Manifest
$ rpki-client -vvvf rpki-rsync.idnic.net/repo/5d5af22c-7e3e-40b5-ac50-637772a95c21/0/8FFA8BB9C09DC4CA42C95C817C0FFD95B14C896C.mft
File: 8FFA8BB9C09DC4CA42C95C817C0FFD95B14C896C.mft (raw, json)
Hash identifier: hU97wQxM8am9AN/N9pcaxeEXnwb+x770KIpQcnMZEnA=
Subject key identifier: C2:13:9C:B4:CB:C8:DA:12:F3:BE:63:F2:54:CB:0E:D5:25:C2:7F:8C
Authority key identifier: 8F:FA:8B:B9:C0:9D:C4:CA:42:C9:5C:81:7C:0F:FD:95:B1:4C:89:6C
Certificate issuer: /CN=8FFA8BB9C09DC4CA42C95C817C0FFD95B14C896C
Certificate serial: 118E3E4CD95E8A6EDAD969F452E15C57F63836CE
Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/8FFA8BB9C09DC4CA42C95C817C0FFD95B14C896C.cer
Subject info access: rsync://rpki-rsync.idnic.net/repo/5d5af22c-7e3e-40b5-ac50-637772a95c21/0/8FFA8BB9C09DC4CA42C95C817C0FFD95B14C896C.mft
Manifest number: CE
Signing time: Sat 03 Oct 2026 20:30:53 +0000
Manifest this update: Sat 03 Oct 2026 20:25:53 +0000
Manifest next update: Sun 04 Oct 2026 20:42:53 +0000
Files and hashes: 1: 3130332e3233362e3133302e302f32342d3234203d3e20313531353435.roa (hash: kAF9XX+k/l/rK1GEr+bjFHX1YeYovpaBVZcUfCaqwVQ=)
2: 8FFA8BB9C09DC4CA42C95C817C0FFD95B14C896C.crl (hash: HieGkiP4IOGI8rK/9pyd/knPV9ukPjI9kX4+3vpKc5s=)
3: 3130332e3233362e3133302e302f32332d3233203d3e20313531353435.roa (hash: gHaL9xm6upsCMiwuTIzMiljzjIKdP3tM2s5bdfg68uM=)
Validation: Failed, CRL has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
11:8e:3e:4c:d9:5e:8a:6e:da:d9:69:f4:52:e1:5c:57:f6:38:36:ce
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8FFA8BB9C09DC4CA42C95C817C0FFD95B14C896C
Validity
Not Before: Oct 3 20:25:53 2026 GMT
Not After : Oct 4 20:42:53 2026 GMT
Subject: CN=C2139CB4CBC8DA12F3BE63F254CB0ED525C27F8C
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:86:1f:d8:ba:b3:5e:3c:b6:85:1f:27:58:85:8a:
ec:9d:af:a4:f4:70:de:ed:13:f9:e9:64:fc:08:dc:
97:b7:ce:65:bb:d4:fe:86:7c:46:3f:cd:7b:8b:6a:
77:0f:80:ce:d6:17:35:d6:11:3f:5e:83:fa:21:57:
e7:b8:93:1c:9a:34:61:92:68:3b:f9:5f:37:c8:c9:
8f:3e:76:70:ac:f5:b0:52:e8:de:a1:ad:1e:cc:d5:
b2:1f:85:53:92:3f:56:f1:4a:ac:62:9b:72:61:a4:
6b:1c:b3:1b:9e:3b:b3:df:b6:d4:3e:6a:3d:16:28:
cf:5a:fc:18:2b:b7:fb:0b:99:f5:b5:5c:f7:c9:c7:
db:90:f3:7c:62:ab:a4:c8:5e:5a:1c:0a:72:14:6c:
52:8d:7a:50:5d:b1:63:7d:3b:1d:d5:ea:a1:3c:31:
58:a9:09:02:7c:c6:08:a7:64:a8:ef:10:6b:76:80:
da:9c:3a:45:f6:37:57:7d:1b:ff:6e:20:1e:38:28:
25:7e:19:56:17:5b:8b:92:7b:1f:57:bd:a4:96:66:
e0:89:de:ab:ca:26:4d:75:fe:51:1a:eb:c2:14:93:
24:9f:4a:50:8b:38:17:02:1d:bb:1a:99:79:06:20:
ec:56:ca:0c:d2:4f:20:c2:69:b6:87:82:3c:29:8b:
1c:97
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C2:13:9C:B4:CB:C8:DA:12:F3:BE:63:F2:54:CB:0E:D5:25:C2:7F:8C
X509v3 Authority Key Identifier:
keyid:8F:FA:8B:B9:C0:9D:C4:CA:42:C9:5C:81:7C:0F:FD:95:B1:4C:89:6C
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.idnic.net/repo/5d5af22c-7e3e-40b5-ac50-637772a95c21/0/8FFA8BB9C09DC4CA42C95C817C0FFD95B14C896C.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/8FFA8BB9C09DC4CA42C95C817C0FFD95B14C896C.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/5d5af22c-7e3e-40b5-ac50-637772a95c21/0/8FFA8BB9C09DC4CA42C95C817C0FFD95B14C896C.mft
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
9f:46:02:3d:24:c1:e9:17:7a:22:11:d7:d0:34:73:1e:9f:34:
db:4f:da:50:de:3c:21:93:c2:cb:7f:8d:38:6b:59:76:4f:4b:
04:02:f8:08:0c:6c:42:59:97:7a:aa:17:09:b7:05:76:25:3d:
b1:28:37:8a:d3:51:51:bc:6d:d0:22:17:c1:05:05:21:1f:33:
b9:02:95:42:f7:c0:b0:7a:6d:24:e0:f4:77:44:a8:7b:cc:f9:
9b:b9:04:8a:61:a6:5c:81:f9:94:cb:39:c7:f3:c4:76:d4:2b:
34:fb:7a:d1:a3:a7:88:53:44:5e:f8:a6:24:1a:60:04:49:35:
50:d0:1e:5c:80:c4:30:4d:a7:a5:bb:57:9a:90:b1:e2:bf:44:
53:37:ae:cc:3e:86:de:04:e3:cf:16:8d:1b:77:2f:34:d1:ee:
e2:0d:29:a3:86:cb:82:ca:70:a8:5d:25:5c:f3:c9:85:a6:69:
1d:d1:15:aa:49:28:9d:40:48:71:cd:2b:4c:f4:18:ba:0a:50:
06:f3:9a:6a:ca:76:da:5b:9a:7c:ba:f9:32:f8:8b:0f:cf:f0:
9d:cf:f0:7f:9e:e7:a1:1d:6c:bd:1a:44:1c:95:d6:53:96:08:
cc:c6:18:3f:42:f1:4e:88:a4:8f:9c:61:5f:2b:22:f8:1d:a5:
f9:21:de:24
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 4 21:31:59 2026 by rpki-client