Manifest
$ rpki-client -vvf repo-rpki.idnic.net/repo/9b6ae2a2-d93f-49ca-ba4b-171ff8d1e57f/0/242C3836E42CEB6F48A0A20E144027DB2E93307A.mft
File: 242C3836E42CEB6F48A0A20E144027DB2E93307A.mft (raw, json)
Hash identifier: ybUrAyfomwPhVOxIHJVfkPfrI0dWYn3uQtEer4iH3RI=
Subject key identifier: A2:74:2A:88:E9:20:9B:A1:47:7F:93:8C:F1:16:A5:0E:4B:C7:57:20
Authority key identifier: 24:2C:38:36:E4:2C:EB:6F:48:A0:A2:0E:14:40:27:DB:2E:93:30:7A
Certificate issuer: /CN=242C3836E42CEB6F48A0A20E144027DB2E93307A
Certificate serial: 16C51FEBAA3C0A1D03AD5FBD64B3B3C129D9A1C0
Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/242C3836E42CEB6F48A0A20E144027DB2E93307A.cer
Subject info access: rsync://repo-rpki.idnic.net/repo/9b6ae2a2-d93f-49ca-ba4b-171ff8d1e57f/0/242C3836E42CEB6F48A0A20E144027DB2E93307A.mft
Manifest number: C0
Signing time: Tue 28 Apr 2026 11:51:04 +0000
Manifest this update: Tue 28 Apr 2026 11:46:04 +0000
Manifest next update: Fri 01 May 2026 21:20:04 +0000
Files and hashes: 1: 3130332e3131322e3232382e302f32332d3234203d3e20313336313136.roa (hash: sD1qHrh4KAHA7ZoVkGVUT23ArBwKJeS4vBzo7kZeF9k=)
2: 242C3836E42CEB6F48A0A20E144027DB2E93307A.crl (hash: zu47/gpYyaIiUMZlRRE7zjnAXBoWq7da+Rcb1VeqIe4=)
3: 3130332e39332e3135382e302f32332d3234203d3e20313336313136.roa (hash: F2Fq1JIaVx4Lm0Y6ySRa15KYpOzONwIDOWqD+ttq4p8=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
16:c5:1f:eb:aa:3c:0a:1d:03:ad:5f:bd:64:b3:b3:c1:29:d9:a1:c0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=242C3836E42CEB6F48A0A20E144027DB2E93307A
Validity
Not Before: Apr 28 11:46:04 2026 GMT
Not After : May 1 21:20:04 2026 GMT
Subject: CN=A2742A88E9209BA1477F938CF116A50E4BC75720
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e1:4c:ca:e6:d7:b4:22:d9:fb:ec:c7:59:49:a1:
8c:86:51:cc:8b:1c:f7:7c:d5:4f:41:63:65:6a:30:
7e:a4:88:76:e2:2b:fc:18:3d:a4:a3:72:a9:c3:9e:
5d:16:58:5d:99:8e:14:35:ad:12:83:40:11:e7:68:
03:4c:53:98:94:e5:b2:f2:89:66:a1:bc:ae:ff:c6:
00:6d:a1:0e:e6:3f:e3:59:21:1f:1a:55:a2:83:ba:
4f:5d:ff:6d:2e:02:03:97:5a:c0:6c:0a:d0:43:6d:
cb:42:19:c3:31:b0:3a:4a:31:12:0a:e1:1c:cb:fc:
29:ed:90:84:ba:fa:26:7a:77:b6:d3:e8:c7:f4:62:
03:b3:40:24:3c:da:b8:83:e6:c8:17:ae:d4:46:a0:
75:9b:33:d7:1d:70:a7:7b:0c:d4:09:03:76:02:40:
79:65:35:bb:3f:8f:05:76:84:d2:1d:a2:49:59:ba:
f2:94:40:fc:7c:91:d8:ee:5d:a7:29:56:53:e2:35:
dd:05:b7:68:c5:11:38:26:e7:63:72:e1:ff:11:e4:
29:3c:c7:b6:55:d6:d4:91:fa:74:c0:d8:98:10:32:
10:99:66:59:7c:b4:f1:f8:07:d7:cd:a9:ab:a4:43:
55:f1:15:75:8f:f7:8d:3d:ce:65:45:2a:42:49:11:
ba:e5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A2:74:2A:88:E9:20:9B:A1:47:7F:93:8C:F1:16:A5:0E:4B:C7:57:20
X509v3 Authority Key Identifier:
keyid:24:2C:38:36:E4:2C:EB:6F:48:A0:A2:0E:14:40:27:DB:2E:93:30:7A
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://repo-rpki.idnic.net/repo/9b6ae2a2-d93f-49ca-ba4b-171ff8d1e57f/0/242C3836E42CEB6F48A0A20E144027DB2E93307A.crl
Authority Information Access:
CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/242C3836E42CEB6F48A0A20E144027DB2E93307A.cer
Subject Information Access:
Signed Object - URI:rsync://repo-rpki.idnic.net/repo/9b6ae2a2-d93f-49ca-ba4b-171ff8d1e57f/0/242C3836E42CEB6F48A0A20E144027DB2E93307A.mft
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
01:d2:a7:bf:3d:86:5c:15:d3:79:77:8e:d2:07:a5:f4:30:08:
14:a2:2b:28:f6:4c:c3:46:4f:2c:79:ea:80:35:dd:41:d8:8d:
29:18:b3:c2:a7:5c:75:39:6e:95:5f:03:68:64:0c:d8:84:8e:
ae:48:6f:eb:e2:8f:2b:df:64:4e:45:a1:57:34:5d:1f:0f:4c:
d3:61:ff:4a:ac:77:33:6e:8a:30:e8:0b:b1:d1:fa:05:7d:23:
34:4b:8f:5e:3a:53:f6:ca:78:94:01:05:17:4a:c2:fb:6e:82:
82:c9:9a:ef:c9:95:55:0a:ec:3b:0c:da:21:92:66:d5:6c:9e:
3d:7b:ec:39:cf:99:bc:3c:50:3f:aa:2d:65:e2:d2:66:c1:53:
26:cb:f2:d1:c1:25:30:69:51:18:c6:56:44:b0:5d:13:6e:e9:
5d:33:db:ff:4a:f7:d0:b5:fe:eb:2f:64:0a:d9:23:2e:d2:52:
b8:da:1f:cd:4c:2b:fe:bf:40:61:ee:20:90:b7:b2:60:ce:1c:
0f:e7:35:7b:ac:06:78:e6:09:98:12:7b:a4:94:b4:55:10:d6:
32:fd:5c:a7:98:57:f3:39:fc:d8:b0:34:22:60:f6:0e:b2:31:
7d:05:e7:c1:87:3d:d2:28:8f:8b:52:5e:7a:b4:bd:47:66:69:
8c:40:47:f9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jun 3 03:10:18 2026 by rpki-client