Manifest
$ rpki-client -vvf repo-rpki.idnic.net/repo/ecdae0a5-b4f6-4e08-8beb-63ebe0853df3/0/B8A9E45E7E2DEA6624140C03DE025D16B91CB9DC.mft
File: B8A9E45E7E2DEA6624140C03DE025D16B91CB9DC.mft (raw, json)
Hash identifier: IXHPwrjholt7Zp2uwOW48b/B0Go1p+OiWHBzTmDVmpI=
Subject key identifier: 56:04:F5:F1:97:6B:D1:AE:9A:32:9B:7D:13:54:31:43:3F:3C:CC:C9
Authority key identifier: B8:A9:E4:5E:7E:2D:EA:66:24:14:0C:03:DE:02:5D:16:B9:1C:B9:DC
Certificate issuer: /CN=B8A9E45E7E2DEA6624140C03DE025D16B91CB9DC
Certificate serial: 755D221EA72FA6FB99F9A863C3CCA80890B3D2EE
Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/B8A9E45E7E2DEA6624140C03DE025D16B91CB9DC.cer
Subject info access: rsync://repo-rpki.idnic.net/repo/ecdae0a5-b4f6-4e08-8beb-63ebe0853df3/0/B8A9E45E7E2DEA6624140C03DE025D16B91CB9DC.mft
Manifest number: 01CC
Signing time: Tue 28 Apr 2026 01:02:27 +0000
Manifest this update: Tue 28 Apr 2026 00:57:27 +0000
Manifest next update: Fri 01 May 2026 06:14:27 +0000
Files and hashes: 1: B8A9E45E7E2DEA6624140C03DE025D16B91CB9DC.crl (hash: aVUa3ADa2m/kJs7a84JXODu/4gdpigls1h2BqNOYje0=)
2: 3130332e34302e39322e302f32332d3233203d3e203633353034.roa (hash: rX/k/SGX3GdbaAjJlBSXE/K1KEEwMrEbwKyMsbAa4hs=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
75:5d:22:1e:a7:2f:a6:fb:99:f9:a8:63:c3:cc:a8:08:90:b3:d2:ee
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=B8A9E45E7E2DEA6624140C03DE025D16B91CB9DC
Validity
Not Before: Apr 28 00:57:27 2026 GMT
Not After : May 1 06:14:27 2026 GMT
Subject: CN=5604F5F1976BD1AE9A329B7D135431433F3CCCC9
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b8:84:fb:37:e7:84:5a:2c:3e:89:bd:c9:9a:37:
12:49:f5:ff:a0:cc:13:07:93:48:d5:a9:63:e2:b9:
11:99:13:7f:c2:09:bd:be:ed:6e:68:a0:c3:1e:b1:
17:44:60:74:c0:70:1f:a8:da:97:bd:32:ba:1f:40:
98:e4:d5:6e:b1:13:dd:63:57:f1:53:c0:af:ba:3e:
bd:9d:4c:1f:5b:b3:30:6a:ce:06:ca:bb:61:16:f6:
0b:bf:f3:62:65:26:c5:8c:58:05:27:e1:a6:bd:3c:
74:7f:b3:b0:45:08:06:31:e7:35:d9:fa:d6:dc:16:
18:2b:aa:1a:d9:28:33:36:87:01:44:b2:0a:f5:1e:
9f:f5:ad:69:63:63:b8:19:02:e7:ee:2c:7a:2a:33:
34:b4:92:6f:a4:2d:ee:d7:7e:2f:8e:7b:5d:51:65:
e1:29:54:b5:4f:82:c3:08:fd:8c:34:55:10:fa:26:
e4:87:92:43:b2:35:ea:21:0b:9a:63:82:f8:73:8c:
f7:eb:60:e5:18:3c:dd:ad:59:de:08:13:00:6a:58:
5f:2c:68:eb:79:31:9f:c9:e3:c7:af:e9:79:6e:f7:
d7:8c:45:cd:11:16:8f:ed:62:a4:70:3a:5e:97:77:
dc:63:e4:3c:72:86:dc:04:7f:d8:de:31:cf:d9:e3:
d5:db
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
56:04:F5:F1:97:6B:D1:AE:9A:32:9B:7D:13:54:31:43:3F:3C:CC:C9
X509v3 Authority Key Identifier:
keyid:B8:A9:E4:5E:7E:2D:EA:66:24:14:0C:03:DE:02:5D:16:B9:1C:B9:DC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://repo-rpki.idnic.net/repo/ecdae0a5-b4f6-4e08-8beb-63ebe0853df3/0/B8A9E45E7E2DEA6624140C03DE025D16B91CB9DC.crl
Authority Information Access:
CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/B8A9E45E7E2DEA6624140C03DE025D16B91CB9DC.cer
Subject Information Access:
Signed Object - URI:rsync://repo-rpki.idnic.net/repo/ecdae0a5-b4f6-4e08-8beb-63ebe0853df3/0/B8A9E45E7E2DEA6624140C03DE025D16B91CB9DC.mft
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
13:6a:e2:cf:98:d2:ca:db:fa:70:b5:0a:be:6b:3e:2b:62:b1:
a4:b6:b4:5d:f1:54:f4:03:0d:a5:9c:ae:da:c7:42:67:4e:ab:
13:6c:0c:ad:1f:ef:88:fd:ef:c4:43:87:2c:50:0f:0d:e8:a4:
19:63:7a:f5:27:eb:c0:70:23:82:e6:7e:30:e4:3b:a9:cc:29:
a7:68:ac:f1:3f:01:66:d1:bb:ea:12:a2:e7:05:8b:47:ad:6d:
b4:16:d7:02:ab:29:5d:1c:a9:4f:49:88:9b:d1:11:2f:71:f6:
4e:ef:97:6e:2a:6b:62:98:49:f5:63:eb:5f:d1:83:2e:71:9d:
41:95:ba:37:1c:5d:33:3a:e3:3f:83:23:0c:5f:51:16:5b:88:
ff:46:c7:d7:dc:e0:5c:ab:fd:4d:f3:02:29:09:2e:16:6e:25:
02:ff:4a:91:20:54:82:2a:45:2d:69:58:49:c1:30:5d:8f:c4:
2c:69:67:84:91:40:0a:a5:0e:7c:aa:7a:72:75:02:05:ca:7a:
df:b6:57:ce:6d:a3:0b:75:e4:01:86:70:fc:aa:5b:74:c4:f4:
c5:07:50:87:96:8a:eb:4e:3a:4e:bb:02:aa:3e:8e:f5:06:7f:
42:48:df:e8:bb:fa:93:c4:58:b9:d4:c0:49:5e:8b:9c:df:1d:
d9:33:5b:2f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jun 3 03:14:38 2026 by rpki-client