Manifest
$ rpki-client -vvf repo-rpki.idnic.net/repo/d44dfb5a-6e24-4a4d-8969-eb3cbe34e47e/0/8F52E72816B856335390C4F4AFBAF207C21522F6.mft
File: 8F52E72816B856335390C4F4AFBAF207C21522F6.mft (raw, json)
Hash identifier: 0CKzD7wTeQ0OTcvvEu1N6vhS73y5vpcp9vOAEuytUgM=
Subject key identifier: 62:B2:4B:D3:D5:5C:C2:A5:31:AE:84:A2:5E:3A:CF:DF:65:BC:E6:39
Authority key identifier: 8F:52:E7:28:16:B8:56:33:53:90:C4:F4:AF:BA:F2:07:C2:15:22:F6
Certificate issuer: /CN=8F52E72816B856335390C4F4AFBAF207C21522F6
Certificate serial: 5F5CAAFFE0EB134027F9DC0B792A52C292FAD39D
Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/8F52E72816B856335390C4F4AFBAF207C21522F6.cer
Subject info access: rsync://repo-rpki.idnic.net/repo/d44dfb5a-6e24-4a4d-8969-eb3cbe34e47e/0/8F52E72816B856335390C4F4AFBAF207C21522F6.mft
Manifest number: 026C
Signing time: Mon 27 Apr 2026 20:32:38 +0000
Manifest this update: Mon 27 Apr 2026 20:27:38 +0000
Manifest next update: Fri 01 May 2026 01:20:38 +0000
Files and hashes: 1: 3130332e3135382e3132362e302f32332d3234203d3e203338333230.roa (hash: IgizShDVF3XIdFoYQysMBd+RMZoTyStrHHHFv+jVVho=)
2: 8F52E72816B856335390C4F4AFBAF207C21522F6.crl (hash: jo3W1ohez82xTM9P9fKLCX/yUcZOn+bAUkTWah5gA2k=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
5f:5c:aa:ff:e0:eb:13:40:27:f9:dc:0b:79:2a:52:c2:92:fa:d3:9d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8F52E72816B856335390C4F4AFBAF207C21522F6
Validity
Not Before: Apr 27 20:27:38 2026 GMT
Not After : May 1 01:20:38 2026 GMT
Subject: CN=62B24BD3D55CC2A531AE84A25E3ACFDF65BCE639
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b1:e0:22:a9:28:24:66:07:c4:57:cc:49:98:06:
4f:fe:2b:d0:eb:63:60:44:b7:41:5b:aa:ab:ba:23:
0f:0b:66:50:ca:f2:10:74:14:0e:fe:0a:66:36:7d:
c1:9b:c8:7b:8c:87:c6:0b:67:82:e8:bc:69:a7:52:
d9:ca:db:e9:89:77:3c:d2:26:f9:ae:28:5b:ad:cc:
c8:30:8f:f1:0f:2f:de:db:b7:e3:fb:82:f6:d5:e3:
33:5f:1c:75:5d:3a:e0:f3:47:b4:25:8b:29:6b:c7:
ed:35:04:d0:b9:fd:fb:14:fc:aa:26:53:9c:25:cb:
da:9d:e0:2d:fd:8f:85:2f:b9:df:1d:fc:38:e4:3e:
25:70:78:d6:6e:cd:2d:85:c4:92:37:f6:35:97:8a:
fc:b9:71:60:1e:4b:6d:bc:ab:61:d5:c1:79:9a:41:
a2:2e:8a:41:9b:d6:75:a4:46:cf:5a:20:2b:82:02:
b4:54:ca:c1:4d:1e:7e:2a:13:f4:67:5b:6c:75:da:
c8:1b:4e:d8:52:f5:0d:52:ee:99:47:97:89:28:dc:
2d:6e:bb:5f:fb:63:eb:57:b6:7b:b1:79:eb:ab:b9:
a5:cd:bb:e6:03:5c:31:62:56:52:38:6c:70:5f:3b:
4f:4a:55:72:03:3f:df:24:5d:5f:64:03:cf:2a:4a:
96:a1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
62:B2:4B:D3:D5:5C:C2:A5:31:AE:84:A2:5E:3A:CF:DF:65:BC:E6:39
X509v3 Authority Key Identifier:
keyid:8F:52:E7:28:16:B8:56:33:53:90:C4:F4:AF:BA:F2:07:C2:15:22:F6
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://repo-rpki.idnic.net/repo/d44dfb5a-6e24-4a4d-8969-eb3cbe34e47e/0/8F52E72816B856335390C4F4AFBAF207C21522F6.crl
Authority Information Access:
CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/8F52E72816B856335390C4F4AFBAF207C21522F6.cer
Subject Information Access:
Signed Object - URI:rsync://repo-rpki.idnic.net/repo/d44dfb5a-6e24-4a4d-8969-eb3cbe34e47e/0/8F52E72816B856335390C4F4AFBAF207C21522F6.mft
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
66:83:ce:c4:b1:94:30:a9:a1:71:47:77:50:eb:4f:f8:01:68:
15:10:20:3a:9c:35:50:37:54:3c:41:c9:27:32:b1:88:d5:6a:
cb:81:fd:c9:0a:ac:b1:c0:9a:c3:cb:43:1f:b5:90:93:51:96:
58:ef:21:c6:1c:b3:23:40:a7:74:ff:6d:2f:2f:9d:d1:02:24:
aa:ed:48:90:19:ac:ad:f0:a7:a6:4b:d3:35:05:82:c3:d4:fc:
07:ad:7e:18:5f:c3:98:71:b0:be:a2:26:b8:70:c0:81:d9:ca:
cd:b8:5c:6b:af:47:33:93:cb:02:3e:e7:4c:30:ce:5e:3c:a7:
b4:4e:40:f3:2c:e5:d2:e1:9d:4a:11:2f:1b:a4:ab:58:73:55:
16:f6:9d:1a:7c:60:22:55:c2:ec:a1:99:6c:94:b3:2f:8e:da:
96:04:89:71:b2:bd:f3:2d:a3:3b:e6:b7:20:f6:a5:a1:83:20:
d2:6e:32:97:17:d7:de:4c:a9:fd:c4:da:68:96:55:ed:2f:94:
38:1f:70:49:ce:01:3e:9c:f7:80:1d:4f:89:01:47:b5:5e:03:
02:a1:77:13:50:b5:56:5a:1c:75:69:88:d3:68:14:24:e9:55:
50:80:32:ab:97:07:ec:78:4c:35:63:64:79:db:a6:a1:1b:47:
1b:a3:74:b9
-----BEGIN CERTIFICATE-----
MIIFMjCCBBqgAwIBAgIUX1yq/+DrE0An+dwLeSpSwpL6050wDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoOEY1MkU3MjgxNkI4NTYzMzUzOTBDNEY0QUZCQUYyMDdD
MjE1MjJGNjAeFw0yNjA0MjcyMDI3MzhaFw0yNjA1MDEwMTIwMzhaMDMxMTAvBgNV
BAMTKDYyQjI0QkQzRDU1Q0MyQTUzMUFFODRBMjVFM0FDRkRGNjVCQ0U2MzkwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCx4CKpKCRmB8RXzEmYBk/+K9Dr
Y2BEt0Fbqqu6Iw8LZlDK8hB0FA7+CmY2fcGbyHuMh8YLZ4LovGmnUtnK2+mJdzzS
JvmuKFutzMgwj/EPL97bt+P7gvbV4zNfHHVdOuDzR7Qliylrx+01BNC5/fsU/Kom
U5wly9qd4C39j4Uvud8d/DjkPiVweNZuzS2FxJI39jWXivy5cWAeS228q2HVwXma
QaIuikGb1nWkRs9aICuCArRUysFNHn4qE/RnW2x12sgbTthS9Q1S7plHl4ko3C1u
u1/7Y+tXtnuxeeuruaXNu+YDXDFiVlI4bHBfO09KVXIDP98kXV9kA88qSpahAgMB
AAGjggI8MIICODAdBgNVHQ4EFgQUYrJL09VcwqUxroSiXjrP32W85jkwHwYDVR0j
BBgwFoAUj1LnKBa4VjNTkMT0r7ryB8IVIvYwDgYDVR0PAQH/BAQDAgeAMIGFBgNV
HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby9k
NDRkZmI1YS02ZTI0LTRhNGQtODk2OS1lYjNjYmUzNGU0N2UvMC84RjUyRTcyODE2
Qjg1NjMzNTM5MEM0RjRBRkJBRjIwN0MyMTUyMkY2LmNybDB0BggrBgEFBQcBAQRo
MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv
L0lETklDLUlELzIvOEY1MkU3MjgxNkI4NTYzMzUzOTBDNEY0QUZCQUYyMDdDMjE1
MjJGNi5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6
Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vZDQ0ZGZiNWEtNmUyNC00YTRkLTg5
NjktZWIzY2JlMzRlNDdlLzAvOEY1MkU3MjgxNkI4NTYzMzUzOTBDNEY0QUZCQUYy
MDdDMjE1MjJGNi5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF
BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC
BQAwDQYJKoZIhvcNAQELBQADggEBAGaDzsSxlDCpoXFHd1DrT/gBaBUQIDqcNVA3
VDxByScysYjVasuB/ckKrLHAmsPLQx+1kJNRlljvIcYcsyNAp3T/bS8vndECJKrt
SJAZrK3wp6ZL0zUFgsPU/Aetfhhfw5hxsL6iJrhwwIHZys24XGuvRzOTywI+50ww
zl48p7ROQPMs5dLhnUoRLxukq1hzVRb2nRp8YCJVwuyhmWyUsy+O2pYEiXGyvfMt
ozvmtyD2paGDINJuMpcX195Mqf3E2miWVe0vlDgfcEnOAT6c94AdT4kBR7VeAwKh
dxNQtVZaHHVpiNNoFCTpVVCAMquXB+x4TDVjZHnbpqEbRxujdLk=
-----END CERTIFICATE-----
Generated at Wed Jun 3 03:07:29 2026 by rpki-client