Manifest
$ rpki-client -vvf repo-rpki.idnic.net/repo/d61b8ccc-6c22-424e-9614-8ab8ad28849c/0/A17DC55845B70106CEB3A498496454BE640F44AB.mft
File: A17DC55845B70106CEB3A498496454BE640F44AB.mft (raw, json)
Hash identifier: VOmR30D+UNK+krUXWRZDx0gUzYCDH7w27gpAC9dDQIM=
Subject key identifier: 19:6D:E7:51:EA:FB:5E:0A:A4:A9:81:23:25:5E:E9:1D:A5:5B:77:ED
Authority key identifier: A1:7D:C5:58:45:B7:01:06:CE:B3:A4:98:49:64:54:BE:64:0F:44:AB
Certificate issuer: /CN=A17DC55845B70106CEB3A498496454BE640F44AB
Certificate serial: 2A221D5805C8BB4F02A5E82CB68D81D8C85AFE4E
Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/A17DC55845B70106CEB3A498496454BE640F44AB.cer
Subject info access: rsync://repo-rpki.idnic.net/repo/d61b8ccc-6c22-424e-9614-8ab8ad28849c/0/A17DC55845B70106CEB3A498496454BE640F44AB.mft
Manifest number: 038D
Signing time: Tue 28 Apr 2026 10:13:45 +0000
Manifest this update: Tue 28 Apr 2026 10:08:45 +0000
Manifest next update: Fri 01 May 2026 13:53:45 +0000
Files and hashes: 1: 3130332e35322e36302e302f32342d3234203d3e20313339343237.roa (hash: 0aTtvK24bNcmqnpepTgUdZw0ocIUT1z+NlDz+JkEtYE=)
2: 3130332e35322e36312e302f32342d3234203d3e20313339343237.roa (hash: w37lq4KLk82r5xEboaEt3iVD5XeAKizKn7xI0fxGzNY=)
3: 3130332e33312e3234382e302f32342d3234203d3e20313339343237.roa (hash: 9cImEVaK5OCHdSpqIXpI9zJWU7YI86G2S7wFTBzx17w=)
4: 3130332e33312e3234382e302f32332d3233203d3e20313339343237.roa (hash: XIFOVvwjJ/s65US6Rpd5t4HWg3Q6vfbVPqm9v9PqOGU=)
5: 3130332e35322e36302e302f32332d3233203d3e20313339343237.roa (hash: 2wBcOPKUCI6Zp/xtAhOQEAoecnilxu7COOIy78SMgIo=)
6: 3130332e33312e3234392e302f32342d3234203d3e20313339343237.roa (hash: UUMwnrDm1U+Qlo7/OuS/vhT11bByA22cTFKLWGZAlwc=)
7: A17DC55845B70106CEB3A498496454BE640F44AB.crl (hash: xhAT0NUAK90msFcnQYeHuqsFY1zhB/Mu4o1+GIpHnWk=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
2a:22:1d:58:05:c8:bb:4f:02:a5:e8:2c:b6:8d:81:d8:c8:5a:fe:4e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A17DC55845B70106CEB3A498496454BE640F44AB
Validity
Not Before: Apr 28 10:08:45 2026 GMT
Not After : May 1 13:53:45 2026 GMT
Subject: CN=196DE751EAFB5E0AA4A98123255EE91DA55B77ED
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b2:ad:80:d5:e5:cd:50:6c:71:45:36:08:7d:47:
d0:7a:c5:d3:75:0c:25:b1:c2:9e:3c:1a:92:96:22:
9e:5e:6b:0a:41:02:bf:a7:b6:89:d9:f0:9e:2e:03:
7e:ab:30:07:e9:89:d3:cc:0f:37:1e:a8:16:5a:30:
77:88:77:66:9b:27:b3:44:53:15:a0:8b:5b:2c:fd:
28:d8:c1:dc:1d:ca:50:7c:06:02:13:f4:2e:30:89:
79:16:9b:72:8f:85:4f:2e:42:2f:b5:77:c3:57:66:
9b:73:58:d6:d2:58:1b:2c:3b:e5:78:8d:8e:6d:6d:
6f:b9:22:c5:3b:1a:95:56:d3:52:4a:a6:d9:4b:17:
55:17:ea:b2:86:92:2b:96:7f:96:b1:ca:a6:68:96:
8e:db:c5:a7:c3:88:27:23:27:36:86:9f:1a:8e:43:
dc:26:0d:31:f4:2b:a1:21:53:39:57:b5:92:51:bf:
78:44:c1:39:af:08:6d:ac:58:d8:37:4c:a4:9c:c0:
22:c9:9e:80:54:55:57:d4:7c:46:8f:04:88:ad:14:
41:e8:2f:6b:06:ae:47:46:5b:90:1a:66:16:3e:1d:
55:45:62:a4:d0:69:28:83:82:c1:e0:51:e4:bd:bd:
a0:5c:73:d7:1e:32:9b:df:2b:64:6f:c7:b2:a0:25:
01:db
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
19:6D:E7:51:EA:FB:5E:0A:A4:A9:81:23:25:5E:E9:1D:A5:5B:77:ED
X509v3 Authority Key Identifier:
keyid:A1:7D:C5:58:45:B7:01:06:CE:B3:A4:98:49:64:54:BE:64:0F:44:AB
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://repo-rpki.idnic.net/repo/d61b8ccc-6c22-424e-9614-8ab8ad28849c/0/A17DC55845B70106CEB3A498496454BE640F44AB.crl
Authority Information Access:
CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/A17DC55845B70106CEB3A498496454BE640F44AB.cer
Subject Information Access:
Signed Object - URI:rsync://repo-rpki.idnic.net/repo/d61b8ccc-6c22-424e-9614-8ab8ad28849c/0/A17DC55845B70106CEB3A498496454BE640F44AB.mft
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
52:6e:0f:ae:85:3e:cc:b3:40:7f:25:64:32:2b:3e:48:9b:1c:
1c:cd:25:a5:bf:23:ce:67:42:81:4d:83:91:81:7c:e9:e3:23:
cd:da:2e:b3:60:99:b6:e0:2d:5c:95:36:1b:d2:a6:d2:45:05:
3b:75:e9:40:6b:c4:80:07:a2:6d:b0:60:ad:0c:cd:a7:b5:bc:
e6:9a:f7:e9:61:b0:9f:b7:47:65:22:e5:f3:e9:6e:fb:89:f0:
0f:93:c4:12:e6:d0:1f:f2:6f:f0:c3:fa:83:00:58:e4:04:ac:
3b:fa:f3:d4:f7:16:b4:9e:a4:1c:cb:4d:83:33:c2:3d:06:f3:
59:c6:a9:7b:29:be:d1:a7:f1:73:a4:16:59:a0:6d:a4:7d:10:
f5:ec:40:69:07:5d:73:10:a1:2e:d3:83:c8:c0:72:0b:3a:13:
9c:dc:62:c1:23:70:f7:62:72:47:9b:a7:a5:0d:a6:85:6e:56:
89:13:d9:90:af:55:cd:b5:65:e0:3e:9c:22:78:28:2a:ec:f4:
bd:2e:2b:46:95:c9:73:55:57:e1:a8:62:f7:61:02:ca:52:c9:
af:1b:70:ea:82:65:69:7e:62:12:8d:4d:ea:b8:db:98:8b:d2:
28:ef:48:32:7d:02:16:c5:5b:be:50:b9:96:4a:cd:3a:3d:7b:
c2:8f:fc:a6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jun 3 03:09:03 2026 by rpki-client