Manifest
$ rpki-client -vvf repo-rpki.idnic.net/repo/8fd6eaca-f5fd-4acb-85a5-eb8d370823af/0/DE5F8F89EA2857719125EA6666F593A8279B3CD9.mft
File: DE5F8F89EA2857719125EA6666F593A8279B3CD9.mft (raw, json)
Hash identifier: NByGhIVUK0woayMV27bEAbzmrKNqmDvvG8ffZ2PntlE=
Subject key identifier: 60:4E:EF:7D:91:66:FE:7B:CA:C5:0A:FF:CB:BA:20:20:64:5F:53:B2
Authority key identifier: DE:5F:8F:89:EA:28:57:71:91:25:EA:66:66:F5:93:A8:27:9B:3C:D9
Certificate issuer: /CN=DE5F8F89EA2857719125EA6666F593A8279B3CD9
Certificate serial: 518F050CDA7F478A596FB79B752E18B9BD51182F
Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/DE5F8F89EA2857719125EA6666F593A8279B3CD9.cer
Subject info access: rsync://repo-rpki.idnic.net/repo/8fd6eaca-f5fd-4acb-85a5-eb8d370823af/0/DE5F8F89EA2857719125EA6666F593A8279B3CD9.mft
Manifest number: 0123
Signing time: Wed 29 Apr 2026 10:20:59 +0000
Manifest this update: Wed 29 Apr 2026 10:15:59 +0000
Manifest next update: Sat 02 May 2026 12:00:59 +0000
Files and hashes: 1: DE5F8F89EA2857719125EA6666F593A8279B3CD9.crl (hash: 31Fuii5sRDqcDaotL4EG3URnHCsqRGj/rxTDPDLiB+M=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
51:8f:05:0c:da:7f:47:8a:59:6f:b7:9b:75:2e:18:b9:bd:51:18:2f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=DE5F8F89EA2857719125EA6666F593A8279B3CD9
Validity
Not Before: Apr 29 10:15:59 2026 GMT
Not After : May 2 12:00:59 2026 GMT
Subject: CN=604EEF7D9166FE7BCAC50AFFCBBA2020645F53B2
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ae:d5:2a:85:04:9a:c7:67:4f:57:7d:b7:2b:67:
8d:1c:40:f8:0c:83:ad:77:2f:ad:2a:1a:14:44:f1:
95:73:51:27:12:5d:68:cc:fc:49:94:eb:0c:53:2e:
ad:0d:59:a5:65:99:19:cd:87:04:26:22:d9:49:c2:
5d:66:1f:f3:75:46:ce:02:51:f6:3a:ae:8a:fd:08:
0e:ca:cb:75:99:be:b6:60:57:7d:76:40:3a:c6:e4:
10:db:35:1b:c7:0b:a1:6b:e0:3d:d6:d3:19:ca:79:
c9:11:00:dc:c7:04:66:cc:0e:d4:d4:f1:79:66:af:
8f:a2:0c:2d:97:61:3d:e4:c6:b4:5b:78:74:2b:70:
08:c3:92:76:1a:dc:98:a2:62:54:66:39:23:b1:4d:
f1:69:97:53:83:26:91:e8:94:a2:1b:f8:3a:f6:ec:
a1:a9:42:64:05:c2:d7:54:9d:57:d5:e7:68:6c:1f:
53:12:40:1d:22:5d:ed:8a:9a:03:e4:16:f8:bf:69:
b1:82:e9:63:e7:f3:69:a9:d5:95:b4:d2:3a:d5:c9:
d7:94:2b:dd:67:bf:4a:f1:c7:a7:33:ac:56:cb:2e:
78:97:42:fd:17:e5:78:fa:5d:84:bf:15:f2:4f:58:
7d:8a:4f:da:af:91:55:32:45:b6:12:3b:e5:e5:68:
80:2f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
60:4E:EF:7D:91:66:FE:7B:CA:C5:0A:FF:CB:BA:20:20:64:5F:53:B2
X509v3 Authority Key Identifier:
keyid:DE:5F:8F:89:EA:28:57:71:91:25:EA:66:66:F5:93:A8:27:9B:3C:D9
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://repo-rpki.idnic.net/repo/8fd6eaca-f5fd-4acb-85a5-eb8d370823af/0/DE5F8F89EA2857719125EA6666F593A8279B3CD9.crl
Authority Information Access:
CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/DE5F8F89EA2857719125EA6666F593A8279B3CD9.cer
Subject Information Access:
Signed Object - URI:rsync://repo-rpki.idnic.net/repo/8fd6eaca-f5fd-4acb-85a5-eb8d370823af/0/DE5F8F89EA2857719125EA6666F593A8279B3CD9.mft
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
74:33:06:ea:a0:87:c3:f5:34:49:18:c4:99:55:a0:e4:4f:e0:
d6:42:e0:8f:e6:eb:67:01:e2:50:6e:a7:aa:9c:75:c9:a8:77:
2d:5e:cb:07:7f:d6:33:62:ba:62:99:0d:02:5a:bc:81:00:74:
dc:54:5f:64:18:70:af:e9:5e:d7:0c:04:0e:49:a4:3e:5a:c3:
f6:fd:94:9b:05:17:4c:fd:9b:44:7a:78:f6:af:9c:67:52:0f:
e7:79:83:65:f9:8e:87:d4:8a:a0:af:46:01:3a:8b:ca:6a:36:
f2:b2:8e:83:45:b3:f2:f3:2a:c5:ce:28:8f:66:17:6d:61:9d:
2c:66:97:dd:b7:e5:c0:63:37:0b:58:8a:c4:06:5e:c9:9d:ab:
68:dd:1a:fb:0e:4d:18:be:ca:11:68:b2:04:71:f6:77:7c:e4:
3d:46:e0:a0:93:cc:a8:54:ad:5d:ae:d9:07:8d:01:6b:77:ca:
04:1f:72:31:95:fb:58:77:99:3e:68:24:e2:a6:96:ae:df:52:
f2:38:94:21:09:fd:79:5a:35:a1:f3:8d:04:e5:8f:6a:5e:f6:
6e:4a:85:ec:35:42:bd:b9:5f:8e:1e:8f:89:b9:de:fc:c1:e2:
e4:98:4f:f6:37:5c:31:3b:ea:28:d3:b6:34:48:44:53:de:6c:
5e:a3:b9:3b
-----BEGIN CERTIFICATE-----
MIIFMjCCBBqgAwIBAgIUUY8FDNp/R4pZb7ebdS4Yub1RGC8wDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoREU1RjhGODlFQTI4NTc3MTkxMjVFQTY2NjZGNTkzQTgy
NzlCM0NEOTAeFw0yNjA0MjkxMDE1NTlaFw0yNjA1MDIxMjAwNTlaMDMxMTAvBgNV
BAMTKDYwNEVFRjdEOTE2NkZFN0JDQUM1MEFGRkNCQkEyMDIwNjQ1RjUzQjIwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCu1SqFBJrHZ09XfbcrZ40cQPgM
g613L60qGhRE8ZVzUScSXWjM/EmU6wxTLq0NWaVlmRnNhwQmItlJwl1mH/N1Rs4C
UfY6ror9CA7Ky3WZvrZgV312QDrG5BDbNRvHC6Fr4D3W0xnKeckRANzHBGbMDtTU
8Xlmr4+iDC2XYT3kxrRbeHQrcAjDknYa3JiiYlRmOSOxTfFpl1ODJpHolKIb+Dr2
7KGpQmQFwtdUnVfV52hsH1MSQB0iXe2KmgPkFvi/abGC6WPn82mp1ZW00jrVydeU
K91nv0rxx6czrFbLLniXQv0X5Xj6XYS/FfJPWH2KT9qvkVUyRbYSO+XlaIAvAgMB
AAGjggI8MIICODAdBgNVHQ4EFgQUYE7vfZFm/nvKxQr/y7ogIGRfU7IwHwYDVR0j
BBgwFoAU3l+PieooV3GRJepmZvWTqCebPNkwDgYDVR0PAQH/BAQDAgeAMIGFBgNV
HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby84
ZmQ2ZWFjYS1mNWZkLTRhY2ItODVhNS1lYjhkMzcwODIzYWYvMC9ERTVGOEY4OUVB
Mjg1NzcxOTEyNUVBNjY2NkY1OTNBODI3OUIzQ0Q5LmNybDB0BggrBgEFBQcBAQRo
MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv
L0lETklDLUlELzIvREU1RjhGODlFQTI4NTc3MTkxMjVFQTY2NjZGNTkzQTgyNzlC
M0NEOS5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6
Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vOGZkNmVhY2EtZjVmZC00YWNiLTg1
YTUtZWI4ZDM3MDgyM2FmLzAvREU1RjhGODlFQTI4NTc3MTkxMjVFQTY2NjZGNTkz
QTgyNzlCM0NEOS5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF
BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC
BQAwDQYJKoZIhvcNAQELBQADggEBAHQzBuqgh8P1NEkYxJlVoORP4NZC4I/m62cB
4lBup6qcdcmody1eywd/1jNiumKZDQJavIEAdNxUX2QYcK/pXtcMBA5JpD5aw/b9
lJsFF0z9m0R6ePavnGdSD+d5g2X5jofUiqCvRgE6i8pqNvKyjoNFs/LzKsXOKI9m
F21hnSxml9235cBjNwtYisQGXsmdq2jdGvsOTRi+yhFosgRx9nd85D1G4KCTzKhU
rV2u2QeNAWt3ygQfcjGV+1h3mT5oJOKmlq7fUvI4lCEJ/XlaNaHzjQTlj2pe9m5K
hew1Qr25X44ej4m53vzB4uSYT/Y3XDE76ijTtjRIRFPebF6juTs=
-----END CERTIFICATE-----
Generated at Wed Jun 3 03:09:15 2026 by rpki-client