
Manifest
$ rpki-client -vvf repo-rpki.idnic.net/repo/ca376a6e-3eca-4f73-8d15-d1ddee91ff98/0/CEB4F9AE3476630AAF22F4CD42CE606BB4444140.mft
File: CEB4F9AE3476630AAF22F4CD42CE606BB4444140.mft (raw, json)
Hash identifier: y8Pc36YX6hO6d6ZPV/boiALVEHY3G5p3wizUEfaBOCQ=
Subject key identifier: BA:E4:35:AA:84:F3:EF:C2:CD:8F:25:39:98:1D:DD:13:AD:9D:AF:33
Authority key identifier: CE:B4:F9:AE:34:76:63:0A:AF:22:F4:CD:42:CE:60:6B:B4:44:41:40
Certificate issuer: /CN=CEB4F9AE3476630AAF22F4CD42CE606BB4444140
Certificate serial: 5ED26882B5317F5CE8B75BE38ED019CBEF562A69
Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/CEB4F9AE3476630AAF22F4CD42CE606BB4444140.cer
Subject info access: rsync://repo-rpki.idnic.net/repo/ca376a6e-3eca-4f73-8d15-d1ddee91ff98/0/CEB4F9AE3476630AAF22F4CD42CE606BB4444140.mft
Manifest number: 013D
Signing time: Wed 29 Apr 2026 01:51:08 +0000
Manifest this update: Wed 29 Apr 2026 01:46:08 +0000
Manifest next update: Sat 02 May 2026 09:08:08 +0000
Files and hashes: 1: CEB4F9AE3476630AAF22F4CD42CE606BB4444140.crl (hash: Z3/s+LRFhBcgcWXC/ia7cGXDD5H8kpf6QA0iifjuT3Y=)
2: 3135372e31302e3232322e302f32332d3234203d3e20313431383938.roa (hash: vGh2St9nX3pCTUIzzPcvPvpTzzNgw/FhkJ2xWSsEdQ0=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
5e:d2:68:82:b5:31:7f:5c:e8:b7:5b:e3:8e:d0:19:cb:ef:56:2a:69
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=CEB4F9AE3476630AAF22F4CD42CE606BB4444140
Validity
Not Before: Apr 29 01:46:08 2026 GMT
Not After : May 2 09:08:08 2026 GMT
Subject: CN=BAE435AA84F3EFC2CD8F2539981DDD13AD9DAF33
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c5:50:9a:09:66:dc:55:a5:37:82:3e:ba:93:51:
7c:01:6b:54:99:6a:b3:ae:0e:0e:8e:e8:1f:ac:06:
c3:51:3a:8e:1e:d6:a9:83:ec:0f:0d:55:6a:70:14:
24:20:78:e6:b7:45:d7:2a:e3:a8:f1:7b:10:1d:43:
1d:34:ff:af:d2:f7:4f:97:8c:45:a4:3c:67:d1:d9:
77:b3:3f:e8:66:dd:c7:70:6c:7d:61:cf:62:64:c6:
8b:76:b4:4f:7c:ad:80:f5:90:24:7d:ae:fe:24:63:
96:91:ff:98:5d:19:da:c5:d1:da:0a:4c:d0:aa:53:
0c:ee:ce:e1:2d:31:e3:35:32:f0:7e:2b:dc:4b:c7:
36:89:8b:fb:bc:b2:52:93:09:1a:da:50:53:38:a0:
73:13:40:3f:07:fd:ca:55:7c:a2:54:48:ab:64:83:
30:25:ea:88:f3:d4:2b:28:2f:3b:7b:77:a7:05:54:
f0:8c:81:84:32:24:de:7e:18:41:d1:98:81:63:78:
3b:98:61:94:29:02:fc:38:ee:1a:4a:4d:46:a4:c3:
ac:58:50:72:23:a5:d4:52:5d:92:86:89:11:41:3e:
04:9c:d5:f0:2c:04:38:38:33:aa:70:30:b5:b2:13:
42:c2:5a:b7:07:71:51:41:b7:3e:7a:0d:97:d7:c9:
02:d7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
BA:E4:35:AA:84:F3:EF:C2:CD:8F:25:39:98:1D:DD:13:AD:9D:AF:33
X509v3 Authority Key Identifier:
keyid:CE:B4:F9:AE:34:76:63:0A:AF:22:F4:CD:42:CE:60:6B:B4:44:41:40
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://repo-rpki.idnic.net/repo/ca376a6e-3eca-4f73-8d15-d1ddee91ff98/0/CEB4F9AE3476630AAF22F4CD42CE606BB4444140.crl
Authority Information Access:
CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/CEB4F9AE3476630AAF22F4CD42CE606BB4444140.cer
Subject Information Access:
Signed Object - URI:rsync://repo-rpki.idnic.net/repo/ca376a6e-3eca-4f73-8d15-d1ddee91ff98/0/CEB4F9AE3476630AAF22F4CD42CE606BB4444140.mft
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
98:5d:b8:28:f4:77:65:6a:ae:05:c7:63:df:f7:3b:d1:32:51:
62:16:ee:c2:f8:db:bb:b9:0f:11:17:f8:be:1c:47:ea:0b:a7:
b9:ee:0c:04:18:3b:7c:11:9c:f7:24:42:b6:b0:e7:3d:24:9b:
25:f3:a5:f1:c9:4d:6e:04:33:ab:47:40:88:76:1b:01:e9:70:
13:ce:ca:ee:80:ff:96:c8:8c:9b:ed:f3:a0:f2:8b:8f:c3:2d:
ae:83:67:84:fa:4c:80:3c:6d:f0:4e:e5:20:79:ca:3b:6b:94:
48:20:d3:e3:fd:63:15:1a:9a:f8:10:04:c8:48:22:0b:4a:77:
bb:5e:91:09:9e:1e:ef:10:c0:1c:2c:c3:30:42:81:3d:a9:5a:
18:23:58:1e:aa:9b:8c:86:97:8b:04:31:60:90:c7:d3:98:c8:
0f:e5:2b:09:8a:3a:4b:41:e1:26:0c:e1:73:bd:3e:dc:05:5a:
39:b1:5d:04:18:11:95:a0:19:9d:f1:21:3a:72:05:ee:1c:64:
9f:d2:bc:56:d7:1b:00:3e:9d:5d:05:02:0d:1b:9d:fd:ad:e5:
aa:c8:24:8d:09:ee:6f:3c:4b:d1:9c:47:fb:29:8d:71:f8:b1:
b4:78:c0:4a:80:a9:8c:9b:39:b8:48:4d:e3:cc:35:08:d5:28:
6a:b6:00:a0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jun 24 04:13:15 2026 by rpki-client