Manifest
$ rpki-client -vvf repo-rpki.idnic.net/repo/0f00228f-6e25-4c96-9ce5-2d50229a1d18/0/9FC1BED6B099F4E57BAD9FA6F092421927472311.mft
File: 9FC1BED6B099F4E57BAD9FA6F092421927472311.mft (raw, json)
Hash identifier: a+guZPFctqbExXEOWnCFrcs+QztNkDXFZueA9M8Td+s=
Subject key identifier: 5B:51:EA:14:27:BA:F7:A0:6B:0D:95:C1:86:BD:9E:63:5A:0F:CB:36
Authority key identifier: 9F:C1:BE:D6:B0:99:F4:E5:7B:AD:9F:A6:F0:92:42:19:27:47:23:11
Certificate issuer: /CN=9FC1BED6B099F4E57BAD9FA6F092421927472311
Certificate serial: 6CBB4252BBE5D5A32EAE235AEA68BFE3A16E3111
Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/9FC1BED6B099F4E57BAD9FA6F092421927472311.cer
Subject info access: rsync://repo-rpki.idnic.net/repo/0f00228f-6e25-4c96-9ce5-2d50229a1d18/0/9FC1BED6B099F4E57BAD9FA6F092421927472311.mft
Manifest number: 022B
Signing time: Tue 28 Apr 2026 13:11:29 +0000
Manifest this update: Tue 28 Apr 2026 13:06:29 +0000
Manifest next update: Fri 01 May 2026 18:50:29 +0000
Files and hashes: 1: 3130332e3133342e31382e302f32342d3234203d3e20313332363334.roa (hash: AttvGV4O/1B/aUmLf5/YCnus3/1ekcJKD7ekYUKTwvA=)
2: 3130332e3133342e31392e302f32342d3234203d3e20313332363334.roa (hash: YCkWOxawN0RGuY2hzkUip8qxnY1jDAzpOn1kRfTzsBQ=)
3: 9FC1BED6B099F4E57BAD9FA6F092421927472311.crl (hash: X8S/CN/lX13sVK5pG2FwYPpiIOQ9YkdLV+dH/2s/Yus=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
6c:bb:42:52:bb:e5:d5:a3:2e:ae:23:5a:ea:68:bf:e3:a1:6e:31:11
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=9FC1BED6B099F4E57BAD9FA6F092421927472311
Validity
Not Before: Apr 28 13:06:29 2026 GMT
Not After : May 1 18:50:29 2026 GMT
Subject: CN=5B51EA1427BAF7A06B0D95C186BD9E635A0FCB36
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e1:51:6e:58:48:06:6f:cd:3e:0e:1b:a6:96:88:
bb:88:81:00:5b:e1:8c:25:0d:4d:b3:45:7f:de:d5:
62:56:82:18:08:19:f7:6c:58:36:59:9b:01:15:e9:
81:1f:a4:28:6f:ba:34:4a:fe:e1:83:df:fd:35:a6:
3e:1b:7a:54:3f:6d:b0:04:37:52:c9:a3:f7:06:7c:
c2:93:7c:03:cf:74:da:84:48:40:64:83:d9:ce:ca:
73:dd:d3:a9:c9:f5:24:3b:ef:5e:88:c8:e9:6e:3c:
e4:e5:e6:43:dc:5c:8b:b7:29:21:8e:6d:86:fd:05:
d8:9e:54:39:5f:3f:42:0c:c9:8a:49:bd:b4:46:26:
53:e3:a9:a1:39:63:14:00:92:07:74:95:b0:78:36:
f9:6b:4c:6a:2a:28:75:37:a0:8a:81:ef:af:56:68:
c9:f3:63:f1:4e:ff:61:01:fe:84:ef:24:11:76:40:
b0:09:91:92:67:5e:b1:6f:49:e1:df:c6:5e:06:f5:
2f:bc:99:2e:35:f1:58:4b:9e:a2:50:d4:99:fa:e2:
55:26:d1:37:25:c2:c6:fe:61:6d:87:a8:11:42:c7:
ea:a3:12:ce:ca:fb:63:49:d1:a6:9a:35:f3:dc:36:
c4:44:1e:fc:c4:9d:96:23:5f:d7:ea:6f:a0:d9:b8:
e4:1f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
5B:51:EA:14:27:BA:F7:A0:6B:0D:95:C1:86:BD:9E:63:5A:0F:CB:36
X509v3 Authority Key Identifier:
keyid:9F:C1:BE:D6:B0:99:F4:E5:7B:AD:9F:A6:F0:92:42:19:27:47:23:11
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://repo-rpki.idnic.net/repo/0f00228f-6e25-4c96-9ce5-2d50229a1d18/0/9FC1BED6B099F4E57BAD9FA6F092421927472311.crl
Authority Information Access:
CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/9FC1BED6B099F4E57BAD9FA6F092421927472311.cer
Subject Information Access:
Signed Object - URI:rsync://repo-rpki.idnic.net/repo/0f00228f-6e25-4c96-9ce5-2d50229a1d18/0/9FC1BED6B099F4E57BAD9FA6F092421927472311.mft
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
8f:bc:09:59:3d:98:bd:08:54:29:73:5e:b6:3a:58:6b:d5:dc:
1f:d2:1d:84:72:49:6e:fb:18:6e:81:7e:c4:ac:57:2d:1e:49:
62:48:6f:33:40:93:78:5f:fa:39:61:76:39:3c:2b:ea:6f:d4:
54:4c:ad:c8:2c:35:5c:bb:5d:98:83:a9:96:d5:66:e4:13:e3:
3f:cd:be:97:99:cf:a5:7f:4b:f4:74:2c:52:3e:60:5d:92:4d:
37:84:d1:7e:61:2a:e4:48:f7:68:7e:cc:51:f7:3c:75:71:3c:
48:54:d3:78:60:30:12:88:82:3a:15:24:31:b6:95:4e:1f:f8:
89:1c:54:be:d9:9b:ed:b2:32:8b:66:b6:fa:96:0d:13:36:af:
b6:d6:e6:6d:1f:c3:02:ae:cc:54:99:df:17:5e:99:ca:0b:06:
eb:84:09:c1:bc:6d:27:d3:7c:af:9c:fc:22:c8:c0:a6:e4:ca:
bd:17:76:52:a1:6b:50:b1:e8:e9:0c:73:e6:7b:7b:18:41:1a:
3d:00:17:5e:53:aa:cf:ca:79:32:e1:73:57:67:69:61:aa:23:
55:3b:81:9d:51:00:ed:5b:1a:56:7e:39:9b:04:b8:6d:6f:9d:
12:d0:ed:78:84:f7:38:b6:67:9b:9d:37:41:cd:75:02:a8:da:
e2:2e:9a:16
-----BEGIN CERTIFICATE-----
MIIFMjCCBBqgAwIBAgIUbLtCUrvl1aMuriNa6mi/46FuMREwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoOUZDMUJFRDZCMDk5RjRFNTdCQUQ5RkE2RjA5MjQyMTky
NzQ3MjMxMTAeFw0yNjA0MjgxMzA2MjlaFw0yNjA1MDExODUwMjlaMDMxMTAvBgNV
BAMTKDVCNTFFQTE0MjdCQUY3QTA2QjBEOTVDMTg2QkQ5RTYzNUEwRkNCMzYwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDhUW5YSAZvzT4OG6aWiLuIgQBb
4YwlDU2zRX/e1WJWghgIGfdsWDZZmwEV6YEfpChvujRK/uGD3/01pj4belQ/bbAE
N1LJo/cGfMKTfAPPdNqESEBkg9nOynPd06nJ9SQ7716IyOluPOTl5kPcXIu3KSGO
bYb9BdieVDlfP0IMyYpJvbRGJlPjqaE5YxQAkgd0lbB4NvlrTGoqKHU3oIqB769W
aMnzY/FO/2EB/oTvJBF2QLAJkZJnXrFvSeHfxl4G9S+8mS418VhLnqJQ1Jn64lUm
0Tclwsb+YW2HqBFCx+qjEs7K+2NJ0aaaNfPcNsREHvzEnZYjX9fqb6DZuOQfAgMB
AAGjggI8MIICODAdBgNVHQ4EFgQUW1HqFCe696BrDZXBhr2eY1oPyzYwHwYDVR0j
BBgwFoAUn8G+1rCZ9OV7rZ+m8JJCGSdHIxEwDgYDVR0PAQH/BAQDAgeAMIGFBgNV
HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby8w
ZjAwMjI4Zi02ZTI1LTRjOTYtOWNlNS0yZDUwMjI5YTFkMTgvMC85RkMxQkVENkIw
OTlGNEU1N0JBRDlGQTZGMDkyNDIxOTI3NDcyMzExLmNybDB0BggrBgEFBQcBAQRo
MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv
L0lETklDLUlELzIvOUZDMUJFRDZCMDk5RjRFNTdCQUQ5RkE2RjA5MjQyMTkyNzQ3
MjMxMS5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6
Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vMGYwMDIyOGYtNmUyNS00Yzk2LTlj
ZTUtMmQ1MDIyOWExZDE4LzAvOUZDMUJFRDZCMDk5RjRFNTdCQUQ5RkE2RjA5MjQy
MTkyNzQ3MjMxMS5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF
BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC
BQAwDQYJKoZIhvcNAQELBQADggEBAI+8CVk9mL0IVClzXrY6WGvV3B/SHYRySW77
GG6BfsSsVy0eSWJIbzNAk3hf+jlhdjk8K+pv1FRMrcgsNVy7XZiDqZbVZuQT4z/N
vpeZz6V/S/R0LFI+YF2STTeE0X5hKuRI92h+zFH3PHVxPEhU03hgMBKIgjoVJDG2
lU4f+IkcVL7Zm+2yMotmtvqWDRM2r7bW5m0fwwKuzFSZ3xdemcoLBuuECcG8bSfT
fK+c/CLIwKbkyr0XdlKha1Cx6OkMc+Z7exhBGj0AF15Tqs/KeTLhc1dnaWGqI1U7
gZ1RAO1bGlZ+OZsEuG1vnRLQ7XiE9zi2Z5udN0HNdQKo2uIumhY=
-----END CERTIFICATE-----
Generated at Wed Jun 3 03:22:29 2026 by rpki-client