Manifest
$ rpki-client -vvf repo-rpki.idnic.net/repo/ea80ea91-2cc7-4ec9-b267-434a30c9ee49/0/867BF4F1FA29E84E1AC2A66BEEA86524F41402B0.mft
File: 867BF4F1FA29E84E1AC2A66BEEA86524F41402B0.mft (raw, json)
Hash identifier: 9EPHgIVbGzuHPQlZoN3SXp1KsX0xoCamaRmqMlvq0o0=
Subject key identifier: 33:6A:0C:3B:8F:16:AE:4E:99:DB:4A:FA:9F:CB:93:62:12:E1:F9:BB
Authority key identifier: 86:7B:F4:F1:FA:29:E8:4E:1A:C2:A6:6B:EE:A8:65:24:F4:14:02:B0
Certificate issuer: /CN=867BF4F1FA29E84E1AC2A66BEEA86524F41402B0
Certificate serial: 69CB257D8430FA35A9086A82FEBFEF43D32F1D5A
Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/867BF4F1FA29E84E1AC2A66BEEA86524F41402B0.cer
Subject info access: rsync://repo-rpki.idnic.net/repo/ea80ea91-2cc7-4ec9-b267-434a30c9ee49/0/867BF4F1FA29E84E1AC2A66BEEA86524F41402B0.mft
Manifest number: 04
Signing time: Mon 27 Apr 2026 08:13:14 +0000
Manifest this update: Mon 27 Apr 2026 08:08:14 +0000
Manifest next update: Thu 30 Apr 2026 15:12:14 +0000
Files and hashes: 1: 867BF4F1FA29E84E1AC2A66BEEA86524F41402B0.crl (hash: IAj213qOk2aEL7p6tAzb98/C59LQxRr1OJUd1rIJaQo=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
69:cb:25:7d:84:30:fa:35:a9:08:6a:82:fe:bf:ef:43:d3:2f:1d:5a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=867BF4F1FA29E84E1AC2A66BEEA86524F41402B0
Validity
Not Before: Apr 27 08:08:14 2026 GMT
Not After : Apr 30 15:12:14 2026 GMT
Subject: CN=336A0C3B8F16AE4E99DB4AFA9FCB936212E1F9BB
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:be:af:66:81:3d:3f:41:4d:9e:9c:b7:22:bc:d0:
20:76:5a:77:0d:ea:98:bc:74:57:cb:71:8b:e6:4a:
f4:99:4f:e6:90:10:11:f2:2a:c4:8a:3c:ec:63:33:
e0:db:4c:ec:2d:88:e6:60:38:d3:1b:95:87:f2:f1:
ef:ef:63:a2:c2:f6:dd:ab:51:ad:89:8a:81:74:61:
b5:aa:1d:90:da:f4:09:15:8a:48:8c:9c:1f:65:e4:
30:4d:47:01:b4:03:c9:fa:b5:b1:f3:91:bb:31:54:
08:4b:be:bf:51:91:c5:37:75:01:1b:42:66:2e:cf:
40:7f:03:a4:5d:50:f1:29:a5:a1:1a:e2:c6:19:a2:
c6:a9:f8:74:c9:e3:6c:9c:01:ca:60:c0:dc:4b:c0:
a5:99:43:dd:b4:56:ae:d5:dd:8f:bc:a9:e9:66:fa:
af:0e:d8:d5:f1:e0:17:5c:a1:a0:07:4c:5e:3a:d6:
6b:d2:02:22:1a:d7:ea:a1:02:a8:43:a2:bc:c8:18:
df:9a:96:8c:c9:e3:68:34:38:36:95:e3:5c:b4:14:
d3:a7:60:74:a1:0a:9a:ad:7a:3e:f0:22:11:f9:76:
44:a2:eb:7d:02:c6:28:90:d9:d7:b7:45:78:82:05:
68:19:bf:a5:83:d0:50:06:df:df:cb:d6:1f:42:dd:
dc:49
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
33:6A:0C:3B:8F:16:AE:4E:99:DB:4A:FA:9F:CB:93:62:12:E1:F9:BB
X509v3 Authority Key Identifier:
keyid:86:7B:F4:F1:FA:29:E8:4E:1A:C2:A6:6B:EE:A8:65:24:F4:14:02:B0
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://repo-rpki.idnic.net/repo/ea80ea91-2cc7-4ec9-b267-434a30c9ee49/0/867BF4F1FA29E84E1AC2A66BEEA86524F41402B0.crl
Authority Information Access:
CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/867BF4F1FA29E84E1AC2A66BEEA86524F41402B0.cer
Subject Information Access:
Signed Object - URI:rsync://repo-rpki.idnic.net/repo/ea80ea91-2cc7-4ec9-b267-434a30c9ee49/0/867BF4F1FA29E84E1AC2A66BEEA86524F41402B0.mft
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
c9:03:bb:99:75:65:07:aa:9b:f1:11:9d:3d:1d:b8:ce:70:b8:
0a:21:ce:6d:93:bd:82:0b:c9:f3:73:c5:0c:9f:21:eb:58:f0:
d3:0d:b3:c3:7c:fc:13:6f:25:a9:a8:58:67:d6:75:08:63:af:
12:6a:4c:20:a9:cd:ac:5d:8b:97:f1:02:0b:1e:4e:d2:f2:9d:
73:7c:41:8a:9b:18:69:0b:a5:d7:e5:2f:64:6a:07:9a:0a:4d:
93:e9:55:3d:7d:82:26:6a:2d:31:02:d1:bc:04:79:1f:ec:ab:
a6:0e:ec:f4:f9:ec:25:d2:a2:cd:65:3f:5d:12:3a:5d:26:c5:
e5:1c:b0:ec:78:40:8b:fb:1d:e5:af:cb:e8:9c:b7:08:c6:a8:
ee:55:77:2e:3b:45:77:c4:e0:ba:9c:43:ec:f6:a0:9e:34:33:
de:c8:a5:2a:5c:6a:1b:3c:bb:6b:af:14:17:03:83:7f:b6:b4:
7d:6b:5e:ca:e2:51:63:ca:49:b5:23:0d:d5:01:22:91:b6:d8:
f5:ef:7a:f8:f8:54:8f:77:ef:e3:84:1f:b6:31:b7:d3:53:52:
5b:7a:b7:41:47:05:19:18:c3:2f:2b:ec:ea:e3:df:c5:51:1e:
31:4d:a3:f4:fb:39:e5:a4:d1:af:4c:34:98:50:d4:c5:58:db:
80:21:ed:5b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jun 3 03:06:27 2026 by rpki-client