Manifest
$ rpki-client -vvf repo-rpki.idnic.net/repo/f373bc61-c5f9-4159-98bc-a0530b4dd8b4/0/CE0CD1353A42A0A99EE768F3FAF235E38F6C1189.mft
File: CE0CD1353A42A0A99EE768F3FAF235E38F6C1189.mft (raw, json)
Hash identifier: QmsVhjeOfR2tWXjWO1dCdOpjrItsrIkXENv9lVFqpWY=
Subject key identifier: C0:FB:9E:28:07:F8:D8:D6:D1:E1:76:D3:62:32:BB:B8:69:37:77:71
Authority key identifier: CE:0C:D1:35:3A:42:A0:A9:9E:E7:68:F3:FA:F2:35:E3:8F:6C:11:89
Certificate issuer: /CN=CE0CD1353A42A0A99EE768F3FAF235E38F6C1189
Certificate serial: 2AA101055BECAA576014A97F2C74559AC4D73726
Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/CE0CD1353A42A0A99EE768F3FAF235E38F6C1189.cer
Subject info access: rsync://repo-rpki.idnic.net/repo/f373bc61-c5f9-4159-98bc-a0530b4dd8b4/0/CE0CD1353A42A0A99EE768F3FAF235E38F6C1189.mft
Manifest number: 056A
Signing time: Wed 29 Apr 2026 10:21:21 +0000
Manifest this update: Wed 29 Apr 2026 10:16:21 +0000
Manifest next update: Sat 02 May 2026 19:12:21 +0000
Files and hashes: 1: 3130332e39312e34342e302f32322d3234203d3e20313336313035.roa (hash: UZgKbBst9wwCtuqtFZDworFQOUindj4psWspzIH8An8=)
2: CE0CD1353A42A0A99EE768F3FAF235E38F6C1189.crl (hash: 5sb+9cPvM5rp9bMb3MNGzQSFUyajyNm7fSq5mdSmfSE=)
3: 323030313a6466303a666230303a3a2f34382d3438203d3e20313336313035.roa (hash: 7s0HS9eh5N/x2V7R3ZdxFFKiADQU8Rn/3Sm7bshae0c=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
2a:a1:01:05:5b:ec:aa:57:60:14:a9:7f:2c:74:55:9a:c4:d7:37:26
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=CE0CD1353A42A0A99EE768F3FAF235E38F6C1189
Validity
Not Before: Apr 29 10:16:21 2026 GMT
Not After : May 2 19:12:21 2026 GMT
Subject: CN=C0FB9E2807F8D8D6D1E176D36232BBB869377771
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b0:dc:6e:8f:dc:a2:8b:63:81:45:2f:0e:87:51:
04:17:c9:f1:f7:c2:91:b5:ec:39:e0:dd:00:92:84:
02:fe:fd:42:6d:15:5a:c4:ce:dd:77:72:d2:a2:eb:
3e:9c:bb:3f:b3:e7:db:7e:d4:7f:f1:65:7c:60:23:
55:e5:aa:40:1b:c7:82:eb:bb:f7:e3:57:c4:46:68:
82:8d:0b:ee:73:d7:90:3b:f4:c1:30:3b:4d:17:37:
f8:35:1e:c2:f4:71:51:eb:d5:80:07:ff:71:40:49:
26:b2:ff:05:3d:1d:69:b1:2b:31:6a:9f:f6:bd:8f:
ce:ca:bc:25:8d:4d:13:db:8d:f4:ff:6b:ca:99:a3:
44:fa:4b:72:db:ba:61:0b:87:7d:ca:61:bc:e2:2e:
c4:61:eb:ed:90:9b:fa:60:d4:65:2b:73:b7:b0:af:
22:4d:19:5e:1b:87:a1:e8:ac:b2:0e:5f:3b:1d:1f:
15:ab:29:b1:17:86:e5:24:04:2e:38:7f:9a:08:7c:
1b:91:05:f4:56:bd:0b:18:28:ff:01:87:92:0f:ef:
73:a4:25:0f:d1:ff:8b:26:2d:cc:01:41:f0:af:51:
8c:4f:29:6e:49:e4:72:df:b6:69:47:ec:54:8f:6a:
e6:64:36:17:75:e6:59:1f:34:d3:62:f9:bb:b2:7d:
39:41
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C0:FB:9E:28:07:F8:D8:D6:D1:E1:76:D3:62:32:BB:B8:69:37:77:71
X509v3 Authority Key Identifier:
keyid:CE:0C:D1:35:3A:42:A0:A9:9E:E7:68:F3:FA:F2:35:E3:8F:6C:11:89
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://repo-rpki.idnic.net/repo/f373bc61-c5f9-4159-98bc-a0530b4dd8b4/0/CE0CD1353A42A0A99EE768F3FAF235E38F6C1189.crl
Authority Information Access:
CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/CE0CD1353A42A0A99EE768F3FAF235E38F6C1189.cer
Subject Information Access:
Signed Object - URI:rsync://repo-rpki.idnic.net/repo/f373bc61-c5f9-4159-98bc-a0530b4dd8b4/0/CE0CD1353A42A0A99EE768F3FAF235E38F6C1189.mft
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
19:02:84:95:e3:fc:55:3c:9c:c6:74:50:3d:13:f0:d0:28:6d:
9e:b2:65:5c:bf:63:74:3d:51:cd:78:b5:f0:29:ba:6c:cf:9a:
0d:31:21:79:4d:68:16:9e:18:f6:05:21:72:7f:df:13:46:b9:
98:88:e4:0a:83:e6:25:8b:36:56:4f:f9:bc:c5:7e:f1:3f:f5:
19:67:80:fa:bc:2d:18:26:ed:0c:cc:32:cc:56:43:12:5e:fd:
b0:3e:22:97:05:79:1c:9f:b4:24:38:8d:9c:1e:e3:e9:5c:c1:
9c:e6:d6:a1:10:88:a2:06:7c:47:35:dd:64:66:6f:6a:58:d4:
65:cb:ac:90:a4:cb:ea:dc:d7:43:d8:d3:19:50:47:a2:13:d5:
74:76:f7:d0:67:72:c5:ac:29:11:b7:b3:88:51:c3:9d:e7:3b:
cc:09:81:8f:fe:6e:68:b5:df:77:70:64:ef:c2:26:cd:6d:1d:
5d:29:89:86:04:60:5f:f7:de:da:c7:d7:e9:49:44:fd:91:fd:
d3:6b:ae:67:d5:4c:42:81:b6:20:77:25:7e:8a:14:63:3a:2c:
59:af:34:9d:c5:82:22:1d:69:b6:b4:ef:94:27:c9:dd:b3:34:
81:fa:69:5a:95:90:2f:15:bf:c2:86:9d:cd:10:28:a9:f4:85:
92:30:9d:80
-----BEGIN CERTIFICATE-----
MIIFMjCCBBqgAwIBAgIUKqEBBVvsqldgFKl/LHRVmsTXNyYwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoQ0UwQ0QxMzUzQTQyQTBBOTlFRTc2OEYzRkFGMjM1RTM4
RjZDMTE4OTAeFw0yNjA0MjkxMDE2MjFaFw0yNjA1MDIxOTEyMjFaMDMxMTAvBgNV
BAMTKEMwRkI5RTI4MDdGOEQ4RDZEMUUxNzZEMzYyMzJCQkI4NjkzNzc3NzEwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCw3G6P3KKLY4FFLw6HUQQXyfH3
wpG17Dng3QCShAL+/UJtFVrEzt13ctKi6z6cuz+z59t+1H/xZXxgI1XlqkAbx4Lr
u/fjV8RGaIKNC+5z15A79MEwO00XN/g1HsL0cVHr1YAH/3FASSay/wU9HWmxKzFq
n/a9j87KvCWNTRPbjfT/a8qZo0T6S3LbumELh33KYbziLsRh6+2Qm/pg1GUrc7ew
ryJNGV4bh6HorLIOXzsdHxWrKbEXhuUkBC44f5oIfBuRBfRWvQsYKP8Bh5IP73Ok
JQ/R/4smLcwBQfCvUYxPKW5J5HLftmlH7FSPauZkNhd15lkfNNNi+buyfTlBAgMB
AAGjggI8MIICODAdBgNVHQ4EFgQUwPueKAf42NbR4XbTYjK7uGk3d3EwHwYDVR0j
BBgwFoAUzgzRNTpCoKme52jz+vI1449sEYkwDgYDVR0PAQH/BAQDAgeAMIGFBgNV
HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby9m
MzczYmM2MS1jNWY5LTQxNTktOThiYy1hMDUzMGI0ZGQ4YjQvMC9DRTBDRDEzNTNB
NDJBMEE5OUVFNzY4RjNGQUYyMzVFMzhGNkMxMTg5LmNybDB0BggrBgEFBQcBAQRo
MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv
L0lETklDLUlELzIvQ0UwQ0QxMzUzQTQyQTBBOTlFRTc2OEYzRkFGMjM1RTM4RjZD
MTE4OS5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6
Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vZjM3M2JjNjEtYzVmOS00MTU5LTk4
YmMtYTA1MzBiNGRkOGI0LzAvQ0UwQ0QxMzUzQTQyQTBBOTlFRTc2OEYzRkFGMjM1
RTM4RjZDMTE4OS5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF
BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC
BQAwDQYJKoZIhvcNAQELBQADggEBABkChJXj/FU8nMZ0UD0T8NAobZ6yZVy/Y3Q9
Uc14tfApumzPmg0xIXlNaBaeGPYFIXJ/3xNGuZiI5AqD5iWLNlZP+bzFfvE/9Rln
gPq8LRgm7QzMMsxWQxJe/bA+IpcFeRyftCQ4jZwe4+lcwZzm1qEQiKIGfEc13WRm
b2pY1GXLrJCky+rc10PY0xlQR6IT1XR299BncsWsKRG3s4hRw53nO8wJgY/+bmi1
33dwZO/CJs1tHV0piYYEYF/33trH1+lJRP2R/dNrrmfVTEKBtiB3JX6KFGM6LFmv
NJ3FgiIdaba075Qnyd2zNIH6aVqVkC8Vv8KGnc0QKKn0hZIwnYA=
-----END CERTIFICATE-----
Generated at Wed Jun 3 03:17:45 2026 by rpki-client