420344F486935839E03DF1B3C237F295C2DE.mft (raw, json)
Hash identifier: 8l/HaOu64ZvbRwogfkW0jpVrqZZDoJEY5astQGk3CLc=
Subject key identifier: 89:94:54:B0:1F:99:F5:89:9C:D4:8C:B2:30:0B:95:9C:86:3A:5D:3F
Authority key identifier: D2:EA:42:03:44:F4:86:93:58:39:E0:3D:F1:B3:C2:37:F2:95:C2:DE
Certificate issuer: /CN=D2EA420344F486935839E03DF1B3C237F295C2DE
Certificate serial: 0CC029F1C524B2E4FE0BFB2DFD0C741BB4788BA6
Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/D2EA420344F486935839E03DF1B3C237F295C2DE.cer
Subject info access: rsync://repo-rpki.idnic.net/repo/740883f3-457a-4c14-9577-67e150a2b12a/0/D2EA420344F486935839E03DF1B3C237F295C2DE.mft
Manifest number: 053C
Signing time: Mon 27 Apr 2026 08:22:01 +0000
Manifest this update: Mon 27 Apr 2026 08:17:01 +0000
Manifest next update: Thu 30 Apr 2026 11:15:01 +0000
Files and hashes: 1: D2EA420344F486935839E03DF1B3C237F295C2DE.crl (hash: rWoJCxM1xjHpw6yeKIt0QxaPJz0HfQLLrdY5m0BYxss=)
2: 323430323a386163303a3a2f33322d3438203d3e20313337333230.roa (hash: oHAd0vkxRqWyozAmCufOZ+4unG6aZz/EmEBi8K1zkKg=)
3: 3130332e3131302e3132302e302f32322d3234203d3e20313337333230.roa (hash: Z1/0hxtcuucuwACdWQq+JfghAHLR9fBRu9+nQ76ie1Y=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
0c:c0:29:f1:c5:24:b2:e4:fe:0b:fb:2d:fd:0c:74:1b:b4:78:8b:a6
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=D2EA420344F486935839E03DF1B3C237F295C2DE
Validity
Not Before: Apr 27 08:17:01 2026 GMT
Not After : Apr 30 11:15:01 2026 GMT
Subject: CN=899454B01F99F5899CD48CB2300B959C863A5D3F
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d1:a6:3d:26:25:89:bc:44:7e:82:5e:b9:77:ad:
3a:e4:f4:d7:b9:a7:e3:6f:bb:16:96:14:a7:9a:d6:
1d:67:f9:4b:fb:af:41:eb:f4:f8:81:d9:94:c9:aa:
1e:82:08:cf:ba:52:18:95:d0:92:3f:d6:9f:1e:b4:
d1:76:e8:f3:b6:8a:cd:5c:b9:34:74:c1:61:7a:ff:
78:bc:0a:a0:75:a4:cf:ec:c4:c7:73:b7:e3:20:6a:
10:fe:9a:9a:b4:c3:60:61:1e:fa:ea:0a:7c:08:a1:
98:a5:fa:3c:7e:cd:a8:42:c6:7a:ac:48:09:45:41:
58:f9:2b:b3:c8:2e:9c:33:a4:4f:b7:ac:46:33:99:
19:5a:31:b5:93:5f:00:a2:82:1e:03:b8:48:77:54:
01:68:ed:38:72:3e:90:1d:c4:fb:c7:ad:32:3d:fb:
f7:a7:5f:3c:ca:f3:4e:2a:0a:ae:98:61:89:72:fc:
11:46:ed:8d:56:98:4b:a3:23:17:b7:5d:7d:65:ad:
58:30:42:27:54:5e:3a:e9:44:e9:e5:4e:97:3f:9a:
08:48:e7:96:32:2c:68:61:de:4b:28:45:1b:2c:ff:
5f:7e:cc:a7:13:86:16:7f:d6:fc:71:6b:97:70:3b:
71:cf:c5:f5:44:b8:c5:57:88:d4:65:ec:68:31:61:
64:5f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
89:94:54:B0:1F:99:F5:89:9C:D4:8C:B2:30:0B:95:9C:86:3A:5D:3F
X509v3 Authority Key Identifier:
keyid:D2:EA:42:03:44:F4:86:93:58:39:E0:3D:F1:B3:C2:37:F2:95:C2:DE
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://repo-rpki.idnic.net/repo/740883f3-457a-4c14-9577-67e150a2b12a/0/D2EA420344F486935839E03DF1B3C237F295C2DE.crl
Authority Information Access:
CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/D2EA420344F486935839E03DF1B3C237F295C2DE.cer
Subject Information Access:
Signed Object - URI:rsync://repo-rpki.idnic.net/repo/740883f3-457a-4c14-9577-67e150a2b12a/0/D2EA420344F486935839E03DF1B3C237F295C2DE.mft
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
1f:19:0d:7c:a9:ba:5f:af:8b:57:27:9f:9d:22:a4:ba:69:b6:
7f:5e:bb:5c:6c:fb:9d:60:99:2f:c9:67:55:89:35:02:d6:cb:
79:4d:b0:de:58:01:3b:69:08:b8:de:a9:96:90:be:e9:7c:57:
02:73:68:3f:ab:04:f6:9a:54:40:31:86:4b:5b:53:88:65:a6:
b6:40:b4:63:31:cf:c6:fb:2b:63:43:8e:53:03:c5:79:11:00:
04:6c:a5:4b:01:db:bb:d9:b6:ff:9e:45:65:9f:61:1e:58:72:
02:fa:be:b9:d4:8c:5d:f5:cf:ce:0a:ef:1a:97:ff:43:3e:9f:
66:b3:5b:f9:89:5d:61:85:73:b2:de:75:e6:dc:05:38:6c:4c:
ed:01:1c:b3:62:09:da:f7:ce:62:97:69:ce:39:de:40:d7:ca:
1f:d2:89:91:a0:85:46:8a:9c:28:f0:bd:e2:d3:39:ce:90:8a:
5f:72:77:a4:61:03:6d:75:15:ee:73:3d:29:1a:d7:ea:0f:82:
c8:88:41:e6:7d:d7:51:ec:17:96:80:dd:0a:61:b0:0a:3a:40:
0e:7b:db:3f:00:df:d5:2d:18:5c:e5:fd:cd:57:a5:4a:62:51:
ad:4e:d9:fd:8f:bd:b5:86:31:c9:e0:5b:5b:be:6a:de:2a:93:
45:85:fd:30
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jun 3 03:18:01 2026 by rpki-client