Manifest
$ rpki-client -vvf repo-rpki.idnic.net/repo/b94c1e95-a738-4e47-8e5c-7af681b36b00/0/8DBECF314BD3C829923A3A97BFC62113A61F8EE1.mft
File: 8DBECF314BD3C829923A3A97BFC62113A61F8EE1.mft (raw, json)
Hash identifier: YCrnVqRBDR/LnxBoOCeT+8lQhCk74Aq7bocSqwR4Las=
Subject key identifier: 79:2F:98:73:38:2E:27:AE:C4:65:83:D8:81:5E:8B:37:54:E4:0D:9A
Authority key identifier: 8D:BE:CF:31:4B:D3:C8:29:92:3A:3A:97:BF:C6:21:13:A6:1F:8E:E1
Certificate issuer: /CN=8DBECF314BD3C829923A3A97BFC62113A61F8EE1
Certificate serial: 42CAF825D0EF4EB5F59C6C5799FBE8F30D5728EB
Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/8DBECF314BD3C829923A3A97BFC62113A61F8EE1.cer
Subject info access: rsync://repo-rpki.idnic.net/repo/b94c1e95-a738-4e47-8e5c-7af681b36b00/0/8DBECF314BD3C829923A3A97BFC62113A61F8EE1.mft
Manifest number: 0268
Signing time: Tue 28 Apr 2026 01:11:19 +0000
Manifest this update: Tue 28 Apr 2026 01:06:19 +0000
Manifest next update: Fri 01 May 2026 04:14:19 +0000
Files and hashes: 1: 3130332e3138362e39302e302f32342d3234203d3e20313439373037.roa (hash: rfvWdPfJDLIYs6uNr68F470gBmctz7tC2fHbouL5TpQ=)
2: 3130332e3138362e39302e302f32332d3233203d3e20313439373037.roa (hash: ICdvINkILNoezpXS4hNV2DoVPsk+RYrVNgwPVBZPvUo=)
3: 8DBECF314BD3C829923A3A97BFC62113A61F8EE1.crl (hash: vOLaYw7Qn0dgmyHexHzGOr6ZHQYXn4XDwHx0nUKLqWI=)
4: 3130332e3138362e39312e302f32342d3234203d3e20313439373037.roa (hash: M8fCe5D8d2IyMGkvGFHQzCu5uqFZk9IhypXImoxO/WY=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
42:ca:f8:25:d0:ef:4e:b5:f5:9c:6c:57:99:fb:e8:f3:0d:57:28:eb
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8DBECF314BD3C829923A3A97BFC62113A61F8EE1
Validity
Not Before: Apr 28 01:06:19 2026 GMT
Not After : May 1 04:14:19 2026 GMT
Subject: CN=792F9873382E27AEC46583D8815E8B3754E40D9A
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c0:5a:2b:ab:25:a0:0f:4d:30:4f:b5:d9:ea:ac:
34:64:cc:59:fe:bc:b5:2b:15:42:6a:55:14:0a:28:
b9:6e:ed:5a:21:00:06:cc:34:61:de:8e:c3:c6:dd:
64:08:c2:ff:8b:d6:5f:cf:1d:90:38:e3:5d:06:e2:
c7:29:43:7b:01:a5:c1:ad:44:80:4c:60:33:02:b3:
98:d1:e9:80:7b:d9:e3:dd:f0:2d:1d:8f:97:bc:7b:
bf:1e:a5:a8:00:42:28:52:da:03:d8:39:f6:b6:44:
ec:72:17:1f:fd:73:ad:46:1b:32:c0:17:32:bc:dc:
78:e8:c7:79:58:7b:40:c5:6d:3c:39:53:15:a3:37:
c5:f8:60:47:52:01:4a:09:e1:11:8a:42:aa:e2:7e:
bf:42:f8:67:c4:2e:58:28:98:bf:f2:53:57:06:65:
07:33:58:72:ae:d7:09:9f:c4:ba:09:ce:13:e2:b2:
ff:aa:82:f4:54:f3:ae:47:14:4d:a5:26:ae:54:ff:
89:16:23:3f:6f:d5:54:95:7d:fa:01:f3:e2:4d:95:
b0:7f:87:92:ec:01:0d:1a:bd:65:b7:73:da:ab:7c:
3d:c3:35:a0:6d:4d:49:06:ef:d5:17:84:7c:5b:be:
34:17:19:fa:35:e3:f8:81:4b:44:a7:f3:c1:a6:19:
39:f9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
79:2F:98:73:38:2E:27:AE:C4:65:83:D8:81:5E:8B:37:54:E4:0D:9A
X509v3 Authority Key Identifier:
keyid:8D:BE:CF:31:4B:D3:C8:29:92:3A:3A:97:BF:C6:21:13:A6:1F:8E:E1
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://repo-rpki.idnic.net/repo/b94c1e95-a738-4e47-8e5c-7af681b36b00/0/8DBECF314BD3C829923A3A97BFC62113A61F8EE1.crl
Authority Information Access:
CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/8DBECF314BD3C829923A3A97BFC62113A61F8EE1.cer
Subject Information Access:
Signed Object - URI:rsync://repo-rpki.idnic.net/repo/b94c1e95-a738-4e47-8e5c-7af681b36b00/0/8DBECF314BD3C829923A3A97BFC62113A61F8EE1.mft
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
43:51:4e:42:2d:51:8b:de:dc:c5:45:3c:c7:a4:7e:f3:d6:3a:
7b:fe:d8:00:4b:24:c9:eb:c5:9f:04:ae:99:7f:9f:b9:70:1f:
5c:1d:73:96:f0:87:a8:1f:88:65:ca:cb:6f:95:3c:77:bd:7a:
ee:d8:c8:1a:aa:bb:99:5b:65:d4:9c:64:65:f4:69:18:4c:4f:
78:a0:d8:73:10:c9:55:d5:c1:a6:6e:6c:95:d8:9b:13:32:e1:
f6:80:24:a1:92:09:d1:8e:2c:12:c6:58:5a:06:04:ad:a9:d5:
92:83:3d:a4:23:15:fa:7e:c0:0c:2c:4c:87:bb:f4:e0:90:5f:
db:2b:42:62:f9:20:25:08:6e:91:19:41:02:23:af:2c:d1:25:
e5:ce:f5:cf:fe:5c:ce:5a:70:13:4a:ae:4a:56:05:41:88:72:
a1:40:2d:7f:a5:64:7d:2b:49:e6:ec:b5:97:de:e2:ad:a1:c7:
d9:44:cf:bb:eb:65:1b:7c:4f:56:eb:57:5f:a6:b6:16:08:a3:
52:89:14:b3:d3:1e:b9:29:11:82:82:59:eb:10:6b:56:2d:e4:
cc:c2:78:67:23:fc:a7:1b:e6:7e:cf:d0:1b:9f:82:21:f5:72:
c0:b1:45:9f:32:7d:e7:6d:50:88:f5:19:12:64:51:d7:2d:31:
bf:83:18:24
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jun 3 03:21:26 2026 by rpki-client