Manifest
$ rpki-client -vvf repo-rpki.idnic.net/repo/a63655f1-38b6-4415-8faf-2b5b9153e52d/0/129AAEFC08D204E9BE5439C807FF840DC3CE57F9.mft
File: 129AAEFC08D204E9BE5439C807FF840DC3CE57F9.mft (raw, json)
Hash identifier: ISUZay9dm0uiUoDeHTY2ZOvuPsr9pI/ev5p+a8ISDu0=
Subject key identifier: 3C:C1:89:67:32:60:9C:32:D1:78:47:2F:69:DE:B6:11:E8:17:5C:16
Authority key identifier: 12:9A:AE:FC:08:D2:04:E9:BE:54:39:C8:07:FF:84:0D:C3:CE:57:F9
Certificate issuer: /CN=129AAEFC08D204E9BE5439C807FF840DC3CE57F9
Certificate serial: 437EB5E15BCE1C6EFE34E5886F48118C73736ADE
Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/129AAEFC08D204E9BE5439C807FF840DC3CE57F9.cer
Subject info access: rsync://repo-rpki.idnic.net/repo/a63655f1-38b6-4415-8faf-2b5b9153e52d/0/129AAEFC08D204E9BE5439C807FF840DC3CE57F9.mft
Manifest number: 0286
Signing time: Wed 29 Apr 2026 02:21:01 +0000
Manifest this update: Wed 29 Apr 2026 02:16:01 +0000
Manifest next update: Sat 02 May 2026 06:39:01 +0000
Files and hashes: 1: 34352e3131332e3232382e302f32322d3234203d3e20313339333936.roa (hash: 78O1ueVQuFfOoEIhy2/u3I+vzcB/NPyQz3uKyD8I2xQ=)
2: 129AAEFC08D204E9BE5439C807FF840DC3CE57F9.crl (hash: sk7BI45zJ9X8S1fPqn5gGnyB3Yg0jWE4HDpaz06690w=)
3: 3130332e39312e302e302f32322d3234203d3e203338343936.roa (hash: Nc/rGbjilKhDUINae4y6wIX+B0v7DnEiiCYl62dNR3U=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
43:7e:b5:e1:5b:ce:1c:6e:fe:34:e5:88:6f:48:11:8c:73:73:6a:de
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=129AAEFC08D204E9BE5439C807FF840DC3CE57F9
Validity
Not Before: Apr 29 02:16:01 2026 GMT
Not After : May 2 06:39:01 2026 GMT
Subject: CN=3CC1896732609C32D178472F69DEB611E8175C16
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c2:9e:1d:7b:24:cc:be:2f:ce:3f:ee:23:87:06:
26:e4:c3:03:3d:80:83:b3:03:b3:51:60:6d:cb:c5:
dd:d9:9d:ba:9f:86:9b:9a:86:e2:3b:9d:eb:1a:f5:
a6:e0:12:aa:d5:2d:72:3b:3d:57:a8:5e:e7:35:72:
54:07:1a:7e:d6:d9:d4:08:61:ea:f3:fc:9f:0d:93:
90:c2:17:ce:c1:4b:b1:f5:37:ea:ef:5c:4e:87:2e:
8b:96:6c:f1:88:71:5e:4f:ba:0a:ec:87:ad:85:18:
f2:fb:4b:f4:a4:95:87:0a:cd:42:a3:77:7e:a6:ba:
34:2f:06:71:a4:6d:6b:d2:c2:ef:ca:9a:70:e5:7f:
f2:ed:b9:99:70:21:ae:27:2d:7f:13:87:b3:b5:c2:
6d:aa:04:f8:c5:8c:2b:cd:5f:9b:db:ff:25:a3:ac:
92:79:33:a5:e4:4f:26:eb:ee:19:b8:c2:40:4e:54:
24:3e:5a:e6:6e:9b:b8:f4:3e:99:9a:28:1b:e3:8e:
83:5f:34:da:64:ea:f3:b7:65:c5:e8:f0:ed:5a:59:
2e:f3:97:9a:77:b9:62:06:a2:0c:60:1a:1e:0f:5c:
fe:4e:d8:40:6f:d4:70:91:78:09:ab:6d:17:22:f8:
87:43:d0:b5:c6:2d:36:4c:d7:40:44:97:cd:5c:8d:
d1:dd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
3C:C1:89:67:32:60:9C:32:D1:78:47:2F:69:DE:B6:11:E8:17:5C:16
X509v3 Authority Key Identifier:
keyid:12:9A:AE:FC:08:D2:04:E9:BE:54:39:C8:07:FF:84:0D:C3:CE:57:F9
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://repo-rpki.idnic.net/repo/a63655f1-38b6-4415-8faf-2b5b9153e52d/0/129AAEFC08D204E9BE5439C807FF840DC3CE57F9.crl
Authority Information Access:
CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/129AAEFC08D204E9BE5439C807FF840DC3CE57F9.cer
Subject Information Access:
Signed Object - URI:rsync://repo-rpki.idnic.net/repo/a63655f1-38b6-4415-8faf-2b5b9153e52d/0/129AAEFC08D204E9BE5439C807FF840DC3CE57F9.mft
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
0a:3a:78:d7:4f:8d:2f:77:c2:59:69:79:75:b4:44:a1:c8:ea:
2c:58:cf:ee:f5:f8:8d:2e:db:f7:80:1b:0f:53:db:3a:53:58:
f8:14:43:37:74:cb:80:bc:e0:69:c8:6f:58:41:89:55:8c:07:
40:00:b1:2d:c4:99:74:9d:b8:c9:a8:2a:69:0e:60:9a:13:1f:
80:58:4f:43:b8:5a:bd:9a:4a:46:5a:76:5e:1e:ad:aa:e3:ea:
d4:bf:cf:f1:8c:7d:6e:4b:eb:aa:d2:50:5d:4f:fe:60:5e:27:
70:61:47:66:38:4a:b3:2c:2b:88:ec:aa:d7:b9:53:a5:ac:4f:
80:2a:e0:57:b2:d4:0c:27:a1:d1:00:df:3a:9d:eb:d6:e3:0d:
f7:f7:67:71:c1:a6:bb:a7:48:87:31:e9:5f:22:89:dd:62:65:
5f:2e:dd:bc:0d:09:36:b8:87:85:8f:7e:e8:eb:35:29:e6:05:
4a:04:e0:2a:5d:27:5b:02:cc:e1:b5:54:41:65:dc:7f:56:53:
80:22:3a:a0:77:85:fb:a5:83:d1:82:09:44:bd:43:0f:a7:2e:
e9:80:25:7e:79:3a:e6:17:67:a9:0d:58:89:77:79:d0:33:94:
4e:f8:10:0c:0e:3b:f1:fd:2b:c2:21:29:59:32:cc:8f:9f:9a:
14:8a:46:b3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jun 3 03:08:24 2026 by rpki-client