
Manifest
$ rpki-client -vvf repo-rpki.idnic.net/repo/32880ddb-3d94-4e34-92dc-4d4538b905a2/0/46A2E634FFF40AE545EC7DB67A888189AAEB5D03.mft
File: 46A2E634FFF40AE545EC7DB67A888189AAEB5D03.mft (raw, json)
Hash identifier: 7IzhwQBW5w3gc4KMErG2KbcmrBB/W3kDgZFQR5FrnsA=
Subject key identifier: 24:9D:18:FD:E5:C9:BC:80:4E:62:8D:79:28:F2:2A:57:20:7D:B3:DA
Authority key identifier: 46:A2:E6:34:FF:F4:0A:E5:45:EC:7D:B6:7A:88:81:89:AA:EB:5D:03
Certificate issuer: /CN=46A2E634FFF40AE545EC7DB67A888189AAEB5D03
Certificate serial: 21BD6C5A3D3575DE11D907DCB7D9AC55BFBFA1CD
Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/46A2E634FFF40AE545EC7DB67A888189AAEB5D03.cer
Subject info access: rsync://repo-rpki.idnic.net/repo/32880ddb-3d94-4e34-92dc-4d4538b905a2/0/46A2E634FFF40AE545EC7DB67A888189AAEB5D03.mft
Manifest number: 0156
Signing time: Wed 29 Apr 2026 05:12:11 +0000
Manifest this update: Wed 29 Apr 2026 05:07:11 +0000
Manifest next update: Sat 02 May 2026 08:59:11 +0000
Files and hashes: 1: 3135372e32302e3139332e302f32342d3234203d3e20313532343237.roa (hash: vB79AQ7LVU9msWJ/4Zg3oCzBcGrchuHrWRYyI1kBoZQ=)
2: 46A2E634FFF40AE545EC7DB67A888189AAEB5D03.crl (hash: q/xx+RKVVbcBBvDj9kL9ZqOWgQMQCtopIlQfkcq2AMI=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
21:bd:6c:5a:3d:35:75:de:11:d9:07:dc:b7:d9:ac:55:bf:bf:a1:cd
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=46A2E634FFF40AE545EC7DB67A888189AAEB5D03
Validity
Not Before: Apr 29 05:07:11 2026 GMT
Not After : May 2 08:59:11 2026 GMT
Subject: CN=249D18FDE5C9BC804E628D7928F22A57207DB3DA
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:f3:a0:c8:2b:e2:a5:5d:29:88:6a:9d:7d:7c:3d:
ba:9e:64:f7:c6:2e:4b:83:0b:ee:44:32:f2:d1:f7:
72:e3:f4:e3:85:fa:a0:f1:98:4c:c5:ca:a8:ce:cc:
3e:8e:03:2a:b3:ec:fb:dc:88:6e:24:8d:dd:49:5b:
af:f8:aa:f8:16:c6:9d:69:f2:ac:47:0b:7a:a8:8d:
7e:9b:59:a5:fc:36:ad:04:b8:6c:4a:71:8d:d1:e7:
71:2a:3d:b3:a0:75:aa:b3:02:17:63:31:fe:cb:fc:
54:2c:d4:78:31:ec:0b:a0:be:31:6d:0f:c1:a9:53:
19:85:49:cd:4c:64:71:ae:2e:ad:a0:f2:7c:a5:e6:
af:5b:f1:b1:eb:a9:9b:35:ce:5d:eb:9b:b3:fa:27:
cf:2a:47:c9:e5:3b:dc:7e:47:99:e2:91:34:35:3c:
9c:18:30:79:ce:17:19:c2:2a:d6:d4:a2:b0:98:91:
2d:f6:0e:ef:31:b1:1d:0e:28:50:3a:4e:7e:38:df:
b5:fa:c8:6f:ec:58:fc:1b:ac:9b:c7:9b:1f:43:65:
3d:7d:79:35:5c:90:07:1e:83:df:74:89:58:aa:2e:
b7:34:6b:fd:06:57:db:25:af:00:d3:df:55:2e:b4:
de:43:c1:14:1b:31:29:4c:5c:cc:82:c3:ed:c1:21:
b7:a3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
24:9D:18:FD:E5:C9:BC:80:4E:62:8D:79:28:F2:2A:57:20:7D:B3:DA
X509v3 Authority Key Identifier:
keyid:46:A2:E6:34:FF:F4:0A:E5:45:EC:7D:B6:7A:88:81:89:AA:EB:5D:03
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://repo-rpki.idnic.net/repo/32880ddb-3d94-4e34-92dc-4d4538b905a2/0/46A2E634FFF40AE545EC7DB67A888189AAEB5D03.crl
Authority Information Access:
CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/46A2E634FFF40AE545EC7DB67A888189AAEB5D03.cer
Subject Information Access:
Signed Object - URI:rsync://repo-rpki.idnic.net/repo/32880ddb-3d94-4e34-92dc-4d4538b905a2/0/46A2E634FFF40AE545EC7DB67A888189AAEB5D03.mft
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
11:c9:75:e2:4b:67:28:80:81:43:bf:42:6c:39:8d:75:5f:c0:
85:24:5e:b8:85:a4:90:33:89:d1:59:98:35:b4:14:cf:60:82:
5f:b6:2c:77:f2:be:c2:4d:3f:6e:e2:04:d9:44:5a:3c:6c:db:
fd:d9:b9:76:98:80:1a:f1:fe:df:5b:50:32:19:dc:b4:be:88:
f7:dc:13:8a:0e:03:2b:a8:fa:1a:0e:76:9b:ba:c2:8c:0c:0a:
76:e4:75:7c:e7:c9:c1:a2:d4:f1:f8:67:a7:e9:dd:f0:bc:32:
2f:c6:a5:96:52:c3:2b:66:36:c4:5d:dc:a1:1e:ec:9c:54:43:
41:67:b5:a8:6e:ae:81:82:a2:bf:90:23:f7:47:db:ca:74:42:
38:a4:e9:10:c6:4a:a6:ff:be:3d:1d:ed:56:da:67:d0:a1:ee:
12:8c:d2:69:d1:4d:36:5e:4d:f5:ee:7d:70:25:38:db:99:20:
f0:9f:a5:55:bd:ac:f9:f7:10:54:de:af:f2:d4:08:59:f5:94:
1c:b9:33:10:cc:d7:5d:4f:ee:4c:a9:03:b3:a3:e9:45:03:f9:
4d:7c:a4:33:df:0d:65:c1:c1:d0:80:13:49:8b:18:7b:c3:e7:
a2:ee:93:48:8b:6d:3a:1d:7e:77:1b:7f:fd:12:4e:9f:bf:03:
26:da:f5:98
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jun 24 04:12:04 2026 by rpki-client