Manifest
$ rpki-client -vvf repo-rpki.idnic.net/repo/060744b1-2529-4ae2-b5d5-5d499d3f52c2/0/D3BDA2123144839640DA280D6B971C12D0C9C929.mft
File: D3BDA2123144839640DA280D6B971C12D0C9C929.mft (raw, json)
Hash identifier: v0m3dx/Z3E1aeiul2l2tE7H7EjzgiTnmKVU5kNdEsy8=
Subject key identifier: 89:C5:56:9C:51:5F:EB:2F:17:86:E7:DC:BA:1F:F9:24:03:E3:FA:78
Authority key identifier: D3:BD:A2:12:31:44:83:96:40:DA:28:0D:6B:97:1C:12:D0:C9:C9:29
Certificate issuer: /CN=D3BDA2123144839640DA280D6B971C12D0C9C929
Certificate serial: 49FCA7788AFA4A658070C0E4D0B40818DB04494B
Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/D3BDA2123144839640DA280D6B971C12D0C9C929.cer
Subject info access: rsync://repo-rpki.idnic.net/repo/060744b1-2529-4ae2-b5d5-5d499d3f52c2/0/D3BDA2123144839640DA280D6B971C12D0C9C929.mft
Manifest number: 0237
Signing time: Tue 28 Apr 2026 22:01:57 +0000
Manifest this update: Tue 28 Apr 2026 21:56:57 +0000
Manifest next update: Sat 02 May 2026 04:57:57 +0000
Files and hashes: 1: 3130332e3130342e3133302e302f32342d3234203d3e20313336383731.roa (hash: 4X1JxcSmayIhgSwsgvbbBh0nVrfOfdW4VG7Ltuesc5s=)
2: 323030313a6466333a336630303a3a2f34382d3438203d3e20313336383731.roa (hash: swZnIrS/N8jbG3MiapPB8F24idMt8GRsGrJ6YtoYjjc=)
3: D3BDA2123144839640DA280D6B971C12D0C9C929.crl (hash: 7pR4v3AjTxdg9HqjNLH567dGQET9yw3JIsTzuZPDvEE=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
49:fc:a7:78:8a:fa:4a:65:80:70:c0:e4:d0:b4:08:18:db:04:49:4b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=D3BDA2123144839640DA280D6B971C12D0C9C929
Validity
Not Before: Apr 28 21:56:57 2026 GMT
Not After : May 2 04:57:57 2026 GMT
Subject: CN=89C5569C515FEB2F1786E7DCBA1FF92403E3FA78
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d6:2c:bb:6c:1c:8f:dd:de:86:73:e1:aa:f9:3d:
ba:17:98:7c:34:5b:a4:aa:d6:14:06:72:b1:fb:7b:
80:c3:5b:55:4c:30:36:da:50:77:5a:ab:06:ba:0b:
5f:af:28:e1:c9:e2:37:e5:94:be:43:7d:b1:c8:e2:
5d:c2:64:12:1f:ae:06:ec:50:41:e3:a1:e6:0f:a2:
69:23:b5:90:dd:da:b5:e5:0c:80:a0:7b:cf:7d:0a:
a9:0e:11:b5:81:98:80:d0:05:18:7f:ef:2b:46:32:
13:21:cd:48:08:dc:0d:43:64:6e:31:fb:57:7d:28:
3c:e8:fe:e3:33:75:1c:06:66:5c:ff:4c:80:e4:bb:
16:06:0f:6d:84:1d:42:d3:e6:02:d8:0a:03:5d:95:
93:73:7d:b8:c7:b1:f4:72:10:92:fe:84:91:86:03:
11:e9:b2:2d:1a:e1:93:a9:13:cf:b3:7d:89:99:db:
76:dd:32:84:f5:be:2f:ec:ae:e5:82:2f:dc:da:4c:
1e:7a:08:74:2d:a2:96:48:b0:69:16:33:fc:cc:c1:
15:02:2c:39:76:02:cf:0d:60:2a:9c:74:15:28:ce:
1a:91:37:ed:92:fc:d8:3c:76:47:45:05:0e:ab:58:
4e:44:d9:67:a2:47:52:a8:ca:ce:0b:66:42:e8:cd:
98:37
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
89:C5:56:9C:51:5F:EB:2F:17:86:E7:DC:BA:1F:F9:24:03:E3:FA:78
X509v3 Authority Key Identifier:
keyid:D3:BD:A2:12:31:44:83:96:40:DA:28:0D:6B:97:1C:12:D0:C9:C9:29
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://repo-rpki.idnic.net/repo/060744b1-2529-4ae2-b5d5-5d499d3f52c2/0/D3BDA2123144839640DA280D6B971C12D0C9C929.crl
Authority Information Access:
CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/D3BDA2123144839640DA280D6B971C12D0C9C929.cer
Subject Information Access:
Signed Object - URI:rsync://repo-rpki.idnic.net/repo/060744b1-2529-4ae2-b5d5-5d499d3f52c2/0/D3BDA2123144839640DA280D6B971C12D0C9C929.mft
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
b5:f6:86:66:92:82:9f:3b:82:72:4d:2c:34:0e:98:13:1c:dd:
a9:11:46:08:dc:90:ed:b3:1d:bd:68:4f:a6:ab:0f:38:bb:c6:
19:5f:3b:dd:bb:6f:63:d9:cf:93:d1:49:3a:b2:d9:9f:a9:c4:
b1:88:df:27:4f:78:fe:58:66:ee:e0:5e:25:13:6f:9f:47:ee:
8c:1c:ec:5f:90:d7:b3:f4:cc:d3:43:d3:76:9c:ac:aa:47:57:
b1:86:3a:06:45:27:bc:a8:6e:7a:59:b6:da:17:bc:9e:f9:50:
69:31:7a:88:b1:f0:2f:66:a7:c0:dc:b0:d1:08:53:1b:be:7b:
7f:16:18:53:c1:b7:53:ae:ce:bb:6a:a4:1c:0c:69:76:d2:7c:
1f:ee:8f:42:4f:33:01:76:f9:8b:4d:1a:ee:60:7f:51:09:c8:
ea:36:a8:d0:bf:b0:54:41:06:a0:0b:1e:d3:f6:98:87:c2:63:
e5:10:66:88:ad:08:3a:88:be:53:ee:eb:ce:89:cd:ad:74:fb:
27:ee:ba:09:33:60:e5:9a:59:6d:ef:5a:35:97:e3:02:35:6e:
3b:60:c5:99:bf:25:9a:bf:1e:00:27:68:e5:05:ca:c8:d4:88:
e5:0b:5b:f2:3c:d0:d0:fb:c5:48:e4:96:67:d0:24:62:5e:f8:
34:5a:90:d4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jun 3 03:11:17 2026 by rpki-client