
Manifest
$ rpki-client -vvf repo-rpki.idnic.net/repo/2867a2ee-d411-4ff8-9f5c-35d034123f84/0/2ADDD4035173FAC3BB3949CB36CCEF2553798BFC.mft
File: 2ADDD4035173FAC3BB3949CB36CCEF2553798BFC.mft (raw, json)
Hash identifier: uSHxSnoj1Lox6gLbgVH6+WVX5MYBCZWAjN3WgNlhn8I=
Subject key identifier: BE:58:EA:16:BF:8F:A4:A6:55:82:E7:95:CD:2E:61:AC:BE:03:9A:74
Authority key identifier: 2A:DD:D4:03:51:73:FA:C3:BB:39:49:CB:36:CC:EF:25:53:79:8B:FC
Certificate issuer: /CN=2ADDD4035173FAC3BB3949CB36CCEF2553798BFC
Certificate serial: 67FE853D298EA0128E94B011AFF610C6A4AE4621
Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/2ADDD4035173FAC3BB3949CB36CCEF2553798BFC.cer
Subject info access: rsync://repo-rpki.idnic.net/repo/2867a2ee-d411-4ff8-9f5c-35d034123f84/0/2ADDD4035173FAC3BB3949CB36CCEF2553798BFC.mft
Manifest number: 0141
Signing time: Tue 28 Apr 2026 22:00:47 +0000
Manifest this update: Tue 28 Apr 2026 21:55:47 +0000
Manifest next update: Sat 02 May 2026 03:01:47 +0000
Files and hashes: 1: 2ADDD4035173FAC3BB3949CB36CCEF2553798BFC.crl (hash: Qif7rbOClBlpqcna73BPPsp8Q+eNz30+NPatbLx9dJM=)
2: 3135372e32302e3234342e302f32342d3234203d3e20313338303839.roa (hash: oUnLaY5QLKq7msdrsSjPpVYbhTetk+RaEux8Uav3LJk=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
67:fe:85:3d:29:8e:a0:12:8e:94:b0:11:af:f6:10:c6:a4:ae:46:21
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2ADDD4035173FAC3BB3949CB36CCEF2553798BFC
Validity
Not Before: Apr 28 21:55:47 2026 GMT
Not After : May 2 03:01:47 2026 GMT
Subject: CN=BE58EA16BF8FA4A65582E795CD2E61ACBE039A74
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c0:cd:8d:0b:76:0c:24:45:0d:d4:52:f5:d9:2f:
9c:a3:04:f1:c7:d7:4c:f7:5f:c0:c7:1e:42:0e:7a:
7d:4c:c8:9f:b3:50:6b:00:7f:60:9a:82:fd:5b:3e:
74:bf:8a:97:16:76:d0:61:7f:66:bd:eb:b9:63:08:
59:ed:a6:88:62:ea:7d:99:01:95:99:26:c7:2d:a5:
61:8b:25:53:db:05:2c:6d:03:61:fe:9d:e4:a8:b3:
94:92:a1:55:14:5b:e3:57:d9:2f:ac:d9:f4:dd:e0:
10:47:52:bf:59:f3:6c:1e:cf:d5:2f:13:b9:dd:49:
c8:34:c6:41:7d:fa:9a:5a:1e:08:7e:bc:10:fd:90:
b2:be:e0:3b:21:a7:a5:9a:da:4b:3b:b6:3c:b5:82:
6d:ed:8e:28:a4:c3:05:62:8e:cc:da:69:82:ba:c2:
e0:d5:bc:69:46:b3:11:72:23:a4:b6:ce:44:42:b6:
89:df:28:8f:d9:0a:45:59:fb:0f:f0:66:45:aa:9b:
8a:44:11:76:ba:7e:62:05:14:bb:1d:87:f0:8a:74:
bb:7b:89:25:fe:4b:2c:6b:00:39:1e:96:65:a0:d9:
e7:51:a9:7b:38:6b:b9:19:5e:ef:ed:a3:bb:52:a6:
5d:a1:3c:fe:c1:58:85:6c:36:a7:f5:1c:9f:a2:c9:
fe:cf
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
BE:58:EA:16:BF:8F:A4:A6:55:82:E7:95:CD:2E:61:AC:BE:03:9A:74
X509v3 Authority Key Identifier:
keyid:2A:DD:D4:03:51:73:FA:C3:BB:39:49:CB:36:CC:EF:25:53:79:8B:FC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://repo-rpki.idnic.net/repo/2867a2ee-d411-4ff8-9f5c-35d034123f84/0/2ADDD4035173FAC3BB3949CB36CCEF2553798BFC.crl
Authority Information Access:
CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/2ADDD4035173FAC3BB3949CB36CCEF2553798BFC.cer
Subject Information Access:
Signed Object - URI:rsync://repo-rpki.idnic.net/repo/2867a2ee-d411-4ff8-9f5c-35d034123f84/0/2ADDD4035173FAC3BB3949CB36CCEF2553798BFC.mft
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
53:eb:4c:81:61:71:03:c0:32:ba:ca:e5:6e:dd:2e:b1:54:76:
7f:66:af:47:54:71:c8:d9:45:68:12:fa:e9:5b:d9:9f:bc:0b:
07:79:4e:77:99:2b:01:5a:be:3e:fc:f5:3d:20:58:e3:ca:c7:
cb:95:f9:eb:55:9e:3e:06:60:f4:81:c8:c7:d5:0f:29:26:24:
77:95:fc:02:d3:87:65:b7:34:30:3d:dd:8a:9c:34:85:71:45:
44:43:cc:0c:fd:4b:3e:7a:1c:a0:63:a5:1d:48:e9:56:23:85:
71:4b:f9:b4:5b:e7:29:58:4b:15:24:1b:66:b9:48:f1:51:25:
9b:d7:d5:97:43:6b:3a:24:3f:77:fe:42:f8:d0:25:73:ce:11:
69:08:8e:17:75:3c:2d:64:79:2a:47:c5:04:00:71:17:a9:f0:
13:68:69:08:42:64:46:e1:3b:9b:1b:18:17:18:70:73:a3:8e:
fd:39:fb:0d:ef:c6:08:57:e0:0a:ee:ce:d8:f8:51:9f:2c:fa:
87:56:50:96:6c:af:6a:41:11:47:05:4c:0d:8c:5e:17:bc:dd:
c4:89:57:06:ef:7f:44:a7:f6:e7:28:73:f8:81:9d:51:74:d3:
7f:41:c3:ce:06:b0:1f:e7:ae:59:05:f0:fe:3a:c5:9a:49:a7:
4f:5f:cb:84
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jun 24 04:12:58 2026 by rpki-client