Manifest
$ rpki-client -vvf repo-rpki.idnic.net/repo/dac79fbe-4790-46be-b9b2-0359b1a18e33/0/401AA56AF599CCA2CD71A684FFCF53FFF9DDE3DD.mft
File: 401AA56AF599CCA2CD71A684FFCF53FFF9DDE3DD.mft (raw, json)
Hash identifier: PtrWOJGkZhi8IVhZWGHUA2knJnZy9Cegk55yjvMGxTQ=
Subject key identifier: 23:68:22:4D:A6:DB:CE:C8:40:6E:88:45:9B:F1:94:22:76:B9:E4:DE
Authority key identifier: 40:1A:A5:6A:F5:99:CC:A2:CD:71:A6:84:FF:CF:53:FF:F9:DD:E3:DD
Certificate issuer: /CN=401AA56AF599CCA2CD71A684FFCF53FFF9DDE3DD
Certificate serial: 254BBB6023554350CA5A589BDF84E95402ED8578
Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/401AA56AF599CCA2CD71A684FFCF53FFF9DDE3DD.cer
Subject info access: rsync://repo-rpki.idnic.net/repo/dac79fbe-4790-46be-b9b2-0359b1a18e33/0/401AA56AF599CCA2CD71A684FFCF53FFF9DDE3DD.mft
Manifest number: 0252
Signing time: Tue 28 Apr 2026 02:42:06 +0000
Manifest this update: Tue 28 Apr 2026 02:37:06 +0000
Manifest next update: Fri 01 May 2026 06:05:06 +0000
Files and hashes: 1: 401AA56AF599CCA2CD71A684FFCF53FFF9DDE3DD.crl (hash: nHbrnCueKCcVJ06pJYUlaltenTFuGcEt3dQkt7+mvrc=)
2: 3130332e3136302e36382e302f32342d3234203d3e203438343635.roa (hash: s3cZDsm3eCD/zirL0oonykymWlAaugzxDIFPlg5sAUQ=)
3: 3130332e3136302e36392e302f32342d3234203d3e20313431363037.roa (hash: HLjZFq4/Jnmag82Gv7W9QKBRIGp+gW90e9wOgTOi2PE=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
25:4b:bb:60:23:55:43:50:ca:5a:58:9b:df:84:e9:54:02:ed:85:78
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=401AA56AF599CCA2CD71A684FFCF53FFF9DDE3DD
Validity
Not Before: Apr 28 02:37:06 2026 GMT
Not After : May 1 06:05:06 2026 GMT
Subject: CN=2368224DA6DBCEC8406E88459BF1942276B9E4DE
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cf:2b:d1:0c:17:41:1e:be:db:dc:9f:9b:f3:6c:
82:03:6a:72:a3:18:53:ec:33:57:08:b3:6f:63:ce:
83:bb:19:bb:65:cb:9f:d2:4a:82:0d:b8:ae:12:b7:
e7:df:a3:b4:3e:df:11:9e:27:ea:10:a4:2c:0f:23:
49:11:11:d4:46:55:72:1f:7b:17:40:f5:06:6d:d0:
47:67:01:e6:93:4f:12:45:84:af:66:08:da:d6:43:
3a:aa:cb:1c:56:4d:a3:7c:ef:ac:9a:f4:1e:b1:8e:
8d:5b:76:23:3f:3a:c5:18:71:10:da:ab:b2:aa:33:
91:66:17:73:bd:d4:14:98:b0:eb:81:57:67:0e:03:
07:67:d9:d4:f7:a0:5d:ab:00:ee:d9:25:0f:d7:6c:
c7:96:d6:e0:b1:18:c3:e3:7c:2e:fc:3a:bc:69:d0:
db:66:66:ee:5c:14:c0:48:32:23:04:bb:c3:f6:e9:
95:4a:73:31:c6:f4:2c:44:97:55:c5:0a:23:2d:1b:
11:1a:c9:4b:f7:d9:70:bc:e9:7c:c3:b8:6f:ee:cf:
bb:d2:1f:1e:84:23:31:4f:83:36:c8:6a:83:79:f4:
56:55:f5:0f:18:06:e2:6e:31:20:d3:f3:83:87:db:
d4:26:37:7b:43:80:18:25:e3:29:d5:e9:dd:6b:9d:
22:d5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
23:68:22:4D:A6:DB:CE:C8:40:6E:88:45:9B:F1:94:22:76:B9:E4:DE
X509v3 Authority Key Identifier:
keyid:40:1A:A5:6A:F5:99:CC:A2:CD:71:A6:84:FF:CF:53:FF:F9:DD:E3:DD
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://repo-rpki.idnic.net/repo/dac79fbe-4790-46be-b9b2-0359b1a18e33/0/401AA56AF599CCA2CD71A684FFCF53FFF9DDE3DD.crl
Authority Information Access:
CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/401AA56AF599CCA2CD71A684FFCF53FFF9DDE3DD.cer
Subject Information Access:
Signed Object - URI:rsync://repo-rpki.idnic.net/repo/dac79fbe-4790-46be-b9b2-0359b1a18e33/0/401AA56AF599CCA2CD71A684FFCF53FFF9DDE3DD.mft
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
69:17:62:99:92:ae:d0:b4:d0:bc:9e:c5:d5:5d:1c:ec:96:d6:
e2:5c:21:88:04:f5:0d:bc:eb:0e:e4:42:af:3b:e0:8b:38:d5:
76:01:33:af:61:a2:f8:d1:46:4c:cc:be:73:cd:1f:7a:b7:55:
41:7a:f0:94:a7:2c:6c:04:91:8d:3a:dd:c8:4b:f4:26:b9:04:
95:d7:b8:83:94:5e:84:b0:eb:b1:a2:f7:40:0c:3a:38:d6:0e:
87:43:81:fe:e3:b6:40:32:fe:55:5d:48:43:85:d3:cd:20:b1:
46:95:b7:9d:0b:ce:e7:5c:c5:a1:38:7c:bc:2a:3a:00:c5:ef:
14:4a:72:9f:fd:91:4e:8b:dc:9f:db:71:de:ea:fd:89:a2:29:
17:4a:3a:12:06:5c:81:c2:9b:74:f6:41:07:e0:cc:04:c4:9e:
f6:4b:4d:07:39:b1:94:44:7c:71:d2:36:a8:4d:00:a2:a5:27:
9e:b5:57:ad:1a:db:ff:26:1a:68:cd:7c:50:ae:4a:81:8a:71:
e7:97:ba:0d:55:a3:9f:ac:4f:e7:63:bc:b0:26:e8:9e:14:b9:
1b:df:1c:89:7b:1a:a8:df:cc:ba:19:03:e5:33:1f:fe:f8:ff:
73:a8:68:38:63:7f:fd:3d:5b:88:4d:2f:a0:54:be:c0:b8:7f:
7b:8d:ad:be
-----BEGIN CERTIFICATE-----
MIIFMjCCBBqgAwIBAgIUJUu7YCNVQ1DKWlib34TpVALthXgwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoNDAxQUE1NkFGNTk5Q0NBMkNENzFBNjg0RkZDRjUzRkZG
OURERTNERDAeFw0yNjA0MjgwMjM3MDZaFw0yNjA1MDEwNjA1MDZaMDMxMTAvBgNV
BAMTKDIzNjgyMjREQTZEQkNFQzg0MDZFODg0NTlCRjE5NDIyNzZCOUU0REUwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDPK9EMF0Eevtvcn5vzbIIDanKj
GFPsM1cIs29jzoO7Gbtly5/SSoINuK4St+ffo7Q+3xGeJ+oQpCwPI0kREdRGVXIf
exdA9QZt0EdnAeaTTxJFhK9mCNrWQzqqyxxWTaN876ya9B6xjo1bdiM/OsUYcRDa
q7KqM5FmF3O91BSYsOuBV2cOAwdn2dT3oF2rAO7ZJQ/XbMeW1uCxGMPjfC78Orxp
0NtmZu5cFMBIMiMEu8P26ZVKczHG9CxEl1XFCiMtGxEayUv32XC86XzDuG/uz7vS
Hx6EIzFPgzbIaoN59FZV9Q8YBuJuMSDT84OH29QmN3tDgBgl4ynV6d1rnSLVAgMB
AAGjggI8MIICODAdBgNVHQ4EFgQUI2giTabbzshAbohFm/GUIna55N4wHwYDVR0j
BBgwFoAUQBqlavWZzKLNcaaE/89T//nd490wDgYDVR0PAQH/BAQDAgeAMIGFBgNV
HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby9k
YWM3OWZiZS00NzkwLTQ2YmUtYjliMi0wMzU5YjFhMThlMzMvMC80MDFBQTU2QUY1
OTlDQ0EyQ0Q3MUE2ODRGRkNGNTNGRkY5RERFM0RELmNybDB0BggrBgEFBQcBAQRo
MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv
L0lETklDLUlELzIvNDAxQUE1NkFGNTk5Q0NBMkNENzFBNjg0RkZDRjUzRkZGOURE
RTNERC5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6
Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vZGFjNzlmYmUtNDc5MC00NmJlLWI5
YjItMDM1OWIxYTE4ZTMzLzAvNDAxQUE1NkFGNTk5Q0NBMkNENzFBNjg0RkZDRjUz
RkZGOURERTNERC5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF
BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC
BQAwDQYJKoZIhvcNAQELBQADggEBAGkXYpmSrtC00LyexdVdHOyW1uJcIYgE9Q28
6w7kQq874Is41XYBM69hovjRRkzMvnPNH3q3VUF68JSnLGwEkY063chL9Ca5BJXX
uIOUXoSw67Gi90AMOjjWDodDgf7jtkAy/lVdSEOF080gsUaVt50LzudcxaE4fLwq
OgDF7xRKcp/9kU6L3J/bcd7q/YmiKRdKOhIGXIHCm3T2QQfgzATEnvZLTQc5sZRE
fHHSNqhNAKKlJ561V60a2/8mGmjNfFCuSoGKceeXug1Vo5+sT+djvLAm6J4UuRvf
HIl7GqjfzLoZA+UzH/74/3OoaDhjf/09W4hNL6BUvsC4f3uNrb4=
-----END CERTIFICATE-----
Generated at Wed Jun 3 03:14:25 2026 by rpki-client