Manifest
$ rpki-client -vvf repo-rpki.idnic.net/repo/7e6bff9d-fb13-47b9-9cc0-dd6a0730a1c6/0/2AA6E65B86E4423AEC7D02D85B43BA008012D29D.mft
File: 2AA6E65B86E4423AEC7D02D85B43BA008012D29D.mft (raw, json)
Hash identifier: k7EsxjW8/jN3XoXAnAwuMLbS/kdM3hH5ysxllzdv5P8=
Subject key identifier: 5F:23:F0:C6:9D:47:19:83:8A:BF:33:70:2F:B5:CC:84:0F:2E:A6:FB
Authority key identifier: 2A:A6:E6:5B:86:E4:42:3A:EC:7D:02:D8:5B:43:BA:00:80:12:D2:9D
Certificate issuer: /CN=2AA6E65B86E4423AEC7D02D85B43BA008012D29D
Certificate serial: 4B2B380B16C90465EA439F07F065C6A4BFAD84E0
Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/2AA6E65B86E4423AEC7D02D85B43BA008012D29D.cer
Subject info access: rsync://repo-rpki.idnic.net/repo/7e6bff9d-fb13-47b9-9cc0-dd6a0730a1c6/0/2AA6E65B86E4423AEC7D02D85B43BA008012D29D.mft
Manifest number: 0213
Signing time: Mon 27 Apr 2026 18:11:17 +0000
Manifest this update: Mon 27 Apr 2026 18:06:17 +0000
Manifest next update: Thu 30 Apr 2026 22:49:17 +0000
Files and hashes: 1: 2AA6E65B86E4423AEC7D02D85B43BA008012D29D.crl (hash: 99zDTgpLXV0gikDI1QwdhLxXVt8yAEdABQdqhSfVrxk=)
2: 3130332e3132392e34382e302f32332d3234203d3e20313335343738.roa (hash: o6xh9ZmeUkW54lbLFnSG54IoYTtHKw0vyrbfABLw2qM=)
3: 3130332e3132392e35302e302f32332d3234203d3e20313335343738.roa (hash: 8ALFBF9HwCBiqRlbp4pItk5eubZkWUc5/ZoPPFKzTcY=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
4b:2b:38:0b:16:c9:04:65:ea:43:9f:07:f0:65:c6:a4:bf:ad:84:e0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2AA6E65B86E4423AEC7D02D85B43BA008012D29D
Validity
Not Before: Apr 27 18:06:17 2026 GMT
Not After : Apr 30 22:49:17 2026 GMT
Subject: CN=5F23F0C69D4719838ABF33702FB5CC840F2EA6FB
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b9:82:79:a0:f7:d3:1d:ba:b3:2c:2f:54:4c:34:
06:49:32:d6:8f:12:7d:70:22:6c:48:c4:fb:02:ae:
b6:ad:32:17:3e:5e:70:46:c4:05:b9:4f:22:e0:2a:
31:20:47:60:b2:d1:68:21:22:aa:88:17:9b:30:6a:
c2:b3:7c:43:32:8f:c9:3d:ae:89:e6:3a:f0:63:aa:
e0:f4:98:0a:8f:e2:68:0d:8d:15:ff:49:f7:db:b9:
7e:98:e4:6b:ae:78:21:3c:56:9b:79:d5:89:f6:e6:
7d:31:43:aa:8a:ff:d6:d8:6b:e9:37:7e:b8:04:1f:
05:22:97:b1:cd:ed:04:48:7e:74:82:f7:cb:c3:b2:
d9:03:57:cb:ad:78:cd:d8:1e:7f:0b:7e:61:b3:00:
24:18:5f:69:b5:1d:cb:7b:0f:cb:81:fc:83:69:81:
0d:73:fb:ac:14:c1:3f:16:03:7e:2c:a1:8c:4e:ea:
95:06:ef:17:20:4c:99:22:88:f5:78:67:fb:87:9f:
90:4c:88:b7:75:85:c1:1a:ea:25:96:3a:2b:f0:f0:
e8:1f:e5:9b:be:b8:ab:c3:3e:7a:0a:f7:80:11:94:
7a:ab:35:72:a5:e1:25:57:10:bc:f0:50:e7:70:aa:
0b:96:b3:29:58:0a:2b:76:c8:09:b7:9f:89:e1:99:
31:11
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
5F:23:F0:C6:9D:47:19:83:8A:BF:33:70:2F:B5:CC:84:0F:2E:A6:FB
X509v3 Authority Key Identifier:
keyid:2A:A6:E6:5B:86:E4:42:3A:EC:7D:02:D8:5B:43:BA:00:80:12:D2:9D
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://repo-rpki.idnic.net/repo/7e6bff9d-fb13-47b9-9cc0-dd6a0730a1c6/0/2AA6E65B86E4423AEC7D02D85B43BA008012D29D.crl
Authority Information Access:
CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/2AA6E65B86E4423AEC7D02D85B43BA008012D29D.cer
Subject Information Access:
Signed Object - URI:rsync://repo-rpki.idnic.net/repo/7e6bff9d-fb13-47b9-9cc0-dd6a0730a1c6/0/2AA6E65B86E4423AEC7D02D85B43BA008012D29D.mft
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
0f:f0:2d:24:f9:e8:c9:dd:68:bf:29:3b:80:62:24:32:e5:31:
0c:a2:fd:de:b1:c8:b5:5c:08:12:fb:ab:a3:0e:4a:09:1c:88:
6f:f4:f3:d6:5d:3f:ae:29:88:f6:f8:d6:fe:58:47:26:75:dd:
2f:99:fe:72:ca:22:bf:e6:27:11:f1:d9:83:be:06:dc:40:df:
fb:48:e9:c6:e4:75:b3:b4:a1:69:fa:93:32:da:27:b4:e1:02:
d9:a1:f6:ec:4f:0a:17:fc:96:f9:66:33:9b:d1:f5:b7:cf:b2:
8a:7d:4a:92:c5:63:e5:04:26:3a:9f:37:c2:7a:c8:4e:0b:0e:
33:e9:4d:95:38:d5:01:f9:6a:2c:40:d1:a8:dc:fc:1c:75:20:
df:63:32:1c:18:22:23:80:c5:d9:d9:1a:1d:52:dd:9b:c2:cb:
0e:58:63:d9:f7:78:91:e7:a6:31:35:25:71:0c:91:5a:56:b1:
ba:a9:b3:66:43:c4:09:45:82:f6:ae:23:7e:27:c0:bf:f5:dd:
47:dc:05:ad:26:88:38:34:c4:8b:3a:2d:e5:ab:22:7c:06:ed:
f9:bd:e1:3a:d8:96:38:e5:42:e1:44:ea:08:42:7d:f4:8f:3f:
9b:20:16:68:32:d5:e8:67:86:b3:f8:5b:89:ed:d9:c8:00:3e:
bd:77:94:19
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jun 3 03:29:35 2026 by rpki-client