Manifest
$ rpki-client -vvf repo-rpki.idnic.net/repo/85971ae9-5cdd-4d41-b62a-5c284aa8098e/0/41820333252DF92B1DBA238F558CC8D822C768EF.mft
File: 41820333252DF92B1DBA238F558CC8D822C768EF.mft (raw, json)
Hash identifier: lN/T+P0OYSEoKT3nIk51oFj9QIkcLzRqALMeW20y2VM=
Subject key identifier: B8:C6:E2:E7:B0:87:80:31:1C:84:E5:F1:D1:EA:F3:4C:AA:CA:48:7B
Authority key identifier: 41:82:03:33:25:2D:F9:2B:1D:BA:23:8F:55:8C:C8:D8:22:C7:68:EF
Certificate issuer: /CN=41820333252DF92B1DBA238F558CC8D822C768EF
Certificate serial: 23BB56241AAF6343DAA69978F87468C096E7B8A7
Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/41820333252DF92B1DBA238F558CC8D822C768EF.cer
Subject info access: rsync://repo-rpki.idnic.net/repo/85971ae9-5cdd-4d41-b62a-5c284aa8098e/0/41820333252DF92B1DBA238F558CC8D822C768EF.mft
Manifest number: 0209
Signing time: Tue 28 Apr 2026 13:21:29 +0000
Manifest this update: Tue 28 Apr 2026 13:16:29 +0000
Manifest next update: Sat 02 May 2026 01:05:29 +0000
Files and hashes: 1: 41820333252DF92B1DBA238F558CC8D822C768EF.crl (hash: bvOFTqeOsvxsXwJm6cDdALkWN3zfFKqZWn5LMKuUulQ=)
2: 3130332e36392e36312e302f32342d3234203d3e20313530353239.roa (hash: uQsxGbefiEsVtpCcyhbMnpmwezO+DzoY1mF96tzo5Pg=)
3: 3130332e36392e36302e302f32342d3234203d3e20313530353239.roa (hash: RVo6qspo0NsN9BxZrHPSAeKSfxIe7qLdXa5VG0+wvkA=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
23:bb:56:24:1a:af:63:43:da:a6:99:78:f8:74:68:c0:96:e7:b8:a7
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=41820333252DF92B1DBA238F558CC8D822C768EF
Validity
Not Before: Apr 28 13:16:29 2026 GMT
Not After : May 2 01:05:29 2026 GMT
Subject: CN=B8C6E2E7B08780311C84E5F1D1EAF34CAACA487B
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a7:05:70:57:8a:4c:23:1c:23:bf:99:50:a4:92:
85:c6:e9:5d:df:d1:29:f0:bc:c8:a7:78:ed:7c:c6:
58:34:69:6b:a2:53:a8:99:ee:b4:9b:0d:a5:3e:07:
82:70:a2:df:db:fd:6a:35:30:23:94:06:31:7c:bd:
48:d7:85:12:9e:ba:59:e9:4a:e7:5f:c7:6d:6b:13:
13:c5:a9:55:97:8f:21:c5:56:d5:c6:20:b7:5e:8e:
a0:e0:b1:c2:2b:85:ec:72:d4:45:aa:e9:dd:11:6c:
94:01:78:d8:c3:be:0c:04:bc:ba:29:ee:a5:cb:29:
c2:1d:8a:3b:e3:c0:e2:ca:46:12:fa:2d:92:07:5f:
c4:83:06:09:e4:c0:ef:cd:dc:35:4d:d1:0e:27:3d:
a3:80:96:1d:2c:3d:fa:0a:71:b7:d8:02:5b:c2:07:
58:74:38:b2:67:79:ce:20:93:32:4f:9a:88:52:b1:
51:94:54:c3:7a:89:54:90:eb:35:f7:35:ca:81:98:
90:f8:b0:eb:63:0b:36:b3:e3:67:6e:50:4f:f0:ec:
35:dd:08:2f:fb:e8:87:ae:3e:c9:91:fc:d4:b8:62:
00:12:db:8e:aa:c7:62:f3:83:68:a9:54:0b:37:03:
c5:41:8b:86:57:cc:57:c2:c7:25:e7:33:2b:ff:86:
70:1d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B8:C6:E2:E7:B0:87:80:31:1C:84:E5:F1:D1:EA:F3:4C:AA:CA:48:7B
X509v3 Authority Key Identifier:
keyid:41:82:03:33:25:2D:F9:2B:1D:BA:23:8F:55:8C:C8:D8:22:C7:68:EF
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://repo-rpki.idnic.net/repo/85971ae9-5cdd-4d41-b62a-5c284aa8098e/0/41820333252DF92B1DBA238F558CC8D822C768EF.crl
Authority Information Access:
CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/41820333252DF92B1DBA238F558CC8D822C768EF.cer
Subject Information Access:
Signed Object - URI:rsync://repo-rpki.idnic.net/repo/85971ae9-5cdd-4d41-b62a-5c284aa8098e/0/41820333252DF92B1DBA238F558CC8D822C768EF.mft
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
7a:63:ef:3e:74:13:a5:bb:bb:54:8a:43:99:e8:cc:08:16:af:
7d:3d:f2:43:2b:55:9a:90:70:3c:46:ba:bd:66:b9:20:41:8b:
dc:14:87:9a:35:9c:c1:91:7d:92:af:5f:39:78:cf:8c:87:e3:
aa:49:ae:a7:2d:69:bd:53:e4:1f:6b:34:b4:83:59:2f:77:32:
e6:f2:5c:47:d3:e2:91:93:db:a5:c5:bf:0d:b9:47:b2:9a:7b:
c2:4e:ca:43:1f:cd:8b:19:bb:2e:9b:16:50:d9:01:00:b2:f0:
22:fe:dd:28:9a:88:66:9b:d6:ad:8d:c0:47:01:80:68:b1:2c:
a5:99:b3:73:93:99:d3:e4:15:37:88:4f:63:30:6d:8d:8c:04:
ac:a7:8b:54:65:aa:a7:dc:9b:ae:5b:f2:fd:54:dc:f1:a4:4f:
3d:6c:ed:5d:86:4c:bf:2f:98:43:33:56:53:64:0d:a6:b9:b3:
95:f0:80:53:9a:f1:fe:45:21:92:e5:e1:b7:ec:b3:cd:ef:a3:
af:82:f4:a2:7a:c5:75:1c:ae:d7:72:6b:08:e9:a5:63:44:a6:
1e:e9:0b:a9:ec:cf:cf:89:94:66:2c:c5:d0:69:49:a4:96:59:
73:fd:73:90:67:3b:75:b6:1b:c4:d4:49:5b:4a:19:7d:34:cc:
74:0f:f9:35
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jun 3 03:37:39 2026 by rpki-client