Manifest
$ rpki-client -vvf repo-rpki.idnic.net/repo/81c9ce5a-6690-4901-9e0a-c27b319316be/0/4C3408B6E0825422DC2D071E490BD7CB1FBD2A3F.mft
File: 4C3408B6E0825422DC2D071E490BD7CB1FBD2A3F.mft (raw, json)
Hash identifier: QyLGhvY7+9N3eV/pvn0dIakGSLgT41KX1chWEf/mWeU=
Subject key identifier: 0E:E2:F6:2C:15:1D:37:7B:00:10:EB:99:47:56:47:D3:31:0F:11:4B
Authority key identifier: 4C:34:08:B6:E0:82:54:22:DC:2D:07:1E:49:0B:D7:CB:1F:BD:2A:3F
Certificate issuer: /CN=4C3408B6E0825422DC2D071E490BD7CB1FBD2A3F
Certificate serial: 2FEB29B173178D4B620E5103F867D320C599568F
Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/4C3408B6E0825422DC2D071E490BD7CB1FBD2A3F.cer
Subject info access: rsync://repo-rpki.idnic.net/repo/81c9ce5a-6690-4901-9e0a-c27b319316be/0/4C3408B6E0825422DC2D071E490BD7CB1FBD2A3F.mft
Manifest number: 04E8
Signing time: Tue 28 Apr 2026 10:36:13 +0000
Manifest this update: Tue 28 Apr 2026 10:31:13 +0000
Manifest next update: Fri 01 May 2026 11:20:13 +0000
Files and hashes: 1: 4C3408B6E0825422DC2D071E490BD7CB1FBD2A3F.crl (hash: IHpvzs+6PiRfmxcScnybpUrAa3i0HAfmtc0VqvJJwsI=)
2: 3130332e37312e34342e302f32332d3233203d3e203436303232.roa (hash: V3QHQK/gWQFy09rLOPxob5SyVyg/wx9t2yimUS9bwPY=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
2f:eb:29:b1:73:17:8d:4b:62:0e:51:03:f8:67:d3:20:c5:99:56:8f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4C3408B6E0825422DC2D071E490BD7CB1FBD2A3F
Validity
Not Before: Apr 28 10:31:13 2026 GMT
Not After : May 1 11:20:13 2026 GMT
Subject: CN=0EE2F62C151D377B0010EB99475647D3310F114B
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c0:42:2e:ab:be:73:5f:0b:aa:b0:f0:4d:84:56:
2b:48:77:af:32:ee:38:63:87:29:c9:a2:ca:73:58:
e0:89:09:63:b6:5f:d8:9c:80:da:0e:da:7e:cf:c5:
c3:88:0d:f5:b8:e8:0a:4a:ed:59:86:b0:37:c4:6e:
b1:cb:cb:0a:9f:c5:e9:85:59:ec:c6:52:24:21:a3:
51:ad:d8:3e:7d:db:96:aa:90:66:52:3a:ea:40:1e:
2e:32:2c:fe:4a:83:52:66:b7:c1:40:0b:89:48:87:
5a:24:bc:2b:c5:70:6e:9f:91:22:3f:d8:a8:d4:70:
23:02:0f:fb:23:66:50:9a:7e:2f:89:64:9d:78:14:
65:5a:70:35:e9:0d:26:6e:e3:6b:85:dd:c7:d7:a6:
50:ef:a8:66:b7:16:1a:b4:c6:fa:7d:0f:eb:67:dc:
9f:67:56:35:ac:00:02:f2:6f:11:7d:61:c8:93:0b:
47:8a:43:ee:7f:f0:41:13:c0:04:bb:8b:f9:8e:cf:
68:52:bc:de:7c:07:f6:59:43:84:f7:74:99:61:a6:
2a:b4:de:31:fa:a1:ee:a2:3f:42:f3:47:4d:7d:6c:
5a:08:a3:ed:16:d2:3d:a8:c1:17:e6:c6:1d:e2:22:
a9:aa:1c:23:be:f9:4b:be:58:fd:9f:63:51:50:df:
90:d1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
0E:E2:F6:2C:15:1D:37:7B:00:10:EB:99:47:56:47:D3:31:0F:11:4B
X509v3 Authority Key Identifier:
keyid:4C:34:08:B6:E0:82:54:22:DC:2D:07:1E:49:0B:D7:CB:1F:BD:2A:3F
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://repo-rpki.idnic.net/repo/81c9ce5a-6690-4901-9e0a-c27b319316be/0/4C3408B6E0825422DC2D071E490BD7CB1FBD2A3F.crl
Authority Information Access:
CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/4C3408B6E0825422DC2D071E490BD7CB1FBD2A3F.cer
Subject Information Access:
Signed Object - URI:rsync://repo-rpki.idnic.net/repo/81c9ce5a-6690-4901-9e0a-c27b319316be/0/4C3408B6E0825422DC2D071E490BD7CB1FBD2A3F.mft
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
82:9d:ff:8d:88:14:ca:a4:89:ce:a7:be:76:03:b2:22:8e:50:
a8:8e:a6:d2:94:4b:4a:21:3d:fa:ea:45:61:6b:60:da:14:60:
fe:e6:17:11:e3:cf:51:f0:58:2a:d8:1c:6b:8d:b9:b3:cc:34:
fe:e7:26:e8:a2:45:25:a7:59:9d:55:24:60:3c:3b:b9:98:47:
71:0b:3b:48:57:bb:f2:d0:ac:7d:d0:93:77:38:06:89:f6:6a:
14:63:d1:87:ec:b1:d3:5c:c4:e8:04:9b:e0:ce:53:4a:74:1d:
c5:c7:66:79:12:0b:4b:55:96:17:fe:f5:df:c9:fe:1d:58:a4:
13:39:fc:b1:a5:7a:56:70:72:b5:a3:51:b0:1f:81:d0:6d:36:
a9:ee:19:81:fe:35:81:30:8a:62:15:6a:d6:af:64:41:41:16:
9e:97:72:1d:a3:e4:61:40:90:6f:d7:99:1a:c7:15:7a:63:90:
9a:6d:41:94:ee:b1:80:81:3d:8d:ba:64:2e:42:ed:56:32:b3:
9f:34:31:90:05:f6:dc:55:cc:04:4e:a8:83:7e:d1:96:62:a8:
47:f1:a1:fd:83:eb:b5:4a:86:bd:1a:9f:0f:e7:71:62:fa:8a:
3b:1c:c7:1c:f7:3a:ec:8e:94:d7:3d:c3:06:0b:94:ec:fd:da:
fe:16:73:d3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jun 3 03:38:35 2026 by rpki-client