Manifest
$ rpki-client -vvf repo-rpki.idnic.net/repo/faa6a67d-cba3-427b-9055-5f528f2d232f/0/4A688B72A804A426A9096ECA60105A4D831C5FA8.mft
File: 4A688B72A804A426A9096ECA60105A4D831C5FA8.mft (raw, json)
Hash identifier: G+uzOngtDs2YcoRljuUMDjSy85zcBMNYFVFNxQK60mk=
Subject key identifier: EB:1A:8E:FB:A7:1F:6C:2F:83:1B:A8:2B:D3:77:A7:30:E2:4B:3C:90
Authority key identifier: 4A:68:8B:72:A8:04:A4:26:A9:09:6E:CA:60:10:5A:4D:83:1C:5F:A8
Certificate issuer: /CN=4A688B72A804A426A9096ECA60105A4D831C5FA8
Certificate serial: 28F65AFCEF77BDA832C6EFFC7B20529382452D93
Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/4A688B72A804A426A9096ECA60105A4D831C5FA8.cer
Subject info access: rsync://repo-rpki.idnic.net/repo/faa6a67d-cba3-427b-9055-5f528f2d232f/0/4A688B72A804A426A9096ECA60105A4D831C5FA8.mft
Manifest number: 034D
Signing time: Wed 29 Apr 2026 04:01:54 +0000
Manifest this update: Wed 29 Apr 2026 03:56:54 +0000
Manifest next update: Sat 02 May 2026 14:32:54 +0000
Files and hashes: 1: 3130332e3137352e3230362e302f32342d3234203d3e20313437313234.roa (hash: bZ7VwXIRq3KJ7OVGRCfKG6eOMk5t6agAsXWGxcWt10w=)
2: 3130332e3137352e3230362e302f32332d3234203d3e20313437313234.roa (hash: eGEsrGBto/hQncn3YcGePX27GH/UT48OX+sETIcZ17o=)
3: 3130332e3137352e3230372e302f32342d3234203d3e20313437313234.roa (hash: c1RIZ+QGr4pflPlxewXCP7v5jA9oA70azCfYZdqG/C0=)
4: 4A688B72A804A426A9096ECA60105A4D831C5FA8.crl (hash: sHL3f8C2Mdcnp1U0beO/KgDqUPZp1A+ox+K9YAPhpk0=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
28:f6:5a:fc:ef:77:bd:a8:32:c6:ef:fc:7b:20:52:93:82:45:2d:93
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4A688B72A804A426A9096ECA60105A4D831C5FA8
Validity
Not Before: Apr 29 03:56:54 2026 GMT
Not After : May 2 14:32:54 2026 GMT
Subject: CN=EB1A8EFBA71F6C2F831BA82BD377A730E24B3C90
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:eb:20:75:a9:2f:df:f2:7e:35:2f:09:4e:8b:1e:
9c:41:39:c2:05:6a:92:d8:d1:3b:ad:55:9b:c0:42:
18:4f:a5:26:ec:45:ad:76:a9:11:15:01:97:eb:20:
0f:03:cb:fc:41:91:39:92:fd:80:58:e8:b9:44:11:
0e:27:88:08:da:83:3e:87:8d:33:4f:4e:e4:7e:a7:
d8:8e:d5:58:bf:5a:91:d3:a6:56:c9:a3:22:1e:2c:
c2:f8:45:ca:52:d7:e7:00:ca:a7:05:e9:c8:3d:c1:
c8:36:29:2d:be:66:ad:c5:82:15:0f:e3:be:22:38:
c2:62:3e:54:95:ff:48:72:39:bd:0d:97:91:6a:0b:
60:9a:fb:d6:3b:21:57:4e:49:1e:79:ad:74:d8:18:
a2:54:9c:70:97:0f:19:b7:72:ac:2b:14:0f:12:21:
48:9c:bc:b2:8a:1e:98:2a:c5:12:5f:b4:fe:a4:f3:
39:4f:93:81:b8:44:38:37:e6:11:30:23:de:7a:08:
ba:7d:22:a4:13:a2:ad:16:31:42:35:a9:c4:ff:01:
89:f1:bb:ff:6a:ad:07:5e:ba:5c:c7:69:6b:5a:64:
4a:93:a9:eb:20:42:62:75:04:eb:03:47:85:ba:42:
c5:49:2b:66:7e:b1:6f:12:e8:39:7e:35:f3:3b:6e:
70:eb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
EB:1A:8E:FB:A7:1F:6C:2F:83:1B:A8:2B:D3:77:A7:30:E2:4B:3C:90
X509v3 Authority Key Identifier:
keyid:4A:68:8B:72:A8:04:A4:26:A9:09:6E:CA:60:10:5A:4D:83:1C:5F:A8
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://repo-rpki.idnic.net/repo/faa6a67d-cba3-427b-9055-5f528f2d232f/0/4A688B72A804A426A9096ECA60105A4D831C5FA8.crl
Authority Information Access:
CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/4A688B72A804A426A9096ECA60105A4D831C5FA8.cer
Subject Information Access:
Signed Object - URI:rsync://repo-rpki.idnic.net/repo/faa6a67d-cba3-427b-9055-5f528f2d232f/0/4A688B72A804A426A9096ECA60105A4D831C5FA8.mft
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
87:d5:63:6e:be:e1:f2:be:93:2c:42:8b:46:70:31:0f:88:e1:
d5:34:6b:5c:10:6e:55:87:3d:ad:ba:91:b1:53:23:94:af:b9:
02:d1:05:98:90:bf:8d:aa:e0:be:d3:7f:14:6b:e8:ff:78:0f:
3b:c7:7d:85:7d:be:7c:13:a8:65:f8:3f:f4:a9:89:59:85:ed:
64:aa:36:2c:42:dd:2e:e2:14:d7:92:8a:a7:59:d4:23:50:d4:
24:3b:8a:30:ea:f1:ba:75:04:3f:1c:4c:a8:97:fa:d5:ca:0e:
87:a3:45:4d:12:15:ca:80:29:2c:28:5d:27:8e:66:da:ab:c7:
34:1a:02:17:88:03:23:99:92:d3:0d:39:22:a4:60:ae:09:37:
29:8d:ec:b5:a8:7a:2b:7e:23:d4:a2:d7:e2:cb:be:1b:90:81:
d4:20:7a:50:73:ed:c2:7f:8a:a5:a8:27:20:48:e6:78:c1:14:
b2:a4:c0:ed:df:fb:17:43:ed:df:d0:71:32:21:10:44:4c:bf:
1e:57:53:7d:66:99:cd:5d:81:03:63:6b:4d:83:53:14:de:8a:
56:17:af:76:b2:78:55:28:57:e6:7d:ff:d6:09:2f:2a:3b:0d:
9b:46:53:50:d0:13:55:73:b8:1f:3d:c7:50:1d:12:1f:0c:27:
54:7d:f3:18
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jun 3 03:09:00 2026 by rpki-client