Manifest
$ rpki-client -vvf repo-rpki.idnic.net/repo/fbb5fa4a-bea6-464f-b409-11d9a3761a6c/1/8D4158039A86C34D5D36A83DDC40C959EDA21342.mft
File: 8D4158039A86C34D5D36A83DDC40C959EDA21342.mft (raw, json)
Hash identifier: zvQ/dE8Fk7De/1+k0LqpJRZ2aoONVylS4yxGD/LwdrA=
Subject key identifier: 64:5C:74:25:EA:1B:21:BD:34:42:D3:25:9E:CE:67:9C:7E:BE:B7:3D
Authority key identifier: 8D:41:58:03:9A:86:C3:4D:5D:36:A8:3D:DC:40:C9:59:ED:A2:13:42
Certificate issuer: /CN=8D4158039A86C34D5D36A83DDC40C959EDA21342
Certificate serial: 0CBCEA4CF2498FF70F2797EC1B4E16ECBA45186C
Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/8D4158039A86C34D5D36A83DDC40C959EDA21342.cer
Subject info access: rsync://repo-rpki.idnic.net/repo/fbb5fa4a-bea6-464f-b409-11d9a3761a6c/1/8D4158039A86C34D5D36A83DDC40C959EDA21342.mft
Manifest number: 0128
Signing time: Tue 28 Apr 2026 13:41:16 +0000
Manifest this update: Tue 28 Apr 2026 13:36:16 +0000
Manifest next update: Fri 01 May 2026 20:22:16 +0000
Files and hashes: 1: 323030313a6466333a643363303a3a2f34382d3438203d3e20313532373930.roa (hash: XrGI552jWV7sNKcYT4/cR05JGNQdxhyBqphUE36lIJ0=)
2: 8D4158039A86C34D5D36A83DDC40C959EDA21342.crl (hash: WoceSykWLVyTMEHT2JPk7CdmRH5jxRwpCQ1ZfYImTSs=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
0c:bc:ea:4c:f2:49:8f:f7:0f:27:97:ec:1b:4e:16:ec:ba:45:18:6c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8D4158039A86C34D5D36A83DDC40C959EDA21342
Validity
Not Before: Apr 28 13:36:16 2026 GMT
Not After : May 1 20:22:16 2026 GMT
Subject: CN=645C7425EA1B21BD3442D3259ECE679C7EBEB73D
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b7:a3:3a:2e:0d:d5:3a:71:be:a6:16:6b:e5:af:
2e:d9:03:f3:71:a1:a5:4f:cd:6a:25:84:54:e2:1d:
c9:53:bf:c6:00:ed:f3:27:ca:34:45:e2:b3:42:90:
8a:74:f8:37:b1:02:88:14:85:db:22:0a:be:cf:2f:
ec:49:eb:de:e1:69:e3:6c:55:21:50:72:08:9d:6f:
51:ac:7e:88:96:70:5a:cc:1b:0d:d5:81:6c:fd:30:
1b:55:06:b6:57:8d:98:8c:83:e5:a8:49:fd:2d:13:
73:ae:63:92:77:82:a4:c6:94:45:b3:6f:e0:4a:c2:
a6:d7:18:a9:fb:3a:13:6d:01:7e:04:24:41:0e:c7:
25:80:ab:52:a5:a3:a9:04:28:a6:bc:ea:ed:0b:d1:
e7:fc:c6:09:93:b9:0c:b3:77:50:f3:76:4a:72:23:
63:73:b9:89:10:10:e3:c1:1e:50:11:fd:99:a8:33:
2e:7f:80:81:c9:a5:26:9a:e8:c4:d6:3e:18:00:f7:
f8:e8:fd:da:a3:2d:1d:c8:db:86:c9:1d:f8:68:2a:
cb:5a:8e:8e:cd:f2:ab:99:a8:2e:34:66:c2:43:72:
c0:a9:01:89:2c:6b:3e:7e:b2:9b:b3:69:f4:f6:6c:
82:40:8f:d8:8b:0f:27:d2:84:c3:d2:9b:b4:c9:a1:
de:77
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
64:5C:74:25:EA:1B:21:BD:34:42:D3:25:9E:CE:67:9C:7E:BE:B7:3D
X509v3 Authority Key Identifier:
keyid:8D:41:58:03:9A:86:C3:4D:5D:36:A8:3D:DC:40:C9:59:ED:A2:13:42
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://repo-rpki.idnic.net/repo/fbb5fa4a-bea6-464f-b409-11d9a3761a6c/1/8D4158039A86C34D5D36A83DDC40C959EDA21342.crl
Authority Information Access:
CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/8D4158039A86C34D5D36A83DDC40C959EDA21342.cer
Subject Information Access:
Signed Object - URI:rsync://repo-rpki.idnic.net/repo/fbb5fa4a-bea6-464f-b409-11d9a3761a6c/1/8D4158039A86C34D5D36A83DDC40C959EDA21342.mft
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
9f:e8:9c:34:e7:f4:19:bc:94:31:b9:3a:39:a6:a5:5b:13:ee:
28:a5:e2:ab:a9:9f:22:f6:c8:fd:66:4b:c9:fc:80:03:4b:0e:
b2:3b:73:02:44:73:0a:da:bf:95:7f:79:bb:b0:53:7d:87:e0:
d5:bf:51:78:9c:4b:e9:09:f9:a6:fc:ed:cb:96:d8:38:e0:b4:
7e:83:f6:34:2d:e5:9a:0c:d7:ae:39:87:d5:79:f1:a7:71:da:
42:cc:fe:bc:6f:e8:c9:d4:61:50:61:ba:75:e9:f1:56:77:f3:
32:c3:ec:1d:15:a4:1d:fc:e5:df:03:db:8c:eb:f2:fd:0a:28:
cb:54:82:26:32:ea:0e:c2:82:69:0d:6a:0e:f6:67:56:bd:30:
41:30:56:62:18:ae:11:bd:3d:ac:53:b7:bd:1b:a3:a9:d5:0d:
13:dc:ba:b3:ff:8e:ba:cc:80:87:c3:b9:9d:c5:6e:ac:0b:f0:
f8:02:8b:8d:ee:e2:52:e9:5b:fa:4d:df:23:40:e9:8d:0c:64:
fd:28:28:4d:0d:d3:b7:06:e1:49:3e:5a:71:ff:32:a9:5d:54:
1e:63:b9:d1:2c:16:5a:0c:89:b3:47:48:44:b2:fa:b4:dd:8f:
6f:27:4e:71:3f:54:56:89:59:c2:28:e4:3e:10:67:62:e4:4e:
ca:9e:9e:8f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jul 19 05:02:07 2026 by rpki-client