Manifest
$ rpki-client -vvf repo-rpki.idnic.net/repo/c47f6cf6-dd2b-4823-b264-e2bf4f30abfe/0/72D8DAFD481B3F8FAC2B2599C9E3ECEDFA3F4E16.mft
File: 72D8DAFD481B3F8FAC2B2599C9E3ECEDFA3F4E16.mft (raw, json)
Hash identifier: JOwwaqxxefzLDQr9P4XOFkbHEmyFwKvnXRTvuBk5vvs=
Subject key identifier: D4:00:27:09:1B:37:6A:C3:6B:8B:7A:B9:96:96:B7:B1:A5:E1:B3:9D
Authority key identifier: 72:D8:DA:FD:48:1B:3F:8F:AC:2B:25:99:C9:E3:EC:ED:FA:3F:4E:16
Certificate issuer: /CN=72D8DAFD481B3F8FAC2B2599C9E3ECEDFA3F4E16
Certificate serial: 642A5F80C0ABE9E6A4C19BE8E6172415451F6249
Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/72D8DAFD481B3F8FAC2B2599C9E3ECEDFA3F4E16.cer
Subject info access: rsync://repo-rpki.idnic.net/repo/c47f6cf6-dd2b-4823-b264-e2bf4f30abfe/0/72D8DAFD481B3F8FAC2B2599C9E3ECEDFA3F4E16.mft
Manifest number: F4
Signing time: Mon 27 Apr 2026 13:20:47 +0000
Manifest this update: Mon 27 Apr 2026 13:15:47 +0000
Manifest next update: Thu 30 Apr 2026 14:30:47 +0000
Files and hashes: 1: 72D8DAFD481B3F8FAC2B2599C9E3ECEDFA3F4E16.crl (hash: lBbC9WMYJAYDW/w8bVVnKGtdNU5GhM84WK29fSxSJ2M=)
2: 3135372e31352e3131362e302f32332d3234203d3e20313532333732.roa (hash: qS0Y7OvIPpcM2gAdCGVHw4DZGPjirzEO0sHYxu8EXaU=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
64:2a:5f:80:c0:ab:e9:e6:a4:c1:9b:e8:e6:17:24:15:45:1f:62:49
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=72D8DAFD481B3F8FAC2B2599C9E3ECEDFA3F4E16
Validity
Not Before: Apr 27 13:15:47 2026 GMT
Not After : Apr 30 14:30:47 2026 GMT
Subject: CN=D40027091B376AC36B8B7AB99696B7B1A5E1B39D
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d3:a4:54:8b:34:2b:cf:b1:f5:50:e3:bd:d4:e9:
db:4b:f2:44:f6:63:2a:04:00:6c:45:02:b5:58:d3:
4b:d7:f1:28:b5:c1:6a:68:86:9c:96:9f:a7:cd:3f:
71:07:8c:24:bc:e9:ea:16:7f:38:f1:03:3f:76:11:
8c:b0:4b:83:9d:a5:0e:c2:f9:2d:60:2e:03:a4:91:
dd:2a:09:fb:61:11:ad:30:82:ba:c0:3f:2f:e4:ba:
eb:b1:00:e6:0f:dd:dc:97:d8:c3:d0:73:53:a3:07:
33:0b:9a:5a:53:cd:2c:3a:a7:d0:7c:30:4b:94:51:
a7:5d:21:ab:2b:ab:db:0a:a5:2a:f0:39:e2:c4:0d:
38:92:da:ff:30:7b:27:67:18:25:16:57:25:69:95:
c2:f4:97:e9:e0:80:a0:30:9d:83:66:c6:92:71:79:
98:dc:48:bb:af:eb:17:5f:13:a4:a9:bf:a2:aa:4b:
f5:92:43:71:af:f5:ad:90:48:99:8d:01:d8:89:b1:
70:1f:50:47:c2:24:04:8c:99:c2:d5:62:f0:04:24:
92:13:ae:ee:0d:13:f1:b9:3f:e0:37:fe:bf:84:28:
6a:fe:d9:6d:ce:f3:78:12:a9:5f:b6:9e:7e:92:ad:
14:d2:d5:bd:96:7b:49:09:64:e1:f9:a2:4d:71:71:
a0:b1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D4:00:27:09:1B:37:6A:C3:6B:8B:7A:B9:96:96:B7:B1:A5:E1:B3:9D
X509v3 Authority Key Identifier:
keyid:72:D8:DA:FD:48:1B:3F:8F:AC:2B:25:99:C9:E3:EC:ED:FA:3F:4E:16
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://repo-rpki.idnic.net/repo/c47f6cf6-dd2b-4823-b264-e2bf4f30abfe/0/72D8DAFD481B3F8FAC2B2599C9E3ECEDFA3F4E16.crl
Authority Information Access:
CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/72D8DAFD481B3F8FAC2B2599C9E3ECEDFA3F4E16.cer
Subject Information Access:
Signed Object - URI:rsync://repo-rpki.idnic.net/repo/c47f6cf6-dd2b-4823-b264-e2bf4f30abfe/0/72D8DAFD481B3F8FAC2B2599C9E3ECEDFA3F4E16.mft
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
b2:20:4e:91:83:73:fe:65:ea:e5:f0:98:9a:dc:1d:b0:4a:33:
f6:d8:a1:90:21:ca:06:f6:17:2c:c2:ac:94:aa:b6:4d:a6:c7:
60:80:84:b2:f8:51:69:f3:2e:2d:f9:a6:c3:5a:28:28:ee:93:
e7:d8:7d:e3:54:35:f5:ce:74:c2:41:69:93:62:04:bd:f5:bb:
43:f0:4f:c6:d9:ed:c7:53:db:8f:9e:20:52:ea:69:38:0f:11:
0b:00:2f:1e:7b:ac:c7:af:56:7c:4a:01:5b:5d:65:a0:e4:c6:
dc:e9:f6:ec:85:89:14:62:10:53:e5:cf:ad:f3:b2:bd:40:6a:
47:ac:e2:bb:02:dd:38:47:41:df:96:34:3b:ab:97:7d:c4:56:
3f:27:74:40:5d:1a:69:32:e6:58:46:dc:55:c9:87:4c:9a:cf:
6d:8a:58:35:6b:31:65:ee:75:00:1e:e8:7c:db:ff:c8:66:5e:
1f:e0:1c:bc:59:2f:ad:3f:88:c3:c9:90:d5:95:51:4a:69:89:
31:24:0a:56:44:80:8a:40:1d:6c:ed:99:9d:9f:25:9a:26:de:
61:c7:3d:31:aa:3f:56:46:96:99:3a:e3:e0:9b:20:42:6d:3c:
61:ca:b4:a4:96:cb:1c:08:c3:33:8a:94:96:39:97:ce:bd:35:
5e:e5:88:ea
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jun 24 04:10:25 2026 by rpki-client