$ rpki-client -vvf repo-rpki.idnic.net/repo/a945b86e-0895-4759-a77c-a06ce14e243c/0/C8DD5D84FAFABF7EAF62B3B0F4E45A2331F802E1.mft File: C8DD5D84FAFABF7EAF62B3B0F4E45A2331F802E1.mft (raw, json) Hash identifier: wv+0pfp21tEL+ki+1fnigeYFEGn/ML/yobi5YrTYDoQ= Subject key identifier: C1:B3:BB:07:E1:47:2C:BB:0C:47:72:49:DC:62:B6:B8:1E:55:84:71 Authority key identifier: C8:DD:5D:84:FA:FA:BF:7E:AF:62:B3:B0:F4:E4:5A:23:31:F8:02:E1 Certificate issuer: /CN=C8DD5D84FAFABF7EAF62B3B0F4E45A2331F802E1 Certificate serial: 32270638A2A79A028D219AB10ABCFF21FF8EE33D Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/C8DD5D84FAFABF7EAF62B3B0F4E45A2331F802E1.cer Subject info access: rsync://repo-rpki.idnic.net/repo/a945b86e-0895-4759-a77c-a06ce14e243c/0/C8DD5D84FAFABF7EAF62B3B0F4E45A2331F802E1.mft Manifest number: 0590 Signing time: Mon 27 Apr 2026 19:02:02 +0000 Manifest this update: Mon 27 Apr 2026 18:57:02 +0000 Manifest next update: Thu 30 Apr 2026 19:54:02 +0000 Files and hashes: 1: 3137352e3130332e33332e302f32342d3234203d3e203338333230.roa (hash: KzgLs/LHXiYp6dca8nzIUvPjUz6brhBBX/CAtP5nMik=) 2: 323430343a333930303a313a3a2f34382d3438203d3e203338333230.roa (hash: bZIz402y8HeI28WEFFpDnjFVUP7vZBGPQIM5w8kbN1g=) 3: 3132322e3134342e302e302f32322d3234203d3e203338333230.roa (hash: 6KFCBq0GeLMij9zX0LHtO8AChuye1d1F56fk0H8ZhzU=) 4: 3131392e3131302e36382e302f32322d3234203d3e203338333230.roa (hash: +/NKATGB5uQMThm7QeKGnVHTe5xcp8ImXTgyPu6itTk=) 5: 3137352e3130332e33322e302f32342d3234203d3e203338333230.roa (hash: WYMvSvVQ7LmzdzI/Y9IjmjwPnuhAowKHbIWl+8CxoTM=) 6: 3137352e3130332e33342e302f32342d3234203d3e203338333230.roa (hash: Wyb0UWY/xry3f5h6Pv1OX1FeBIM6n1lp2HY/CxbmmFM=) 7: 3230332e3137332e38382e302f32342d3234203d3e20313339343630.roa (hash: mm2pBp9XNAO/aA6cLfKsVFgLvpIqWU1n8jnigUN46c4=) 8: 3137352e3130332e35332e302f32342d3234203d3e203338333230.roa (hash: 8rLhPZ1kO1OPhZMtRSj4vbuT69WDh/TKZCdll2MOUmQ=) 9: 3230332e3137332e39312e302f32342d3234203d3e20313339343630.roa (hash: nnj0KLDw9ngWzorUbdMHyDWYfETgXpzXO3uTEwZi24Q=) 10: 323430343a333930303a313939323a3a2f34382d3438203d3e203338333230.roa (hash: e4sjRhvp6mUHQQONhwMETVFyiY5/bOpZffIZ6/yt038=) 11: 3132322e3134342e342e302f32322d3234203d3e203338333230.roa (hash: V3630RXZfBbv0izTqUqFayseBZlNQ8xYG082iWZg+6Q=) 12: 3131392e3131302e36342e302f32322d3234203d3e203338333230.roa (hash: Vj2lcWZTEwWf2AmX1t9dPjT0UD/5pkYVDIvaHli/TFM=) 13: 34332e3234372e31322e302f32322d3234203d3e203338333230.roa (hash: 2g+NXNHiM0B7rPdW5gGiKA7VbkoVsAcew6mjSoTkRN4=) 14: 3230332e3137332e39302e302f32332d3234203d3e20313339343630.roa (hash: /WT3CcLt/Wqy1totp1szjJmd03e3/iGONHlBm57jO1k=) 15: 3130332e32392e3136342e302f32322d3234203d3e203338333230.roa (hash: b9Rswz6WqKP1CD5vZ2CgK/WpMe7q+ItG8/U5zV32DeE=) 16: 323430343a333930303a6139323a3a2f34382d3438203d3e203338333230.roa (hash: Ou1QMOVVtAAa367JCP3byx/XbB4/rWHxtoD7UtBXQ9o=) 17: C8DD5D84FAFABF7EAF62B3B0F4E45A2331F802E1.crl (hash: OlT0gQjy4VxPmX3B6Y6inGKT3X0T5PoQXwUkuyOAWzM=) 18: 3137352e3130332e34352e302f32342d3234203d3e203338333230.roa (hash: bw8Hpu0FONj3uQaL/ySP1D3C1YAb9B5NcNozVjL3dTY=) 19: 3137352e3130332e35372e302f32342d3234203d3e203338333230.roa (hash: V9Mppv9SlbFw56ep+HO54EeH/ulvHDySp4xMGMMMAGE=) 20: 3230332e3137332e38392e302f32342d3234203d3e203338333230.roa (hash: 6ji1OwtEeZ5gDOUwTpL/nrhK0wgzay4u+O8JbfpMxKk=) 21: 3131392e3131302e37322e302f32322d3234203d3e203338333230.roa (hash: ioskptQxOnwUzRvlUOwTLhn2ti6yWbMMGvP/wH2z3Mo=) Validation: Failed, unable to get local issuer certificate Certificate: Data: Version: 3 (0x2) Serial Number: 32:27:06:38:a2:a7:9a:02:8d:21:9a:b1:0a:bc:ff:21:ff:8e:e3:3d Signature Algorithm: sha256WithRSAEncryption Issuer: CN=C8DD5D84FAFABF7EAF62B3B0F4E45A2331F802E1 Validity Not Before: Apr 27 18:57:02 2026 GMT Not After : Apr 30 19:54:02 2026 GMT Subject: CN=C1B3BB07E1472CBB0C477249DC62B6B81E558471 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bc:8d:f4:6e:3a:d3:d3:9e:e4:76:4b:57:65:16: 43:f5:3c:5d:6e:fc:7a:37:40:27:96:5f:57:4e:02: 06:10:ff:25:f0:51:c5:c5:89:eb:f1:ce:32:13:34: bd:4c:6d:f6:69:3a:13:fc:b4:ce:ef:4e:59:e2:db: e1:0d:11:d3:98:69:e9:59:da:6f:84:42:3a:1a:d1: c4:73:5c:79:bf:6b:4f:84:19:1b:e4:e5:6f:14:35: 62:cb:fc:e4:da:70:6c:e2:47:19:42:32:38:a6:70: 2e:11:78:46:44:d7:14:2b:73:26:e2:e5:ac:4c:18: 44:54:af:3e:da:34:9f:09:86:a7:b1:92:62:24:f0: 97:e8:e6:3f:1d:c7:96:00:a4:d9:b6:6e:61:eb:9b: 43:50:11:e6:0d:e1:ba:5e:40:cc:32:2a:7e:b4:88: bd:e1:c2:70:3a:31:46:9c:56:e8:de:96:5b:af:a5: 1d:97:a8:37:55:7a:57:45:36:61:25:41:af:df:62: 31:1f:4a:09:74:a5:19:d8:10:21:cb:ed:33:5c:d1: e1:3b:db:e7:6e:0b:5e:1a:45:08:62:23:65:d5:50: 1c:f4:ba:e8:92:8d:c3:87:00:ea:18:ff:09:0b:95: 5f:af:38:0b:25:b3:d4:f5:a7:7a:24:17:6e:4a:1d: c4:2b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: C1:B3:BB:07:E1:47:2C:BB:0C:47:72:49:DC:62:B6:B8:1E:55:84:71 X509v3 Authority Key Identifier: keyid:C8:DD:5D:84:FA:FA:BF:7E:AF:62:B3:B0:F4:E4:5A:23:31:F8:02:E1 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/a945b86e-0895-4759-a77c-a06ce14e243c/0/C8DD5D84FAFABF7EAF62B3B0F4E45A2331F802E1.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/C8DD5D84FAFABF7EAF62B3B0F4E45A2331F802E1.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/a945b86e-0895-4759-a77c-a06ce14e243c/0/C8DD5D84FAFABF7EAF62B3B0F4E45A2331F802E1.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 3f:6d:8a:ac:e3:8a:d2:48:d3:a2:e9:7b:83:4e:3a:be:97:be: 00:9b:b4:83:8c:8d:b4:43:6d:3d:15:24:6c:87:79:02:ea:f4: c2:69:44:bd:6a:0c:c7:91:71:38:a9:4b:c7:c3:cc:f2:c8:53: 1e:9a:62:01:73:81:4a:d0:8a:8e:fd:91:86:72:6d:83:fc:15: a7:63:0d:ad:5f:fc:2f:76:9a:3c:07:cf:6c:66:6e:ac:2e:ae: 11:ab:40:0c:52:85:c3:5d:31:3a:eb:5c:f4:d1:c8:b9:e1:ef: cd:ee:22:47:31:28:94:23:8e:2e:10:e6:ea:06:ef:13:b2:f1: 05:39:01:4e:fd:9c:da:87:ea:d9:74:3e:3e:ef:7f:0d:73:26: 68:de:b8:f1:9d:23:a0:2b:2b:e4:b2:f7:4a:46:c3:eb:96:c3: c7:d2:ae:1b:b0:e5:f7:e1:53:b9:da:28:04:46:f6:2c:78:65: 28:94:74:df:0e:ce:8f:6d:b4:3b:e8:82:5a:7b:33:ac:da:75: 4a:05:ad:dd:a0:1f:44:4a:9e:d0:7f:b1:49:be:d9:7d:3e:b4: ce:fc:0c:d1:c8:69:26:f6:5e:32:52:f0:bb:8d:5d:8a:78:a1: 98:f9:a0:0a:a5:d6:a2:91:94:95:70:ef:94:0b:36:e1:06:02: 0e:69:79:22 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUMicGOKKnmgKNIZqxCrz/If+O4z0wDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoQzhERDVEODRGQUZBQkY3RUFGNjJCM0IwRjRFNDVBMjMz MUY4MDJFMTAeFw0yNjA0MjcxODU3MDJaFw0yNjA0MzAxOTU0MDJaMDMxMTAvBgNV BAMTKEMxQjNCQjA3RTE0NzJDQkIwQzQ3NzI0OURDNjJCNkI4MUU1NTg0NzEwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC8jfRuOtPTnuR2S1dlFkP1PF1u /Ho3QCeWX1dOAgYQ/yXwUcXFievxzjITNL1MbfZpOhP8tM7vTlni2+ENEdOYaelZ 2m+EQjoa0cRzXHm/a0+EGRvk5W8UNWLL/OTacGziRxlCMjimcC4ReEZE1xQrcybi 5axMGERUrz7aNJ8JhqexkmIk8Jfo5j8dx5YApNm2bmHrm0NQEeYN4bpeQMwyKn60 iL3hwnA6MUacVujelluvpR2XqDdVeldFNmElQa/fYjEfSgl0pRnYECHL7TNc0eE7 2+duC14aRQhiI2XVUBz0uuiSjcOHAOoY/wkLlV+vOAsls9T1p3okF25KHcQrAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUwbO7B+FHLLsMR3JJ3GK2uB5VhHEwHwYDVR0j BBgwFoAUyN1dhPr6v36vYrOw9ORaIzH4AuEwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby9h OTQ1Yjg2ZS0wODk1LTQ3NTktYTc3Yy1hMDZjZTE0ZTI0M2MvMC9DOERENUQ4NEZB RkFCRjdFQUY2MkIzQjBGNEU0NUEyMzMxRjgwMkUxLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvQzhERDVEODRGQUZBQkY3RUFGNjJCM0IwRjRFNDVBMjMzMUY4 MDJFMS5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vYTk0NWI4NmUtMDg5NS00NzU5LWE3 N2MtYTA2Y2UxNGUyNDNjLzAvQzhERDVEODRGQUZBQkY3RUFGNjJCM0IwRjRFNDVB MjMzMUY4MDJFMS5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAD9tiqzjitJI06Lpe4NOOr6XvgCbtIOMjbRD bT0VJGyHeQLq9MJpRL1qDMeRcTipS8fDzPLIUx6aYgFzgUrQio79kYZybYP8Fadj Da1f/C92mjwHz2xmbqwurhGrQAxShcNdMTrrXPTRyLnh783uIkcxKJQjji4Q5uoG 7xOy8QU5AU79nNqH6tl0Pj7vfw1zJmjeuPGdI6ArK+Sy90pGw+uWw8fSrhuw5ffh U7naKARG9ix4ZSiUdN8Ozo9ttDvoglp7M6zadUoFrd2gH0RKntB/sUm+2X0+tM78 DNHIaSb2XjJS8LuNXYp4oZj5oAql1qKRlJVw75QLNuEGAg5peSI= -----END CERTIFICATE-----Generated at Wed Jun 3 03:44:36 2026 by rpki-client