Manifest
$ rpki-client -vvf repo-rpki.idnic.net/repo/f2aa2d10-3faa-4272-be1f-8102957b65e6/0/C43D9C91D389ADDD2039882757F731CAFAAC740F.mft
File: C43D9C91D389ADDD2039882757F731CAFAAC740F.mft (raw, json)
Hash identifier: iYr1aW6LlEdl9370fa4eZrQU72f3tZTqRLNK3l6P96c=
Subject key identifier: D4:5F:50:CA:7C:C3:BE:E5:7D:F4:6C:9B:4D:E9:44:2A:6A:4B:13:C7
Authority key identifier: C4:3D:9C:91:D3:89:AD:DD:20:39:88:27:57:F7:31:CA:FA:AC:74:0F
Certificate issuer: /CN=C43D9C91D389ADDD2039882757F731CAFAAC740F
Certificate serial: 489FE39801F5778D4D5B633240770278ECFE58D5
Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/C43D9C91D389ADDD2039882757F731CAFAAC740F.cer
Subject info access: rsync://repo-rpki.idnic.net/repo/f2aa2d10-3faa-4272-be1f-8102957b65e6/0/C43D9C91D389ADDD2039882757F731CAFAAC740F.mft
Manifest number: 0285
Signing time: Tue 28 Apr 2026 22:40:58 +0000
Manifest this update: Tue 28 Apr 2026 22:35:58 +0000
Manifest next update: Sat 02 May 2026 04:20:58 +0000
Files and hashes: 1: 3130332e3134322e3139342e302f32342d3234203d3e20313338383636.roa (hash: O208rGlxXsDRg5ZQgFSHuXQXt753cTvrXuKq5DJTaZU=)
2: 3130332e3134322e3139352e302f32342d3234203d3e20313339333737.roa (hash: uD8Z7VvW3X7QFGP+tK/dUybJXkDMS07pG94+mOxjD9g=)
3: 323030313a6466313a353438303a3a2f34382d3438203d3e20313339333737.roa (hash: L5SSKiEo+E6kMD2pTjeK2EegAPOEaiDjUkwPgfIZ0H0=)
4: C43D9C91D389ADDD2039882757F731CAFAAC740F.crl (hash: p4p8FTEPW+926FlDmbbOGXk3JKFo97goRqqqCJzsNs0=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
48:9f:e3:98:01:f5:77:8d:4d:5b:63:32:40:77:02:78:ec:fe:58:d5
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=C43D9C91D389ADDD2039882757F731CAFAAC740F
Validity
Not Before: Apr 28 22:35:58 2026 GMT
Not After : May 2 04:20:58 2026 GMT
Subject: CN=D45F50CA7CC3BEE57DF46C9B4DE9442A6A4B13C7
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d4:8b:fa:80:56:13:ec:6e:17:fd:5e:b7:e4:01:
c1:82:6e:fc:35:4d:15:21:a7:0a:02:fe:83:43:93:
89:16:ec:65:10:b1:6d:3e:85:fb:1a:03:64:2c:fc:
59:9c:ed:3b:3b:27:8a:73:4c:29:dc:42:0b:09:b2:
8d:25:87:a0:62:ef:3f:44:25:ef:06:ba:53:06:1b:
a0:c1:5f:26:44:db:64:c0:b8:ed:de:68:1e:06:77:
88:71:71:a4:e8:e6:0a:ce:15:03:f2:56:47:85:04:
42:63:48:e1:25:8c:c7:8d:4a:31:ca:f3:d2:36:f0:
58:ee:bc:a1:28:38:8d:18:9b:6b:43:44:9e:60:6a:
64:4b:22:99:34:d0:a9:24:82:6d:0b:18:b6:5f:d3:
59:f2:d4:09:b5:bb:57:df:34:e1:a5:a9:8d:fe:b6:
43:d2:a0:58:3f:24:fb:7f:6d:fd:55:4f:51:f0:a6:
65:78:6d:e0:11:fe:19:4c:83:75:85:b2:c5:18:ad:
07:75:19:98:38:c6:a9:f5:4c:d4:b1:39:31:58:ce:
49:36:4d:a5:54:9c:e7:38:5b:a4:75:a3:4d:a4:06:
84:08:02:5a:38:26:f2:c6:f7:52:56:92:5d:83:d4:
76:5f:13:53:8d:93:14:6b:bd:81:93:02:94:52:90:
5e:a9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D4:5F:50:CA:7C:C3:BE:E5:7D:F4:6C:9B:4D:E9:44:2A:6A:4B:13:C7
X509v3 Authority Key Identifier:
keyid:C4:3D:9C:91:D3:89:AD:DD:20:39:88:27:57:F7:31:CA:FA:AC:74:0F
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://repo-rpki.idnic.net/repo/f2aa2d10-3faa-4272-be1f-8102957b65e6/0/C43D9C91D389ADDD2039882757F731CAFAAC740F.crl
Authority Information Access:
CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/C43D9C91D389ADDD2039882757F731CAFAAC740F.cer
Subject Information Access:
Signed Object - URI:rsync://repo-rpki.idnic.net/repo/f2aa2d10-3faa-4272-be1f-8102957b65e6/0/C43D9C91D389ADDD2039882757F731CAFAAC740F.mft
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
80:80:a8:66:0d:ba:a1:2d:2e:b2:2a:7a:2c:f3:47:ea:0e:11:
d4:c4:26:a3:ef:a6:f5:57:ef:49:81:42:69:d3:92:ca:0c:be:
69:50:07:6e:f5:1e:4e:c8:3a:f3:4f:36:99:dd:b4:dc:35:42:
74:94:b2:36:7d:99:71:65:1d:0f:74:7f:68:b4:d7:b8:97:a5:
d3:a2:c5:d7:a0:ca:53:1b:b6:dd:0a:be:c8:8e:a0:36:d1:3e:
c6:55:4f:95:23:6c:f1:32:f3:12:ba:4c:ce:bb:67:df:7b:37:
90:d2:1f:9b:d4:16:0a:df:0c:e6:ef:48:3b:1d:32:c7:9b:9e:
d4:08:9e:da:15:62:43:a4:1e:94:a7:45:64:93:e3:bc:d4:e5:
ab:72:ce:fe:42:f9:4d:2e:5f:34:a7:aa:e5:e7:f7:56:ff:ae:
97:0a:55:e6:37:c7:c1:46:84:44:8f:0d:16:2e:ce:64:6c:9d:
84:95:97:db:bc:90:f2:3a:d9:42:6c:2e:59:74:03:54:dc:0a:
e6:ea:34:f1:2a:1f:67:33:93:6f:0f:96:3f:01:cd:04:d9:ee:
bf:c9:00:56:2e:b1:96:25:49:2c:82:94:7b:70:87:a6:68:fa:
45:36:0b:71:0b:d1:21:ce:6e:14:9e:bf:fd:5e:5d:53:26:c2:
d9:d2:c0:a9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jun 3 03:10:52 2026 by rpki-client