Manifest
$ rpki-client -vvf repo-rpki.idnic.net/repo/782212c2-3d68-4867-b99c-fc5cf4d0dbf1/0/21E46FEE03A1A4CB944F6CE6828AC30217E63BA1.mft
File: 21E46FEE03A1A4CB944F6CE6828AC30217E63BA1.mft (raw, json)
Hash identifier: wxqEs0mGIKC6lqYTRUKAbPtgqUlMZVagptuRM8RsUSY=
Subject key identifier: 57:A4:A9:C1:28:92:D7:FF:25:15:EA:17:5F:6B:50:DE:2E:50:7B:A9
Authority key identifier: 21:E4:6F:EE:03:A1:A4:CB:94:4F:6C:E6:82:8A:C3:02:17:E6:3B:A1
Certificate issuer: /CN=21E46FEE03A1A4CB944F6CE6828AC30217E63BA1
Certificate serial: 0253CC0C779CB0C40F13336C0AAFC818F5906BA4
Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/21E46FEE03A1A4CB944F6CE6828AC30217E63BA1.cer
Subject info access: rsync://repo-rpki.idnic.net/repo/782212c2-3d68-4867-b99c-fc5cf4d0dbf1/0/21E46FEE03A1A4CB944F6CE6828AC30217E63BA1.mft
Manifest number: 0247
Signing time: Tue 28 Apr 2026 19:42:14 +0000
Manifest this update: Tue 28 Apr 2026 19:37:14 +0000
Manifest next update: Sat 02 May 2026 04:30:14 +0000
Files and hashes: 1: 21E46FEE03A1A4CB944F6CE6828AC30217E63BA1.crl (hash: /dWWkEDMpF89OHI015M7RnmZM0UWrQgdu7V6EzhgWFU=)
2: 3130332e3136362e392e302f32342d3234203d3e20313431393738.roa (hash: Q+1KtEBmdlGkxj3d6e36S57kBlYlwv0qk9NrHtEayyk=)
3: 3130332e3136362e382e302f32332d3233203d3e20313431393738.roa (hash: vs5RIVJc80gvdbMwYUf3UH5oDO3pPFbrNK7pJMccNgE=)
4: 3130332e3136362e382e302f32342d3234203d3e20313431393738.roa (hash: GtkgNmJXl7nxDiRttWokSpJjVQu0Ps6kMb8tIC7Cyu0=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
02:53:cc:0c:77:9c:b0:c4:0f:13:33:6c:0a:af:c8:18:f5:90:6b:a4
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=21E46FEE03A1A4CB944F6CE6828AC30217E63BA1
Validity
Not Before: Apr 28 19:37:14 2026 GMT
Not After : May 2 04:30:14 2026 GMT
Subject: CN=57A4A9C12892D7FF2515EA175F6B50DE2E507BA9
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ba:84:7a:a9:2f:36:d7:99:33:50:df:69:ef:b7:
c3:0c:87:14:8e:24:cc:31:09:d2:04:d9:f4:cf:27:
2f:f3:31:c9:48:c5:fe:99:fd:2c:40:48:5c:48:f0:
5f:9f:7a:02:6f:37:e0:1c:96:17:4e:e3:15:a1:e2:
cf:e7:1e:86:98:09:c2:c1:5a:1b:3f:70:cd:b3:33:
42:aa:2c:02:14:bb:9c:6a:2e:bd:22:bf:9f:9c:bd:
22:1e:53:78:30:96:f2:a4:56:98:df:29:38:88:54:
10:a1:ca:8f:30:6a:ca:23:68:9c:6a:48:5f:bf:6c:
3e:3d:16:28:9d:14:5d:0d:80:01:1f:d2:6b:5a:ba:
40:b2:4e:f7:3b:50:b8:3c:bb:2d:ae:a6:43:53:8f:
f6:d7:a4:ea:ec:82:b8:24:80:a1:8c:00:9f:9a:7f:
64:be:12:76:c3:9e:d0:cb:d2:8b:a9:77:c0:06:2f:
ca:c2:d4:8c:56:ac:2a:e9:93:4f:bf:e9:66:8e:ee:
da:55:db:91:5c:b3:43:5f:8c:7b:88:b0:ff:24:dd:
e2:88:98:2c:8b:9e:3a:bf:46:ce:a3:40:ad:d5:8a:
d8:ad:35:28:4c:a9:83:92:9d:a3:2c:3f:cf:62:e1:
b8:c9:25:a2:2d:62:fd:df:25:1d:65:eb:90:ab:f6:
98:df
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
57:A4:A9:C1:28:92:D7:FF:25:15:EA:17:5F:6B:50:DE:2E:50:7B:A9
X509v3 Authority Key Identifier:
keyid:21:E4:6F:EE:03:A1:A4:CB:94:4F:6C:E6:82:8A:C3:02:17:E6:3B:A1
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://repo-rpki.idnic.net/repo/782212c2-3d68-4867-b99c-fc5cf4d0dbf1/0/21E46FEE03A1A4CB944F6CE6828AC30217E63BA1.crl
Authority Information Access:
CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/21E46FEE03A1A4CB944F6CE6828AC30217E63BA1.cer
Subject Information Access:
Signed Object - URI:rsync://repo-rpki.idnic.net/repo/782212c2-3d68-4867-b99c-fc5cf4d0dbf1/0/21E46FEE03A1A4CB944F6CE6828AC30217E63BA1.mft
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
d0:0b:25:47:65:b9:c7:cf:3f:6f:bf:36:2d:e2:9a:c4:79:1f:
ee:0f:f3:31:e9:40:b9:30:d8:b8:04:bc:ce:4f:03:fe:b0:fc:
6a:dc:f4:eb:6a:c7:cd:ee:98:bf:81:c8:1f:76:7d:09:04:23:
5e:8f:1c:7f:4b:57:10:82:4e:15:35:dc:0d:bf:9b:2e:c7:8c:
93:39:43:21:2a:46:7b:91:ef:49:ad:0c:d6:d3:ad:bf:e7:2c:
37:cd:6a:2a:60:60:b1:4a:35:44:06:9e:3d:24:f1:9d:59:4c:
41:36:a6:72:e8:cf:ce:ff:5e:cc:24:85:66:fe:4d:29:7a:27:
6d:d9:42:9f:0a:c8:a3:8d:33:ef:cc:c3:90:24:46:86:68:3f:
ce:03:d0:64:e6:92:cf:85:a9:9e:80:74:be:1c:b3:e5:a9:b0:
3c:2f:f3:94:11:c4:8c:1c:6b:6d:33:9b:3b:ee:04:9e:24:c0:
15:c8:5a:c4:e1:12:03:87:06:46:b6:25:05:9f:ea:28:b7:cf:
ac:0b:9a:83:05:e4:fb:a4:f2:11:82:95:a4:50:5e:f6:c4:bb:
be:3b:4c:84:0a:0a:4b:94:08:62:d6:7d:2f:f3:9f:46:23:4e:
6a:74:50:a8:61:19:4e:f1:19:5a:91:1c:16:50:9c:b3:e8:20:
56:de:18:4d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jun 3 03:09:01 2026 by rpki-client