
Manifest
$ rpki-client -vvf repo-rpki.idnic.net/repo/096323dc-ab26-49dd-8b2c-306e50ee23a3/0/39E28911B503E25DB463229AC922CAEF5693A5DD.mft
File: 39E28911B503E25DB463229AC922CAEF5693A5DD.mft (raw, json)
Hash identifier: amWuYOTNgDFIZb7K9VuMlOSO9faWE2T6+txII82vfE0=
Subject key identifier: C5:CE:A1:C8:A7:35:BD:13:0D:F8:22:98:6E:8E:0B:BD:C5:D8:62:70
Authority key identifier: 39:E2:89:11:B5:03:E2:5D:B4:63:22:9A:C9:22:CA:EF:56:93:A5:DD
Certificate issuer: /CN=39E28911B503E25DB463229AC922CAEF5693A5DD
Certificate serial: 5DA6F95D967F9DF16196699861890BA005E9D841
Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/39E28911B503E25DB463229AC922CAEF5693A5DD.cer
Subject info access: rsync://repo-rpki.idnic.net/repo/096323dc-ab26-49dd-8b2c-306e50ee23a3/0/39E28911B503E25DB463229AC922CAEF5693A5DD.mft
Manifest number: 2C
Signing time: Mon 27 Apr 2026 15:00:00 +0000
Manifest this update: Mon 27 Apr 2026 14:55:00 +0000
Manifest next update: Thu 30 Apr 2026 18:06:00 +0000
Files and hashes: 1: 3136332e36312e372e302f32342d3234203d3e20313534343134.roa (hash: V6FgFuQb/8P2YK/Gbx8tP5jXLguLbqQuIRGKv1SIkcI=)
2: 3136332e36312e362e302f32342d3234203d3e20313534343134.roa (hash: /J0shVYTQYkB9FYkHOQENvK7HQrOevFXVOREKIMBB2w=)
3: 39E28911B503E25DB463229AC922CAEF5693A5DD.crl (hash: kpz2b9k46t+McXTB0m8QOKuoVdPIjiwhl8GnwV+zp9c=)
4: 3136332e36312e362e302f32332d3234203d3e20313534343134.roa (hash: ad1wd0ZIpEpyRiDtqRMVdgtKv4TeNXfOsvHmoLGBFtc=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
5d:a6:f9:5d:96:7f:9d:f1:61:96:69:98:61:89:0b:a0:05:e9:d8:41
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=39E28911B503E25DB463229AC922CAEF5693A5DD
Validity
Not Before: Apr 27 14:55:00 2026 GMT
Not After : Apr 30 18:06:00 2026 GMT
Subject: CN=C5CEA1C8A735BD130DF822986E8E0BBDC5D86270
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:df:82:1d:1c:69:0f:b6:7f:95:91:08:09:4b:fe:
0b:9a:91:5a:52:e4:f6:af:13:ee:28:4b:40:36:6f:
b8:46:7c:e4:a2:8e:4a:ad:bc:91:e2:ee:ea:0b:d2:
94:cb:b9:52:b8:79:41:f6:bc:00:85:9a:b2:c7:3c:
7d:34:92:8f:14:56:4e:73:a5:94:11:aa:db:43:a0:
71:ab:d7:bc:36:ae:9f:11:d6:0f:75:b5:7e:70:f2:
6b:19:42:ba:61:87:9c:c0:4b:66:3e:26:47:24:41:
de:18:4b:f8:97:4a:1a:bf:3e:b2:6c:c4:8e:37:f0:
23:63:cf:e4:7b:74:62:d8:8a:04:f1:84:6a:56:09:
21:be:b0:e1:07:3a:e4:42:cc:e4:75:77:af:d4:1b:
36:29:fc:e6:ad:70:b6:fa:db:40:01:1f:98:21:81:
2c:8d:93:fb:0e:2e:c5:cf:70:d6:df:3a:c2:af:72:
7b:9f:45:a2:84:71:74:50:68:37:f1:6c:ac:d1:18:
64:cf:76:a9:2a:05:6d:f9:ba:4e:f1:d0:38:7c:e2:
ce:d8:2f:e1:f5:d4:67:d9:f7:43:a0:64:e8:aa:c5:
ad:43:e6:c4:cb:f2:d1:da:e1:1b:18:90:c6:d9:d9:
8e:c3:15:92:a9:7d:4f:25:31:b3:a4:29:65:4b:10:
3c:11
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C5:CE:A1:C8:A7:35:BD:13:0D:F8:22:98:6E:8E:0B:BD:C5:D8:62:70
X509v3 Authority Key Identifier:
keyid:39:E2:89:11:B5:03:E2:5D:B4:63:22:9A:C9:22:CA:EF:56:93:A5:DD
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://repo-rpki.idnic.net/repo/096323dc-ab26-49dd-8b2c-306e50ee23a3/0/39E28911B503E25DB463229AC922CAEF5693A5DD.crl
Authority Information Access:
CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/39E28911B503E25DB463229AC922CAEF5693A5DD.cer
Subject Information Access:
Signed Object - URI:rsync://repo-rpki.idnic.net/repo/096323dc-ab26-49dd-8b2c-306e50ee23a3/0/39E28911B503E25DB463229AC922CAEF5693A5DD.mft
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
d1:9c:52:91:ca:58:07:e2:41:01:7f:d0:63:5c:c5:55:45:74:
b7:5b:4b:87:68:a4:db:73:55:bd:32:45:69:8a:b6:14:8d:2a:
04:e3:d8:12:a0:30:4f:9d:7d:ae:cf:00:ed:80:5d:cb:ed:9b:
6a:d3:ab:9a:cf:bc:c6:02:ca:95:9c:f5:51:8f:cd:7f:07:3d:
4b:95:f4:8d:ac:54:86:e3:d1:2a:0f:c9:6b:9f:56:e2:4e:c9:
28:13:8f:1c:6d:1f:75:31:80:03:2a:04:c4:41:3c:33:cd:12:
25:bb:67:3c:e8:9d:6b:84:55:e9:b8:82:ab:53:57:07:88:23:
a1:ac:b0:8f:22:af:1d:6c:da:3e:21:cf:15:ee:29:11:b3:f4:
08:7f:b4:fe:aa:ce:c4:53:f7:67:2d:44:eb:35:6e:25:3a:cc:
17:b9:02:ce:13:73:c2:3e:32:d1:95:e3:2a:42:f5:58:d3:23:
d3:93:3e:dd:ab:f9:9f:2d:03:29:0b:f5:6e:63:b5:3d:37:6e:
49:11:08:33:45:43:ce:7e:87:3b:a1:8a:56:d6:17:55:3d:b7:
79:d1:75:4a:78:05:52:4e:72:66:5c:e2:fc:17:9f:c3:9d:0d:
de:2f:08:43:94:6c:0f:64:dc:20:41:b5:b4:20:77:36:8e:1f:
8e:fe:bf:1b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jun 3 03:09:16 2026 by rpki-client