Manifest
$ rpki-client -vvf repo-rpki.idnic.net/repo/fd2b4f77-74d0-4797-aee0-9ea907654730/0/9CD5DECA8E146A0231AE872283EA0F93B5784114.mft
File: 9CD5DECA8E146A0231AE872283EA0F93B5784114.mft (raw, json)
Hash identifier: az+SaRBcT2dAc3k2usw8DXBZ1ljgFlI+KCysBJEKsnw=
Subject key identifier: E9:81:BA:5A:E9:74:BA:2A:5B:07:BD:B2:90:7E:D6:16:B0:85:F6:8A
Authority key identifier: 9C:D5:DE:CA:8E:14:6A:02:31:AE:87:22:83:EA:0F:93:B5:78:41:14
Certificate issuer: /CN=9CD5DECA8E146A0231AE872283EA0F93B5784114
Certificate serial: 40A853ABA70F521D99481EB028D347A2B4185F59
Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/9CD5DECA8E146A0231AE872283EA0F93B5784114.cer
Subject info access: rsync://repo-rpki.idnic.net/repo/fd2b4f77-74d0-4797-aee0-9ea907654730/0/9CD5DECA8E146A0231AE872283EA0F93B5784114.mft
Manifest number: 0211
Signing time: Mon 27 Apr 2026 08:31:01 +0000
Manifest this update: Mon 27 Apr 2026 08:26:01 +0000
Manifest next update: Thu 30 Apr 2026 17:12:01 +0000
Files and hashes: 1: 3130332e3132332e38352e302f32342d3234203d3e20313530343939.roa (hash: qMJCzEp1kB255KL4Lpk1hf3Sg7O/3XdgYccTkdZ5jPw=)
2: 9CD5DECA8E146A0231AE872283EA0F93B5784114.crl (hash: XJwEI8VBIpK5kINiEtzQv+84NNqzzrfFCksXxIdT6n4=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
40:a8:53:ab:a7:0f:52:1d:99:48:1e:b0:28:d3:47:a2:b4:18:5f:59
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=9CD5DECA8E146A0231AE872283EA0F93B5784114
Validity
Not Before: Apr 27 08:26:01 2026 GMT
Not After : Apr 30 17:12:01 2026 GMT
Subject: CN=E981BA5AE974BA2A5B07BDB2907ED616B085F68A
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b8:22:98:12:63:07:81:59:15:88:7e:1b:2e:e3:
f4:ff:05:15:8d:56:ba:de:9e:67:80:b9:f9:11:de:
81:7a:f7:81:d5:0a:49:2b:f8:47:f5:38:a8:4d:2a:
fe:ea:15:47:e4:0b:e6:eb:9a:4d:60:20:aa:63:98:
c9:2e:cf:17:cd:8a:21:76:80:9f:1a:c9:80:f5:d8:
c7:ab:f4:52:0e:cb:5c:41:68:2f:92:72:86:92:f0:
e1:95:20:3d:05:2c:e9:e5:48:72:23:41:c0:53:a7:
b4:7a:fe:b0:3d:c9:29:7f:d2:30:ab:f5:d9:dd:15:
88:ee:3f:fb:e4:c3:b5:67:2b:13:a0:e3:47:12:4a:
79:7d:06:d3:56:cd:70:76:1f:4b:c7:30:9c:8d:b0:
e8:63:da:f5:ed:8d:e1:11:a4:5e:14:18:c2:de:85:
b5:17:ee:4d:af:bc:15:22:f9:45:2e:a5:66:2b:02:
12:87:ee:86:3e:80:1b:2b:45:3f:84:fe:35:85:73:
b8:79:0f:e6:d4:db:9b:d0:e2:98:ed:9d:eb:33:f0:
25:5b:3a:ec:31:ee:35:bb:f3:32:ff:2b:e4:c3:bb:
52:f1:ad:59:40:59:fa:a7:23:92:81:84:19:e4:7b:
fe:27:8e:88:11:aa:e6:da:ab:18:6f:a2:a7:10:8c:
bf:65
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E9:81:BA:5A:E9:74:BA:2A:5B:07:BD:B2:90:7E:D6:16:B0:85:F6:8A
X509v3 Authority Key Identifier:
keyid:9C:D5:DE:CA:8E:14:6A:02:31:AE:87:22:83:EA:0F:93:B5:78:41:14
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://repo-rpki.idnic.net/repo/fd2b4f77-74d0-4797-aee0-9ea907654730/0/9CD5DECA8E146A0231AE872283EA0F93B5784114.crl
Authority Information Access:
CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/9CD5DECA8E146A0231AE872283EA0F93B5784114.cer
Subject Information Access:
Signed Object - URI:rsync://repo-rpki.idnic.net/repo/fd2b4f77-74d0-4797-aee0-9ea907654730/0/9CD5DECA8E146A0231AE872283EA0F93B5784114.mft
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
6f:39:ab:d5:e4:b0:87:d4:cb:37:c4:73:36:97:19:32:47:a1:
59:db:c5:80:36:ae:42:46:3d:68:50:6e:62:7a:b5:7c:65:68:
ab:ee:f3:d0:b7:70:8a:de:2c:4a:6b:e1:b0:c3:42:cc:7b:49:
06:11:99:12:d3:8d:63:57:c0:d8:af:43:48:f9:5b:4a:2a:e2:
28:8b:75:9b:32:8b:60:bd:81:73:54:78:86:7f:6f:6d:3d:d3:
90:f9:40:12:2d:81:37:38:cc:0a:85:bb:20:68:f5:7b:ce:56:
bb:07:2c:a6:82:22:46:26:fd:8b:f5:4d:17:ad:23:e1:23:7f:
2c:55:98:af:44:76:1b:d5:2b:71:73:56:18:66:e5:3a:80:69:
15:1b:f8:7e:62:03:45:d9:25:4d:44:67:e4:4a:c0:fc:98:4f:
7a:06:2a:de:ae:c0:bd:0f:b9:41:fe:6a:9a:93:21:6f:b0:7c:
26:d3:59:01:6e:f7:d5:46:e5:7b:02:78:ee:d9:99:b4:f2:41:
1e:de:d3:7e:80:38:cc:a5:56:5f:1e:d8:10:a3:55:33:e6:fb:
1c:dd:ff:cd:e4:e4:8b:39:81:7a:9f:fa:c8:25:4a:75:09:08:
28:5e:55:b6:30:60:47:f6:52:87:f6:5b:bf:fc:37:27:e3:02:
2a:89:d5:7d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jun 3 03:11:42 2026 by rpki-client