Manifest
$ rpki-client -vvf repo-rpki.idnic.net/repo/8eba867a-8f84-4663-b320-f435282b9ffe/0/CA5B0322788B7A041373A944677E83F0D48FF4E7.mft
File: CA5B0322788B7A041373A944677E83F0D48FF4E7.mft (raw, json)
Hash identifier: Oq+uJumjMsNuc2W86pMKjhhwW4JAKBrmuKNDwkpYZU8=
Subject key identifier: B1:44:50:9D:D1:55:C2:78:37:1D:D5:55:4E:D1:28:64:88:95:DC:76
Authority key identifier: CA:5B:03:22:78:8B:7A:04:13:73:A9:44:67:7E:83:F0:D4:8F:F4:E7
Certificate issuer: /CN=CA5B0322788B7A041373A944677E83F0D48FF4E7
Certificate serial: 7B1228DE467F258DB326F36E4844E023406B34E4
Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/CA5B0322788B7A041373A944677E83F0D48FF4E7.cer
Subject info access: rsync://repo-rpki.idnic.net/repo/8eba867a-8f84-4663-b320-f435282b9ffe/0/CA5B0322788B7A041373A944677E83F0D48FF4E7.mft
Manifest number: 0129
Signing time: Tue 28 Apr 2026 05:11:17 +0000
Manifest this update: Tue 28 Apr 2026 05:06:17 +0000
Manifest next update: Fri 01 May 2026 12:54:17 +0000
Files and hashes: 1: 3130332e37312e3136302e302f32322d3234203d3e20313339393831.roa (hash: lDykVwxJoW4GFsi2L2TOWuZVobAaZLaNG/GuK7uwVOw=)
2: CA5B0322788B7A041373A944677E83F0D48FF4E7.crl (hash: bSDgPcQFkM9Wj2yjADDc2Zh3ZULLlw7NWX8sZHq+7Gw=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
7b:12:28:de:46:7f:25:8d:b3:26:f3:6e:48:44:e0:23:40:6b:34:e4
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=CA5B0322788B7A041373A944677E83F0D48FF4E7
Validity
Not Before: Apr 28 05:06:17 2026 GMT
Not After : May 1 12:54:17 2026 GMT
Subject: CN=B144509DD155C278371DD5554ED128648895DC76
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:df:74:eb:47:08:07:93:bc:c6:5c:6b:6e:c1:95:
cf:03:c5:92:f4:a9:63:a3:9b:66:8d:8e:89:1a:1f:
bf:ea:84:03:7a:7e:10:3e:25:de:68:98:d5:71:a4:
96:b8:e4:a7:80:91:d7:6f:17:0c:c9:97:c5:03:d1:
42:73:47:4d:8e:d7:11:48:58:37:a1:dc:19:64:0b:
13:c0:f7:20:f9:5b:d5:e9:a1:58:44:7d:7e:42:9d:
b3:87:5f:c2:55:da:07:87:ad:3c:8a:29:17:f2:b8:
bf:67:9b:80:82:b2:21:7f:f8:8b:94:13:91:4d:1f:
10:fe:9c:84:1d:34:09:62:31:1a:7d:52:50:64:32:
5e:ed:66:ec:9f:e1:ba:10:e8:1c:d8:2c:4d:e4:ce:
97:3d:56:9b:bb:c1:1d:1a:91:3f:ef:42:5b:3c:ba:
1d:6e:01:a7:42:a0:b4:0c:f8:9a:80:f9:89:39:9d:
d3:fb:76:eb:55:b6:56:4c:5e:ed:f6:76:f1:b8:07:
6a:0e:3a:82:4a:6c:71:94:c3:67:aa:e1:48:01:ce:
14:d1:b5:33:17:bf:40:fa:05:2d:8f:fc:1c:c4:05:
5f:ec:a0:4d:ca:16:00:7f:a7:74:34:20:f1:58:a2:
21:40:b1:d2:d7:aa:b0:8b:3c:3d:b7:9f:b2:96:78:
e4:35
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B1:44:50:9D:D1:55:C2:78:37:1D:D5:55:4E:D1:28:64:88:95:DC:76
X509v3 Authority Key Identifier:
keyid:CA:5B:03:22:78:8B:7A:04:13:73:A9:44:67:7E:83:F0:D4:8F:F4:E7
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://repo-rpki.idnic.net/repo/8eba867a-8f84-4663-b320-f435282b9ffe/0/CA5B0322788B7A041373A944677E83F0D48FF4E7.crl
Authority Information Access:
CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/CA5B0322788B7A041373A944677E83F0D48FF4E7.cer
Subject Information Access:
Signed Object - URI:rsync://repo-rpki.idnic.net/repo/8eba867a-8f84-4663-b320-f435282b9ffe/0/CA5B0322788B7A041373A944677E83F0D48FF4E7.mft
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
14:a1:7e:fc:61:d7:24:0d:0b:82:8e:3d:18:f5:10:d2:b6:f4:
ce:19:b5:36:68:18:25:b9:be:1c:ac:7c:be:06:49:88:51:85:
f4:b5:ef:8c:8d:54:74:14:61:a8:fa:56:93:6e:76:89:ed:71:
59:6c:06:89:6e:31:0a:64:25:5f:b2:30:70:74:2b:c0:c4:93:
79:44:f6:38:23:12:4b:13:72:2e:e6:1f:aa:d9:b0:c8:d8:d8:
fb:95:a5:94:e3:3e:89:d3:c5:d8:8c:34:3b:67:cc:87:c3:b9:
62:b4:0c:71:ae:63:d3:36:74:4d:64:89:62:89:42:a0:6f:e0:
da:67:1a:ac:22:63:0b:e3:69:4f:b5:09:f4:41:e7:9e:40:3d:
f0:fc:4b:1d:d8:6d:63:68:b0:54:e0:dc:c1:f0:59:bb:e5:dd:
75:26:97:38:85:9e:1b:1d:e8:50:7f:5a:f2:65:dd:41:ff:5e:
ed:1c:a0:17:61:76:4f:5f:7a:0b:fc:ba:e0:13:f3:9e:be:79:
30:ab:c6:14:84:ac:68:58:40:73:e1:f3:88:17:32:10:37:f0:
8f:b7:b6:0f:f7:b9:fc:81:1c:1e:46:b4:8a:f6:e1:e4:0b:1f:
de:ef:1e:94:1c:b2:0e:57:2d:9c:4f:f3:d8:fa:a7:9d:47:5d:
0d:5b:3f:4b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jul 19 06:40:25 2026 by rpki-client