Manifest
$ rpki-client -vvf repo-rpki.idnic.net/repo/b8117ca8-b4e5-467a-88a8-a4b63e40c3ed/0/B956E5764D9917A7389654D67836D02779ED9E22.mft
File: B956E5764D9917A7389654D67836D02779ED9E22.mft (raw, json)
Hash identifier: iy/2dkcUlc52zl5jqEhcrpvqH5AfjCC1nDy2ZfsUomM=
Subject key identifier: E4:08:8E:96:06:53:FE:0E:B8:A2:6C:6A:70:76:99:51:F3:45:81:8A
Authority key identifier: B9:56:E5:76:4D:99:17:A7:38:96:54:D6:78:36:D0:27:79:ED:9E:22
Certificate issuer: /CN=B956E5764D9917A7389654D67836D02779ED9E22
Certificate serial: 07FB5BDBAA4C2FDB6943EFBD302832F85F29F512
Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/B956E5764D9917A7389654D67836D02779ED9E22.cer
Subject info access: rsync://repo-rpki.idnic.net/repo/b8117ca8-b4e5-467a-88a8-a4b63e40c3ed/0/B956E5764D9917A7389654D67836D02779ED9E22.mft
Manifest number: 0253
Signing time: Wed 29 Apr 2026 09:21:20 +0000
Manifest this update: Wed 29 Apr 2026 09:16:20 +0000
Manifest next update: Sat 02 May 2026 10:54:20 +0000
Files and hashes: 1: B956E5764D9917A7389654D67836D02779ED9E22.crl (hash: YNj1T6chcAY/6jO/iZY9tV7AQbfF2o+Ul4jpC2M7lzM=)
2: 3130332e34342e31392e302f32342d3234203d3e20313530313931.roa (hash: xRSXhth5RPLQDUpDjvFyriqelwPeLnjETcyxKSf1xt8=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
07:fb:5b:db:aa:4c:2f:db:69:43:ef:bd:30:28:32:f8:5f:29:f5:12
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=B956E5764D9917A7389654D67836D02779ED9E22
Validity
Not Before: Apr 29 09:16:20 2026 GMT
Not After : May 2 10:54:20 2026 GMT
Subject: CN=E4088E960653FE0EB8A26C6A70769951F345818A
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:98:6d:f3:16:a8:ea:80:8c:c6:57:63:8a:4c:51:
7a:9e:2f:ce:d6:2b:92:6e:9d:8e:1b:e1:c2:c9:50:
64:c9:5a:e2:6f:73:e4:04:a8:47:7b:37:1c:ff:38:
e2:16:e4:e9:12:d4:1a:25:75:b2:e2:a2:0b:e7:43:
53:88:1f:54:f4:c0:de:de:38:00:e9:09:e2:3e:ba:
5a:10:ba:83:39:c4:d3:ba:6d:f9:a0:80:04:10:46:
62:5d:f8:e2:be:72:7c:6a:25:a9:65:57:b1:74:5f:
f0:e0:75:bb:7b:98:1e:b5:b8:70:7d:c8:0c:01:47:
8c:22:0f:7a:10:9a:45:cb:c1:0b:79:6e:9b:6b:26:
e0:e3:27:7e:4d:e5:b9:bd:79:0a:f4:20:34:e1:b6:
7a:61:ee:d4:14:04:6f:a5:ac:29:ca:9b:be:3d:95:
95:42:42:cb:f6:b7:fd:bb:04:79:89:88:90:d7:02:
6d:a0:41:61:a6:cf:59:76:61:5d:6a:b4:3f:a3:ec:
d2:b8:ef:6e:7e:7a:66:93:eb:fc:9f:55:dd:54:e0:
14:87:af:5f:92:62:38:45:ec:28:91:e9:02:e3:34:
35:18:40:31:6a:5a:1b:07:ef:04:b7:36:24:8e:3e:
e4:1d:12:c2:db:82:1f:f2:5e:2a:4c:56:24:6f:bd:
6a:3b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E4:08:8E:96:06:53:FE:0E:B8:A2:6C:6A:70:76:99:51:F3:45:81:8A
X509v3 Authority Key Identifier:
keyid:B9:56:E5:76:4D:99:17:A7:38:96:54:D6:78:36:D0:27:79:ED:9E:22
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://repo-rpki.idnic.net/repo/b8117ca8-b4e5-467a-88a8-a4b63e40c3ed/0/B956E5764D9917A7389654D67836D02779ED9E22.crl
Authority Information Access:
CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/B956E5764D9917A7389654D67836D02779ED9E22.cer
Subject Information Access:
Signed Object - URI:rsync://repo-rpki.idnic.net/repo/b8117ca8-b4e5-467a-88a8-a4b63e40c3ed/0/B956E5764D9917A7389654D67836D02779ED9E22.mft
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
18:ee:d3:7c:b8:44:74:6f:3c:1e:66:c2:db:c8:46:ec:37:0c:
10:13:d8:86:d7:59:f0:2d:6f:de:e7:78:8f:c1:91:2c:04:76:
0a:0f:7f:c7:bc:3b:4e:2b:02:e9:7f:0c:da:4d:1d:dd:ee:d9:
56:ef:fc:cd:56:72:ae:9b:72:f9:9d:84:bd:78:44:f7:08:20:
7f:83:c2:bd:ce:ea:5c:87:b9:b3:67:38:6e:2e:26:2c:2d:c6:
bd:28:82:8f:da:7d:37:32:f0:12:0a:62:97:04:41:56:7e:58:
f6:0f:b0:2b:a2:8b:fb:cc:28:3b:cf:61:ac:83:09:ab:7c:10:
1b:2b:11:6e:92:5e:aa:1f:9d:05:a6:21:d6:f9:f1:95:68:a6:
dc:dc:dc:09:ff:89:51:7c:19:a9:22:97:82:c9:bd:34:05:82:
3a:81:6c:91:6b:58:09:ab:bd:be:0d:22:cd:fa:9a:e4:75:f5:
fe:2e:e9:db:b8:f5:64:01:9a:47:93:14:f7:6e:da:85:7f:3f:
34:a3:7f:a3:82:fd:8b:75:c2:4c:81:3a:eb:a2:cd:ba:70:bf:
00:4d:6b:48:70:01:e1:35:bd:da:b6:a0:17:7c:03:92:6f:34:
bb:d1:fb:44:c2:bb:8e:b4:9e:7b:6b:3d:27:f6:e3:f4:09:c3:
a7:cc:0d:4a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jun 3 03:08:45 2026 by rpki-client