Manifest
$ rpki-client -vvf repo-rpki.idnic.net/repo/ec8892eb-ddc0-4cb6-957c-b653f28bbf39/0/4A243A1EC4991C40D3A6148515E3C51981B425F7.mft
File: 4A243A1EC4991C40D3A6148515E3C51981B425F7.mft (raw, json)
Hash identifier: xEn+jmuGz1DVVzdfoNyHgSz9xj6SX/bwxjD0s6lyfuE=
Subject key identifier: B8:5C:9B:30:66:14:6A:F2:52:5E:6B:A0:48:F5:23:2E:2C:7E:2D:53
Authority key identifier: 4A:24:3A:1E:C4:99:1C:40:D3:A6:14:85:15:E3:C5:19:81:B4:25:F7
Certificate issuer: /CN=4A243A1EC4991C40D3A6148515E3C51981B425F7
Certificate serial: 1FB44D0591A1E4DFF5A59FDD5B1EC9420890C9BB
Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/4A243A1EC4991C40D3A6148515E3C51981B425F7.cer
Subject info access: rsync://repo-rpki.idnic.net/repo/ec8892eb-ddc0-4cb6-957c-b653f28bbf39/0/4A243A1EC4991C40D3A6148515E3C51981B425F7.mft
Manifest number: 0206
Signing time: Tue 28 Apr 2026 07:01:10 +0000
Manifest this update: Tue 28 Apr 2026 06:56:10 +0000
Manifest next update: Fri 01 May 2026 18:56:10 +0000
Files and hashes: 1: 4A243A1EC4991C40D3A6148515E3C51981B425F7.crl (hash: 3wKb7N/WoKZB+XuEsvYF7+8ZhGD2Bvc3vqlCcbUpSzk=)
2: 3130332e3130392e3230362e302f32342d3234203d3e20313530393335.roa (hash: N89QBdgbynlTPf9e92O0WSzi8E87JnEMSvR4tVBmXXE=)
3: 3130332e3130392e3230372e302f32342d3234203d3e20313530393335.roa (hash: BXD0wRHHvZ7tvUsCrEkeYNeQx/wQOvq3rapVAJZzAJs=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
1f:b4:4d:05:91:a1:e4:df:f5:a5:9f:dd:5b:1e:c9:42:08:90:c9:bb
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4A243A1EC4991C40D3A6148515E3C51981B425F7
Validity
Not Before: Apr 28 06:56:10 2026 GMT
Not After : May 1 18:56:10 2026 GMT
Subject: CN=B85C9B3066146AF2525E6BA048F5232E2C7E2D53
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ad:68:cb:b8:3d:d2:9a:9a:a2:f0:78:d9:a3:89:
06:56:89:c1:57:48:f5:ee:66:c9:14:09:f6:d3:96:
fb:03:40:74:a2:f1:87:92:0f:e8:d8:58:ee:48:13:
62:9f:5c:87:4b:9c:a0:7f:ec:e9:d0:68:0c:6f:8c:
65:89:b9:8d:8b:bc:83:c1:9e:09:82:09:4f:71:2a:
da:80:dd:92:a5:58:f9:14:4c:9c:24:62:b7:14:35:
d8:00:23:55:fa:e9:7b:a1:22:40:41:aa:e3:85:80:
10:a9:5f:41:b4:4b:54:fd:29:09:c6:59:3e:fe:20:
86:0c:3b:cd:78:ec:86:90:5a:57:60:ca:5d:60:ed:
43:d9:1d:f6:8d:56:df:9c:b8:5b:e5:4a:9e:cc:9b:
42:d7:dc:d0:ab:41:e0:86:24:c4:87:96:c6:73:dc:
e5:5c:c5:eb:62:40:7a:0b:1f:09:20:8b:69:79:eb:
e3:6b:a4:af:d6:67:2a:d9:4e:f6:39:07:8e:01:77:
91:ab:fe:78:b8:0e:ae:8e:eb:75:a1:ce:fe:63:17:
10:78:90:20:09:98:b9:9c:4d:f8:6c:e8:a3:c0:15:
8a:83:7f:8f:c3:0d:a1:da:b7:d2:e0:51:74:da:f4:
6e:d3:91:3f:5f:26:a9:65:06:f1:d1:ae:23:61:ce:
ef:eb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B8:5C:9B:30:66:14:6A:F2:52:5E:6B:A0:48:F5:23:2E:2C:7E:2D:53
X509v3 Authority Key Identifier:
keyid:4A:24:3A:1E:C4:99:1C:40:D3:A6:14:85:15:E3:C5:19:81:B4:25:F7
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://repo-rpki.idnic.net/repo/ec8892eb-ddc0-4cb6-957c-b653f28bbf39/0/4A243A1EC4991C40D3A6148515E3C51981B425F7.crl
Authority Information Access:
CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/4A243A1EC4991C40D3A6148515E3C51981B425F7.cer
Subject Information Access:
Signed Object - URI:rsync://repo-rpki.idnic.net/repo/ec8892eb-ddc0-4cb6-957c-b653f28bbf39/0/4A243A1EC4991C40D3A6148515E3C51981B425F7.mft
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
70:17:e0:5f:0d:e8:b5:c3:e2:61:88:f4:94:66:cb:29:49:40:
2f:33:b6:48:29:d8:a6:cf:ed:56:44:8f:d0:f4:64:6f:34:48:
1d:45:86:b5:1e:a8:bb:82:d4:b9:3d:20:8f:5f:c9:ce:b7:3c:
88:4b:e4:b2:8e:f3:a3:05:e8:e9:27:66:57:b0:26:8c:13:ec:
59:55:ce:a7:bd:43:00:79:7a:e7:5f:b8:6b:ff:d8:53:88:46:
1a:4a:53:a6:44:eb:d6:dc:39:3f:e0:46:49:62:5d:01:f7:fd:
be:93:78:42:f6:3a:bf:bd:68:b7:57:31:52:ee:99:e3:b3:f3:
6c:83:bc:55:e6:90:51:c1:02:a1:85:df:0c:81:f6:38:4c:42:
0e:c5:0d:68:7e:52:26:bb:03:1b:16:1b:fc:d3:5d:68:c7:0f:
87:81:02:b3:95:ea:78:55:ba:d0:53:01:94:03:36:bb:04:92:
b6:2f:39:3d:9e:9e:a6:26:25:82:42:f0:5b:f7:2a:83:b9:cb:
07:ca:c5:16:2d:e3:9e:81:c3:5c:80:ad:6c:8a:a7:3c:b5:83:
9f:6b:ef:43:39:c2:37:cd:e8:cb:ab:32:34:42:dd:00:d5:c9:
c1:b7:ca:2b:ca:08:4f:cb:8c:3f:14:c8:ce:0f:36:c2:d2:2b:
fe:44:bb:72
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jun 3 03:21:54 2026 by rpki-client