Manifest
$ rpki-client -vvf repo-rpki.idnic.net/repo/f9e7a28a-62f0-4d14-8702-403a5190eae1/0/8A4FF836588BBDC5E5CC526BBBEB66D5140D1B86.mft
File: 8A4FF836588BBDC5E5CC526BBBEB66D5140D1B86.mft (raw, json)
Hash identifier: 6c/2jj1GrYcoMbXXHrhV+Ok6H6u1Elo2Fnn3L14e7LM=
Subject key identifier: 0D:FD:7A:DA:E8:7A:37:CF:62:6F:1C:0D:C4:01:85:B1:91:3B:34:89
Authority key identifier: 8A:4F:F8:36:58:8B:BD:C5:E5:CC:52:6B:BB:EB:66:D5:14:0D:1B:86
Certificate issuer: /CN=8A4FF836588BBDC5E5CC526BBBEB66D5140D1B86
Certificate serial: 5EC7D4B51166C47B999202927A65087EE2A2AA73
Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/8A4FF836588BBDC5E5CC526BBBEB66D5140D1B86.cer
Subject info access: rsync://repo-rpki.idnic.net/repo/f9e7a28a-62f0-4d14-8702-403a5190eae1/0/8A4FF836588BBDC5E5CC526BBBEB66D5140D1B86.mft
Manifest number: 039B
Signing time: Tue 28 Apr 2026 20:31:34 +0000
Manifest this update: Tue 28 Apr 2026 20:26:34 +0000
Manifest next update: Sat 02 May 2026 01:33:34 +0000
Files and hashes: 1: 8A4FF836588BBDC5E5CC526BBBEB66D5140D1B86.crl (hash: FaD6vryI6wQ2ltuwhK+vL9+sq2yWw87W7+wcKfFrvsc=)
2: 3130332e3137312e33302e302f32332d3234203d3e20313331313131.roa (hash: MbvMxox1+aTB+N8DScPhNKhY01PRvHjZkmk5r8zyiyw=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
5e:c7:d4:b5:11:66:c4:7b:99:92:02:92:7a:65:08:7e:e2:a2:aa:73
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8A4FF836588BBDC5E5CC526BBBEB66D5140D1B86
Validity
Not Before: Apr 28 20:26:34 2026 GMT
Not After : May 2 01:33:34 2026 GMT
Subject: CN=0DFD7ADAE87A37CF626F1C0DC40185B1913B3489
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bd:f6:15:b7:45:7c:52:b3:08:af:af:f4:9a:1c:
18:36:56:f9:76:cf:88:a4:4b:29:51:43:a6:e1:fd:
0f:c0:cc:2a:bb:69:a4:e8:57:4f:1e:92:f8:83:c5:
b4:d0:5e:a3:14:f2:ab:70:39:16:62:c8:6a:67:dc:
e9:87:82:89:cf:83:a1:a7:91:e2:ef:46:83:d1:34:
46:0b:bc:6d:68:75:ba:5f:6d:32:1b:e0:69:bb:cd:
e3:93:99:72:a3:ba:9f:19:cd:e0:95:45:90:9e:bb:
ca:06:39:e2:22:53:2b:da:73:85:40:3b:32:5d:e8:
93:0c:6c:fc:32:33:3f:c1:b9:7c:35:ba:19:eb:3d:
83:01:c3:06:4a:67:5a:3b:d7:e9:10:3d:9d:72:f6:
7e:c8:c4:6f:53:08:3c:57:ca:e8:78:8e:16:87:5c:
cc:69:39:df:0e:df:50:00:0b:89:d6:fe:fe:8f:d3:
95:7b:a8:85:2a:1f:f4:a3:27:7d:ee:7a:0d:d0:4e:
51:8f:7b:10:a8:0f:4d:d1:a2:79:ff:0a:c1:9a:f9:
fe:65:cb:87:41:5a:97:87:2f:17:ff:eb:e2:4b:da:
3b:2b:d0:bf:5e:60:3e:72:3c:2e:c0:d6:59:09:1b:
6c:97:ec:76:fd:12:01:fc:a4:eb:5a:12:eb:45:40:
90:47
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
0D:FD:7A:DA:E8:7A:37:CF:62:6F:1C:0D:C4:01:85:B1:91:3B:34:89
X509v3 Authority Key Identifier:
keyid:8A:4F:F8:36:58:8B:BD:C5:E5:CC:52:6B:BB:EB:66:D5:14:0D:1B:86
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://repo-rpki.idnic.net/repo/f9e7a28a-62f0-4d14-8702-403a5190eae1/0/8A4FF836588BBDC5E5CC526BBBEB66D5140D1B86.crl
Authority Information Access:
CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/8A4FF836588BBDC5E5CC526BBBEB66D5140D1B86.cer
Subject Information Access:
Signed Object - URI:rsync://repo-rpki.idnic.net/repo/f9e7a28a-62f0-4d14-8702-403a5190eae1/0/8A4FF836588BBDC5E5CC526BBBEB66D5140D1B86.mft
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
88:7f:17:e1:9a:98:ea:c2:80:86:0a:5e:c7:ca:6d:a9:72:db:
5f:8f:ad:94:bd:f6:8e:88:23:08:18:99:c4:cd:3d:41:18:da:
af:90:57:e9:30:e5:5a:4a:33:8d:7d:e5:da:9d:37:17:b2:b9:
01:10:86:e5:4f:2e:d6:68:3d:b6:53:7c:c3:46:8c:97:e5:34:
89:08:26:78:5e:eb:38:cc:05:1d:49:49:9a:dd:b0:bc:f2:f0:
b9:c1:3b:4d:1a:3f:bc:03:e9:55:ff:14:6a:62:f1:30:6f:5c:
fb:74:ab:1b:71:f0:63:02:8b:5b:92:89:98:cc:26:87:70:ea:
f7:ca:d0:29:be:a3:59:1e:a1:9a:64:76:4d:7c:a1:46:b4:79:
c2:63:ff:1b:2e:aa:cb:41:b3:f6:11:df:4c:a6:c0:77:9c:23:
33:26:f4:aa:77:42:95:96:5b:2a:2c:d4:c1:8f:5f:c9:a6:7b:
90:b4:3f:f9:4e:4b:0d:43:bd:5b:15:d4:34:0b:50:81:be:fe:
de:fc:d1:4b:66:ba:48:d0:67:57:0e:49:20:3a:df:3e:83:42:
cc:d3:22:7b:d7:7c:ab:ca:a1:c4:0b:3d:ed:b4:8c:5d:8b:8d:
bc:65:f6:03:b2:73:6c:68:c7:2d:a6:04:3d:25:61:57:d3:02:
38:6a:46:2a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jun 3 03:08:57 2026 by rpki-client