Manifest
$ rpki-client -vvf repo-rpki.idnic.net/repo/da9cd668-6cc5-49a6-9fcf-ae32a87fe636/1/C9CE3F8007B3791727FAA3B4F200E4B19F8EEE31.mft
File: C9CE3F8007B3791727FAA3B4F200E4B19F8EEE31.mft (raw, json)
Hash identifier: pzpxyxYs1Z43N1DBFkUcSsaXsatYij4ITriHGsu7ps4=
Subject key identifier: 4A:3A:E6:97:7A:E9:48:40:9A:05:0A:8E:32:59:15:FB:7D:64:BC:50
Authority key identifier: C9:CE:3F:80:07:B3:79:17:27:FA:A3:B4:F2:00:E4:B1:9F:8E:EE:31
Certificate issuer: /CN=C9CE3F8007B3791727FAA3B4F200E4B19F8EEE31
Certificate serial: 51956A1F2D75539A40FF1565AA803E6E24EE7D3E
Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/C9CE3F8007B3791727FAA3B4F200E4B19F8EEE31.cer
Subject info access: rsync://repo-rpki.idnic.net/repo/da9cd668-6cc5-49a6-9fcf-ae32a87fe636/1/C9CE3F8007B3791727FAA3B4F200E4B19F8EEE31.mft
Manifest number: 20
Signing time: Tue 28 Apr 2026 17:51:48 +0000
Manifest this update: Tue 28 Apr 2026 17:46:48 +0000
Manifest next update: Fri 01 May 2026 22:09:48 +0000
Files and hashes: 1: C9CE3F8007B3791727FAA3B4F200E4B19F8EEE31.crl (hash: 4BzIJzkiJfO5qFRFujiY7nA1XsXLIn3Ul/MbsvPoNsQ=)
2: 3139382e31352e31362e302f32342d3234203d3e20313432363339.roa (hash: uQHIImYmptjCUQ/bftz22qTLuZl56mNDlhYd4jLzdhA=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
51:95:6a:1f:2d:75:53:9a:40:ff:15:65:aa:80:3e:6e:24:ee:7d:3e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=C9CE3F8007B3791727FAA3B4F200E4B19F8EEE31
Validity
Not Before: Apr 28 17:46:48 2026 GMT
Not After : May 1 22:09:48 2026 GMT
Subject: CN=4A3AE6977AE948409A050A8E325915FB7D64BC50
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b2:bd:f1:86:83:19:c4:f0:95:1f:bb:0b:5a:cf:
63:d9:fe:7e:9a:9e:39:67:59:25:ae:8c:6c:42:c3:
6e:15:fa:3e:58:bd:74:4f:ad:c2:72:18:39:67:3c:
fe:29:3b:42:47:5a:8b:c4:8c:52:4e:72:d6:5d:ed:
d3:94:78:f4:65:9b:d9:6d:0c:8d:27:13:10:d7:c7:
bb:59:ef:fa:32:5d:6c:b7:f3:5d:38:dc:e9:e2:32:
7f:1a:c1:40:49:66:7c:e3:71:e5:b9:64:52:5a:e4:
84:d2:b1:1a:79:b9:ba:2f:f8:17:fa:69:b2:a8:91:
e9:19:e5:72:65:2f:c4:7a:22:86:ac:03:b9:61:3c:
d4:63:ba:da:59:55:e7:dc:5c:d5:77:c7:51:a8:a3:
93:8e:d3:f9:5d:6e:04:94:52:d8:e8:f0:34:58:c7:
70:1b:a1:73:32:2e:c0:69:83:77:b3:15:c8:c4:0a:
fb:40:79:3c:83:13:f4:16:8e:f6:ff:07:4e:e5:7c:
b9:fa:32:29:37:13:9b:ab:82:30:36:80:eb:69:1e:
74:84:42:48:fb:0c:c2:64:49:68:77:ad:90:a0:b3:
3e:48:3a:ca:a8:b3:7b:be:41:d0:ef:a8:3e:08:4d:
d0:32:1d:0a:19:23:7b:5c:46:e4:53:52:a1:93:86:
69:2d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
4A:3A:E6:97:7A:E9:48:40:9A:05:0A:8E:32:59:15:FB:7D:64:BC:50
X509v3 Authority Key Identifier:
keyid:C9:CE:3F:80:07:B3:79:17:27:FA:A3:B4:F2:00:E4:B1:9F:8E:EE:31
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://repo-rpki.idnic.net/repo/da9cd668-6cc5-49a6-9fcf-ae32a87fe636/1/C9CE3F8007B3791727FAA3B4F200E4B19F8EEE31.crl
Authority Information Access:
CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/C9CE3F8007B3791727FAA3B4F200E4B19F8EEE31.cer
Subject Information Access:
Signed Object - URI:rsync://repo-rpki.idnic.net/repo/da9cd668-6cc5-49a6-9fcf-ae32a87fe636/1/C9CE3F8007B3791727FAA3B4F200E4B19F8EEE31.mft
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
8d:b1:cc:8b:ec:12:55:78:9a:7a:78:a0:b9:89:24:d3:95:bf:
a3:38:56:f4:53:a7:25:21:d5:12:84:6c:86:a7:d4:22:62:35:
5b:f1:7f:f7:1d:c1:09:65:83:0f:2c:8f:d6:74:bd:d2:39:5e:
64:b2:f6:ef:d0:04:98:10:35:f3:45:fc:e6:7c:a0:b0:dc:dd:
e5:b9:6e:44:fa:b8:a8:77:c9:15:6a:3e:4d:24:a6:eb:38:b5:
32:c7:e8:89:fd:9a:16:6e:64:1b:c5:4c:35:b3:d2:89:48:4b:
1e:ea:38:e3:d7:6a:b4:9f:cd:67:38:c7:28:14:f1:f7:af:48:
b1:5a:1a:b6:36:84:1d:b2:d8:70:f7:2a:9e:05:7e:8f:96:a2:
4d:93:d7:a1:7a:d5:4b:ea:24:ff:6b:21:9a:ae:03:57:02:4f:
9b:53:59:34:12:0f:d7:47:8a:03:92:9f:68:a9:86:fa:44:4a:
a5:c5:c2:81:11:2f:9d:cb:6c:fc:a9:b0:14:bf:39:f2:1e:ae:
8e:dc:73:33:3a:3a:43:6d:a1:40:2f:16:ca:8e:71:e2:bb:4d:
19:e5:66:fb:39:27:98:bd:22:60:40:78:37:7b:e6:42:14:24:
9e:3f:41:3d:4f:b2:33:be:fb:bf:ab:53:98:f5:80:d9:bd:27:
c9:62:c8:d8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jun 24 04:12:03 2026 by rpki-client