Manifest
$ rpki-client -vvf repo-rpki.idnic.net/repo/c3dd6135-548c-4881-af78-93af9f2a2516/0/21F5E152BA3E25561EA4D2E2986546412F44F15B.mft
File: 21F5E152BA3E25561EA4D2E2986546412F44F15B.mft (raw, json)
Hash identifier: UQGeIu/t1C21Z1pqmQ1K9QLRkXd7Eg+l1lerqB00EXQ=
Subject key identifier: AC:14:6D:9A:87:A5:08:7B:3E:10:0B:3C:10:88:DC:E7:6F:50:92:24
Authority key identifier: 21:F5:E1:52:BA:3E:25:56:1E:A4:D2:E2:98:65:46:41:2F:44:F1:5B
Certificate issuer: /CN=21F5E152BA3E25561EA4D2E2986546412F44F15B
Certificate serial: 754847482F26474159B151D2DD308D0873AC07C6
Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/21F5E152BA3E25561EA4D2E2986546412F44F15B.cer
Subject info access: rsync://repo-rpki.idnic.net/repo/c3dd6135-548c-4881-af78-93af9f2a2516/0/21F5E152BA3E25561EA4D2E2986546412F44F15B.mft
Manifest number: FB
Signing time: Tue 28 Apr 2026 13:12:11 +0000
Manifest this update: Tue 28 Apr 2026 13:07:11 +0000
Manifest next update: Fri 01 May 2026 15:34:11 +0000
Files and hashes: 1: 21F5E152BA3E25561EA4D2E2986546412F44F15B.crl (hash: Ky+oGsfSxWhUmVeDXJjh8x8ywjPDT4AQmRd88G2YErs=)
2: 3130332e3130362e37362e302f32322d3232203d3e203436303233.roa (hash: juQ/cwjH1toIUGh+4Z6y41hGaf2rFqJaltHbfzkfdBc=)
3: 3130332e3130362e37362e302f32342d3234203d3e203436303233.roa (hash: +PmFbdoieOm1HYaiDNoJSgRpm6MfVAVtuXNpglouU7g=)
4: 3130332e3130362e37382e302f32342d3234203d3e203436303233.roa (hash: iSq6NwogxUEJNuToH4CRAdLPA94Ifhymd/i0qK2RpFY=)
5: 3130332e3130362e37392e302f32342d3234203d3e203436303233.roa (hash: aO0x+zXgbPOIjgzHxX0fAcf+6eJJ6z747uBT9dWocuM=)
6: 3130332e3130362e37372e302f32342d3234203d3e203436303233.roa (hash: CbiBxaX9ddBH1o7nomW/iHw3KqeexSYJrX7KRnYKypE=)
7: 3130332e3130362e37382e302f32332d3233203d3e203436303233.roa (hash: WYN4mrwjKunsGp4uZVpUx9nBxwBDSeavyWVXTw8bEXE=)
8: 3130332e3130362e37362e302f32332d3233203d3e203436303233.roa (hash: NaHe5YrxTvb1T+B86yAscpluwifFSNcBhISUAGBKlIw=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
75:48:47:48:2f:26:47:41:59:b1:51:d2:dd:30:8d:08:73:ac:07:c6
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=21F5E152BA3E25561EA4D2E2986546412F44F15B
Validity
Not Before: Apr 28 13:07:11 2026 GMT
Not After : May 1 15:34:11 2026 GMT
Subject: CN=AC146D9A87A5087B3E100B3C1088DCE76F509224
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bc:e1:40:bb:a9:75:ab:42:e3:29:f6:97:56:cc:
61:95:2e:a6:80:27:59:d1:fc:92:19:ba:b2:53:d3:
f9:93:fe:fa:74:0d:fb:53:b9:38:73:20:a6:dd:78:
a2:10:27:89:6f:48:2b:ed:f3:4a:ae:4e:24:3c:0c:
ec:7e:32:b5:2e:2d:4c:f7:80:91:73:fc:77:79:4e:
20:85:8e:52:77:ba:58:30:53:4a:fa:88:61:1a:89:
81:e1:28:56:ac:17:1a:1c:16:58:93:bd:15:da:8d:
6e:dd:32:31:fb:77:06:94:43:a1:6f:49:59:aa:a2:
cc:d9:84:85:34:ee:e5:6f:6e:56:09:92:81:fc:d0:
b7:59:bf:8d:35:60:a5:c0:47:1f:a7:06:d4:00:ec:
0b:25:ec:71:a0:bf:45:fd:29:65:57:cf:bb:c5:fb:
17:81:61:22:95:8b:3f:4b:b3:18:4f:c1:8b:3c:73:
02:5e:0c:88:6a:c2:53:cf:05:98:18:b6:a9:30:0d:
83:5f:77:d4:6e:00:06:56:21:18:b8:95:40:14:08:
a8:80:34:95:64:a9:a9:5d:3a:9d:6e:ad:86:48:76:
d7:33:d3:bf:30:53:8f:ff:01:cd:f8:64:b2:a0:84:
fe:10:50:9c:1f:e2:e9:bc:fa:f8:cd:00:89:ab:42:
3f:6d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
AC:14:6D:9A:87:A5:08:7B:3E:10:0B:3C:10:88:DC:E7:6F:50:92:24
X509v3 Authority Key Identifier:
keyid:21:F5:E1:52:BA:3E:25:56:1E:A4:D2:E2:98:65:46:41:2F:44:F1:5B
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://repo-rpki.idnic.net/repo/c3dd6135-548c-4881-af78-93af9f2a2516/0/21F5E152BA3E25561EA4D2E2986546412F44F15B.crl
Authority Information Access:
CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/21F5E152BA3E25561EA4D2E2986546412F44F15B.cer
Subject Information Access:
Signed Object - URI:rsync://repo-rpki.idnic.net/repo/c3dd6135-548c-4881-af78-93af9f2a2516/0/21F5E152BA3E25561EA4D2E2986546412F44F15B.mft
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
49:11:1e:7c:2f:ac:7c:88:9f:c7:6f:35:ad:51:2f:1d:0c:56:
c6:fc:3f:a5:11:90:11:4c:18:9a:b9:c0:71:4a:6b:60:89:73:
ca:9d:54:84:52:80:8a:2c:45:01:6b:60:69:00:a8:26:21:dd:
b5:55:7c:85:ed:6a:4b:ca:b4:7f:16:b2:2d:38:6f:ae:85:6b:
53:ab:58:45:95:40:ff:37:8a:c2:5e:17:51:77:18:e1:99:0c:
d8:8d:e5:eb:7f:17:35:0f:f2:59:93:b8:23:71:ac:cb:3f:d0:
bb:ae:ad:4a:b5:b5:f6:f8:37:2b:4a:54:d1:a4:2a:39:0a:76:
b3:38:9b:65:60:d6:11:c0:8a:33:1b:e5:87:df:59:48:d3:d7:
3c:a7:60:48:43:9d:25:f4:a9:be:21:af:fa:85:ca:24:36:88:
54:14:ab:05:29:99:a1:34:1b:a5:b2:d6:ca:96:48:17:30:3b:
f2:d7:16:c1:2c:37:14:23:a1:b7:83:5d:dc:60:c9:f7:8c:99:
d6:e4:9d:31:ce:ee:1d:64:c0:b3:35:0b:5b:d7:9b:6a:09:03:
f3:2d:49:98:90:a7:43:1b:46:1a:dc:78:ef:da:b0:bb:27:6d:
31:07:5e:18:71:44:b6:30:2b:1e:dc:ab:0b:67:0e:8b:23:e4:
0a:33:f8:e6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jun 3 03:12:08 2026 by rpki-client