Manifest
$ rpki-client -vvf repo-rpki.idnic.net/repo/8cd0d7fa-d6f8-4c22-b48a-58b8ed8edda7/0/2FD08E6755CF1CCAAF9D5834449797848A706B57.mft
File: 2FD08E6755CF1CCAAF9D5834449797848A706B57.mft (raw, json)
Hash identifier: LmUfNoSHwEMLNSJujaNZtJi7hkTfjxClMiJCviN7K+w=
Subject key identifier: 4E:BA:4E:AD:C6:BE:0E:E4:2F:9C:97:EC:CB:AD:A1:03:EA:17:8C:61
Authority key identifier: 2F:D0:8E:67:55:CF:1C:CA:AF:9D:58:34:44:97:97:84:8A:70:6B:57
Certificate issuer: /CN=2FD08E6755CF1CCAAF9D5834449797848A706B57
Certificate serial: 2431903E37EDCDB11957A8C8BA7902CDE76B74BD
Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/2FD08E6755CF1CCAAF9D5834449797848A706B57.cer
Subject info access: rsync://repo-rpki.idnic.net/repo/8cd0d7fa-d6f8-4c22-b48a-58b8ed8edda7/0/2FD08E6755CF1CCAAF9D5834449797848A706B57.mft
Manifest number: 0414
Signing time: Tue 28 Apr 2026 01:12:19 +0000
Manifest this update: Tue 28 Apr 2026 01:07:19 +0000
Manifest next update: Fri 01 May 2026 02:21:19 +0000
Files and hashes: 1: 3130332e3136332e3232392e302f32342d3234203d3e20313431383935.roa (hash: 73VvZzU4m43+fgjvOlr3Vv7ZHMtLS9jm+/QTGsOwFck=)
2: 3130332e3136332e3232382e302f32332d3233203d3e20313431383935.roa (hash: XjGDHZwetIWHjLp7+uPq3/exRvIl0m5tUGNnQVZ+/fU=)
3: 3130332e3136332e3232382e302f32342d3234203d3e20313431383935.roa (hash: QZlEVkF+HK3hEYAiWRapnYHmq7/bX0k5ZRTsDh0lSOE=)
4: 2FD08E6755CF1CCAAF9D5834449797848A706B57.crl (hash: jXInsfVZcoscUlmM7TmYQkGhVza1Q1WWvc9TuQnju+M=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
24:31:90:3e:37:ed:cd:b1:19:57:a8:c8:ba:79:02:cd:e7:6b:74:bd
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2FD08E6755CF1CCAAF9D5834449797848A706B57
Validity
Not Before: Apr 28 01:07:19 2026 GMT
Not After : May 1 02:21:19 2026 GMT
Subject: CN=4EBA4EADC6BE0EE42F9C97ECCBADA103EA178C61
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d2:ec:cf:31:ac:8b:40:06:ff:4e:2b:d9:d2:48:
99:48:3c:e1:f1:4c:ae:04:5f:39:db:df:9a:3d:0e:
e9:bc:38:7f:9c:ec:26:01:24:d5:45:87:80:00:15:
79:ed:3c:75:1e:64:67:a9:19:f6:43:21:58:08:a0:
7e:d7:5a:a5:ae:de:d0:75:db:05:96:f1:6e:88:97:
cd:5d:26:62:c0:e7:fa:95:52:f7:10:0b:86:2a:61:
f3:5c:2c:21:4e:7a:93:74:8e:ad:1a:3b:3f:77:38:
e7:a1:59:92:7a:42:da:e3:40:c2:ba:18:ed:92:eb:
54:1f:0c:6a:ff:f8:7e:2d:c7:b8:a9:cd:53:a8:b8:
d5:a7:5a:55:80:0e:2f:38:34:0b:c7:78:51:ff:bb:
3e:2a:21:41:e9:96:a3:b1:83:de:27:1d:df:91:86:
f7:fe:47:3c:96:3b:58:d4:5a:fe:c5:a6:80:3a:a8:
96:24:99:94:d9:b2:52:c7:60:89:93:67:4f:5e:fb:
27:a1:36:7c:dd:53:31:32:bf:f8:52:a1:8e:e5:e0:
6a:a4:e7:4d:85:a7:8e:96:bb:90:24:22:02:18:39:
db:3b:f2:8c:10:91:98:35:6e:7c:6d:41:9c:5c:cd:
d6:45:e0:d9:de:b4:64:06:aa:87:0a:cf:4e:1d:34:
fc:fd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
4E:BA:4E:AD:C6:BE:0E:E4:2F:9C:97:EC:CB:AD:A1:03:EA:17:8C:61
X509v3 Authority Key Identifier:
keyid:2F:D0:8E:67:55:CF:1C:CA:AF:9D:58:34:44:97:97:84:8A:70:6B:57
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://repo-rpki.idnic.net/repo/8cd0d7fa-d6f8-4c22-b48a-58b8ed8edda7/0/2FD08E6755CF1CCAAF9D5834449797848A706B57.crl
Authority Information Access:
CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/2FD08E6755CF1CCAAF9D5834449797848A706B57.cer
Subject Information Access:
Signed Object - URI:rsync://repo-rpki.idnic.net/repo/8cd0d7fa-d6f8-4c22-b48a-58b8ed8edda7/0/2FD08E6755CF1CCAAF9D5834449797848A706B57.mft
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
0e:e3:4b:d1:42:9a:a2:e8:e6:5e:0f:de:d6:2e:60:b0:cb:8d:
6d:eb:a9:01:80:da:a0:c0:fc:94:79:ac:e5:89:f9:3c:e4:4b:
94:74:d2:2f:0d:34:d0:86:4c:f7:3b:9a:2e:24:47:a3:e7:31:
63:4c:f6:06:66:d0:ac:de:f7:90:81:62:99:12:53:ab:48:a0:
69:6b:74:55:cc:65:32:1a:0d:ae:67:78:21:d7:bd:bc:52:0f:
ba:41:17:f3:71:73:ca:72:f4:ed:8c:83:df:8d:e0:7e:2a:33:
4c:a1:4b:77:64:d6:e7:cb:34:a3:95:db:6c:82:50:76:68:01:
b1:14:3f:86:fd:db:3f:20:7b:c4:22:af:7a:b7:c7:2c:87:33:
07:56:e1:9f:6d:e9:ba:ad:a9:d6:2f:4e:29:77:01:fc:cf:36:
ac:a2:3e:cd:ef:02:3f:6d:8a:25:72:76:58:d6:6d:a6:e6:b6:
b9:d6:df:cc:05:1e:c5:62:2a:67:9a:04:e9:91:7a:1b:4d:63:
75:dc:58:88:52:43:d7:fb:64:92:1b:15:2e:7c:9b:6b:51:a6:
e7:3e:fb:80:0d:4b:d9:16:d8:55:72:52:56:63:54:d6:cf:86:
06:32:13:6d:53:fe:74:6a:4a:79:a2:31:07:9a:6a:18:ad:00:
50:cf:2d:5c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jun 3 03:07:44 2026 by rpki-client