Manifest
$ rpki-client -vvf repo-rpki.idnic.net/repo/ede8e18d-a047-4590-9e56-464a73e23c6c/0/821049BBD22C335A50850F16AB159C0C6BCC28E5.mft
File: 821049BBD22C335A50850F16AB159C0C6BCC28E5.mft (raw, json)
Hash identifier: 66Bl/NQ3IK/4sceio+XWNgriQJ712z/x1KYq4bMu0AQ=
Subject key identifier: E4:7F:82:B4:23:7B:FC:27:CD:95:FE:A2:E5:C5:32:33:17:96:73:DF
Authority key identifier: 82:10:49:BB:D2:2C:33:5A:50:85:0F:16:AB:15:9C:0C:6B:CC:28:E5
Certificate issuer: /CN=821049BBD22C335A50850F16AB159C0C6BCC28E5
Certificate serial: 28313F9F763062911F699655C1484C088BC248BF
Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/821049BBD22C335A50850F16AB159C0C6BCC28E5.cer
Subject info access: rsync://repo-rpki.idnic.net/repo/ede8e18d-a047-4590-9e56-464a73e23c6c/0/821049BBD22C335A50850F16AB159C0C6BCC28E5.mft
Manifest number: 02A3
Signing time: Wed 29 Apr 2026 08:51:54 +0000
Manifest this update: Wed 29 Apr 2026 08:46:54 +0000
Manifest next update: Sat 02 May 2026 17:51:54 +0000
Files and hashes: 1: 3130332e32312e39342e302f32342d3234203d3e20313331373338.roa (hash: KCUnGn0DyBychM59+lv18yYznYr1wdm5Tf5W0sYTxbE=)
2: 3130332e32312e39322e302f32342d3234203d3e20313331373338.roa (hash: ndyvXGLmi+s4jvx/l0C4JrK1SIn52emjpfzG2w+2lsw=)
3: 3130332e32312e39332e302f32342d3234203d3e20313331373338.roa (hash: Hx5e9eX/0MDiWg+S8NREaCwOHPQ1Onm3jq45DAvThoc=)
4: 3130332e32312e39352e302f32342d3234203d3e203435323935.roa (hash: WHp6+633q2Em0ghmTjJeCMByUXIoDLeS8IvSNmEh0gE=)
5: 821049BBD22C335A50850F16AB159C0C6BCC28E5.crl (hash: NlcUfd3qoKLCB++QWK9wyNk7CfL7AA0jBjBMPO6/PUc=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
28:31:3f:9f:76:30:62:91:1f:69:96:55:c1:48:4c:08:8b:c2:48:bf
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=821049BBD22C335A50850F16AB159C0C6BCC28E5
Validity
Not Before: Apr 29 08:46:54 2026 GMT
Not After : May 2 17:51:54 2026 GMT
Subject: CN=E47F82B4237BFC27CD95FEA2E5C53233179673DF
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c2:1c:85:bf:45:be:41:c3:62:fe:68:57:d9:b9:
ab:f0:f7:fa:1d:98:39:5e:d6:4d:ba:f7:fa:c8:5e:
40:50:de:b8:41:78:50:5c:34:84:1b:49:7e:75:3b:
34:41:25:a8:20:eb:7d:95:ca:d1:ce:fe:12:fb:10:
85:d1:b3:2a:e5:63:42:73:9b:8f:8c:7b:f9:b5:f7:
df:0e:9e:3c:8e:bf:7c:71:15:9d:14:bd:9d:9a:ee:
50:91:b5:64:03:fd:c2:c4:17:43:28:7a:ba:74:4f:
3c:8e:06:86:81:5b:ac:6f:ba:5e:df:c9:37:a4:3b:
f2:4d:3d:19:da:cd:8e:c8:6c:a4:6f:6e:c0:61:1e:
ed:01:8b:70:ac:2b:33:08:8d:bc:ff:a8:32:09:e2:
1e:36:00:a1:52:b2:d6:33:da:18:91:1e:5a:b5:02:
15:ce:84:b7:1d:f8:ad:22:86:cb:82:e1:76:b5:b8:
a3:52:8f:e8:00:75:29:19:1e:11:35:2f:66:a0:8c:
5f:1c:c8:70:1d:cf:73:42:13:89:8e:9f:34:5d:d0:
42:99:13:5e:c6:b9:20:ca:0b:e4:8a:a3:7b:c0:55:
e4:c8:09:41:33:ff:90:ce:b0:38:e5:f6:95:9f:b1:
23:5b:80:3a:ea:77:51:e5:8b:de:1c:3c:b6:92:97:
2e:5f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E4:7F:82:B4:23:7B:FC:27:CD:95:FE:A2:E5:C5:32:33:17:96:73:DF
X509v3 Authority Key Identifier:
keyid:82:10:49:BB:D2:2C:33:5A:50:85:0F:16:AB:15:9C:0C:6B:CC:28:E5
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://repo-rpki.idnic.net/repo/ede8e18d-a047-4590-9e56-464a73e23c6c/0/821049BBD22C335A50850F16AB159C0C6BCC28E5.crl
Authority Information Access:
CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/821049BBD22C335A50850F16AB159C0C6BCC28E5.cer
Subject Information Access:
Signed Object - URI:rsync://repo-rpki.idnic.net/repo/ede8e18d-a047-4590-9e56-464a73e23c6c/0/821049BBD22C335A50850F16AB159C0C6BCC28E5.mft
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
84:9d:53:2e:1f:d9:18:5f:83:bc:c9:41:6f:7b:5b:29:3d:12:
b7:1d:63:3f:4e:4e:82:5a:dd:19:7b:65:18:ee:f9:fc:8c:b4:
4a:b0:7b:17:d8:b0:36:9e:c4:58:41:42:0a:ed:8b:70:25:e0:
58:59:03:4a:e3:78:cf:84:49:ff:e0:73:75:7d:9d:6d:d4:66:
5a:ce:a7:86:a6:e7:49:70:c3:51:ef:2b:25:1c:6a:fc:9b:a2:
60:67:c9:ba:75:82:d1:9d:4c:c8:74:03:7b:74:3c:d7:54:33:
10:77:b1:3e:e4:d7:cb:4e:e6:19:48:e0:a7:c1:c9:5d:c2:ce:
d7:c0:75:86:01:cf:86:b9:56:a6:64:a4:a8:80:64:68:7b:0d:
b4:82:20:19:81:ba:19:ba:e1:a7:45:0c:ed:37:20:cc:2b:69:
f6:73:f0:c4:78:6a:09:cd:0a:7a:53:93:63:ba:e9:5d:84:3a:
14:41:7a:7a:ab:22:c9:75:98:4e:1d:04:08:91:67:2a:aa:75:
13:e1:d3:6f:7c:a4:dd:b9:e1:b6:76:a8:4d:b1:b9:b5:f0:de:
73:81:e7:83:f4:31:24:ad:07:c8:a5:30:b9:e2:e1:56:10:26:
d2:cf:53:d5:3e:b2:e1:6c:2d:ba:ca:c9:3e:6d:49:96:17:fd:
8e:46:2e:fa
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jun 3 03:09:09 2026 by rpki-client