Manifest
$ rpki-client -vvf repo-rpki.idnic.net/repo/ae89e859-3c2c-4a09-a4a9-37323ea5de22/0/4A906D4F534B26A0E62898882630292936CEA54A.mft
File: 4A906D4F534B26A0E62898882630292936CEA54A.mft (raw, json)
Hash identifier: 6SJw5Ds3TD1f8UdDyNC49P7TK2vCpslabsbYwFgLQNc=
Subject key identifier: 13:F5:92:D0:9E:02:76:1C:E9:55:12:B5:BE:2C:74:E9:2E:D2:CA:23
Authority key identifier: 4A:90:6D:4F:53:4B:26:A0:E6:28:98:88:26:30:29:29:36:CE:A5:4A
Certificate issuer: /CN=4A906D4F534B26A0E62898882630292936CEA54A
Certificate serial: 5480FA9284BB6AE1B7F78B1122C8A7CDE3E7F1D9
Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/4A906D4F534B26A0E62898882630292936CEA54A.cer
Subject info access: rsync://repo-rpki.idnic.net/repo/ae89e859-3c2c-4a09-a4a9-37323ea5de22/0/4A906D4F534B26A0E62898882630292936CEA54A.mft
Manifest number: 019D
Signing time: Tue 28 Apr 2026 03:11:54 +0000
Manifest this update: Tue 28 Apr 2026 03:06:54 +0000
Manifest next update: Fri 01 May 2026 03:45:54 +0000
Files and hashes: 1: 3130332e3137312e38322e302f32342d3234203d3e20313432333733.roa (hash: WMWtIWXP3rHM6u9VZyFOIHKvW80yliOmPYEco+tmVZQ=)
2: 3130332e3137312e38332e302f32342d3234203d3e20313432333733.roa (hash: 0SClEliKB0AlO5DzEurqFtVJ6yiiJ9eJczPmmj9dw18=)
3: 4A906D4F534B26A0E62898882630292936CEA54A.crl (hash: lVm1uEz6BBOQrIzc54led+By7mQJj2G3D0UzRy98buc=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
54:80:fa:92:84:bb:6a:e1:b7:f7:8b:11:22:c8:a7:cd:e3:e7:f1:d9
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4A906D4F534B26A0E62898882630292936CEA54A
Validity
Not Before: Apr 28 03:06:54 2026 GMT
Not After : May 1 03:45:54 2026 GMT
Subject: CN=13F592D09E02761CE95512B5BE2C74E92ED2CA23
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ab:4c:81:d0:9e:06:28:ff:d2:b2:11:d0:12:5d:
d0:5f:ce:09:67:63:2d:4b:26:57:75:73:d0:51:a2:
34:d5:6e:1f:99:f4:5a:f5:80:7a:66:22:63:e1:96:
67:fc:b6:9f:14:0a:ce:a1:bb:e3:b9:4d:52:52:bb:
41:98:3b:5c:c2:6a:bd:31:0e:3c:a7:77:11:0f:21:
5c:07:8a:af:69:cd:0c:f8:ab:70:98:28:14:96:ed:
83:25:50:ec:d4:ee:46:32:57:3c:87:04:54:ee:53:
65:4d:a3:62:68:67:5b:4b:b3:8f:70:18:91:5d:d1:
e0:7d:90:bb:00:7e:2c:c8:bc:75:31:cf:a9:43:ad:
30:16:87:85:5c:af:2c:5d:c7:13:a1:ba:dd:28:dc:
fd:99:85:04:d9:89:e9:2e:3c:d2:7c:2e:3e:c5:8c:
d8:12:1f:be:14:42:00:1c:4d:ef:58:d3:af:a3:07:
dd:90:28:d2:d8:9f:36:58:fe:4a:f0:06:85:49:78:
f3:1a:33:44:60:58:72:83:fd:55:d2:67:c5:61:6e:
2c:2c:ab:7b:6f:ab:ba:b8:9e:b0:92:ce:8e:0e:0a:
1e:7e:45:3e:6f:df:ac:f4:6b:23:2e:de:c4:8b:16:
3a:43:06:09:d7:4d:47:5e:21:5e:d0:59:a2:53:22:
24:69
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
13:F5:92:D0:9E:02:76:1C:E9:55:12:B5:BE:2C:74:E9:2E:D2:CA:23
X509v3 Authority Key Identifier:
keyid:4A:90:6D:4F:53:4B:26:A0:E6:28:98:88:26:30:29:29:36:CE:A5:4A
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://repo-rpki.idnic.net/repo/ae89e859-3c2c-4a09-a4a9-37323ea5de22/0/4A906D4F534B26A0E62898882630292936CEA54A.crl
Authority Information Access:
CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/4A906D4F534B26A0E62898882630292936CEA54A.cer
Subject Information Access:
Signed Object - URI:rsync://repo-rpki.idnic.net/repo/ae89e859-3c2c-4a09-a4a9-37323ea5de22/0/4A906D4F534B26A0E62898882630292936CEA54A.mft
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
3c:46:83:9e:0f:d1:8a:75:6f:a5:cd:bf:00:3c:56:01:c0:e7:
ef:76:87:a4:b9:7b:11:43:e7:a5:36:80:b8:91:fa:61:75:38:
fe:19:79:f0:87:71:18:4b:47:dd:cb:d9:b3:95:93:8f:93:a0:
27:9c:c6:7f:33:56:fd:c2:5b:a5:6b:2a:dc:8e:2a:9b:09:92:
a4:5a:47:87:47:32:53:67:a7:63:e1:b8:e8:10:13:5f:d4:53:
ad:c0:05:69:32:92:79:6e:8d:5b:47:c8:0b:89:bc:f3:15:d1:
c3:1c:fc:30:71:3a:48:87:35:d3:87:ca:df:7c:91:0e:2c:26:
2f:df:28:c8:70:04:ec:e4:75:03:be:b8:9e:6a:97:d6:42:02:
f4:0f:08:95:c8:75:65:25:70:b5:4f:17:2f:7f:f6:f7:4c:70:
01:c8:1d:0c:bc:17:64:a1:70:23:a1:fe:27:83:7c:d7:80:b3:
bc:04:eb:51:ac:01:31:b5:8c:56:25:bc:3f:bf:63:55:8c:09:
53:f6:c2:df:ed:15:e3:fd:b0:06:69:b5:4e:99:c4:4b:50:bf:
24:57:fe:b3:41:10:b4:f0:06:96:7f:46:33:d4:23:0f:3c:32:
43:02:ac:de:42:2c:f2:ea:eb:e4:85:47:f0:c9:57:2f:d6:3d:
bf:89:a4:1d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jun 3 03:09:01 2026 by rpki-client