Manifest
$ rpki-client -vvf repo-rpki.idnic.net/repo/e0ba97ef-7bc8-45b8-82ab-f85533caedf4/0/D065D2A0A105660C70D0A89385A33A61750ED7E8.mft
File: D065D2A0A105660C70D0A89385A33A61750ED7E8.mft (raw, json)
Hash identifier: ynsGVdvUsFTIW1u/11uUT4gZok7mRq5TWlrKi0o04YY=
Subject key identifier: A2:11:9A:42:D8:E4:2C:17:7B:E6:3A:6F:D7:94:60:D3:A1:04:F3:C9
Authority key identifier: D0:65:D2:A0:A1:05:66:0C:70:D0:A8:93:85:A3:3A:61:75:0E:D7:E8
Certificate issuer: /CN=D065D2A0A105660C70D0A89385A33A61750ED7E8
Certificate serial: 01D5404260A4EDC172955622439791F8A589221F
Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/D065D2A0A105660C70D0A89385A33A61750ED7E8.cer
Subject info access: rsync://repo-rpki.idnic.net/repo/e0ba97ef-7bc8-45b8-82ab-f85533caedf4/0/D065D2A0A105660C70D0A89385A33A61750ED7E8.mft
Manifest number: 0240
Signing time: Tue 28 Apr 2026 11:22:40 +0000
Manifest this update: Tue 28 Apr 2026 11:17:40 +0000
Manifest next update: Fri 01 May 2026 16:03:40 +0000
Files and hashes: 1: D065D2A0A105660C70D0A89385A33A61750ED7E8.crl (hash: N1Ij1sP3E1B2CKUwNjnWBfQyDyY2oFKGPaHPk7+ld+E=)
2: 3130332e3136312e3130392e302f32342d3234203d3e20313431363138.roa (hash: o2bQvGOl23Ff/IhGDb/Bx0WpnGHktg20JirSu+NaGU4=)
3: 3130332e3137342e36362e302f32342d3234203d3e20313431363138.roa (hash: 65bteXTuBMFNNSxBrNIPuupUb/Qq8/iDZ5KY9jeNgbQ=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:d5:40:42:60:a4:ed:c1:72:95:56:22:43:97:91:f8:a5:89:22:1f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=D065D2A0A105660C70D0A89385A33A61750ED7E8
Validity
Not Before: Apr 28 11:17:40 2026 GMT
Not After : May 1 16:03:40 2026 GMT
Subject: CN=A2119A42D8E42C177BE63A6FD79460D3A104F3C9
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c4:56:fe:45:ad:99:94:51:34:8c:e7:2e:6f:3b:
bd:e9:87:90:dd:ce:f4:16:7c:2e:a9:2b:ec:f6:af:
00:76:09:ba:25:7e:31:b0:03:b9:31:a8:cc:f8:6a:
c1:78:53:e2:a7:ba:6b:21:22:90:33:7d:0d:fc:f3:
48:2e:67:8d:55:5a:d2:6c:06:e6:3d:d0:9b:84:cb:
dc:c6:80:5e:f5:44:1a:56:f0:9d:ef:47:77:0b:7f:
e9:0f:25:00:62:8f:c8:56:12:58:be:46:1f:3c:53:
24:ac:1b:1b:0e:0f:4c:fb:c2:dd:4d:f2:7f:a7:ee:
15:81:a7:df:95:9c:53:c5:77:71:7e:d0:35:7a:e9:
9d:e0:63:be:ae:44:3d:e9:38:e8:47:0a:49:83:de:
7f:bc:d1:11:eb:3f:43:5d:88:5b:16:1b:89:f0:10:
bb:41:e6:82:3d:c2:1e:c6:42:27:ad:65:eb:2c:97:
81:51:93:a9:c4:c3:c8:2a:4f:ff:36:f4:73:71:cd:
f2:3d:8c:ac:45:04:c3:95:11:64:3f:51:95:ab:8c:
a3:ac:8d:df:7c:62:b1:c8:ce:6f:ab:4a:92:fe:45:
f2:92:4f:d1:a4:21:d3:68:77:d1:f5:dc:f4:8b:18:
28:0f:d9:3c:7b:17:60:ab:7b:ba:55:c0:de:79:fe:
8f:83
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A2:11:9A:42:D8:E4:2C:17:7B:E6:3A:6F:D7:94:60:D3:A1:04:F3:C9
X509v3 Authority Key Identifier:
keyid:D0:65:D2:A0:A1:05:66:0C:70:D0:A8:93:85:A3:3A:61:75:0E:D7:E8
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://repo-rpki.idnic.net/repo/e0ba97ef-7bc8-45b8-82ab-f85533caedf4/0/D065D2A0A105660C70D0A89385A33A61750ED7E8.crl
Authority Information Access:
CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/D065D2A0A105660C70D0A89385A33A61750ED7E8.cer
Subject Information Access:
Signed Object - URI:rsync://repo-rpki.idnic.net/repo/e0ba97ef-7bc8-45b8-82ab-f85533caedf4/0/D065D2A0A105660C70D0A89385A33A61750ED7E8.mft
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
24:b4:d1:b9:99:af:bc:84:b7:44:74:40:96:8f:5b:ae:5a:08:
a1:e5:95:ec:fe:e0:e9:6b:56:1f:6a:0c:dd:7b:38:d1:44:c7:
7d:fb:8c:2b:77:4b:61:ae:d0:75:bc:1d:e1:55:1a:aa:a8:cf:
78:72:b4:0e:8f:ea:6f:da:6b:7a:80:a2:87:ee:dc:6b:ab:8c:
11:89:7f:0e:5f:1a:36:64:e5:ad:39:6d:a2:68:f7:52:15:0c:
82:11:19:3c:97:ee:91:8e:16:30:ca:2c:77:75:67:f2:65:14:
55:21:26:45:69:af:7f:9a:7b:a5:26:cb:5c:b0:37:1e:64:74:
64:84:1e:46:30:96:2c:70:c6:f2:87:06:c1:1c:42:c7:85:ac:
03:18:2a:9d:c6:e0:24:24:f0:16:fb:08:a1:41:af:44:bb:8b:
4c:f0:64:52:39:11:61:3f:5f:84:4a:14:84:be:2c:03:4a:6a:
2e:7b:e5:c7:2a:5c:8c:3a:fa:29:66:74:24:1e:fc:87:7d:54:
3c:43:89:08:45:3f:ed:ad:af:de:db:31:54:ae:12:59:8d:d2:
df:0c:1b:f8:ed:ca:5a:4d:e2:d7:ad:ea:4b:fb:cc:ea:7e:9b:
d4:8f:4e:ac:fc:18:7d:3c:87:65:5a:9b:61:1a:f8:19:35:d2:
cd:53:9a:fa
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jun 3 03:11:48 2026 by rpki-client