
$ rpki-client -vvf repo-rpki.idnic.net/repo/a12f228c-df20-4728-9f96-8faa1340017a/0/42042E672B688C3072FD4743B3E7DD81EC7CA306.mft
File: 42042E672B688C3072FD4743B3E7DD81EC7CA306.mft (raw, json)
Hash identifier: nnFo22DHEwYehvHDL7Qy7s9QENu599XKp0k1oqNjvJE=
Subject key identifier: 5C:CE:FB:9A:A9:9C:B1:F3:BE:19:D2:87:1E:EE:C3:48:7A:60:7F:DD
Authority key identifier: 42:04:2E:67:2B:68:8C:30:72:FD:47:43:B3:E7:DD:81:EC:7C:A3:06
Certificate issuer: /CN=42042E672B688C3072FD4743B3E7DD81EC7CA306
Certificate serial: 72AA950D84E25205F031C1AFEFB15AE2153095E3
Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/42042E672B688C3072FD4743B3E7DD81EC7CA306.cer
Subject info access: rsync://repo-rpki.idnic.net/repo/a12f228c-df20-4728-9f96-8faa1340017a/0/42042E672B688C3072FD4743B3E7DD81EC7CA306.mft
Manifest number: 03BA
Signing time: Mon 27 Apr 2026 19:20:52 +0000
Manifest this update: Mon 27 Apr 2026 19:15:52 +0000
Manifest next update: Fri 01 May 2026 06:48:52 +0000
Files and hashes: 1: 323030313a6436383a31323a3a2f34382d3438203d3e203338373539.roa (hash: BqoEpAp2+UEuN6knkf0iHBFe+NlPdDdo1asiTk5cnH4=)
2: 3230322e3138302e302e302f32342d3234203d3e2037353837.roa (hash: cje0RNSx9P/cOPpCtYQDwkY1I+kc9+6oUoy5ingJOIs=)
3: 42042E672B688C3072FD4743B3E7DD81EC7CA306.crl (hash: WO/iJ1YHUbN3sem/mKg4gAcij7CvibiRkxqc0yc3nvo=)
4: 323030313a6436383a373a3a2f34382d3438203d3e203338373539.roa (hash: muxJdFe2pixOmgM0+n/vOhMDRG8grm2Btn/Nr9wnHdc=)
5: 3230322e3138302e31322e302f32342d3234203d3e203338373539.roa (hash: 99pjiFxy6i9aAF5V+k03NOY+ffA/N57vuM+xXi4hwV0=)
6: 323030313a6436383a393a3a2f34382d3438203d3e203338373539.roa (hash: U1oEb+i6KKGi7dOnpejft8TEWnvu9mWUcqiHJxud3FE=)
7: 3230322e3138302e372e302f32342d3234203d3e203338373539.roa (hash: 5jpE9PaDWg32h1mep4+lRpd6+XHerxcnHEsnK1sv4vU=)
8: 3230322e3138302e382e302f32342d3234203d3e203338373539.roa (hash: 6gKMD4zRtDAlRcIkaIZo0T1mR3a0YZm8KjfJzM2lqqc=)
9: 323030313a6436383a31333a3a2f34382d3438203d3e203338373539.roa (hash: fFkVLevboYrZm0ldmwFZBHRDjcsbCO8x/cTP2HxOjwo=)
10: 323030313a6436383a31313a3a2f34382d3438203d3e203338373539.roa (hash: CpXbrXmGX4ITchWOi7/vrQ9BAy1FQYBh+LSYePLlGN8=)
11: 3230322e3138302e31302e302f32342d3234203d3e203338373539.roa (hash: W3Rk8oMCIZrZG18jw5tK5o5kQjsEemd0y2JxL184dQU=)
12: 323030313a6436383a313a3a2f34382d3438203d3e2037353837.roa (hash: 3O9Dun/SNBINZ3B9YhjfBGGqTvlmzFCIO86PaMzUieA=)
13: 3230322e3138302e312e302f32342d3234203d3e2037353837.roa (hash: NbHhFmy5+M9dcxTboMeZja93XE4Bi3M8QPJR5OVXXh0=)
14: 323030313a6436383a31303a3a2f34382d3438203d3e203338373539.roa (hash: ghIreGGw1MSr8fVsMwycbTOs/dBctFRQZd0vQbqY1I0=)
15: 3230322e3138302e31332e302f32342d3234203d3e203338373539.roa (hash: 7wzHDGiNPdR1rFQHicraAxcZjQRCh3/Q5KM8DSR+Lzc=)
16: 323030313a6436383a3a2f33322d3332203d3e203338373539.roa (hash: PrDMvAYB7DejmELDT18axQRCP8RdhUdpLoyo3trY+po=)
17: 323030313a6436383a3a2f34382d3438203d3e2037353837.roa (hash: VNcs+Fmh0oNgiWo/oCDkDKUsnCnybqve/EpfB0M2J0s=)
18: 3230322e3138302e31312e302f32342d3234203d3e203338373539.roa (hash: ieZuTIxFCE7GT48kZHlnhDRdoyyMo22tAQF2MzZLBUM=)
19: 3230322e3138302e392e302f32342d3234203d3e203338373539.roa (hash: 0wFTN/XqtAoutydwqc+DafnIfaxz+FirKWo3fLraaUs=)
20: 323030313a6436383a383a3a2f34382d3438203d3e203338373539.roa (hash: BnGtn4VWnuPol8Hcuxr+9+BtpB9xmH5yyn9/+BeKN6Y=)
21: 323030313a6436383a3a2f33322d3332203d3e2037353837.roa (hash: 8fbkbe+zjfoqQaxLOTN723BKYFqkAiYSq9UlyPBgR3c=)
22: 3230322e3138302e31362e302f32302d3234203d3e203338373538.roa (hash: HtfoWX2moqZb8+kymM9PVl+dux6Wm9LUZexAAwCV9Wk=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
72:aa:95:0d:84:e2:52:05:f0:31:c1:af:ef:b1:5a:e2:15:30:95:e3
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=42042E672B688C3072FD4743B3E7DD81EC7CA306
Validity
Not Before: Apr 27 19:15:52 2026 GMT
Not After : May 1 06:48:52 2026 GMT
Subject: CN=5CCEFB9AA99CB1F3BE19D2871EEEC3487A607FDD
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d8:ce:57:d9:a0:5c:d8:d0:8f:22:4d:5c:2b:44:
46:d4:39:ad:49:0c:50:3e:f9:2b:0c:36:ac:d8:0a:
88:57:1e:b1:52:88:6b:78:1b:58:e0:f4:56:35:d5:
f1:01:97:a0:2d:75:1b:bc:bd:7c:8a:90:57:f9:b8:
79:03:27:09:5e:50:4c:d7:4d:d4:9b:4c:20:9a:f5:
14:95:24:05:75:97:53:da:27:ef:72:c2:0b:58:f1:
45:c5:61:9b:fd:6c:ca:89:f8:46:c1:a6:e4:3a:f3:
97:26:51:0f:c2:85:37:9d:aa:b3:c0:b2:c8:f1:dc:
a9:c0:24:59:7b:c8:92:5f:f5:d4:e5:ed:a3:af:de:
90:82:b7:45:8b:d8:d7:5b:61:83:e0:90:e7:75:54:
0e:87:61:a1:0e:2f:26:43:14:b1:95:b9:69:ce:c7:
fa:b8:73:1f:28:00:90:e8:2a:dc:d0:86:65:d6:e0:
36:30:e8:30:24:9e:20:ac:9c:f4:f0:b4:18:76:c6:
00:ba:2c:c6:83:14:66:4f:c1:9b:6a:68:4a:18:86:
e0:70:c4:de:4a:65:de:92:48:f7:c2:e9:08:74:51:
7d:2b:1e:58:c1:d7:45:bf:bf:5c:5f:5d:57:8a:67:
78:c5:b7:ae:83:6e:65:a2:94:cc:c3:d9:7b:59:4b:
3c:19
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
5C:CE:FB:9A:A9:9C:B1:F3:BE:19:D2:87:1E:EE:C3:48:7A:60:7F:DD
X509v3 Authority Key Identifier:
keyid:42:04:2E:67:2B:68:8C:30:72:FD:47:43:B3:E7:DD:81:EC:7C:A3:06
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://repo-rpki.idnic.net/repo/a12f228c-df20-4728-9f96-8faa1340017a/0/42042E672B688C3072FD4743B3E7DD81EC7CA306.crl
Authority Information Access:
CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/42042E672B688C3072FD4743B3E7DD81EC7CA306.cer
Subject Information Access:
Signed Object - URI:rsync://repo-rpki.idnic.net/repo/a12f228c-df20-4728-9f96-8faa1340017a/0/42042E672B688C3072FD4743B3E7DD81EC7CA306.mft
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
67:14:60:4a:0b:6b:c8:ae:73:d7:5f:92:32:c0:e6:4a:fa:8c:
fa:ca:89:bb:a2:3f:fc:c2:fa:07:6f:f5:7f:91:21:d2:8f:3d:
ec:77:96:06:7b:f3:24:fb:d9:21:31:f2:a9:46:e9:f8:cf:dc:
b3:3f:d3:6b:94:75:b5:a2:b1:50:0f:41:32:f8:28:e3:94:f0:
74:07:00:55:c9:a6:d2:43:8f:cc:e6:a7:6d:cd:33:39:fb:f8:
72:59:2e:5a:ae:3d:81:aa:43:2b:0d:31:e6:2c:81:0a:3a:4c:
f8:b8:af:cf:83:82:26:26:6a:e5:9c:67:b4:8a:0f:d1:34:49:
18:c2:ec:84:67:2c:c4:27:b3:f2:f1:bb:56:b6:a1:f6:ee:ea:
04:a8:21:d2:0e:9d:7c:88:03:fc:18:db:ed:62:fa:1a:c2:07:
60:65:21:5c:40:09:08:ce:96:ca:54:32:6c:09:5f:c2:e8:f0:
df:bd:d5:48:b5:75:a0:b3:0a:1b:fc:fb:9f:66:d9:6b:d5:ab:
f8:63:80:f2:0e:f3:36:5d:94:10:bd:9b:e2:de:4a:c7:57:83:
4b:0f:fb:d7:35:49:7d:82:56:b7:55:01:86:b0:94:c1:1c:e1:
94:fd:e0:66:17:88:50:89:2d:1e:cf:79:b2:bb:ba:0e:83:7b:
bf:69:ca:e1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jun 3 03:08:43 2026 by rpki-client