Manifest
$ rpki-client -vvf repo-rpki.idnic.net/repo/9d2fa51e-3fd4-4520-b375-09eef5e0e510/0/4CDDA0597DCBCA2C92A176D00847EB50F6122354.mft
File: 4CDDA0597DCBCA2C92A176D00847EB50F6122354.mft (raw, json)
Hash identifier: BZ/4kaH+abBZ2JBa9ySTNZNDf5rTvOb2p6NgPx5PR2g=
Subject key identifier: F2:27:2C:B5:B2:86:08:47:25:25:8B:12:59:F8:17:CF:6D:E3:07:92
Authority key identifier: 4C:DD:A0:59:7D:CB:CA:2C:92:A1:76:D0:08:47:EB:50:F6:12:23:54
Certificate issuer: /CN=4CDDA0597DCBCA2C92A176D00847EB50F6122354
Certificate serial: 46B47B87E2FB5CD030FF39E84D0E54C3196D5722
Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/4CDDA0597DCBCA2C92A176D00847EB50F6122354.cer
Subject info access: rsync://repo-rpki.idnic.net/repo/9d2fa51e-3fd4-4520-b375-09eef5e0e510/0/4CDDA0597DCBCA2C92A176D00847EB50F6122354.mft
Manifest number: 0138
Signing time: Mon 27 Apr 2026 11:00:44 +0000
Manifest this update: Mon 27 Apr 2026 10:55:44 +0000
Manifest next update: Thu 30 Apr 2026 21:58:44 +0000
Files and hashes: 1: 4CDDA0597DCBCA2C92A176D00847EB50F6122354.crl (hash: UaqDkp23TgYIpeNqI+vTppTQtthhLNqArdiAjfMpbtA=)
2: 3130332e3234342e3130352e302f32342d3234203d3e20313531353534.roa (hash: ztwT0b/RRL8JmA2A1xEIyDAku/obP4kwaW2vaWiLopQ=)
3: 3130332e3234342e3130342e302f32342d3234203d3e20313531353534.roa (hash: jrKOilPCIf2Ja6+AaaEcXg/8k0wsYFPn+K9KWKLrdzE=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
46:b4:7b:87:e2:fb:5c:d0:30:ff:39:e8:4d:0e:54:c3:19:6d:57:22
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4CDDA0597DCBCA2C92A176D00847EB50F6122354
Validity
Not Before: Apr 27 10:55:44 2026 GMT
Not After : Apr 30 21:58:44 2026 GMT
Subject: CN=F2272CB5B286084725258B1259F817CF6DE30792
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ce:30:e6:11:51:05:37:58:57:8f:3f:01:7e:d1:
6a:ab:ad:3f:77:23:ca:28:65:d2:96:c5:06:a6:54:
3a:5d:2c:1d:e2:6f:4c:63:ef:df:a1:2a:68:88:18:
00:4d:01:fc:93:14:c5:4a:c6:ee:99:84:0a:d4:55:
8f:59:b3:1c:5a:98:ca:91:bb:29:76:25:df:33:e6:
e1:6e:e5:f6:26:6b:88:72:21:b2:30:e5:a4:be:4b:
7b:e1:6e:fb:78:fe:7c:de:21:f2:f8:5e:18:ca:ce:
fa:10:9d:55:20:16:0f:45:20:c8:25:bd:3c:68:84:
c0:b5:cf:65:3c:9e:a7:fe:a1:f0:ec:c2:fb:fe:b9:
c2:2f:fb:bd:94:62:60:35:88:a1:c3:b4:7d:08:64:
b2:e1:2e:1d:92:3c:d5:25:a4:20:56:75:af:0b:33:
ab:77:46:92:49:2d:2a:71:f6:69:68:75:db:11:c3:
fb:65:70:09:79:96:9c:38:15:b0:59:a2:e3:c7:a6:
5e:f8:15:22:a5:77:26:05:1e:bb:69:e3:d8:d0:8a:
cd:f2:68:5f:0e:4a:f7:08:77:41:0d:d3:cf:b9:76:
b2:bc:0a:78:84:c4:9c:16:34:7b:92:a7:88:0c:67:
d6:02:8c:a3:dc:8b:ab:dd:bf:ea:28:3c:5e:f9:d2:
94:39
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F2:27:2C:B5:B2:86:08:47:25:25:8B:12:59:F8:17:CF:6D:E3:07:92
X509v3 Authority Key Identifier:
keyid:4C:DD:A0:59:7D:CB:CA:2C:92:A1:76:D0:08:47:EB:50:F6:12:23:54
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://repo-rpki.idnic.net/repo/9d2fa51e-3fd4-4520-b375-09eef5e0e510/0/4CDDA0597DCBCA2C92A176D00847EB50F6122354.crl
Authority Information Access:
CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/4CDDA0597DCBCA2C92A176D00847EB50F6122354.cer
Subject Information Access:
Signed Object - URI:rsync://repo-rpki.idnic.net/repo/9d2fa51e-3fd4-4520-b375-09eef5e0e510/0/4CDDA0597DCBCA2C92A176D00847EB50F6122354.mft
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
0f:7d:6f:17:7e:a5:05:7f:4a:ca:9d:79:ec:f3:a3:02:fa:c0:
31:de:ce:71:b7:b6:34:1d:9e:fb:72:e4:dc:2f:b0:3d:8b:83:
13:d4:bc:39:8e:40:e1:e8:cc:e8:5c:2c:24:b2:5d:4e:33:77:
2d:07:ee:44:aa:8d:09:5e:7b:b6:3d:5b:ec:a6:07:13:15:f9:
31:58:90:5b:f4:9f:71:0b:3f:24:49:24:81:e0:64:48:0a:65:
ec:04:7e:c4:a2:f2:df:dc:50:22:ad:d1:f9:23:3b:e4:22:42:
25:4a:b1:65:a8:50:48:df:e8:d5:32:4f:69:e3:67:de:4a:e6:
f9:5e:85:7d:35:50:53:2f:d5:5a:8d:75:31:57:b1:0b:af:d2:
fe:7e:88:71:e7:05:1c:43:fe:13:6f:21:aa:9d:ac:bd:06:2d:
ac:a0:24:ae:91:a9:4a:c2:f8:c1:b0:31:0c:be:7a:2c:43:bf:
0b:d6:27:af:4d:09:c3:99:f9:bb:fc:27:51:96:28:f0:1c:62:
ea:c1:14:a2:29:37:99:1c:c8:38:7d:90:6f:cf:f3:86:bd:71:
6b:a3:89:81:2f:b9:52:f8:82:8b:94:fd:ce:4d:28:df:8f:1d:
37:15:4c:6c:4e:9d:f1:32:0e:b5:d2:43:b6:a0:48:17:42:ee:
e6:10:72:53
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jun 3 03:07:58 2026 by rpki-client