Manifest
$ rpki-client -vvf repo-rpki.idnic.net/repo/7d035b3b-e6c5-47f8-99b4-1cb0326edae5/0/4ECF7DFB09FB3B5C21DDE661150B95768B6BD319.mft
File: 4ECF7DFB09FB3B5C21DDE661150B95768B6BD319.mft (raw, json)
Hash identifier: tVPiPo9LSAMXHpyYdN8mcl5xGK3ZCtN7j9lc0Rr9qPk=
Subject key identifier: BC:3B:16:5C:56:EC:67:64:74:D3:44:4A:AF:BC:23:DF:5E:FB:D5:17
Authority key identifier: 4E:CF:7D:FB:09:FB:3B:5C:21:DD:E6:61:15:0B:95:76:8B:6B:D3:19
Certificate issuer: /CN=4ECF7DFB09FB3B5C21DDE661150B95768B6BD319
Certificate serial: 498BA117C7A0C82DFA0464830574292D7D63A852
Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/4ECF7DFB09FB3B5C21DDE661150B95768B6BD319.cer
Subject info access: rsync://repo-rpki.idnic.net/repo/7d035b3b-e6c5-47f8-99b4-1cb0326edae5/0/4ECF7DFB09FB3B5C21DDE661150B95768B6BD319.mft
Manifest number: 027B
Signing time: Wed 29 Apr 2026 07:51:33 +0000
Manifest this update: Wed 29 Apr 2026 07:46:33 +0000
Manifest next update: Sat 02 May 2026 12:46:33 +0000
Files and hashes: 1: 3130332e3136332e3233312e302f32342d3234203d3e20313431393037.roa (hash: 82YqFhb4/ZH/TVttJfl2TXhpxvQiL0hSWz60Ovq6qlE=)
2: 3130332e3136332e3233302e302f32342d3234203d3e20313431393037.roa (hash: ZY6/yTzTB0VPLAu2EmeaFz398YorukpRHSOffB+JUQQ=)
3: 4ECF7DFB09FB3B5C21DDE661150B95768B6BD319.crl (hash: CiuEtp+T8CUqUiRRoATXaB69xSBHx8cybTq2MZ5iLoA=)
4: 3130332e3136332e3233302e302f32332d3233203d3e20313431393037.roa (hash: 7aywUIXFUEuMUfYXXNrXCaHCS72hzYp6TKpPIt+Y3+k=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
49:8b:a1:17:c7:a0:c8:2d:fa:04:64:83:05:74:29:2d:7d:63:a8:52
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4ECF7DFB09FB3B5C21DDE661150B95768B6BD319
Validity
Not Before: Apr 29 07:46:33 2026 GMT
Not After : May 2 12:46:33 2026 GMT
Subject: CN=BC3B165C56EC676474D3444AAFBC23DF5EFBD517
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b5:8c:18:a3:a4:ae:c3:bf:dc:ff:7c:6c:3f:63:
e5:81:0f:96:bb:b1:6c:d0:c3:02:7a:c9:ae:4f:f6:
3d:80:8d:6f:f5:4e:89:38:5e:ab:1f:a8:c2:d6:84:
85:fb:a7:eb:be:44:62:ce:3c:a0:aa:5b:4f:12:fd:
8e:8c:54:03:25:ba:16:1c:b5:0d:46:2a:c6:fa:fb:
18:aa:4c:1c:2b:64:87:ec:3b:f8:42:00:65:48:13:
80:b4:b4:58:75:de:a4:2d:89:52:20:f0:12:47:d9:
2c:21:b8:70:e4:9a:8f:b4:75:61:cb:67:ac:12:b5:
6e:60:c9:18:c6:c2:fb:5d:81:ac:9e:8e:f2:84:c2:
24:ac:d2:7d:78:ad:8c:4a:7a:d5:b9:45:94:9a:77:
0d:0f:8a:26:94:1e:1e:57:00:58:ed:4b:8b:3b:59:
ea:8f:96:9d:60:78:68:8d:94:2d:f0:7c:c8:b0:cb:
20:ea:61:78:cc:3a:33:b4:4c:a4:bc:f1:6b:a9:c6:
b9:63:a5:28:8f:d6:c0:75:4f:07:39:23:91:9b:cf:
bf:54:22:8c:c4:6b:e2:ec:cd:0a:91:13:09:ad:76:
16:b2:8d:49:e8:1c:36:ef:c4:17:83:0a:cf:1f:f8:
db:ba:1b:a9:5e:97:99:9d:6e:59:7e:a6:d8:3c:da:
4f:2f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
BC:3B:16:5C:56:EC:67:64:74:D3:44:4A:AF:BC:23:DF:5E:FB:D5:17
X509v3 Authority Key Identifier:
keyid:4E:CF:7D:FB:09:FB:3B:5C:21:DD:E6:61:15:0B:95:76:8B:6B:D3:19
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://repo-rpki.idnic.net/repo/7d035b3b-e6c5-47f8-99b4-1cb0326edae5/0/4ECF7DFB09FB3B5C21DDE661150B95768B6BD319.crl
Authority Information Access:
CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/4ECF7DFB09FB3B5C21DDE661150B95768B6BD319.cer
Subject Information Access:
Signed Object - URI:rsync://repo-rpki.idnic.net/repo/7d035b3b-e6c5-47f8-99b4-1cb0326edae5/0/4ECF7DFB09FB3B5C21DDE661150B95768B6BD319.mft
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
0f:0e:00:60:45:08:9a:57:2e:ff:67:82:79:28:7a:cf:ed:48:
b1:fa:e9:43:7a:94:cd:33:f1:d7:6d:b4:1a:64:e8:25:e4:d8:
3e:82:a0:5b:86:ab:b7:b4:9a:74:30:be:df:ac:56:e0:c8:47:
33:a0:fc:24:a6:32:34:74:6d:dd:91:eb:91:e8:c6:75:0f:f6:
c0:dc:05:31:e9:88:c2:51:2e:f9:66:c0:01:1d:4e:d1:34:8d:
a2:86:d7:ab:66:2b:a5:e2:0f:2d:d4:87:3b:28:b7:4b:c8:28:
3e:c0:0f:10:4e:4e:36:07:f1:1d:aa:a8:0c:07:32:0e:3f:c2:
4f:0c:e5:3a:bf:0e:7b:31:44:4c:65:24:41:ce:f0:0e:35:22:
e5:3a:7e:9f:13:3b:54:77:84:18:19:d1:5a:a7:f5:19:a7:31:
a6:5f:f9:58:18:a3:b9:f0:c5:b9:ce:b0:32:46:4c:90:ce:ff:
d8:67:ab:62:2b:c3:69:f4:f4:e0:36:76:5e:10:62:a4:78:33:
f0:02:4d:d4:b4:28:b3:60:ea:f1:2d:c9:a8:8b:d2:e5:f1:74:
2c:91:16:cd:6c:33:7a:de:46:19:6e:13:44:af:52:44:6a:4b:
b7:a2:77:28:05:18:6c:f6:45:40:aa:73:80:1a:24:7e:3c:89:
b1:35:bf:02
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jun 3 03:14:45 2026 by rpki-client