Manifest
$ rpki-client -vvf repo-rpki.idnic.net/repo/869f2988-cab3-45aa-97e5-6385f07ff1cd/0/861DE86D91E4C7508D388EDBC70834681B43B5CA.mft
File: 861DE86D91E4C7508D388EDBC70834681B43B5CA.mft (raw, json)
Hash identifier: CvzRDUsOmtzH5SayXoMYXOJDRRevO8pHeHO+Z05Kdak=
Subject key identifier: 83:D4:A6:C3:F7:8F:BF:BD:BF:EE:60:4D:A4:0A:C4:E1:18:80:75:F9
Authority key identifier: 86:1D:E8:6D:91:E4:C7:50:8D:38:8E:DB:C7:08:34:68:1B:43:B5:CA
Certificate issuer: /CN=861DE86D91E4C7508D388EDBC70834681B43B5CA
Certificate serial: 40A7D249B97A52282E5F345CF1ECB322C698BC28
Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/861DE86D91E4C7508D388EDBC70834681B43B5CA.cer
Subject info access: rsync://repo-rpki.idnic.net/repo/869f2988-cab3-45aa-97e5-6385f07ff1cd/0/861DE86D91E4C7508D388EDBC70834681B43B5CA.mft
Manifest number: 0524
Signing time: Tue 28 Apr 2026 04:21:48 +0000
Manifest this update: Tue 28 Apr 2026 04:16:48 +0000
Manifest next update: Fri 01 May 2026 07:04:48 +0000
Files and hashes: 1: 861DE86D91E4C7508D388EDBC70834681B43B5CA.crl (hash: 6UNfSWfi/ndMKc3GznHHPOVxidV5Xq5kmWdkBICQrfQ=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
40:a7:d2:49:b9:7a:52:28:2e:5f:34:5c:f1:ec:b3:22:c6:98:bc:28
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=861DE86D91E4C7508D388EDBC70834681B43B5CA
Validity
Not Before: Apr 28 04:16:48 2026 GMT
Not After : May 1 07:04:48 2026 GMT
Subject: CN=83D4A6C3F78FBFBDBFEE604DA40AC4E1188075F9
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d0:e0:ec:0c:b8:6a:ec:2f:3d:ce:ee:c2:21:c0:
1d:ce:be:29:3d:f9:ff:74:ad:59:b2:9a:26:9f:e5:
4f:f9:4e:21:59:56:82:a7:ba:12:29:90:7f:c3:4a:
d7:64:81:ef:bc:e7:42:ab:13:4c:57:1b:9b:af:c1:
cd:d4:5f:d7:b5:db:ef:54:5f:9e:c5:f0:6e:10:7c:
6a:fa:51:5a:04:9b:bc:32:1e:cd:cd:0c:c9:8c:f7:
39:e7:82:51:a1:db:73:3f:7b:8c:21:5a:ef:4b:07:
29:0a:d0:b7:54:f9:9a:4a:62:04:69:84:95:96:f0:
1a:d6:83:35:f5:28:5a:f4:ad:4f:6f:0c:15:c4:b3:
14:ae:73:d8:82:36:5f:50:20:23:fa:da:75:9b:ce:
c6:bc:87:3f:82:98:6c:05:05:1e:ef:45:1c:d7:f2:
b8:7d:db:9a:5b:cf:31:d4:d8:90:84:35:25:f8:4c:
88:29:1b:98:ef:3a:ed:11:eb:7d:35:c2:cc:84:3c:
ec:c8:f6:b7:f1:f7:e5:29:86:f6:6c:37:31:93:f4:
0c:eb:18:5b:e7:61:ea:38:4e:93:57:9f:18:fc:7b:
59:15:5c:b6:4c:de:42:d9:0a:03:0d:ec:81:8f:ab:
62:b7:e2:87:63:9b:d3:65:b8:d9:9b:c1:c8:05:53:
8b:21
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
83:D4:A6:C3:F7:8F:BF:BD:BF:EE:60:4D:A4:0A:C4:E1:18:80:75:F9
X509v3 Authority Key Identifier:
keyid:86:1D:E8:6D:91:E4:C7:50:8D:38:8E:DB:C7:08:34:68:1B:43:B5:CA
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://repo-rpki.idnic.net/repo/869f2988-cab3-45aa-97e5-6385f07ff1cd/0/861DE86D91E4C7508D388EDBC70834681B43B5CA.crl
Authority Information Access:
CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/861DE86D91E4C7508D388EDBC70834681B43B5CA.cer
Subject Information Access:
Signed Object - URI:rsync://repo-rpki.idnic.net/repo/869f2988-cab3-45aa-97e5-6385f07ff1cd/0/861DE86D91E4C7508D388EDBC70834681B43B5CA.mft
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
09:e1:73:20:7e:d5:8d:74:49:bc:7e:82:4c:b6:40:ed:48:56:
5c:b6:0f:46:4b:d2:bb:24:35:33:92:1f:5d:da:aa:0d:cd:d6:
b6:17:7c:1f:18:e9:5c:a3:04:3d:9d:6f:d6:4e:6a:e6:ac:df:
c2:49:75:5a:d7:9d:ac:3d:9d:a1:2e:79:87:7f:a9:d4:40:eb:
d0:14:e2:95:db:24:d9:88:de:55:da:68:4a:6a:b3:67:b2:8f:
2f:b5:76:3f:ea:ef:f2:66:84:be:f2:dd:73:a1:b8:d8:e3:83:
e8:28:c0:8e:f9:bb:d2:b7:4e:76:37:4a:01:a2:e4:a1:e8:9a:
bd:bc:f4:c4:09:f5:ae:98:c4:14:a0:98:41:3f:dc:bb:13:16:
87:66:92:08:e4:9c:e4:26:d7:a8:8e:65:4a:75:23:3f:35:d8:
cc:a4:9e:f1:f3:f2:d4:33:47:64:34:de:69:01:63:30:6b:2b:
20:82:3e:09:db:82:11:51:7f:61:20:6c:64:1b:d9:da:4f:12:
e9:30:45:b6:64:67:ae:ff:d6:d7:16:c0:52:62:51:ee:80:26:
ba:6b:65:88:16:d5:53:56:22:7a:2e:a9:0c:71:c0:f8:07:ba:
c1:10:e2:55:8c:cf:63:e1:22:8c:1d:3f:19:08:07:3f:de:17:
2c:e6:07:03
-----BEGIN CERTIFICATE-----
MIIFMjCCBBqgAwIBAgIUQKfSSbl6UiguXzRc8eyzIsaYvCgwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoODYxREU4NkQ5MUU0Qzc1MDhEMzg4RURCQzcwODM0Njgx
QjQzQjVDQTAeFw0yNjA0MjgwNDE2NDhaFw0yNjA1MDEwNzA0NDhaMDMxMTAvBgNV
BAMTKDgzRDRBNkMzRjc4RkJGQkRCRkVFNjA0REE0MEFDNEUxMTg4MDc1RjkwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDQ4OwMuGrsLz3O7sIhwB3Ovik9
+f90rVmymiaf5U/5TiFZVoKnuhIpkH/DStdkge+850KrE0xXG5uvwc3UX9e12+9U
X57F8G4QfGr6UVoEm7wyHs3NDMmM9znnglGh23M/e4whWu9LBykK0LdU+ZpKYgRp
hJWW8BrWgzX1KFr0rU9vDBXEsxSuc9iCNl9QICP62nWbzsa8hz+CmGwFBR7vRRzX
8rh925pbzzHU2JCENSX4TIgpG5jvOu0R6301wsyEPOzI9rfx9+UphvZsNzGT9Azr
GFvnYeo4TpNXnxj8e1kVXLZM3kLZCgMN7IGPq2K34odjm9NluNmbwcgFU4shAgMB
AAGjggI8MIICODAdBgNVHQ4EFgQUg9Smw/ePv72/7mBNpArE4RiAdfkwHwYDVR0j
BBgwFoAUhh3obZHkx1CNOI7bxwg0aBtDtcowDgYDVR0PAQH/BAQDAgeAMIGFBgNV
HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby84
NjlmMjk4OC1jYWIzLTQ1YWEtOTdlNS02Mzg1ZjA3ZmYxY2QvMC84NjFERTg2RDkx
RTRDNzUwOEQzODhFREJDNzA4MzQ2ODFCNDNCNUNBLmNybDB0BggrBgEFBQcBAQRo
MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv
L0lETklDLUlELzIvODYxREU4NkQ5MUU0Qzc1MDhEMzg4RURCQzcwODM0NjgxQjQz
QjVDQS5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6
Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vODY5ZjI5ODgtY2FiMy00NWFhLTk3
ZTUtNjM4NWYwN2ZmMWNkLzAvODYxREU4NkQ5MUU0Qzc1MDhEMzg4RURCQzcwODM0
NjgxQjQzQjVDQS5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF
BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC
BQAwDQYJKoZIhvcNAQELBQADggEBAAnhcyB+1Y10Sbx+gky2QO1IVly2D0ZL0rsk
NTOSH13aqg3N1rYXfB8Y6VyjBD2db9ZOauas38JJdVrXnaw9naEueYd/qdRA69AU
4pXbJNmI3lXaaEpqs2eyjy+1dj/q7/JmhL7y3XOhuNjjg+gowI75u9K3TnY3SgGi
5KHomr289MQJ9a6YxBSgmEE/3LsTFodmkgjknOQm16iOZUp1Iz812MyknvHz8tQz
R2Q03mkBYzBrKyCCPgnbghFRf2EgbGQb2dpPEukwRbZkZ67/1tcWwFJiUe6AJrpr
ZYgW1VNWInouqQxxwPgHusEQ4lWMz2PhIowdPxkIBz/eFyzmBwM=
-----END CERTIFICATE-----
Generated at Wed Jun 3 03:09:18 2026 by rpki-client