Manifest
$ rpki-client -vvf repo-rpki.idnic.net/repo/ed808f67-9abc-46dd-9817-b9339093f88e/0/CE118685D363E20B6D3B3955972062D9581B9E43.mft
File: CE118685D363E20B6D3B3955972062D9581B9E43.mft (raw, json)
Hash identifier: /pSTTiyzAqaUFGEZ5EUxqu2HjrIfa2cLR2d7qKOuD0I=
Subject key identifier: 12:3C:77:7C:B3:F7:B9:E0:22:F8:EC:1B:64:0B:40:D0:7F:F1:B9:47
Authority key identifier: CE:11:86:85:D3:63:E2:0B:6D:3B:39:55:97:20:62:D9:58:1B:9E:43
Certificate issuer: /CN=CE118685D363E20B6D3B3955972062D9581B9E43
Certificate serial: 42C49A917C85D613B9342D0F630C816C091E9292
Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/CE118685D363E20B6D3B3955972062D9581B9E43.cer
Subject info access: rsync://repo-rpki.idnic.net/repo/ed808f67-9abc-46dd-9817-b9339093f88e/0/CE118685D363E20B6D3B3955972062D9581B9E43.mft
Manifest number: 0247
Signing time: Tue 28 Apr 2026 05:40:55 +0000
Manifest this update: Tue 28 Apr 2026 05:35:55 +0000
Manifest next update: Fri 01 May 2026 07:08:55 +0000
Files and hashes: 1: 3130332e3232342e3132342e302f32332d3234203d3e20313530313937.roa (hash: NXw6s+JjAkZ3fTUdDSEG0NXOT3+x5+RONGyWOxolXSA=)
2: CE118685D363E20B6D3B3955972062D9581B9E43.crl (hash: WqTWWKr4bgCKpOJONsWfTYa5qHlbP7X7t/URPN9htyA=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
42:c4:9a:91:7c:85:d6:13:b9:34:2d:0f:63:0c:81:6c:09:1e:92:92
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=CE118685D363E20B6D3B3955972062D9581B9E43
Validity
Not Before: Apr 28 05:35:55 2026 GMT
Not After : May 1 07:08:55 2026 GMT
Subject: CN=123C777CB3F7B9E022F8EC1B640B40D07FF1B947
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cc:a1:b7:c2:fe:c5:2d:78:db:e0:31:dd:2e:55:
2a:6e:8a:57:5b:57:8a:b0:78:af:41:7a:c4:e6:09:
22:66:92:09:ae:ea:ef:9f:fb:c9:c0:d1:35:49:03:
80:26:f8:3d:c0:36:94:d0:8f:1e:54:9a:94:10:ee:
46:44:1c:69:ba:72:7b:e4:6b:17:fc:03:db:4e:00:
5a:32:ca:68:91:c6:e0:cd:9f:da:fb:af:e2:9b:32:
bb:f8:4c:07:26:ee:17:6f:ca:d8:1c:49:0b:94:4e:
25:e5:36:8d:38:fa:bf:09:20:00:43:14:3b:ef:eb:
59:89:06:c6:17:b9:32:43:f8:f4:05:4f:98:ce:d3:
7d:0e:de:d3:13:1c:af:6e:53:98:59:e4:7d:3c:9a:
ca:fd:2b:32:9b:63:33:21:26:4a:32:50:51:15:b3:
e7:b9:12:e4:55:cb:fc:bf:45:80:75:4a:9e:7b:8e:
f4:5e:9a:27:9c:62:29:24:59:c5:d5:a4:ab:0f:ab:
a7:a2:25:dd:5f:9f:97:89:d2:ea:9e:0a:2a:7d:b8:
cf:77:e6:77:a2:93:95:ac:a8:b8:3f:ed:f5:f0:5a:
dc:4f:b1:63:d9:8c:d9:c1:ad:c0:aa:ee:4b:a6:07:
18:e1:58:66:26:eb:59:ce:81:55:ea:65:f0:72:a9:
67:6d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
12:3C:77:7C:B3:F7:B9:E0:22:F8:EC:1B:64:0B:40:D0:7F:F1:B9:47
X509v3 Authority Key Identifier:
keyid:CE:11:86:85:D3:63:E2:0B:6D:3B:39:55:97:20:62:D9:58:1B:9E:43
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://repo-rpki.idnic.net/repo/ed808f67-9abc-46dd-9817-b9339093f88e/0/CE118685D363E20B6D3B3955972062D9581B9E43.crl
Authority Information Access:
CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/CE118685D363E20B6D3B3955972062D9581B9E43.cer
Subject Information Access:
Signed Object - URI:rsync://repo-rpki.idnic.net/repo/ed808f67-9abc-46dd-9817-b9339093f88e/0/CE118685D363E20B6D3B3955972062D9581B9E43.mft
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
0d:ec:5c:d1:84:8f:84:c6:61:36:ae:92:f2:47:93:7f:2a:d6:
bd:a9:59:88:e1:c8:83:93:ed:4e:c5:45:0d:aa:a0:a0:49:98:
59:ee:37:02:f8:79:c4:12:68:b5:bb:2e:fd:19:67:50:d3:da:
27:dc:7d:97:50:f9:e9:da:6e:e0:80:ed:05:46:c8:fb:44:ad:
3f:6c:59:0a:a3:2c:90:87:86:18:04:36:89:40:d4:2b:b1:ec:
3e:44:a0:63:3c:0a:3d:59:a6:3b:e3:42:51:a3:f2:4d:c2:5f:
1e:35:33:99:6d:e0:dd:21:45:df:e8:10:e8:ca:4b:30:1c:0a:
e6:14:14:6b:13:f9:ef:f8:8a:3a:8f:c5:ca:52:67:bf:04:b8:
9a:53:c1:4c:33:3d:a5:50:58:f8:78:f7:1a:13:97:bc:56:22:
7e:95:de:14:a0:9b:2b:bf:c9:56:73:eb:88:71:fe:34:a1:e1:
d9:4c:fb:b0:f5:8d:3b:8b:67:1a:8f:f8:c5:4a:fd:e3:e7:ae:
f1:c2:fe:ee:34:fb:68:31:c1:ea:fe:ba:54:fc:d7:1d:24:f9:
49:3a:d9:53:0c:72:1b:54:ea:0b:9a:19:74:d9:c6:84:80:44:
2a:21:f7:20:59:aa:e0:1c:d7:64:7d:9e:58:aa:16:17:f2:2e:
94:21:69:8a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jun 3 03:09:07 2026 by rpki-client