Manifest
$ rpki-client -vvf repo-rpki.idnic.net/repo/7e8cbdc8-d195-4c7d-b3e8-0a8fbae8c284/0/8790EFE9518BF8664B34E1227585F3516FDC5367.mft
File: 8790EFE9518BF8664B34E1227585F3516FDC5367.mft (raw, json)
Hash identifier: m3rdPV6wOfyVWdqv/fQDHeBz4+lHQieklnNSz6hR9T4=
Subject key identifier: 24:A9:DC:FC:93:A3:A1:D3:02:EA:78:B2:BB:B2:C2:93:6A:85:0B:6E
Authority key identifier: 87:90:EF:E9:51:8B:F8:66:4B:34:E1:22:75:85:F3:51:6F:DC:53:67
Certificate issuer: /CN=8790EFE9518BF8664B34E1227585F3516FDC5367
Certificate serial: 7C87EF32DDFED5B299D4A8AC01DD49414412B4A1
Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/8790EFE9518BF8664B34E1227585F3516FDC5367.cer
Subject info access: rsync://repo-rpki.idnic.net/repo/7e8cbdc8-d195-4c7d-b3e8-0a8fbae8c284/0/8790EFE9518BF8664B34E1227585F3516FDC5367.mft
Manifest number: 026C
Signing time: Tue 28 Apr 2026 15:21:46 +0000
Manifest this update: Tue 28 Apr 2026 15:16:46 +0000
Manifest next update: Sat 02 May 2026 01:28:46 +0000
Files and hashes: 1: 3130332e3136362e39302e302f32332d3234203d3e20313431393431.roa (hash: lCrSGb9Pjnp7V6TAgWPW62qRYjPVwTbgeqKcWoynx5M=)
2: 8790EFE9518BF8664B34E1227585F3516FDC5367.crl (hash: MavfLD5Aip9G5IEyz41hVbUT2KYx+uHzFsKqdh0BlRI=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
7c:87:ef:32:dd:fe:d5:b2:99:d4:a8:ac:01:dd:49:41:44:12:b4:a1
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8790EFE9518BF8664B34E1227585F3516FDC5367
Validity
Not Before: Apr 28 15:16:46 2026 GMT
Not After : May 2 01:28:46 2026 GMT
Subject: CN=24A9DCFC93A3A1D302EA78B2BBB2C2936A850B6E
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bc:26:fc:3f:05:d5:26:9d:f4:c1:47:bc:de:e1:
dd:63:17:c8:c5:1f:fc:78:51:57:84:fb:0e:20:9d:
b5:b4:a9:4a:13:74:bb:10:31:6f:bb:78:d5:9c:d1:
aa:a2:18:57:38:32:c2:33:67:0b:81:d0:d4:28:ad:
8c:c6:74:47:8c:a2:b9:07:57:c0:1b:5c:70:54:db:
4c:69:4f:3a:6c:80:54:6a:b6:5f:d9:7a:41:53:d6:
d8:fb:5f:dd:57:94:13:2e:dd:f0:f1:41:89:26:db:
91:55:5b:0e:0a:f8:1b:86:ab:53:87:37:51:c1:9b:
be:28:15:2a:8f:07:87:91:4f:14:97:c2:ff:10:7e:
44:36:c4:58:6b:90:4b:45:28:dd:ad:2b:ad:ac:32:
b6:ad:99:07:d3:be:04:84:04:a1:06:fa:bd:3e:a8:
7e:f6:91:ea:a7:0c:cf:10:43:ab:ea:9b:af:ed:0f:
88:e3:46:73:cb:f9:c6:de:cf:1a:ce:ba:d8:6a:c6:
28:40:c8:92:d2:16:53:aa:bd:25:72:76:cd:5e:da:
01:f1:a5:f5:fe:7e:e8:67:62:5c:77:62:54:40:15:
a2:6a:27:9d:10:e6:9c:09:4a:c6:8b:4b:5e:87:35:
f8:b7:e1:03:ca:7d:ad:b4:2b:1c:5b:ce:34:97:45:
af:b3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
24:A9:DC:FC:93:A3:A1:D3:02:EA:78:B2:BB:B2:C2:93:6A:85:0B:6E
X509v3 Authority Key Identifier:
keyid:87:90:EF:E9:51:8B:F8:66:4B:34:E1:22:75:85:F3:51:6F:DC:53:67
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://repo-rpki.idnic.net/repo/7e8cbdc8-d195-4c7d-b3e8-0a8fbae8c284/0/8790EFE9518BF8664B34E1227585F3516FDC5367.crl
Authority Information Access:
CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/8790EFE9518BF8664B34E1227585F3516FDC5367.cer
Subject Information Access:
Signed Object - URI:rsync://repo-rpki.idnic.net/repo/7e8cbdc8-d195-4c7d-b3e8-0a8fbae8c284/0/8790EFE9518BF8664B34E1227585F3516FDC5367.mft
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
c4:f2:c7:2c:4e:6c:e3:2e:54:7e:bf:02:6a:46:7e:e8:45:e2:
a7:78:4e:f3:9d:6f:c9:d9:5c:c7:10:1b:83:d7:03:03:9c:3e:
8d:a0:3a:30:6a:55:ea:d3:e0:6c:03:49:48:0a:0f:76:cd:2c:
6f:ae:0e:3c:29:ad:60:18:b8:77:be:74:e8:5c:f8:01:89:7b:
d7:58:52:ea:6c:ef:06:e6:cb:32:f5:f5:89:35:47:43:87:67:
2d:42:fe:2d:e6:77:00:63:71:ea:c4:86:af:98:11:97:d7:f4:
f8:5f:77:9b:54:5a:36:c8:fb:89:fd:05:0e:d4:9b:e8:6d:6e:
d1:68:6b:d1:b3:23:e0:1e:72:af:7f:73:2e:15:86:f3:b5:95:
1a:68:c0:81:01:71:f1:5e:39:11:85:14:91:6b:51:0f:ee:b2:
a6:df:ff:a7:37:a4:fb:97:ed:a4:05:10:5d:64:f1:6f:d8:e4:
27:3e:ab:a9:72:f6:f2:25:06:ea:6a:4f:e2:e7:6f:16:45:90:
ec:16:6e:3d:8e:96:98:bd:86:4f:02:24:67:ad:f5:ed:a2:9c:
9a:98:30:17:94:c3:93:14:37:14:bc:2e:bd:46:35:39:94:c1:
a8:a1:ff:11:f8:6f:9d:59:7f:b9:3c:33:9e:b7:71:ae:7c:92:
a3:88:b6:08
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jun 3 03:07:50 2026 by rpki-client