
Manifest
$ rpki-client -vvf repo-rpki.idnic.net/repo/c1b08845-df82-44c2-976d-6d74b81166f4/0/2A62B964EC86447DC22DDE70DC3517F0CF7C9ACD.mft
File: 2A62B964EC86447DC22DDE70DC3517F0CF7C9ACD.mft (raw, json)
Hash identifier: bjcf67WKs6zLl3UdqWBIDyGtAILC2UKWUM24/+TAVkk=
Subject key identifier: C5:D7:79:AB:23:F2:ED:7F:2D:89:6B:8D:90:20:D6:B3:D4:0A:91:42
Authority key identifier: 2A:62:B9:64:EC:86:44:7D:C2:2D:DE:70:DC:35:17:F0:CF:7C:9A:CD
Certificate issuer: /CN=2A62B964EC86447DC22DDE70DC3517F0CF7C9ACD
Certificate serial: 24B50F6D96FDC7428B1F70AA8B4D064EC00B0A3A
Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/2A62B964EC86447DC22DDE70DC3517F0CF7C9ACD.cer
Subject info access: rsync://repo-rpki.idnic.net/repo/c1b08845-df82-44c2-976d-6d74b81166f4/0/2A62B964EC86447DC22DDE70DC3517F0CF7C9ACD.mft
Manifest number: 0132
Signing time: Mon 27 Apr 2026 09:11:02 +0000
Manifest this update: Mon 27 Apr 2026 09:06:02 +0000
Manifest next update: Thu 30 Apr 2026 20:33:02 +0000
Files and hashes: 1: 3135372e36362e3132332e302f32342d3234203d3e20313532373731.roa (hash: U13ray6Q2sSoKG3Sl/JF9ePon4W14X24dzQnJX7hj3o=)
2: 2A62B964EC86447DC22DDE70DC3517F0CF7C9ACD.crl (hash: BWoJ1NdY3eAQI3U8araYG0gTP9ydlV+AtiBc1r7PM6I=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
24:b5:0f:6d:96:fd:c7:42:8b:1f:70:aa:8b:4d:06:4e:c0:0b:0a:3a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2A62B964EC86447DC22DDE70DC3517F0CF7C9ACD
Validity
Not Before: Apr 27 09:06:02 2026 GMT
Not After : Apr 30 20:33:02 2026 GMT
Subject: CN=C5D779AB23F2ED7F2D896B8D9020D6B3D40A9142
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b6:f0:af:73:e6:03:ff:b5:69:8c:7d:c7:17:15:
d0:bc:7f:dc:08:ba:61:45:b9:8b:32:2a:bf:a9:3f:
23:56:b3:eb:55:69:46:b2:ea:f4:04:db:26:4b:ce:
8f:14:99:ce:d1:93:01:33:80:8b:52:5d:d6:33:6a:
70:db:41:19:0a:d9:40:07:2a:ce:31:09:a6:20:9f:
ce:b8:25:fd:5a:da:1a:56:cd:bb:f7:64:3b:ab:fb:
27:a2:49:05:54:57:e8:f1:a6:0d:1b:80:84:12:a3:
90:ed:97:76:b6:0d:50:0c:f3:29:9f:fd:cc:cb:42:
38:dd:5d:de:b1:f9:9e:c5:fa:5e:a7:93:95:12:de:
78:c3:df:a2:18:ac:9a:68:8b:ee:b1:e4:f2:32:fc:
8b:9c:ee:1a:5c:3d:f1:f8:fa:61:9e:53:55:c9:ea:
7e:63:f0:00:a8:ae:48:1d:5a:69:62:07:a1:8e:9a:
fb:de:5d:78:21:8c:e7:5b:0e:59:94:36:2d:8b:86:
60:0d:b3:83:5f:f1:71:14:cb:01:55:f1:c7:15:5e:
dd:76:ff:01:77:04:6f:06:ab:77:cf:30:81:2c:69:
23:b0:07:a3:0c:07:5e:73:01:11:33:6e:9e:7c:41:
dd:ef:44:bf:c1:07:ee:63:27:d2:9e:78:8b:8f:79:
0b:53
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C5:D7:79:AB:23:F2:ED:7F:2D:89:6B:8D:90:20:D6:B3:D4:0A:91:42
X509v3 Authority Key Identifier:
keyid:2A:62:B9:64:EC:86:44:7D:C2:2D:DE:70:DC:35:17:F0:CF:7C:9A:CD
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://repo-rpki.idnic.net/repo/c1b08845-df82-44c2-976d-6d74b81166f4/0/2A62B964EC86447DC22DDE70DC3517F0CF7C9ACD.crl
Authority Information Access:
CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/2A62B964EC86447DC22DDE70DC3517F0CF7C9ACD.cer
Subject Information Access:
Signed Object - URI:rsync://repo-rpki.idnic.net/repo/c1b08845-df82-44c2-976d-6d74b81166f4/0/2A62B964EC86447DC22DDE70DC3517F0CF7C9ACD.mft
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
15:b8:d7:d5:86:f4:ea:60:54:c7:99:44:d1:c8:00:2f:d2:89:
79:5e:3c:c7:dc:ea:34:be:54:0f:c1:e4:9e:54:65:04:10:05:
c0:bd:e6:51:1b:40:e6:a5:53:72:0a:70:3a:67:9a:d7:7b:09:
4e:a4:54:49:f8:95:b7:c6:17:3f:7c:2d:ee:11:54:90:6d:fd:
62:d2:9e:10:72:6f:2f:e0:41:13:af:54:e1:43:8a:00:b5:ee:
51:a9:61:c4:93:94:07:cb:16:6c:79:de:aa:71:20:8e:0c:d6:
27:87:a4:6c:47:d9:f6:9e:02:87:9c:0d:dd:cb:45:a0:a9:63:
02:fc:88:6e:17:7a:c8:0f:15:2f:ff:bb:7d:65:06:64:03:d0:
c2:ab:74:da:10:f4:79:ac:6f:75:4b:c7:ad:ec:e4:0d:12:fa:
00:70:ba:7c:eb:36:4f:d0:72:27:80:1e:a2:9f:ef:b9:b0:99:
6c:ab:5b:04:f3:9b:e3:fd:0b:a5:a9:12:32:64:e9:2a:c4:eb:
f0:79:b9:cd:d4:07:c8:88:17:85:ed:fd:e7:74:5a:8b:69:dd:
49:3d:40:c0:d3:64:5f:d0:fe:c5:c1:a9:41:7e:c0:5a:c0:1e:
54:2a:97:8a:89:0d:a7:b6:de:d9:37:b1:9f:58:05:23:24:10:
d4:b3:e1:be
-----BEGIN CERTIFICATE-----
MIIFMjCCBBqgAwIBAgIUJLUPbZb9x0KLH3Cqi00GTsALCjowDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoMkE2MkI5NjRFQzg2NDQ3REMyMkRERTcwREMzNTE3RjBD
RjdDOUFDRDAeFw0yNjA0MjcwOTA2MDJaFw0yNjA0MzAyMDMzMDJaMDMxMTAvBgNV
BAMTKEM1RDc3OUFCMjNGMkVEN0YyRDg5NkI4RDkwMjBENkIzRDQwQTkxNDIwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC28K9z5gP/tWmMfccXFdC8f9wI
umFFuYsyKr+pPyNWs+tVaUay6vQE2yZLzo8Umc7RkwEzgItSXdYzanDbQRkK2UAH
Ks4xCaYgn864Jf1a2hpWzbv3ZDur+yeiSQVUV+jxpg0bgIQSo5Dtl3a2DVAM8ymf
/czLQjjdXd6x+Z7F+l6nk5US3njD36IYrJpoi+6x5PIy/Iuc7hpcPfH4+mGeU1XJ
6n5j8ACorkgdWmliB6GOmvveXXghjOdbDlmUNi2LhmANs4Nf8XEUywFV8ccVXt12
/wF3BG8Gq3fPMIEsaSOwB6MMB15zAREzbp58Qd3vRL/BB+5jJ9KeeIuPeQtTAgMB
AAGjggI8MIICODAdBgNVHQ4EFgQUxdd5qyPy7X8tiWuNkCDWs9QKkUIwHwYDVR0j
BBgwFoAUKmK5ZOyGRH3CLd5w3DUX8M98ms0wDgYDVR0PAQH/BAQDAgeAMIGFBgNV
HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby9j
MWIwODg0NS1kZjgyLTQ0YzItOTc2ZC02ZDc0YjgxMTY2ZjQvMC8yQTYyQjk2NEVD
ODY0NDdEQzIyRERFNzBEQzM1MTdGMENGN0M5QUNELmNybDB0BggrBgEFBQcBAQRo
MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv
L0lETklDLUlELzEvMkE2MkI5NjRFQzg2NDQ3REMyMkRERTcwREMzNTE3RjBDRjdD
OUFDRC5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6
Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vYzFiMDg4NDUtZGY4Mi00NGMyLTk3
NmQtNmQ3NGI4MTE2NmY0LzAvMkE2MkI5NjRFQzg2NDQ3REMyMkRERTcwREMzNTE3
RjBDRjdDOUFDRC5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF
BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC
BQAwDQYJKoZIhvcNAQELBQADggEBABW419WG9OpgVMeZRNHIAC/SiXlePMfc6jS+
VA/B5J5UZQQQBcC95lEbQOalU3IKcDpnmtd7CU6kVEn4lbfGFz98Le4RVJBt/WLS
nhByby/gQROvVOFDigC17lGpYcSTlAfLFmx53qpxII4M1ieHpGxH2faeAoecDd3L
RaCpYwL8iG4XesgPFS//u31lBmQD0MKrdNoQ9Hmsb3VLx63s5A0S+gBwunzrNk/Q
cieAHqKf77mwmWyrWwTzm+P9C6WpEjJk6SrE6/B5uc3UB8iIF4Xt/ed0Wotp3Uk9
QMDTZF/Q/sXBqUF+wFrAHlQql4qJDae23tk3sZ9YBSMkENSz4b4=
-----END CERTIFICATE-----
Generated at Wed Jun 24 04:14:10 2026 by rpki-client