Manifest
$ rpki-client -vvf repo-rpki.idnic.net/repo/cfabec71-7ecb-4dbd-a421-99b9cd20903a/0/194F6EF659F1115C068AB59065D57F150E23F5B6.mft
File: 194F6EF659F1115C068AB59065D57F150E23F5B6.mft (raw, json)
Hash identifier: 5cxlH3gsa1U4sQ+TRqsNTkpIY/7xIc+ORhAtTQdSa6I=
Subject key identifier: 22:0F:CA:79:A9:AC:6F:80:9A:43:27:99:69:6F:FA:DD:43:92:2D:0B
Authority key identifier: 19:4F:6E:F6:59:F1:11:5C:06:8A:B5:90:65:D5:7F:15:0E:23:F5:B6
Certificate issuer: /CN=194F6EF659F1115C068AB59065D57F150E23F5B6
Certificate serial: 42E1F539C84485CF712531C5B63AD7DACC42CA7C
Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/194F6EF659F1115C068AB59065D57F150E23F5B6.cer
Subject info access: rsync://repo-rpki.idnic.net/repo/cfabec71-7ecb-4dbd-a421-99b9cd20903a/0/194F6EF659F1115C068AB59065D57F150E23F5B6.mft
Manifest number: 0238
Signing time: Tue 28 Apr 2026 13:02:35 +0000
Manifest this update: Tue 28 Apr 2026 12:57:35 +0000
Manifest next update: Fri 01 May 2026 21:38:35 +0000
Files and hashes: 1: 34332e3234302e3232362e302f32342d3234203d3e203633343933.roa (hash: d0HjkKB7FfimroRB+n2YS7p7zUW66ddpBfJeipPxBBQ=)
2: 34332e3234302e3232352e302f32342d3234203d3e203633343933.roa (hash: iiMdXC5IwE7CrNkyDM/L6svytNKfCeHud3DpbhTkmXw=)
3: 194F6EF659F1115C068AB59065D57F150E23F5B6.crl (hash: Sd+w8aXRQW46xuBlSHTqrKv1KlbUDq6iFGkWa9CYN3g=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
42:e1:f5:39:c8:44:85:cf:71:25:31:c5:b6:3a:d7:da:cc:42:ca:7c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=194F6EF659F1115C068AB59065D57F150E23F5B6
Validity
Not Before: Apr 28 12:57:35 2026 GMT
Not After : May 1 21:38:35 2026 GMT
Subject: CN=220FCA79A9AC6F809A432799696FFADD43922D0B
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ca:6b:1a:3c:f2:1f:59:ba:c2:73:d3:fc:09:75:
81:89:08:53:54:5a:32:12:b6:8f:1c:ff:09:fb:a3:
cc:31:64:3c:b5:00:f7:22:46:a7:46:d2:98:18:1d:
91:e1:fb:71:fe:25:db:89:68:20:91:6b:7c:90:c3:
15:be:58:a0:fa:a6:f3:c3:9d:ba:16:96:01:32:ab:
a3:c7:f7:74:80:04:a4:c1:5c:3d:c8:71:60:b7:4d:
94:5c:b4:83:00:c0:64:31:2c:92:b3:ec:9e:ee:24:
bc:29:3c:7f:f6:94:5b:7a:43:1d:91:1b:b1:d9:41:
89:78:23:d9:ff:98:a5:bb:dd:67:43:81:35:f1:c3:
f3:8f:e9:ae:42:d3:d1:0a:3a:ec:5a:75:74:da:47:
11:1a:8b:96:6f:39:9f:9c:f6:c7:49:f9:38:5c:9e:
94:82:be:f6:81:b5:1d:43:fe:db:1d:ae:57:bf:b4:
9a:d4:84:7b:84:59:65:a8:70:90:93:9f:b8:8e:86:
31:63:7e:84:ef:c8:82:a2:f6:61:91:82:29:13:32:
22:a4:5b:ed:03:7a:68:2d:5f:58:42:0d:16:64:ab:
04:1a:de:04:c8:94:56:d3:c1:be:52:28:f7:e2:e4:
5e:72:58:91:66:ea:88:3a:90:c9:31:86:69:b7:ec:
2d:43
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
22:0F:CA:79:A9:AC:6F:80:9A:43:27:99:69:6F:FA:DD:43:92:2D:0B
X509v3 Authority Key Identifier:
keyid:19:4F:6E:F6:59:F1:11:5C:06:8A:B5:90:65:D5:7F:15:0E:23:F5:B6
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://repo-rpki.idnic.net/repo/cfabec71-7ecb-4dbd-a421-99b9cd20903a/0/194F6EF659F1115C068AB59065D57F150E23F5B6.crl
Authority Information Access:
CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/194F6EF659F1115C068AB59065D57F150E23F5B6.cer
Subject Information Access:
Signed Object - URI:rsync://repo-rpki.idnic.net/repo/cfabec71-7ecb-4dbd-a421-99b9cd20903a/0/194F6EF659F1115C068AB59065D57F150E23F5B6.mft
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
d0:62:39:56:43:b5:10:84:2e:21:bb:f3:5a:84:48:6c:3a:5b:
76:2d:8d:3f:90:33:7c:ce:30:56:c3:3b:d8:0a:22:39:56:de:
9e:a5:cd:69:06:cb:89:77:01:1c:88:a7:ea:69:85:d5:6c:14:
28:7f:55:e4:eb:97:79:2a:fd:4d:f6:a8:e5:41:c8:ac:70:61:
f3:0f:84:de:7c:fb:c5:ef:3e:c0:b9:45:bf:bc:35:b6:21:da:
d8:31:18:72:d0:6f:5f:5d:6f:d4:8d:c4:68:52:13:44:4e:53:
77:b3:ea:c5:15:44:33:4d:39:db:d7:3e:e7:cf:bf:54:94:dc:
a4:95:5d:7b:7b:33:ab:1e:db:ad:a2:74:4d:ce:fb:bf:9e:4f:
e4:f6:50:7a:4a:19:f6:5e:fa:82:08:c7:66:8c:fd:1d:b0:56:
e2:55:59:5d:26:51:b2:41:78:98:78:0b:68:39:ce:92:ad:8c:
5a:40:c0:93:54:d4:67:db:20:71:d7:e8:01:5b:75:d3:73:3b:
8b:a0:4f:b8:93:f1:19:2b:f9:16:30:0b:04:5b:28:25:77:92:
b4:bb:e6:64:1c:d6:0a:60:fe:88:f0:20:94:34:64:11:52:4b:
2a:35:68:33:ac:6d:2c:fc:9a:78:a4:b4:b6:f0:28:5b:76:27:
8b:e7:1c:78
-----BEGIN CERTIFICATE-----
MIIFMjCCBBqgAwIBAgIUQuH1OchEhc9xJTHFtjrX2sxCynwwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoMTk0RjZFRjY1OUYxMTE1QzA2OEFCNTkwNjVENTdGMTUw
RTIzRjVCNjAeFw0yNjA0MjgxMjU3MzVaFw0yNjA1MDEyMTM4MzVaMDMxMTAvBgNV
BAMTKDIyMEZDQTc5QTlBQzZGODA5QTQzMjc5OTY5NkZGQURENDM5MjJEMEIwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDKaxo88h9ZusJz0/wJdYGJCFNU
WjISto8c/wn7o8wxZDy1APciRqdG0pgYHZHh+3H+JduJaCCRa3yQwxW+WKD6pvPD
nboWlgEyq6PH93SABKTBXD3IcWC3TZRctIMAwGQxLJKz7J7uJLwpPH/2lFt6Qx2R
G7HZQYl4I9n/mKW73WdDgTXxw/OP6a5C09EKOuxadXTaRxEai5ZvOZ+c9sdJ+Thc
npSCvvaBtR1D/tsdrle/tJrUhHuEWWWocJCTn7iOhjFjfoTvyIKi9mGRgikTMiKk
W+0DemgtX1hCDRZkqwQa3gTIlFbTwb5SKPfi5F5yWJFm6og6kMkxhmm37C1DAgMB
AAGjggI8MIICODAdBgNVHQ4EFgQUIg/Keamsb4CaQyeZaW/63UOSLQswHwYDVR0j
BBgwFoAUGU9u9lnxEVwGirWQZdV/FQ4j9bYwDgYDVR0PAQH/BAQDAgeAMIGFBgNV
HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby9j
ZmFiZWM3MS03ZWNiLTRkYmQtYTQyMS05OWI5Y2QyMDkwM2EvMC8xOTRGNkVGNjU5
RjExMTVDMDY4QUI1OTA2NUQ1N0YxNTBFMjNGNUI2LmNybDB0BggrBgEFBQcBAQRo
MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv
L0lETklDLUlELzIvMTk0RjZFRjY1OUYxMTE1QzA2OEFCNTkwNjVENTdGMTUwRTIz
RjVCNi5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6
Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vY2ZhYmVjNzEtN2VjYi00ZGJkLWE0
MjEtOTliOWNkMjA5MDNhLzAvMTk0RjZFRjY1OUYxMTE1QzA2OEFCNTkwNjVENTdG
MTUwRTIzRjVCNi5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF
BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC
BQAwDQYJKoZIhvcNAQELBQADggEBANBiOVZDtRCELiG781qESGw6W3YtjT+QM3zO
MFbDO9gKIjlW3p6lzWkGy4l3ARyIp+pphdVsFCh/VeTrl3kq/U32qOVByKxwYfMP
hN58+8XvPsC5Rb+8NbYh2tgxGHLQb19db9SNxGhSE0ROU3ez6sUVRDNNOdvXPufP
v1SU3KSVXXt7M6se262idE3O+7+eT+T2UHpKGfZe+oIIx2aM/R2wVuJVWV0mUbJB
eJh4C2g5zpKtjFpAwJNU1GfbIHHX6AFbddNzO4ugT7iT8Rkr+RYwCwRbKCV3krS7
5mQc1gpg/ojwIJQ0ZBFSSyo1aDOsbSz8mniktLbwKFt2J4vnHHg=
-----END CERTIFICATE-----
Generated at Wed Jun 3 03:29:19 2026 by rpki-client