
Manifest
$ rpki-client -vvf repo-rpki.idnic.net/repo/9b8a7fa5-fda3-4a3e-92f7-fabfed05a95c/0/9A97A919AD61446780D593589DED8D76DE76F83A.mft
File: 9A97A919AD61446780D593589DED8D76DE76F83A.mft (raw, json)
Hash identifier: YYIw/uPkD3ulIrS2+1FV9D3J7EQPM2eNrGj3Y8E3VVc=
Subject key identifier: C8:6C:36:07:22:05:29:CF:AA:0F:33:A8:69:69:5B:47:DB:C8:C1:E0
Authority key identifier: 9A:97:A9:19:AD:61:44:67:80:D5:93:58:9D:ED:8D:76:DE:76:F8:3A
Certificate issuer: /CN=9A97A919AD61446780D593589DED8D76DE76F83A
Certificate serial: 52EF5F01C9623E9A3295D20A41629907CC42ACB4
Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/9A97A919AD61446780D593589DED8D76DE76F83A.cer
Subject info access: rsync://repo-rpki.idnic.net/repo/9b8a7fa5-fda3-4a3e-92f7-fabfed05a95c/0/9A97A919AD61446780D593589DED8D76DE76F83A.mft
Manifest number: 017D
Signing time: Wed 29 Apr 2026 04:31:26 +0000
Manifest this update: Wed 29 Apr 2026 04:26:26 +0000
Manifest next update: Sat 02 May 2026 15:52:26 +0000
Files and hashes: 1: 9A97A919AD61446780D593589DED8D76DE76F83A.crl (hash: CDNEoQbx9MQlfGlWeqPhPnR9f5CtvilmzzJxZhv2yRs=)
2: 33362e35302e35362e302f32332d3233203d3e20313532303239.roa (hash: 9H86ukseSKR4BvGaN2rjW7zGpKtVglBN83OogNznu9k=)
3: 33362e35302e35362e302f32342d3234203d3e20313532303239.roa (hash: 3J7uJ2kwnNXV33soi5CVj9DuNVvTV0RMWa4++EPOkFc=)
4: 33362e35302e35372e302f32342d3234203d3e20313532303239.roa (hash: LrLP8FwR1/mLygyohR7eR9/JUTFD1TFSAda0avJS6rc=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
52:ef:5f:01:c9:62:3e:9a:32:95:d2:0a:41:62:99:07:cc:42:ac:b4
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=9A97A919AD61446780D593589DED8D76DE76F83A
Validity
Not Before: Apr 29 04:26:26 2026 GMT
Not After : May 2 15:52:26 2026 GMT
Subject: CN=C86C3607220529CFAA0F33A869695B47DBC8C1E0
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b8:92:0b:77:85:d8:0a:7b:d3:de:24:7c:16:9c:
7c:24:63:11:93:c2:06:58:2a:4c:2f:1c:4c:7b:2b:
35:b2:a6:0c:fb:64:2b:f5:f7:10:56:66:5a:13:61:
9e:60:53:c9:b8:03:4e:cc:f4:7b:f7:97:29:8e:b0:
0e:86:71:07:a8:4d:97:ef:ac:4e:e3:e2:30:dd:ec:
b2:ed:bc:df:40:94:45:e8:15:d2:7c:95:c6:d7:44:
cc:77:b4:60:c3:12:84:ff:3b:18:6c:9a:f8:87:8e:
9d:b1:80:4e:73:2f:8b:31:dc:27:cd:a9:5a:20:25:
dd:27:f4:e2:c4:a3:85:fd:42:a6:22:48:b0:d8:d9:
5b:25:4f:9c:eb:2e:8c:81:22:4d:90:fe:80:c7:b3:
16:63:f6:1f:07:65:43:24:01:a7:41:80:be:33:09:
8a:1f:90:0c:8c:6b:02:cf:59:44:58:9e:9d:67:16:
14:13:27:a2:e5:9b:b4:d8:72:ee:33:4b:b3:29:2a:
3b:5f:0d:6d:e8:87:ef:53:67:c1:37:95:29:74:ed:
f6:62:10:82:95:86:82:ac:5e:8e:80:b8:60:8b:c5:
f3:fe:43:c9:6b:65:04:e3:9e:ec:ab:28:91:51:11:
3e:50:64:98:fc:2a:3d:91:df:af:ff:e0:ab:f7:8d:
77:87
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C8:6C:36:07:22:05:29:CF:AA:0F:33:A8:69:69:5B:47:DB:C8:C1:E0
X509v3 Authority Key Identifier:
keyid:9A:97:A9:19:AD:61:44:67:80:D5:93:58:9D:ED:8D:76:DE:76:F8:3A
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://repo-rpki.idnic.net/repo/9b8a7fa5-fda3-4a3e-92f7-fabfed05a95c/0/9A97A919AD61446780D593589DED8D76DE76F83A.crl
Authority Information Access:
CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/9A97A919AD61446780D593589DED8D76DE76F83A.cer
Subject Information Access:
Signed Object - URI:rsync://repo-rpki.idnic.net/repo/9b8a7fa5-fda3-4a3e-92f7-fabfed05a95c/0/9A97A919AD61446780D593589DED8D76DE76F83A.mft
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
5f:4a:5a:57:2e:a4:17:70:e4:36:c9:6d:8d:83:98:8b:90:21:
61:09:13:fa:34:b5:92:fe:8b:85:75:b9:ce:d6:87:5b:a0:63:
d9:24:07:00:38:e8:1f:b7:6a:2f:d8:63:d9:a2:82:f6:e9:10:
bc:af:b6:48:69:10:56:43:a8:b5:88:54:dd:11:f6:8e:80:32:
3e:46:ff:cf:11:b6:06:be:67:9d:f7:6e:6b:c3:a7:57:38:f7:
af:db:7c:0c:89:91:94:22:72:ed:af:3f:c5:fb:ed:8d:cc:26:
55:da:d5:2e:62:64:77:bc:3c:0e:77:0e:ac:7b:94:d9:2c:0f:
b6:d6:fc:81:c8:6a:03:49:44:f4:51:18:7c:5d:9c:f2:35:40:
62:31:9b:45:8f:ab:0a:26:8f:88:2c:88:fa:a3:df:44:09:66:
be:0d:3a:42:2f:91:ed:0c:c3:65:4a:e2:f9:6a:1a:8e:26:0a:
fe:23:8f:8c:f1:28:aa:b1:2b:e9:73:0b:16:be:93:33:d6:cf:
3c:91:04:3b:f7:8d:21:e8:ca:67:ab:70:56:1b:37:29:58:24:
c0:9d:3d:f5:ba:5a:65:a5:43:13:3e:e6:47:50:15:77:b2:f3:
09:9f:eb:a6:03:74:9c:8b:83:66:90:b9:9e:4f:5a:6a:4c:c6:
83:a0:cf:fb
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jun 3 03:37:40 2026 by rpki-client