Manifest
$ rpki-client -vvf repo-rpki.idnic.net/repo/87c432e0-dc3e-42cc-bcc0-629b16206c9a/0/2976ADC7448BF0CA9B57DCD78849A1E0F95F2B45.mft
File: 2976ADC7448BF0CA9B57DCD78849A1E0F95F2B45.mft (raw, json)
Hash identifier: sq5hjFgU9NAgjwhW94FZfWB/SgMYcF1DFn17tmr5djc=
Subject key identifier: D9:CD:CB:4F:85:CA:7F:C1:67:BF:AA:84:42:11:13:15:C0:7E:EC:E9
Authority key identifier: 29:76:AD:C7:44:8B:F0:CA:9B:57:DC:D7:88:49:A1:E0:F9:5F:2B:45
Certificate issuer: /CN=2976ADC7448BF0CA9B57DCD78849A1E0F95F2B45
Certificate serial: 66BF9A80A76072E521702EAEAF089910CEA8EE21
Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/2976ADC7448BF0CA9B57DCD78849A1E0F95F2B45.cer
Subject info access: rsync://repo-rpki.idnic.net/repo/87c432e0-dc3e-42cc-bcc0-629b16206c9a/0/2976ADC7448BF0CA9B57DCD78849A1E0F95F2B45.mft
Manifest number: 0128
Signing time: Tue 28 Apr 2026 11:31:06 +0000
Manifest this update: Tue 28 Apr 2026 11:26:06 +0000
Manifest next update: Fri 01 May 2026 13:03:06 +0000
Files and hashes: 1: 2976ADC7448BF0CA9B57DCD78849A1E0F95F2B45.crl (hash: PonWhL1cjWwRXoO7k5RoT1DxcyWThqqlaGTNwJThjig=)
2: 3136302e32352e3137382e302f32332d3234203d3e20313533303735.roa (hash: FYy5UtFCXZKGCZxosr1oqFzrTkMP7sB8ytiR2n56UZs=)
3: 3136302e32352e3137392e302f32342d3234203d3e20313533303735.roa (hash: duCuSDamX6IXj6dNr3R2KvTWuX1Y0Ld9dMd4eFNkJZc=)
4: 3136302e32352e3137382e302f32342d3234203d3e20313533303735.roa (hash: iPqRbkelW4W9hPKQlPKh7dVapT99d9ruqUsqOdahl18=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
66:bf:9a:80:a7:60:72:e5:21:70:2e:ae:af:08:99:10:ce:a8:ee:21
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2976ADC7448BF0CA9B57DCD78849A1E0F95F2B45
Validity
Not Before: Apr 28 11:26:06 2026 GMT
Not After : May 1 13:03:06 2026 GMT
Subject: CN=D9CDCB4F85CA7FC167BFAA8442111315C07EECE9
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c9:6e:16:e2:22:81:91:c1:93:c2:89:f5:4c:65:
13:6e:c5:0c:da:da:43:69:34:83:bb:ed:a6:7b:ef:
c2:f0:a8:d8:13:d9:4a:00:36:3d:d2:79:04:1f:cd:
5c:63:d6:11:b9:cb:01:68:c0:46:d4:d1:41:2c:31:
40:ec:46:b0:09:c7:ca:9f:ef:ab:86:6c:78:34:f2:
47:9d:7b:a5:3d:5e:d5:fe:35:00:1e:ad:55:24:8f:
ab:93:df:4f:ee:7f:d4:cb:ab:11:46:74:f7:9d:21:
5f:37:22:77:39:1a:31:87:e7:b8:db:20:d8:f7:e6:
68:99:0c:d8:13:50:77:c5:eb:d9:4d:64:e0:fe:d6:
46:c9:92:30:e3:7b:04:e1:ce:42:18:2e:c5:7e:52:
c6:3d:ab:04:c3:b6:8e:4e:be:f6:20:3f:7e:a6:1a:
23:15:87:44:09:3b:df:f7:10:f9:a9:ef:77:25:7a:
4a:b8:a1:53:f7:8e:74:a6:ba:a2:0a:22:75:70:2d:
76:dd:c5:44:5a:53:08:de:3f:4f:42:5e:e4:7b:76:
e4:be:4b:e1:2a:c9:64:03:ae:e9:89:13:54:a2:0c:
cc:cb:56:b6:ee:04:2f:04:89:53:cc:92:f5:20:a3:
2c:7f:8a:83:0e:32:2d:3f:c4:b4:20:e4:cb:65:b9:
ed:ef
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D9:CD:CB:4F:85:CA:7F:C1:67:BF:AA:84:42:11:13:15:C0:7E:EC:E9
X509v3 Authority Key Identifier:
keyid:29:76:AD:C7:44:8B:F0:CA:9B:57:DC:D7:88:49:A1:E0:F9:5F:2B:45
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://repo-rpki.idnic.net/repo/87c432e0-dc3e-42cc-bcc0-629b16206c9a/0/2976ADC7448BF0CA9B57DCD78849A1E0F95F2B45.crl
Authority Information Access:
CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/2976ADC7448BF0CA9B57DCD78849A1E0F95F2B45.cer
Subject Information Access:
Signed Object - URI:rsync://repo-rpki.idnic.net/repo/87c432e0-dc3e-42cc-bcc0-629b16206c9a/0/2976ADC7448BF0CA9B57DCD78849A1E0F95F2B45.mft
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
16:af:2b:3c:da:98:3c:f6:39:eb:df:3c:7c:53:b0:f0:0e:a2:
a1:68:5f:38:4a:28:bb:ef:c7:c8:82:c5:00:32:33:e7:e2:e5:
0d:00:d6:af:f9:8c:38:6d:c5:97:6a:05:ea:4b:62:e1:cf:fe:
31:b4:d6:98:44:c1:4f:57:5e:92:23:84:6c:b1:3f:5e:d6:ec:
6f:29:7a:b7:95:8e:03:59:45:0d:8e:fd:a3:07:23:e8:be:cf:
fe:88:fc:ec:ec:8e:da:c9:00:7a:77:04:d4:ac:fc:98:a0:6c:
f3:5e:06:2c:10:29:6e:ae:13:69:49:7a:5a:e2:27:fe:f8:fc:
9d:92:94:35:e0:ed:4f:5e:f4:d7:50:11:28:b8:89:91:aa:04:
54:70:d6:14:8b:42:04:0c:4a:2a:5b:1f:0f:d5:ba:ce:89:a4:
be:da:6e:d0:19:75:12:d4:a1:00:0e:68:f1:0e:87:f9:a6:32:
d5:ae:66:0e:1c:08:82:81:f7:2f:32:b2:49:90:1f:51:bc:98:
0b:46:bc:6a:a2:06:c7:67:91:01:b1:fb:1c:56:44:48:ef:c1:
57:6b:de:03:a6:45:5b:fe:83:fb:90:1e:d3:3a:50:de:d5:a9:
7a:c4:44:bb:ba:29:05:b3:38:ad:70:86:54:fa:a0:97:94:c6:
d2:f7:b8:30
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jun 24 04:15:39 2026 by rpki-client