Manifest
$ rpki-client -vvvf rpki-rsync.idnic.net/repo/dbc6da19-84be-4a50-b466-1e86ddbcc35f/0/9CD069361DE1E2B7F987CB377D2065CD073D2BD6.mft
File: 9CD069361DE1E2B7F987CB377D2065CD073D2BD6.mft (raw, json)
Hash identifier: lxGuY9hsHyMNQsawppIOTVtAIo9fDkP2jcG95uzJDrU=
Subject key identifier: 6E:DE:F8:10:08:94:D5:18:73:4C:33:6E:93:61:FA:27:E6:CC:F7:CE
Authority key identifier: 9C:D0:69:36:1D:E1:E2:B7:F9:87:CB:37:7D:20:65:CD:07:3D:2B:D6
Certificate issuer: /CN=9CD069361DE1E2B7F987CB377D2065CD073D2BD6
Certificate serial: 07CD70E041CC0F51676ACDD69264C841836E41DA
Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/9CD069361DE1E2B7F987CB377D2065CD073D2BD6.cer
Subject info access: rsync://rpki-rsync.idnic.net/repo/dbc6da19-84be-4a50-b466-1e86ddbcc35f/0/9CD069361DE1E2B7F987CB377D2065CD073D2BD6.mft
Manifest number: CE
Signing time: Sat 03 Oct 2026 17:57:23 +0000
Manifest this update: Sat 03 Oct 2026 17:52:23 +0000
Manifest next update: Sun 04 Oct 2026 19:20:23 +0000
Files and hashes: 1: 3130332e3137342e37382e302f32342d3234203d3e20313331363939.roa (hash: TbeMR6DCS8oQZoWLlauGHIZkAoCLHj7Jp79qNO5aAvk=)
2: 9CD069361DE1E2B7F987CB377D2065CD073D2BD6.crl (hash: yuD5hXZiP7RXwQENXfjxeRd9xEoHrQAN1V+w7R2hNnQ=)
3: 3130332e3137342e37392e302f32342d3234203d3e20313331363939.roa (hash: 0YvIC8wCtWvDa2HWmo5ajWyQO0v7nGfkKloFn4oUr5Y=)
Validation: Failed, CRL has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
07:cd:70:e0:41:cc:0f:51:67:6a:cd:d6:92:64:c8:41:83:6e:41:da
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=9CD069361DE1E2B7F987CB377D2065CD073D2BD6
Validity
Not Before: Oct 3 17:52:23 2026 GMT
Not After : Oct 4 19:20:23 2026 GMT
Subject: CN=6EDEF8100894D518734C336E9361FA27E6CCF7CE
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b2:55:16:4e:68:48:b0:63:a3:ee:a3:0a:d8:2d:
04:00:bb:9d:c9:c2:7e:3c:82:ba:ac:a6:84:df:fc:
d9:8d:73:b1:f4:e3:96:1b:b1:bc:5d:e9:94:61:42:
2a:09:5b:ab:08:1f:6a:5a:c8:10:49:c9:dd:fa:ef:
66:d0:8b:d1:25:e3:9a:c3:b4:1f:d1:a5:af:83:d9:
c2:c0:a6:fa:be:d4:bf:e1:15:db:0f:a9:c0:dd:59:
0d:80:ef:99:2c:ca:ba:28:95:99:07:f6:58:54:0b:
f0:28:a3:bb:2e:83:90:b3:24:91:1f:82:64:97:b7:
c8:0e:f2:65:01:21:57:f5:ea:18:a9:8e:4c:84:7a:
bf:72:bc:b7:c2:49:c5:5f:40:85:da:20:fa:90:f4:
33:fb:30:68:52:a4:36:db:6c:75:9f:63:30:27:f3:
4b:96:29:4e:58:06:5e:c7:7a:4b:56:c1:98:d5:3c:
dc:98:9c:81:dc:c8:ef:7a:2b:47:56:d4:25:c9:0c:
53:46:d4:f1:18:d0:8f:a9:59:fe:50:bc:70:b2:b5:
39:93:6a:c4:e7:b9:4a:85:04:cd:12:99:75:7f:ce:
53:87:1e:7a:02:b7:21:ac:db:21:e0:ed:4f:e7:ab:
e1:5a:38:74:12:0c:86:e8:c5:ea:f4:7a:78:7a:66:
5c:8d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
6E:DE:F8:10:08:94:D5:18:73:4C:33:6E:93:61:FA:27:E6:CC:F7:CE
X509v3 Authority Key Identifier:
keyid:9C:D0:69:36:1D:E1:E2:B7:F9:87:CB:37:7D:20:65:CD:07:3D:2B:D6
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.idnic.net/repo/dbc6da19-84be-4a50-b466-1e86ddbcc35f/0/9CD069361DE1E2B7F987CB377D2065CD073D2BD6.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/9CD069361DE1E2B7F987CB377D2065CD073D2BD6.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/dbc6da19-84be-4a50-b466-1e86ddbcc35f/0/9CD069361DE1E2B7F987CB377D2065CD073D2BD6.mft
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
30:32:ae:e0:a1:59:cc:40:78:17:1a:e8:33:08:a1:d3:2b:f6:
14:49:81:0a:e6:57:8a:b8:bb:ee:cf:ea:29:e3:00:b6:e0:68:
6b:3a:83:46:8f:32:79:23:2c:b6:e6:48:67:0a:34:00:f8:7b:
83:c4:c4:c3:b2:2a:f5:ea:09:1f:04:b2:71:d6:0a:40:5e:72:
cf:d7:01:77:89:54:8b:f0:fc:01:cc:67:30:d7:f7:a5:a3:7c:
43:29:d8:a6:46:3a:a0:b0:8e:40:49:53:c3:77:7d:4d:d4:ff:
f7:86:2f:a9:1a:5e:bb:e0:95:56:ea:88:05:d8:0a:ef:74:ee:
26:d7:51:2b:5d:85:a2:66:e7:06:b5:8d:09:41:88:50:b7:75:
67:03:1e:d4:54:d7:12:62:4e:bd:2c:0c:78:6d:7e:5b:75:59:
6c:63:d1:1a:1a:4d:a8:78:22:cf:0e:75:c5:3d:1e:a0:2d:a4:
c7:6a:1d:cf:87:e5:23:c0:ad:a9:c2:5e:22:93:a0:11:54:f2:
a9:62:8f:52:07:a0:56:bf:d6:0b:b2:7f:58:ed:a2:f5:b8:25:
e8:55:97:99:26:c7:e4:2c:28:f6:d3:9b:fc:a3:3b:70:17:18:
f7:27:d0:29:0b:7d:1f:69:53:41:f7:ae:33:1e:46:dc:22:de:
6d:2b:7c:69
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 4 21:52:42 2026 by rpki-client