Manifest
$ rpki-client -vvf repo-rpki.idnic.net/repo/cecf5d94-7f1f-43bf-b7aa-220f0c156ec0/0/5A8D4DEC5FC29BE6E2490462F580903DD4A984EB.mft
File: 5A8D4DEC5FC29BE6E2490462F580903DD4A984EB.mft (raw, json)
Hash identifier: q9sAQVZhnILE+tJG0NZ8o3c1JaapwTEgpeBEeDFXr0k=
Subject key identifier: DD:31:1B:92:EC:34:33:2A:3F:CC:F6:CF:B2:09:7C:15:C5:92:07:81
Authority key identifier: 5A:8D:4D:EC:5F:C2:9B:E6:E2:49:04:62:F5:80:90:3D:D4:A9:84:EB
Certificate issuer: /CN=5A8D4DEC5FC29BE6E2490462F580903DD4A984EB
Certificate serial: 1C17250D309DBACF291F497C3EDD41DF17ED4535
Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/5A8D4DEC5FC29BE6E2490462F580903DD4A984EB.cer
Subject info access: rsync://repo-rpki.idnic.net/repo/cecf5d94-7f1f-43bf-b7aa-220f0c156ec0/0/5A8D4DEC5FC29BE6E2490462F580903DD4A984EB.mft
Manifest number: 013D
Signing time: Tue 28 Apr 2026 21:11:11 +0000
Manifest this update: Tue 28 Apr 2026 21:06:11 +0000
Manifest next update: Sat 02 May 2026 05:22:11 +0000
Files and hashes: 1: 5A8D4DEC5FC29BE6E2490462F580903DD4A984EB.crl (hash: f8ssf8J6h9wG5LZw3GaCifEurgQScuKQ7RJ9BMsHp48=)
2: 3135372e36362e3132322e302f32342d3234203d3e203633383538.roa (hash: kg0hS5WVmmpYRWbdfL7SGsHNbdnD8NF+clSnWXU7jw0=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
1c:17:25:0d:30:9d:ba:cf:29:1f:49:7c:3e:dd:41:df:17:ed:45:35
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5A8D4DEC5FC29BE6E2490462F580903DD4A984EB
Validity
Not Before: Apr 28 21:06:11 2026 GMT
Not After : May 2 05:22:11 2026 GMT
Subject: CN=DD311B92EC34332A3FCCF6CFB2097C15C5920781
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:dc:11:39:9c:4f:d1:77:00:6c:5c:95:da:24:22:
50:67:db:86:7f:23:22:5f:9c:fd:07:fb:91:94:61:
ad:bf:b4:16:f1:dd:3c:c0:c8:10:1e:f5:28:38:3c:
98:51:9c:fb:79:28:01:df:97:47:11:d1:0e:9f:70:
dc:e1:01:aa:44:3a:db:9f:2d:f2:06:18:b3:b7:0c:
5c:60:8e:29:08:ee:4b:d7:ba:f9:91:ff:2a:9d:96:
f8:50:77:fa:ef:06:8e:6e:73:09:98:0c:9e:30:53:
29:e6:60:d7:dc:42:84:1c:74:9d:6f:b3:28:d9:0d:
ca:f5:3b:33:8c:c1:3d:51:da:3c:a8:9b:21:d0:5f:
4e:ac:f2:41:55:4f:5a:fb:fd:cd:a9:4c:6d:52:ea:
dd:86:31:20:a1:7f:9e:5c:75:6f:fa:d0:17:be:05:
66:e4:92:66:cf:33:ae:bd:c7:28:c3:53:97:79:74:
fb:27:df:3f:89:fa:d8:b3:10:93:64:ac:41:d0:28:
90:98:33:f8:ee:83:23:9a:de:4d:17:42:8e:3c:1c:
4c:6f:80:5d:d4:00:d1:67:c9:7d:d1:a5:f5:4d:d8:
20:1b:14:53:79:0b:48:fe:b7:34:81:5e:cf:87:2e:
ea:c4:1b:87:41:cb:a5:33:61:0d:bb:cd:84:1e:7c:
18:61
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
DD:31:1B:92:EC:34:33:2A:3F:CC:F6:CF:B2:09:7C:15:C5:92:07:81
X509v3 Authority Key Identifier:
keyid:5A:8D:4D:EC:5F:C2:9B:E6:E2:49:04:62:F5:80:90:3D:D4:A9:84:EB
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://repo-rpki.idnic.net/repo/cecf5d94-7f1f-43bf-b7aa-220f0c156ec0/0/5A8D4DEC5FC29BE6E2490462F580903DD4A984EB.crl
Authority Information Access:
CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/5A8D4DEC5FC29BE6E2490462F580903DD4A984EB.cer
Subject Information Access:
Signed Object - URI:rsync://repo-rpki.idnic.net/repo/cecf5d94-7f1f-43bf-b7aa-220f0c156ec0/0/5A8D4DEC5FC29BE6E2490462F580903DD4A984EB.mft
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
1e:46:23:5d:39:00:ee:f2:79:05:25:7f:38:e0:91:80:70:dc:
c8:58:ee:2f:08:a9:cb:c3:20:7d:8d:23:87:86:88:4f:70:0d:
fb:ba:f7:ed:03:1e:d0:b4:32:d4:2a:85:f7:46:bc:33:1f:cd:
54:6e:2b:c6:99:23:1b:95:8d:d0:ea:50:d4:96:93:13:bc:f8:
c5:51:18:ce:2a:0f:35:b7:39:d5:cd:51:3f:e7:4c:e7:fb:e0:
80:15:94:ca:ff:29:e4:4a:40:3d:e5:70:93:b3:93:8f:8c:23:
cb:b9:a7:54:06:db:ff:69:ef:48:05:f9:f0:c0:db:ec:b2:cc:
4e:8a:85:59:78:91:3a:69:d9:67:35:d6:dc:65:10:41:e1:fe:
69:9c:92:55:d2:cd:f0:43:57:35:3b:37:97:69:41:51:8a:d2:
a9:7f:15:dc:19:cd:9b:27:bc:80:3e:59:64:19:fc:e6:b3:bb:
46:43:4d:de:a8:5b:24:93:ae:9e:e8:b7:37:de:a7:21:e5:27:
93:a7:99:ee:82:d4:b1:aa:e0:68:62:55:7e:42:89:f1:3a:04:
2a:08:3d:9d:af:ea:f0:f9:93:98:d8:35:52:e2:fa:4c:dd:90:
11:1c:6a:ae:01:47:d6:64:08:96:89:8d:56:39:50:f8:6b:b4:
ec:8b:f9:56
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jun 24 04:10:53 2026 by rpki-client