Manifest
$ rpki-client -vvf repo-rpki.idnic.net/repo/a0ba85a0-3534-49a4-a826-13a735f94369/0/8C210840D9E28A465D4F0B9F3A1D7C31CC6680C0.mft
File: 8C210840D9E28A465D4F0B9F3A1D7C31CC6680C0.mft (raw, json)
Hash identifier: Gga6bHp0cgifQo+FOfnjCq0ptz5XolXYx1Ocr9bDHCA=
Subject key identifier: CA:92:93:55:31:B6:D4:58:64:B7:06:7A:7B:F2:FF:87:7F:B6:DB:2B
Authority key identifier: 8C:21:08:40:D9:E2:8A:46:5D:4F:0B:9F:3A:1D:7C:31:CC:66:80:C0
Certificate issuer: /CN=8C210840D9E28A465D4F0B9F3A1D7C31CC6680C0
Certificate serial: 2547DB1637CEDAFF1D027B92F288B089FC8018CC
Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/8C210840D9E28A465D4F0B9F3A1D7C31CC6680C0.cer
Subject info access: rsync://repo-rpki.idnic.net/repo/a0ba85a0-3534-49a4-a826-13a735f94369/0/8C210840D9E28A465D4F0B9F3A1D7C31CC6680C0.mft
Manifest number: 0129
Signing time: Mon 27 Apr 2026 11:30:49 +0000
Manifest this update: Mon 27 Apr 2026 11:25:49 +0000
Manifest next update: Thu 30 Apr 2026 18:34:49 +0000
Files and hashes: 1: 3136302e32322e3139342e302f32332d3234203d3e20313532383236.roa (hash: 8CRgA1ByY654Nlat1fHrKnqGH93mDlUGlMXfJsCa4ik=)
2: 8C210840D9E28A465D4F0B9F3A1D7C31CC6680C0.crl (hash: dgCGRiv8cLvNAc1BmRYmSvzUPcLQypsF+Fx9TC0QHDA=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
25:47:db:16:37:ce:da:ff:1d:02:7b:92:f2:88:b0:89:fc:80:18:cc
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8C210840D9E28A465D4F0B9F3A1D7C31CC6680C0
Validity
Not Before: Apr 27 11:25:49 2026 GMT
Not After : Apr 30 18:34:49 2026 GMT
Subject: CN=CA92935531B6D45864B7067A7BF2FF877FB6DB2B
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c2:14:ff:75:25:20:34:47:39:03:cf:b7:2b:09:
fa:0e:ec:14:bb:2f:fd:db:2f:8f:4e:31:52:4a:51:
18:94:d3:fa:ef:27:9a:8c:5b:75:5f:94:d7:fc:8f:
16:de:e8:79:31:f1:da:77:f6:17:bf:2b:f2:21:de:
36:e8:74:ec:c1:76:82:ab:7a:1f:17:4f:57:5f:72:
79:bb:22:d8:b8:20:06:2a:a9:d7:4f:4b:e7:01:6b:
5e:bc:61:cb:bb:a3:36:7f:b5:3c:c0:f0:87:b5:02:
10:9f:cf:7c:be:67:48:1a:a4:24:25:53:58:e2:e9:
57:94:7b:2f:79:cb:f9:c1:df:33:29:cd:7c:cd:2c:
2c:50:38:80:fc:18:31:6d:fb:0b:aa:3e:9d:6c:ea:
c0:26:be:a2:e7:bf:b2:02:94:b5:49:dd:b2:17:ed:
03:cc:19:2d:ff:47:8e:fe:9e:ae:3f:c1:d6:3f:e5:
7c:ce:a2:f7:ac:44:44:5f:7c:e3:d3:94:89:3f:c4:
67:7f:8b:e2:0b:00:0a:eb:1d:9f:7e:8f:4e:0f:68:
f2:e5:33:16:49:ce:3a:e7:04:2d:bf:cf:20:95:02:
b7:4f:5b:69:cf:dd:35:1c:78:b6:e1:96:95:c6:2b:
ba:28:c2:55:43:15:cc:59:03:d0:62:cf:50:a2:05:
c7:dd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
CA:92:93:55:31:B6:D4:58:64:B7:06:7A:7B:F2:FF:87:7F:B6:DB:2B
X509v3 Authority Key Identifier:
keyid:8C:21:08:40:D9:E2:8A:46:5D:4F:0B:9F:3A:1D:7C:31:CC:66:80:C0
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://repo-rpki.idnic.net/repo/a0ba85a0-3534-49a4-a826-13a735f94369/0/8C210840D9E28A465D4F0B9F3A1D7C31CC6680C0.crl
Authority Information Access:
CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/8C210840D9E28A465D4F0B9F3A1D7C31CC6680C0.cer
Subject Information Access:
Signed Object - URI:rsync://repo-rpki.idnic.net/repo/a0ba85a0-3534-49a4-a826-13a735f94369/0/8C210840D9E28A465D4F0B9F3A1D7C31CC6680C0.mft
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
13:5b:40:1f:f3:68:fc:54:8f:13:e7:c7:ef:07:1a:81:8d:33:
71:82:e2:5f:26:ae:48:69:5f:b5:97:59:7b:a9:27:0e:de:05:
2f:9a:b6:98:40:50:ad:cb:e0:66:e5:a0:ff:77:89:28:b4:0f:
41:97:e8:b1:99:77:a7:37:7e:1f:22:d8:c8:0a:04:dd:44:d1:
5d:0a:f2:28:e1:a5:5f:92:f9:06:37:1b:7b:11:7f:47:b3:0d:
a0:5b:60:bc:83:54:d6:b0:11:8a:c1:17:fa:e8:37:d3:d3:30:
f4:96:de:34:bf:0f:c4:bb:a5:d2:5d:14:56:d4:7d:97:9f:da:
11:df:81:63:b6:39:1e:36:71:70:82:05:44:ce:f2:fd:b1:6a:
aa:84:50:85:cc:f1:0c:5b:f0:49:25:0c:10:01:d0:7b:ca:e0:
e2:06:b3:9b:46:84:eb:fd:15:4d:33:65:30:48:39:71:5c:34:
4a:4c:cc:d2:74:3a:75:4f:e5:40:70:f6:58:75:0d:ed:95:67:
2b:03:53:42:b8:30:cf:d7:5c:47:fd:40:2d:0b:15:28:5e:6d:
c6:2c:8b:61:a6:2c:c6:05:e1:2b:3f:8f:90:63:a2:c1:4a:68:
ae:7b:50:ac:1c:53:03:cd:39:b1:e4:ff:b2:8f:d7:5b:72:59:
70:70:7c:5c
-----BEGIN CERTIFICATE-----
MIIFMjCCBBqgAwIBAgIUJUfbFjfO2v8dAnuS8oiwifyAGMwwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoOEMyMTA4NDBEOUUyOEE0NjVENEYwQjlGM0ExRDdDMzFD
QzY2ODBDMDAeFw0yNjA0MjcxMTI1NDlaFw0yNjA0MzAxODM0NDlaMDMxMTAvBgNV
BAMTKENBOTI5MzU1MzFCNkQ0NTg2NEI3MDY3QTdCRjJGRjg3N0ZCNkRCMkIwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDCFP91JSA0RzkDz7crCfoO7BS7
L/3bL49OMVJKURiU0/rvJ5qMW3VflNf8jxbe6Hkx8dp39he/K/Ih3jbodOzBdoKr
eh8XT1dfcnm7Iti4IAYqqddPS+cBa168Ycu7ozZ/tTzA8Ie1AhCfz3y+Z0gapCQl
U1ji6VeUey95y/nB3zMpzXzNLCxQOID8GDFt+wuqPp1s6sAmvqLnv7IClLVJ3bIX
7QPMGS3/R47+nq4/wdY/5XzOovesRERffOPTlIk/xGd/i+ILAArrHZ9+j04PaPLl
MxZJzjrnBC2/zyCVArdPW2nP3TUceLbhlpXGK7oowlVDFcxZA9Biz1CiBcfdAgMB
AAGjggI8MIICODAdBgNVHQ4EFgQUypKTVTG21FhktwZ6e/L/h3+22yswHwYDVR0j
BBgwFoAUjCEIQNniikZdTwufOh18McxmgMAwDgYDVR0PAQH/BAQDAgeAMIGFBgNV
HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby9h
MGJhODVhMC0zNTM0LTQ5YTQtYTgyNi0xM2E3MzVmOTQzNjkvMC84QzIxMDg0MEQ5
RTI4QTQ2NUQ0RjBCOUYzQTFEN0MzMUNDNjY4MEMwLmNybDB0BggrBgEFBQcBAQRo
MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv
L0lETklDLUlELzEvOEMyMTA4NDBEOUUyOEE0NjVENEYwQjlGM0ExRDdDMzFDQzY2
ODBDMC5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6
Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vYTBiYTg1YTAtMzUzNC00OWE0LWE4
MjYtMTNhNzM1Zjk0MzY5LzAvOEMyMTA4NDBEOUUyOEE0NjVENEYwQjlGM0ExRDdD
MzFDQzY2ODBDMC5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF
BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC
BQAwDQYJKoZIhvcNAQELBQADggEBABNbQB/zaPxUjxPnx+8HGoGNM3GC4l8mrkhp
X7WXWXupJw7eBS+atphAUK3L4GbloP93iSi0D0GX6LGZd6c3fh8i2MgKBN1E0V0K
8ijhpV+S+QY3G3sRf0ezDaBbYLyDVNawEYrBF/roN9PTMPSW3jS/D8S7pdJdFFbU
fZef2hHfgWO2OR42cXCCBUTO8v2xaqqEUIXM8Qxb8EklDBAB0HvK4OIGs5tGhOv9
FU0zZTBIOXFcNEpMzNJ0OnVP5UBw9lh1De2VZysDU0K4MM/XXEf9QC0LFShebcYs
i2GmLMYF4Ss/j5BjosFKaK57UKwcUwPNObHk/7KP11tyWXBwfFw=
-----END CERTIFICATE-----
Generated at Wed Jun 24 04:17:22 2026 by rpki-client