Manifest
$ rpki-client -vvf repo-rpki.idnic.net/repo/8475338d-7acb-4aa7-bedc-d6459fd13504/0/1E40BE2B668DAE3E7271E835148386D785E3724C.mft
File: 1E40BE2B668DAE3E7271E835148386D785E3724C.mft (raw, json)
Hash identifier: 8lKYMqLi6amtbmInI6wWrsMT7KMa1J11GyJYwHlpazY=
Subject key identifier: 7C:29:89:7D:25:F8:1B:34:C5:4E:53:16:5B:80:AB:D4:4B:87:75:D2
Authority key identifier: 1E:40:BE:2B:66:8D:AE:3E:72:71:E8:35:14:83:86:D7:85:E3:72:4C
Certificate issuer: /CN=1E40BE2B668DAE3E7271E835148386D785E3724C
Certificate serial: 71CB8478A5203A5A05CC06B48C362238D9F548C5
Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/1E40BE2B668DAE3E7271E835148386D785E3724C.cer
Subject info access: rsync://repo-rpki.idnic.net/repo/8475338d-7acb-4aa7-bedc-d6459fd13504/0/1E40BE2B668DAE3E7271E835148386D785E3724C.mft
Manifest number: 012D
Signing time: Mon 27 Apr 2026 14:32:22 +0000
Manifest this update: Mon 27 Apr 2026 14:27:22 +0000
Manifest next update: Thu 30 Apr 2026 21:36:22 +0000
Files and hashes: 1: 1E40BE2B668DAE3E7271E835148386D785E3724C.crl (hash: 6JPui/BIqUmRSUfFkIMNlksEwCjqn29QgzExrBNb/v8=)
2: 3136302e32322e3133342e302f32332d3234203d3e20313532383130.roa (hash: 6NYs/G1xdGsUC1/WqjKklC2SAb8XsfqjqDKSyuRji20=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
71:cb:84:78:a5:20:3a:5a:05:cc:06:b4:8c:36:22:38:d9:f5:48:c5
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=1E40BE2B668DAE3E7271E835148386D785E3724C
Validity
Not Before: Apr 27 14:27:22 2026 GMT
Not After : Apr 30 21:36:22 2026 GMT
Subject: CN=7C29897D25F81B34C54E53165B80ABD44B8775D2
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b8:f4:3a:e1:92:c2:b6:e0:e2:38:fa:62:f8:f9:
e3:8b:36:f0:97:49:3b:1e:af:78:67:bb:10:74:d6:
bb:80:ce:d2:34:3f:76:cd:23:2f:6c:36:02:3a:43:
81:97:e5:ae:26:f8:1c:aa:6d:0c:4e:21:20:54:2d:
ff:75:fe:6d:eb:40:e8:2e:8a:91:ab:27:41:16:6d:
8d:28:6b:cc:1c:e7:7e:2c:da:85:10:60:5b:d3:1c:
28:48:cc:42:a1:84:f8:f4:57:5e:2a:96:cc:d6:29:
aa:9c:b1:24:eb:ff:53:10:c5:65:83:a4:df:8d:47:
b1:42:56:59:75:fd:ff:27:ce:c8:bd:2c:31:8d:81:
10:24:d8:68:de:c8:e4:67:a7:b4:1c:a2:ea:7c:b0:
95:d5:0c:99:2c:93:d9:93:26:25:63:73:11:13:ab:
9e:dc:ba:c4:bb:66:58:9d:07:4c:c8:85:30:58:45:
b6:70:9e:95:07:ab:e5:43:48:dd:a3:1d:98:7e:98:
c3:b7:71:f7:d7:92:b1:36:ff:fa:4a:b8:d5:c3:26:
9f:e9:5a:02:59:ec:7a:86:69:57:f4:14:12:51:a3:
d7:63:19:99:2c:93:f1:ae:df:93:fb:f5:d2:39:6b:
29:ed:2a:9a:ee:98:29:df:ed:9b:73:53:a8:f8:a5:
6b:45
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
7C:29:89:7D:25:F8:1B:34:C5:4E:53:16:5B:80:AB:D4:4B:87:75:D2
X509v3 Authority Key Identifier:
keyid:1E:40:BE:2B:66:8D:AE:3E:72:71:E8:35:14:83:86:D7:85:E3:72:4C
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://repo-rpki.idnic.net/repo/8475338d-7acb-4aa7-bedc-d6459fd13504/0/1E40BE2B668DAE3E7271E835148386D785E3724C.crl
Authority Information Access:
CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/1E40BE2B668DAE3E7271E835148386D785E3724C.cer
Subject Information Access:
Signed Object - URI:rsync://repo-rpki.idnic.net/repo/8475338d-7acb-4aa7-bedc-d6459fd13504/0/1E40BE2B668DAE3E7271E835148386D785E3724C.mft
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
94:33:ac:9c:c5:c2:2a:c9:c4:cd:b9:27:01:46:bc:69:93:dd:
a4:16:d0:90:26:9e:69:9c:f4:ff:ea:b8:c1:29:ad:1b:50:5a:
0d:94:f4:cb:f7:7e:6d:c1:59:d1:eb:ae:23:bc:34:10:55:8a:
06:8e:51:68:0a:ac:90:13:9e:a7:bb:40:f5:a6:6f:b0:74:ac:
62:4d:d8:8f:13:22:e8:ee:f8:e7:9f:e6:bc:2b:ad:db:3e:90:
27:a6:5e:a6:8d:b2:f7:fa:72:ad:b7:0e:ea:74:ae:33:34:32:
b2:fd:7c:cf:dd:95:6d:86:66:7f:72:25:4d:1b:54:4e:f8:8e:
9b:7b:aa:7c:e1:a7:f2:14:c2:bf:32:18:0f:63:10:e4:39:ad:
7d:53:b6:00:ed:0b:45:ab:5e:4d:8a:a7:14:2d:10:12:be:70:
47:49:74:fb:fb:55:8d:ac:71:81:1d:c0:df:b5:5e:b6:17:e0:
22:42:9b:43:3d:f5:f4:ff:1e:a2:64:c1:98:8e:5f:d9:fc:ee:
0d:ca:eb:bf:e7:db:20:f4:a3:71:3b:36:2e:9e:36:e1:3d:25:
89:26:4c:86:0f:8e:96:cb:d8:d5:06:fa:0f:05:49:65:25:c9:
5d:0e:14:41:d2:3e:93:1f:1a:bc:15:b8:29:c3:ae:ad:1b:f3:
76:27:a2:22
-----BEGIN CERTIFICATE-----
MIIFMjCCBBqgAwIBAgIUccuEeKUgOloFzAa0jDYiONn1SMUwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoMUU0MEJFMkI2NjhEQUUzRTcyNzFFODM1MTQ4Mzg2RDc4
NUUzNzI0QzAeFw0yNjA0MjcxNDI3MjJaFw0yNjA0MzAyMTM2MjJaMDMxMTAvBgNV
BAMTKDdDMjk4OTdEMjVGODFCMzRDNTRFNTMxNjVCODBBQkQ0NEI4Nzc1RDIwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC49DrhksK24OI4+mL4+eOLNvCX
STser3hnuxB01ruAztI0P3bNIy9sNgI6Q4GX5a4m+ByqbQxOISBULf91/m3rQOgu
ipGrJ0EWbY0oa8wc534s2oUQYFvTHChIzEKhhPj0V14qlszWKaqcsSTr/1MQxWWD
pN+NR7FCVll1/f8nzsi9LDGNgRAk2GjeyORnp7Qcoup8sJXVDJksk9mTJiVjcxET
q57cusS7ZlidB0zIhTBYRbZwnpUHq+VDSN2jHZh+mMO3cffXkrE2//pKuNXDJp/p
WgJZ7HqGaVf0FBJRo9djGZksk/Gu35P79dI5ayntKprumCnf7ZtzU6j4pWtFAgMB
AAGjggI8MIICODAdBgNVHQ4EFgQUfCmJfSX4GzTFTlMWW4Cr1EuHddIwHwYDVR0j
BBgwFoAUHkC+K2aNrj5yceg1FIOG14XjckwwDgYDVR0PAQH/BAQDAgeAMIGFBgNV
HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby84
NDc1MzM4ZC03YWNiLTRhYTctYmVkYy1kNjQ1OWZkMTM1MDQvMC8xRTQwQkUyQjY2
OERBRTNFNzI3MUU4MzUxNDgzODZENzg1RTM3MjRDLmNybDB0BggrBgEFBQcBAQRo
MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv
L0lETklDLUlELzEvMUU0MEJFMkI2NjhEQUUzRTcyNzFFODM1MTQ4Mzg2RDc4NUUz
NzI0Qy5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6
Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vODQ3NTMzOGQtN2FjYi00YWE3LWJl
ZGMtZDY0NTlmZDEzNTA0LzAvMUU0MEJFMkI2NjhEQUUzRTcyNzFFODM1MTQ4Mzg2
RDc4NUUzNzI0Qy5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF
BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC
BQAwDQYJKoZIhvcNAQELBQADggEBAJQzrJzFwirJxM25JwFGvGmT3aQW0JAmnmmc
9P/quMEprRtQWg2U9Mv3fm3BWdHrriO8NBBVigaOUWgKrJATnqe7QPWmb7B0rGJN
2I8TIuju+Oef5rwrrds+kCemXqaNsvf6cq23Dup0rjM0MrL9fM/dlW2GZn9yJU0b
VE74jpt7qnzhp/IUwr8yGA9jEOQ5rX1TtgDtC0WrXk2KpxQtEBK+cEdJdPv7VY2s
cYEdwN+1XrYX4CJCm0M99fT/HqJkwZiOX9n87g3K67/n2yD0o3E7Ni6eNuE9JYkm
TIYPjpbL2NUG+g8FSWUlyV0OFEHSPpMfGrwVuCnDrq0b83YnoiI=
-----END CERTIFICATE-----
Generated at Wed Jun 24 04:17:53 2026 by rpki-client