Manifest
$ rpki-client -vvf repo-rpki.idnic.net/repo/b3370d24-a656-4336-842b-9bd5dca2b40a/0/A2F125E1CDB95BA2AF5636AF284A399496555F38.mft
File: A2F125E1CDB95BA2AF5636AF284A399496555F38.mft (raw, json)
Hash identifier: nTy1jm7Cz82ndpmZc/i1t5t3kEfwJW0BfLSEM4wWsOo=
Subject key identifier: 97:1A:23:ED:C7:26:43:08:0B:76:5F:E1:03:9B:70:13:83:31:AA:B3
Authority key identifier: A2:F1:25:E1:CD:B9:5B:A2:AF:56:36:AF:28:4A:39:94:96:55:5F:38
Certificate issuer: /CN=A2F125E1CDB95BA2AF5636AF284A399496555F38
Certificate serial: 06F4847BC07E73BA44A4432E73A79F41900E344B
Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/A2F125E1CDB95BA2AF5636AF284A399496555F38.cer
Subject info access: rsync://repo-rpki.idnic.net/repo/b3370d24-a656-4336-842b-9bd5dca2b40a/0/A2F125E1CDB95BA2AF5636AF284A399496555F38.mft
Manifest number: 025C
Signing time: Wed 29 Apr 2026 00:42:14 +0000
Manifest this update: Wed 29 Apr 2026 00:37:14 +0000
Manifest next update: Sat 02 May 2026 06:45:14 +0000
Files and hashes: 1: A2F125E1CDB95BA2AF5636AF284A399496555F38.crl (hash: Jl1K0fI+rDxc3pp+ABdtChC0jMtNS39wnjpaPH1kTn8=)
2: 3130332e3139312e3231382e302f32342d3234203d3e20313439393330.roa (hash: GYOdgB5E6zAfN6csGwKvCQu8t1dBnuZsHYI8ZcYsOXc=)
3: 3130332e3139312e3231392e302f32342d3234203d3e20313439393330.roa (hash: wMwayzIPwqMBIP88IOsXTpqmzpX3PVf3WfVEJ/JlX8M=)
4: 3130332e3139312e3231382e302f32332d3234203d3e20313439393330.roa (hash: eU4CsIBkCNHWwkLGYk1dQXK+PlYTeSPnN5JLGBDdwoE=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
06:f4:84:7b:c0:7e:73:ba:44:a4:43:2e:73:a7:9f:41:90:0e:34:4b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A2F125E1CDB95BA2AF5636AF284A399496555F38
Validity
Not Before: Apr 29 00:37:14 2026 GMT
Not After : May 2 06:45:14 2026 GMT
Subject: CN=971A23EDC72643080B765FE1039B70138331AAB3
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b4:d7:55:69:c5:7f:28:21:3d:1f:4d:49:00:62:
4f:ab:2e:7b:5c:24:a2:0f:ae:7d:69:8f:99:4d:f1:
07:7c:df:7f:4a:78:6e:bf:35:f4:48:4c:4e:c3:a6:
d1:3d:85:d6:38:43:0f:c8:1b:28:99:40:2b:0a:65:
54:e8:50:21:bc:92:55:0d:29:7a:35:ef:a2:fe:9b:
e5:98:6e:5b:4e:40:8c:ad:49:66:69:fa:b4:63:de:
29:e4:c0:28:12:f9:b0:86:5d:c1:8e:a4:a1:9a:4a:
30:53:78:82:67:cc:3a:40:2f:cd:0d:b1:05:e1:09:
6e:ba:5c:c2:17:7a:a7:31:78:4e:58:57:67:cf:49:
f3:b3:e8:0f:5a:19:a4:90:0f:4d:15:cd:dd:f6:ef:
e7:80:68:f6:9e:41:5d:ba:63:e8:bb:26:4e:0e:c1:
f8:4c:b2:f2:59:0a:e5:8c:97:a9:c2:0c:a5:53:a7:
45:76:aa:ec:6a:8e:60:69:b3:9e:15:92:d7:6c:f8:
b3:c9:1a:f7:c3:34:31:b8:cd:26:ea:c6:1f:c3:20:
7e:e3:d2:79:67:39:95:84:55:6e:5b:b8:51:de:f6:
76:46:d2:26:0a:d9:b8:f4:fb:2c:93:14:30:25:e0:
99:27:35:18:78:ea:70:1b:6b:2b:19:83:82:14:30:
ba:9f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
97:1A:23:ED:C7:26:43:08:0B:76:5F:E1:03:9B:70:13:83:31:AA:B3
X509v3 Authority Key Identifier:
keyid:A2:F1:25:E1:CD:B9:5B:A2:AF:56:36:AF:28:4A:39:94:96:55:5F:38
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://repo-rpki.idnic.net/repo/b3370d24-a656-4336-842b-9bd5dca2b40a/0/A2F125E1CDB95BA2AF5636AF284A399496555F38.crl
Authority Information Access:
CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/A2F125E1CDB95BA2AF5636AF284A399496555F38.cer
Subject Information Access:
Signed Object - URI:rsync://repo-rpki.idnic.net/repo/b3370d24-a656-4336-842b-9bd5dca2b40a/0/A2F125E1CDB95BA2AF5636AF284A399496555F38.mft
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
5a:ad:95:53:d9:27:4e:94:9b:96:a3:50:9b:13:29:15:c2:fc:
71:ab:ad:8b:fc:75:92:a9:07:30:f9:13:b2:24:b4:bc:98:d5:
5a:54:bb:2c:46:69:20:82:fc:ab:80:e9:ce:b4:eb:9d:92:c9:
51:80:a6:50:7e:4c:e8:5a:3e:83:e9:15:51:cc:ae:51:38:01:
e9:f6:e0:95:c4:01:b7:5e:71:aa:42:5d:40:c1:14:8b:95:b4:
f3:0b:eb:f9:02:b1:b4:cc:0a:47:52:ec:14:ee:ee:f0:ff:cc:
b6:ab:b6:57:b8:36:f9:0e:3b:e7:11:75:73:08:a7:d0:e0:09:
ef:1c:d2:48:60:5d:c6:ab:13:ce:24:ae:1d:aa:fd:86:aa:bd:
f3:d7:59:bd:9c:8b:a6:fd:79:ef:2f:45:e2:15:f4:8d:56:0e:
f1:8c:d0:d6:b4:2f:0a:03:ca:1c:34:94:3f:8f:44:78:26:e3:
68:4a:2e:d8:dd:45:c0:e6:0a:e6:ad:d5:6d:ad:ec:ed:a3:0b:
81:01:85:cf:0b:cc:4f:ca:40:6f:37:a9:6d:dd:70:06:fa:57:
67:24:bb:c9:c7:82:e5:92:db:0e:5c:fb:e4:42:a1:17:9c:63:
f4:c6:b7:5f:7a:b2:54:45:82:29:c5:b2:7b:d7:ee:e5:d6:b3:
c0:65:66:60
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jun 3 03:36:57 2026 by rpki-client