Manifest
$ rpki-client -vvf repo-rpki.idnic.net/repo/9338bdad-d2dd-4f07-ae84-c540612baf6a/0/8C3462809943E9E8E8E89052BF9B9C3DDC60EE22.mft
File: 8C3462809943E9E8E8E89052BF9B9C3DDC60EE22.mft (raw, json)
Hash identifier: Bpk7Yu8Q5hJC0Kji1IXGKCyn++pOZlaGJ4FBX2F9NQc=
Subject key identifier: 48:33:19:76:BA:4F:63:5A:23:94:9A:7F:3F:CD:BE:54:65:F7:54:F0
Authority key identifier: 8C:34:62:80:99:43:E9:E8:E8:E8:90:52:BF:9B:9C:3D:DC:60:EE:22
Certificate issuer: /CN=8C3462809943E9E8E8E89052BF9B9C3DDC60EE22
Certificate serial: 432DD7BDF9B8C2E86C3FF0D7E41C920BEAC14585
Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/8C3462809943E9E8E8E89052BF9B9C3DDC60EE22.cer
Subject info access: rsync://repo-rpki.idnic.net/repo/9338bdad-d2dd-4f07-ae84-c540612baf6a/0/8C3462809943E9E8E8E89052BF9B9C3DDC60EE22.mft
Manifest number: 02B2
Signing time: Tue 28 Apr 2026 11:00:53 +0000
Manifest this update: Tue 28 Apr 2026 10:55:53 +0000
Manifest next update: Fri 01 May 2026 20:32:53 +0000
Files and hashes: 1: 8C3462809943E9E8E8E89052BF9B9C3DDC60EE22.crl (hash: nVXgI/KKiS9z8Hj/O5TdvQICagVbRw20MoOVkrh4CII=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
43:2d:d7:bd:f9:b8:c2:e8:6c:3f:f0:d7:e4:1c:92:0b:ea:c1:45:85
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8C3462809943E9E8E8E89052BF9B9C3DDC60EE22
Validity
Not Before: Apr 28 10:55:53 2026 GMT
Not After : May 1 20:32:53 2026 GMT
Subject: CN=48331976BA4F635A23949A7F3FCDBE5465F754F0
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:f2:c4:b8:9f:e2:2e:29:c3:46:45:2c:d8:e2:d2:
32:d5:bd:f9:ab:1c:34:21:7d:a3:07:af:24:4e:69:
0f:bf:33:d2:54:05:2d:8b:bd:d3:7d:98:61:03:43:
94:7a:69:be:22:60:92:cf:4d:bc:dc:85:27:63:ad:
a7:db:33:0b:68:96:94:54:4b:75:f7:25:df:5f:29:
d3:a7:96:03:17:10:28:37:f0:f2:cf:91:f9:83:5a:
3b:7c:1a:ff:d3:2b:36:b0:08:71:fb:95:a2:59:dc:
5a:f2:3b:26:c3:45:f0:ea:3d:08:bf:de:0b:0f:c4:
7b:48:76:65:59:45:df:08:26:cc:79:17:89:7c:59:
e7:93:bf:d4:b6:7f:8a:30:07:ac:c7:11:56:7e:c0:
d7:be:30:4d:c6:57:8d:5f:85:e7:94:78:01:0a:91:
81:eb:ce:3a:11:52:5f:0a:bd:71:e0:88:82:ce:61:
46:66:55:70:cd:7b:8d:66:05:35:40:0f:bb:65:f3:
b6:50:ce:1d:98:aa:23:8d:35:b6:60:93:eb:3d:f1:
6a:81:c3:5d:3a:90:a9:a9:59:0a:4e:71:95:70:48:
05:28:3a:7c:cd:a9:a0:6e:05:ea:69:86:81:05:41:
ae:86:b3:eb:17:5f:ec:9e:89:a2:5c:bf:d7:0a:7a:
c4:ad
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
48:33:19:76:BA:4F:63:5A:23:94:9A:7F:3F:CD:BE:54:65:F7:54:F0
X509v3 Authority Key Identifier:
keyid:8C:34:62:80:99:43:E9:E8:E8:E8:90:52:BF:9B:9C:3D:DC:60:EE:22
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://repo-rpki.idnic.net/repo/9338bdad-d2dd-4f07-ae84-c540612baf6a/0/8C3462809943E9E8E8E89052BF9B9C3DDC60EE22.crl
Authority Information Access:
CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/8C3462809943E9E8E8E89052BF9B9C3DDC60EE22.cer
Subject Information Access:
Signed Object - URI:rsync://repo-rpki.idnic.net/repo/9338bdad-d2dd-4f07-ae84-c540612baf6a/0/8C3462809943E9E8E8E89052BF9B9C3DDC60EE22.mft
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
44:41:1e:f3:15:3f:74:a4:fc:17:24:36:f3:0f:d3:fa:28:34:
4b:7b:91:8d:48:91:a0:76:cc:b5:f8:90:d9:90:21:bc:fe:0c:
f9:7c:ed:ba:07:6e:ff:d1:ef:ac:a8:12:af:06:ba:6a:2c:0d:
b6:b6:17:5a:2c:95:3a:6e:5b:08:f9:8a:82:81:17:9c:43:98:
25:e5:66:53:b3:86:fc:6a:bf:65:09:84:1b:bd:9a:0b:34:b9:
d6:65:f2:3e:be:3b:74:68:8c:9e:54:4e:d2:77:12:cc:19:82:
dd:bc:f6:ab:cf:58:1c:87:20:80:71:a7:58:2d:fb:35:2c:99:
aa:a1:51:bc:de:a8:49:fb:e3:8f:c3:12:d5:00:2a:cd:eb:fc:
6d:e1:cc:85:f6:e5:45:d9:54:6a:9c:2f:00:a5:1d:6c:6a:44:
69:82:1f:c3:a9:4d:e6:37:f0:a0:66:22:76:53:f4:26:b4:ca:
86:a4:5d:1d:56:96:60:3c:59:26:fc:25:61:62:94:19:47:3f:
de:85:c8:13:dd:2b:f4:e6:83:c6:34:12:d2:f1:59:80:ea:b7:
22:cc:d6:d1:35:38:4b:82:b9:8a:6f:f5:02:43:1b:79:0d:fb:
43:2c:d5:3a:7c:0f:e2:ca:23:0f:0f:5e:5e:1d:3a:79:6d:11:
70:83:51:7a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jun 3 03:37:34 2026 by rpki-client