Manifest
$ rpki-client -vvf repo-rpki.idnic.net/repo/ea47231f-02dd-49e8-aa25-2d54c0a999ca/0/439A4981549ABB151B12D6EC85FC8D0DBF99A81E.mft
File: 439A4981549ABB151B12D6EC85FC8D0DBF99A81E.mft (raw, json)
Hash identifier: NvHmJsuT/V53ACQMA0P5HmwgrLHXlYFHIMlDPfgDEeo=
Subject key identifier: C3:7A:BD:42:4E:04:7A:CC:01:5F:B0:D9:28:D1:9C:14:1E:99:F6:11
Authority key identifier: 43:9A:49:81:54:9A:BB:15:1B:12:D6:EC:85:FC:8D:0D:BF:99:A8:1E
Certificate issuer: /CN=439A4981549ABB151B12D6EC85FC8D0DBF99A81E
Certificate serial: 2AF63628A34C2D71567BB72FE6525CD7B9CE8937
Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/439A4981549ABB151B12D6EC85FC8D0DBF99A81E.cer
Subject info access: rsync://repo-rpki.idnic.net/repo/ea47231f-02dd-49e8-aa25-2d54c0a999ca/0/439A4981549ABB151B12D6EC85FC8D0DBF99A81E.mft
Manifest number: 04B8
Signing time: Tue 28 Apr 2026 15:40:51 +0000
Manifest this update: Tue 28 Apr 2026 15:35:51 +0000
Manifest next update: Fri 01 May 2026 21:47:51 +0000
Files and hashes: 1: 3130332e3233332e3130322e302f32332d3234203d3e20313336313037.roa (hash: D5BixYr4AJU/MS7TZCW/5jRqwcOMx/QjB3M/Uu6XanU=)
2: 439A4981549ABB151B12D6EC85FC8D0DBF99A81E.crl (hash: FRfcGYOmHQ0wZBoU9ithlfLeNoRQH0Vee2hNuX+yzrI=)
3: 3130332e3131322e3234342e302f32332d3234203d3e20313336313037.roa (hash: iey0oG1qHYOzJhbqWTH39EDQ0pZ3GLohA4EPTGiKvsg=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
2a:f6:36:28:a3:4c:2d:71:56:7b:b7:2f:e6:52:5c:d7:b9:ce:89:37
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=439A4981549ABB151B12D6EC85FC8D0DBF99A81E
Validity
Not Before: Apr 28 15:35:51 2026 GMT
Not After : May 1 21:47:51 2026 GMT
Subject: CN=C37ABD424E047ACC015FB0D928D19C141E99F611
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e5:35:4a:e6:d2:16:c7:6f:b4:55:3c:7e:5b:ed:
6d:b5:fb:8e:76:85:9d:9c:28:ed:d2:48:c8:3f:e5:
00:52:fd:93:37:d7:db:0b:d2:f6:59:7a:73:52:d9:
8e:70:ed:bc:31:06:01:c3:fe:f8:cd:af:c6:9b:5b:
c5:90:88:9b:96:7c:d0:27:dd:d3:15:65:15:ac:ad:
6d:b8:07:b3:99:6e:08:60:44:f8:13:12:6b:af:b4:
67:30:a7:1c:8f:38:be:72:34:ac:fc:56:87:90:9b:
06:75:81:1b:c3:b0:b8:13:0b:63:2b:dd:ba:2b:a2:
f9:d3:6c:09:3a:9d:8c:13:97:9a:75:59:a6:e9:5f:
21:5d:8b:38:7f:c8:03:85:9a:95:53:15:82:ed:1a:
c1:77:03:d5:4e:eb:be:ca:7a:e6:f1:1d:48:1c:7e:
83:40:02:25:6e:83:fb:46:cb:48:89:2a:7f:f5:aa:
74:ba:7a:f3:f0:ef:92:c1:a5:f7:8c:e5:ff:f6:74:
82:67:34:d4:8c:8c:a2:f0:88:99:50:4f:df:f8:4c:
3c:fb:1b:da:09:6b:1d:6d:20:dd:f6:db:aa:0a:5e:
b6:dd:ae:62:27:23:fb:3a:dd:00:76:25:18:a2:d8:
63:94:d4:2b:ec:9c:35:0a:b8:ba:2e:06:94:e8:92:
db:9b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C3:7A:BD:42:4E:04:7A:CC:01:5F:B0:D9:28:D1:9C:14:1E:99:F6:11
X509v3 Authority Key Identifier:
keyid:43:9A:49:81:54:9A:BB:15:1B:12:D6:EC:85:FC:8D:0D:BF:99:A8:1E
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://repo-rpki.idnic.net/repo/ea47231f-02dd-49e8-aa25-2d54c0a999ca/0/439A4981549ABB151B12D6EC85FC8D0DBF99A81E.crl
Authority Information Access:
CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/439A4981549ABB151B12D6EC85FC8D0DBF99A81E.cer
Subject Information Access:
Signed Object - URI:rsync://repo-rpki.idnic.net/repo/ea47231f-02dd-49e8-aa25-2d54c0a999ca/0/439A4981549ABB151B12D6EC85FC8D0DBF99A81E.mft
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
41:6b:68:25:61:12:c4:28:91:ae:78:e7:70:55:2c:c6:59:cf:
d6:5e:29:32:72:50:1f:2a:6a:78:c4:fc:79:62:41:ef:0f:1b:
f1:91:ab:81:9c:37:c1:fb:96:6b:43:d9:82:8f:31:62:f8:5b:
b7:19:41:0b:70:5d:47:23:b3:22:36:26:66:51:09:ac:69:9e:
e3:e6:14:29:b5:8b:9d:90:24:9c:e9:d0:9a:7f:7e:95:c0:51:
a3:7d:bc:50:11:e6:d3:c1:3f:73:e1:52:88:3b:ed:55:c4:e1:
da:de:d1:87:78:57:4e:79:75:f7:7d:6c:d1:a7:2e:1d:1c:51:
42:6f:aa:04:ee:9a:71:71:b4:70:a9:87:5d:92:b2:09:d2:07:
55:64:05:85:2d:a2:42:b0:3f:8d:14:c7:c0:10:5f:a9:3b:fa:
02:49:5a:b2:c8:10:58:af:f3:e4:9b:14:92:b4:a0:b5:de:be:
d4:ec:f9:ba:ea:ec:51:e5:3d:2f:12:37:ae:b4:2b:7b:a1:fb:
39:37:e2:9d:9f:68:e1:15:2e:1c:4e:5c:81:ba:f7:73:14:25:
e8:e8:d5:39:5e:8f:cd:e1:a5:b5:2d:0d:45:94:bf:b8:a4:24:
3d:56:35:64:39:57:69:b2:18:7b:fe:c5:fb:0f:3e:6a:71:52:
1b:07:59:23
-----BEGIN CERTIFICATE-----
MIIFMjCCBBqgAwIBAgIUKvY2KKNMLXFWe7cv5lJc17nOiTcwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoNDM5QTQ5ODE1NDlBQkIxNTFCMTJENkVDODVGQzhEMERC
Rjk5QTgxRTAeFw0yNjA0MjgxNTM1NTFaFw0yNjA1MDEyMTQ3NTFaMDMxMTAvBgNV
BAMTKEMzN0FCRDQyNEUwNDdBQ0MwMTVGQjBEOTI4RDE5QzE0MUU5OUY2MTEwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDlNUrm0hbHb7RVPH5b7W21+452
hZ2cKO3SSMg/5QBS/ZM319sL0vZZenNS2Y5w7bwxBgHD/vjNr8abW8WQiJuWfNAn
3dMVZRWsrW24B7OZbghgRPgTEmuvtGcwpxyPOL5yNKz8VoeQmwZ1gRvDsLgTC2Mr
3borovnTbAk6nYwTl5p1WabpXyFdizh/yAOFmpVTFYLtGsF3A9VO677KeubxHUgc
foNAAiVug/tGy0iJKn/1qnS6evPw75LBpfeM5f/2dIJnNNSMjKLwiJlQT9/4TDz7
G9oJax1tIN3226oKXrbdrmInI/s63QB2JRii2GOU1CvsnDUKuLouBpToktubAgMB
AAGjggI8MIICODAdBgNVHQ4EFgQUw3q9Qk4EeswBX7DZKNGcFB6Z9hEwHwYDVR0j
BBgwFoAUQ5pJgVSauxUbEtbshfyNDb+ZqB4wDgYDVR0PAQH/BAQDAgeAMIGFBgNV
HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby9l
YTQ3MjMxZi0wMmRkLTQ5ZTgtYWEyNS0yZDU0YzBhOTk5Y2EvMC80MzlBNDk4MTU0
OUFCQjE1MUIxMkQ2RUM4NUZDOEQwREJGOTlBODFFLmNybDB0BggrBgEFBQcBAQRo
MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv
L0lETklDLUlELzIvNDM5QTQ5ODE1NDlBQkIxNTFCMTJENkVDODVGQzhEMERCRjk5
QTgxRS5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6
Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vZWE0NzIzMWYtMDJkZC00OWU4LWFh
MjUtMmQ1NGMwYTk5OWNhLzAvNDM5QTQ5ODE1NDlBQkIxNTFCMTJENkVDODVGQzhE
MERCRjk5QTgxRS5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF
BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC
BQAwDQYJKoZIhvcNAQELBQADggEBAEFraCVhEsQoka5453BVLMZZz9ZeKTJyUB8q
anjE/HliQe8PG/GRq4GcN8H7lmtD2YKPMWL4W7cZQQtwXUcjsyI2JmZRCaxpnuPm
FCm1i52QJJzp0Jp/fpXAUaN9vFAR5tPBP3PhUog77VXE4dre0Yd4V055dfd9bNGn
Lh0cUUJvqgTumnFxtHCph12SsgnSB1VkBYUtokKwP40Ux8AQX6k7+gJJWrLIEFiv
8+SbFJK0oLXevtTs+brq7FHlPS8SN660K3uh+zk34p2faOEVLhxOXIG693MUJejo
1Tlej83hpbUtDUWUv7ikJD1WNWQ5V2myGHv+xfsPPmpxUhsHWSM=
-----END CERTIFICATE-----
Generated at Wed Jun 3 03:14:22 2026 by rpki-client