Manifest
$ rpki-client -vvf repo-rpki.idnic.net/repo/5f9e1a8a-39f1-4fe2-832a-bb2f2092fbf6/0/EFAF3DBC84578E586EA4A04FC35E6A46FA0E28EA.mft
File: EFAF3DBC84578E586EA4A04FC35E6A46FA0E28EA.mft (raw, json)
Hash identifier: Sff2WZobZNJ0/UPnNro/aEOM3EK/f5reGgNNixTmYBI=
Subject key identifier: 18:93:2A:D2:9C:9A:4C:AF:D5:AD:E0:CB:F0:04:00:8E:C3:9A:DD:67
Authority key identifier: EF:AF:3D:BC:84:57:8E:58:6E:A4:A0:4F:C3:5E:6A:46:FA:0E:28:EA
Certificate issuer: /CN=EFAF3DBC84578E586EA4A04FC35E6A46FA0E28EA
Certificate serial: 4DEB9192B57A6ABEB8D8DFF1C6889ED163BE3C46
Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/EFAF3DBC84578E586EA4A04FC35E6A46FA0E28EA.cer
Subject info access: rsync://repo-rpki.idnic.net/repo/5f9e1a8a-39f1-4fe2-832a-bb2f2092fbf6/0/EFAF3DBC84578E586EA4A04FC35E6A46FA0E28EA.mft
Manifest number: 0142
Signing time: Wed 29 Apr 2026 10:04:39 +0000
Manifest this update: Wed 29 Apr 2026 09:59:39 +0000
Manifest next update: Sat 02 May 2026 13:58:39 +0000
Files and hashes: 1: EFAF3DBC84578E586EA4A04FC35E6A46FA0E28EA.crl (hash: bRYXClqDr7ptDWgDgGDjsXDzVCD5iBUYLehJTxUuM2U=)
2: 3135372e36362e33362e302f32342d3234203d3e20313430303136.roa (hash: OPt+rRhjeG41N/mJaT0mB4Dryaw/j8pB0Q5pO3mWwpU=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
4d:eb:91:92:b5:7a:6a:be:b8:d8:df:f1:c6:88:9e:d1:63:be:3c:46
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=EFAF3DBC84578E586EA4A04FC35E6A46FA0E28EA
Validity
Not Before: Apr 29 09:59:39 2026 GMT
Not After : May 2 13:58:39 2026 GMT
Subject: CN=18932AD29C9A4CAFD5ADE0CBF004008EC39ADD67
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bb:2f:c1:16:28:eb:d5:ab:e5:51:a3:5f:cc:dd:
6d:d2:70:0c:0d:63:18:0a:76:76:0e:50:76:a5:d5:
4a:c4:d3:ec:da:9e:7c:54:60:c1:ca:98:ba:76:a6:
d1:75:14:cc:a0:b0:4c:6a:f5:e2:98:40:14:78:75:
c3:2b:ce:6b:74:75:8d:aa:82:40:d8:c3:66:1d:2c:
97:c0:c7:e6:7a:95:21:c3:d4:06:ad:6b:92:ce:88:
15:6f:85:c0:fd:f3:ca:b0:45:d5:99:ed:92:3f:69:
ed:f5:89:3f:a8:26:db:f8:8a:01:b4:ac:45:52:23:
76:54:07:ac:9a:a3:29:af:b6:6d:42:14:0b:e8:ef:
1c:09:00:5a:f2:5d:34:48:61:d2:fa:dd:7f:b4:f3:
5f:de:65:2c:14:32:35:eb:fe:23:2e:5c:be:bf:b1:
3b:e7:90:cf:45:bd:85:76:89:a8:b8:0b:b4:06:74:
91:8c:10:47:44:c9:87:e6:1d:5f:13:77:b7:29:ec:
7f:1b:5a:c7:e9:8f:56:76:e3:de:3b:ac:73:b5:bc:
0d:e0:20:e1:f1:c0:05:db:ca:1d:4e:f6:2e:36:3c:
06:a5:27:65:05:99:bc:c1:a4:f9:d6:ab:4a:78:a5:
9b:a1:91:ff:49:a6:23:91:ad:e5:fb:08:bf:35:f7:
f8:47
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
18:93:2A:D2:9C:9A:4C:AF:D5:AD:E0:CB:F0:04:00:8E:C3:9A:DD:67
X509v3 Authority Key Identifier:
keyid:EF:AF:3D:BC:84:57:8E:58:6E:A4:A0:4F:C3:5E:6A:46:FA:0E:28:EA
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://repo-rpki.idnic.net/repo/5f9e1a8a-39f1-4fe2-832a-bb2f2092fbf6/0/EFAF3DBC84578E586EA4A04FC35E6A46FA0E28EA.crl
Authority Information Access:
CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/EFAF3DBC84578E586EA4A04FC35E6A46FA0E28EA.cer
Subject Information Access:
Signed Object - URI:rsync://repo-rpki.idnic.net/repo/5f9e1a8a-39f1-4fe2-832a-bb2f2092fbf6/0/EFAF3DBC84578E586EA4A04FC35E6A46FA0E28EA.mft
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
44:ee:c3:8d:8d:08:ba:0c:76:f2:f6:a0:14:f7:c5:b0:d3:c4:
97:98:88:06:3d:7c:53:5c:94:1c:71:20:c5:b0:55:a9:60:03:
20:e5:4f:8c:61:63:36:c0:09:7c:9c:02:e3:4d:5e:33:e4:db:
f1:bb:97:a3:36:82:48:98:8a:7d:1b:d1:55:89:da:92:25:ca:
d1:6e:16:00:d4:a2:a8:cf:49:d3:de:86:26:fe:c3:70:c5:a8:
e6:a9:ad:54:bf:d5:70:79:49:3d:2a:0d:b0:46:1b:16:eb:75:
c4:db:1a:0b:9c:b2:8e:9e:08:06:79:e3:2d:a0:49:50:5a:8e:
5b:45:40:70:4f:4a:c0:17:62:5f:cc:e0:1b:28:ad:0d:e5:6e:
79:54:20:8c:9c:de:8b:54:5b:94:f1:52:51:33:38:d1:8b:bd:
f2:6e:b2:fd:33:93:a1:92:43:41:02:de:43:5d:d2:ad:b7:99:
7a:84:c7:a0:6c:b7:ed:7f:43:27:78:61:26:7e:af:aa:50:37:
79:65:f6:f9:83:78:b4:0a:03:94:de:46:20:e3:a3:2c:73:be:
69:83:a9:42:48:0d:7c:17:b0:96:8c:18:e2:76:f5:52:50:86:
cb:eb:36:b3:85:b3:b0:17:9b:be:50:6d:10:6c:04:b8:0b:a6:
86:1c:2e:43
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jun 24 04:14:10 2026 by rpki-client