
Manifest
$ rpki-client -vvf repo-rpki.idnic.net/repo/813645d4-543b-444b-a3a5-fdcd41811c21/0/DE871A367510652B50812EF1D04572635502AD6E.mft
File: DE871A367510652B50812EF1D04572635502AD6E.mft (raw, json)
Hash identifier: YfphYPy9WH0piUN+S7/201Mx5wa1apFFwRlXLnwVXvU=
Subject key identifier: CA:5E:0D:3D:F3:98:33:F8:93:72:7D:74:79:F4:E8:4F:28:1A:F0:C2
Authority key identifier: DE:87:1A:36:75:10:65:2B:50:81:2E:F1:D0:45:72:63:55:02:AD:6E
Certificate issuer: /CN=DE871A367510652B50812EF1D04572635502AD6E
Certificate serial: 30F72A50620511F75BEEB3EC334B79285DAC27B5
Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/DE871A367510652B50812EF1D04572635502AD6E.cer
Subject info access: rsync://repo-rpki.idnic.net/repo/813645d4-543b-444b-a3a5-fdcd41811c21/0/DE871A367510652B50812EF1D04572635502AD6E.mft
Manifest number: 02D2
Signing time: Tue 28 Apr 2026 02:51:16 +0000
Manifest this update: Tue 28 Apr 2026 02:46:16 +0000
Manifest next update: Fri 01 May 2026 11:28:16 +0000
Files and hashes: 1: DE871A367510652B50812EF1D04572635502AD6E.crl (hash: LWJqSS7qOnayKPRTqxuJJVkp++S97RdYbl+6Aspfy2k=)
2: 3130332e3137342e36322e302f32342d3234203d3e20313437303935.roa (hash: PhBm6FHQzLYkuyoWbZnBV9HiHTGNLsKA9LefOpfbYek=)
3: 3130332e3137342e36332e302f32342d3234203d3e20313437303935.roa (hash: 5tgjuzU09jqsB8+Ds22MwULKYbCeu3hfy4yQgPpxaYw=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
30:f7:2a:50:62:05:11:f7:5b:ee:b3:ec:33:4b:79:28:5d:ac:27:b5
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=DE871A367510652B50812EF1D04572635502AD6E
Validity
Not Before: Apr 28 02:46:16 2026 GMT
Not After : May 1 11:28:16 2026 GMT
Subject: CN=CA5E0D3DF39833F893727D7479F4E84F281AF0C2
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:fd:2b:2e:ec:a1:5e:22:33:eb:fa:db:58:4f:35:
61:d9:a2:8d:b7:44:6a:41:93:0c:20:43:f3:25:d3:
4e:8c:c5:98:2e:a9:bb:ed:4f:0d:6b:44:36:ff:cb:
23:cb:09:f2:0f:d4:f2:bf:f9:e0:7e:82:a7:5c:04:
53:57:de:65:7d:7e:a5:30:d6:ca:6e:ac:5f:31:21:
3c:a9:87:c6:82:5b:d0:39:44:3c:29:33:c9:20:b5:
e6:eb:15:94:ba:36:74:7d:74:80:e6:c8:1c:b6:52:
eb:3f:0d:67:60:7c:32:51:5c:e2:ed:7f:89:9c:6b:
08:1b:9f:f7:d6:a2:be:ef:aa:13:ba:c8:f0:04:71:
e3:a4:86:84:ee:10:3f:89:97:6f:3f:db:78:d5:06:
9e:4a:a9:55:78:30:e7:b2:e9:33:bd:4b:e1:07:e6:
e2:2c:ff:d8:80:29:4a:23:46:39:1d:f6:25:6b:9e:
f3:96:72:da:81:00:76:d7:3d:52:1a:32:a8:5c:1b:
71:b7:c7:26:d3:69:b1:8b:8c:2e:d3:22:11:77:f5:
db:45:09:c6:0b:fd:53:dc:b5:2e:fa:20:06:6b:92:
2e:b6:c0:65:91:db:f3:16:3e:0d:fb:0e:fe:2d:14:
4e:3e:ba:2b:0c:50:bf:b8:dd:0d:d2:56:cd:51:cd:
84:ed
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
CA:5E:0D:3D:F3:98:33:F8:93:72:7D:74:79:F4:E8:4F:28:1A:F0:C2
X509v3 Authority Key Identifier:
keyid:DE:87:1A:36:75:10:65:2B:50:81:2E:F1:D0:45:72:63:55:02:AD:6E
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://repo-rpki.idnic.net/repo/813645d4-543b-444b-a3a5-fdcd41811c21/0/DE871A367510652B50812EF1D04572635502AD6E.crl
Authority Information Access:
CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/DE871A367510652B50812EF1D04572635502AD6E.cer
Subject Information Access:
Signed Object - URI:rsync://repo-rpki.idnic.net/repo/813645d4-543b-444b-a3a5-fdcd41811c21/0/DE871A367510652B50812EF1D04572635502AD6E.mft
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
83:fb:d4:bb:d8:8a:d0:57:73:64:2c:fb:99:fe:30:51:fb:e8:
59:55:c8:cb:23:34:a7:14:0e:0c:d8:1e:f8:59:ba:cb:5c:2c:
e6:19:85:f0:0e:2b:85:bb:07:cc:42:72:bc:4d:d1:21:c5:af:
bb:97:a5:15:e8:06:8f:54:74:a8:9c:ae:15:c1:0c:e2:4f:f9:
c5:9a:f6:e3:6c:b7:8e:ca:25:7c:5b:f1:33:00:07:07:5d:5b:
d8:59:e6:90:a1:af:a1:39:55:d8:b9:cc:3b:af:f8:05:6d:d7:
30:ac:d5:06:09:cd:11:91:47:af:e2:da:2a:f9:8f:15:fe:d9:
05:b7:6b:c2:af:3a:8f:64:56:40:5a:19:cd:19:5b:b7:1c:aa:
02:05:18:b3:8e:64:f5:4a:10:88:b7:52:12:fe:e9:42:84:84:
99:8d:1f:e0:5d:ab:4f:cb:e7:be:09:15:3a:8c:8b:d9:e7:95:
26:11:71:ff:6d:42:d3:ed:ea:7d:94:0d:df:96:df:43:e7:39:
5d:bf:fd:56:8d:cc:92:81:4c:58:cf:2a:13:bb:5f:d0:0d:5a:
aa:be:a6:36:d9:8a:80:15:cd:c8:6c:20:27:f4:a5:d6:b5:b2:
23:eb:c9:d9:59:74:17:51:2c:87:16:e0:8f:a4:a0:d1:a6:d0:
22:f6:98:38
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jun 3 03:22:47 2026 by rpki-client