Manifest
$ rpki-client -vvf repo-rpki.idnic.net/repo/1592c274-11db-4127-babb-aeae99284b00/0/B921DAABB84949DDC2500D4F0A6D93FA0EB384E1.mft
File: B921DAABB84949DDC2500D4F0A6D93FA0EB384E1.mft (raw, json)
Hash identifier: cFBx/cSQi8P4gCU4+mhFwZrt/vM8nZ2pp7DsoEJiByE=
Subject key identifier: 53:65:B2:93:98:DD:8D:F4:E7:BF:24:CF:5C:9D:37:A0:2C:E8:DC:29
Authority key identifier: B9:21:DA:AB:B8:49:49:DD:C2:50:0D:4F:0A:6D:93:FA:0E:B3:84:E1
Certificate issuer: /CN=B921DAABB84949DDC2500D4F0A6D93FA0EB384E1
Certificate serial: 150064F7737BEE385AA129EEA45174C351139EF9
Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/B921DAABB84949DDC2500D4F0A6D93FA0EB384E1.cer
Subject info access: rsync://repo-rpki.idnic.net/repo/1592c274-11db-4127-babb-aeae99284b00/0/B921DAABB84949DDC2500D4F0A6D93FA0EB384E1.mft
Manifest number: 0302
Signing time: Wed 29 Apr 2026 10:22:15 +0000
Manifest this update: Wed 29 Apr 2026 10:17:15 +0000
Manifest next update: Sat 02 May 2026 21:15:15 +0000
Files and hashes: 1: 3130332e33302e3232302e302f32342d3234203d3e203338313438.roa (hash: o3fKHuVWFD6jkUIoyhNcY5O2uYQKepNEkJqsRTcT0Zs=)
2: 323430313a396230303a3a2f33322d3438203d3e203338313438.roa (hash: KdtiKUAOdh5Pdj0OkOpsBFHlVClUvcCXmF1ngZraMiI=)
3: 3130332e33302e3232332e302f32342d3234203d3e203338313438.roa (hash: Oz3xD+pukxgYWpnFQL+j6A86Gc4jUZiZu2sP1l7btM0=)
4: B921DAABB84949DDC2500D4F0A6D93FA0EB384E1.crl (hash: e+U+Ggz64JAdZQ8LKr9dbs7pIdQEZs0A7WF/pqXUl5c=)
5: 3132322e3230302e3134342e302f32312d3234203d3e203338313438.roa (hash: q36ZaNZnng4e3YSesfRm7Xhg/e4wHbxv2r58SbE/Hyw=)
6: 3130332e33302e3232312e302f32342d3234203d3e203338313438.roa (hash: 7jwgwmu5p9Vx0nJtBBICc1jR6TLu2T+YBURAKlHLhFY=)
7: 3130332e33302e3232322e302f32342d3234203d3e203338313438.roa (hash: +SJaFJQyqBdRsoSnVqf1c6YDNbR+iItpuCQMYo/GJwM=)
8: 3130332e33302e3232302e302f32322d3233203d3e203338313438.roa (hash: dip5cfpPOxv7j5avMlkj27CtA1ffgVlncphql09alQk=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
15:00:64:f7:73:7b:ee:38:5a:a1:29:ee:a4:51:74:c3:51:13:9e:f9
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=B921DAABB84949DDC2500D4F0A6D93FA0EB384E1
Validity
Not Before: Apr 29 10:17:15 2026 GMT
Not After : May 2 21:15:15 2026 GMT
Subject: CN=5365B29398DD8DF4E7BF24CF5C9D37A02CE8DC29
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:da:64:25:d7:96:d2:2e:10:0c:6c:87:91:8d:2d:
f4:e1:66:1b:3c:cb:ff:02:ba:b8:4b:21:b9:c8:a3:
7d:49:97:a0:f0:d0:34:c3:ac:a4:db:80:b2:3e:07:
88:50:62:4f:f2:25:5a:51:59:66:bf:77:e2:e8:da:
43:52:1a:82:1b:b4:ac:33:7d:4b:27:87:bf:ba:4f:
9f:79:4b:4f:e1:67:93:d4:e1:93:3f:ee:84:87:37:
ca:97:b0:75:91:50:6c:8a:1a:b3:40:8b:84:6e:01:
89:ac:b5:89:a4:64:a7:7e:ea:43:78:90:83:68:f7:
fa:f8:df:cc:33:11:20:0c:6a:28:2c:08:e0:81:ed:
63:ad:01:36:a2:09:65:f4:c2:6a:1b:a5:76:78:df:
51:1f:14:a9:01:39:95:55:13:97:35:c3:82:c2:1e:
11:34:98:87:0b:70:bf:30:1d:34:ae:1b:86:34:51:
77:30:3b:e4:bd:a8:67:21:24:3f:72:13:05:94:ae:
eb:87:7a:65:8f:fe:a6:78:df:92:5d:18:ef:dd:60:
e7:57:fe:61:26:0c:fc:ca:08:e6:65:bc:53:26:84:
c1:14:c3:49:47:cf:ce:c6:82:9a:e9:9f:1e:bf:75:
bf:68:b6:b3:79:dc:48:f7:fa:03:1b:09:1a:ee:84:
2a:37
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
53:65:B2:93:98:DD:8D:F4:E7:BF:24:CF:5C:9D:37:A0:2C:E8:DC:29
X509v3 Authority Key Identifier:
keyid:B9:21:DA:AB:B8:49:49:DD:C2:50:0D:4F:0A:6D:93:FA:0E:B3:84:E1
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://repo-rpki.idnic.net/repo/1592c274-11db-4127-babb-aeae99284b00/0/B921DAABB84949DDC2500D4F0A6D93FA0EB384E1.crl
Authority Information Access:
CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/B921DAABB84949DDC2500D4F0A6D93FA0EB384E1.cer
Subject Information Access:
Signed Object - URI:rsync://repo-rpki.idnic.net/repo/1592c274-11db-4127-babb-aeae99284b00/0/B921DAABB84949DDC2500D4F0A6D93FA0EB384E1.mft
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
98:8b:f1:d9:c3:a2:b6:f9:9f:70:ad:4b:9b:fd:8a:51:52:af:
ce:d1:08:ae:ab:46:c6:20:f6:33:0b:7c:3c:d8:8b:49:e5:85:
29:7e:c7:cb:15:00:63:07:d1:b6:a0:bb:72:22:47:d9:55:09:
26:d8:89:ff:29:64:33:f5:85:c8:16:f5:32:55:c8:8a:d0:90:
7d:6b:64:29:54:93:c5:c6:0d:f8:a8:3d:b7:a6:2e:fd:13:3e:
44:58:8e:5b:94:1d:61:f9:44:f9:f0:65:e5:68:c7:18:44:ff:
e1:d0:89:70:98:ae:3d:62:6c:96:5f:f2:23:1a:8a:96:b7:9c:
0b:d9:ab:87:cf:08:c0:69:fd:94:88:ba:6d:34:f8:ea:26:ee:
ac:c8:37:ea:7a:11:f5:b0:be:c5:46:50:8f:18:13:df:57:d6:
fa:ea:ab:5d:dc:87:26:e7:a7:95:43:43:2b:d0:9f:6b:7b:52:
c9:d4:b8:f2:14:85:63:60:30:d8:1b:23:3f:91:53:35:83:bf:
4a:44:c9:d1:18:67:48:3e:0c:01:c4:fb:61:85:fa:ed:26:72:
0f:76:db:6d:d3:73:fc:51:4d:aa:e7:49:28:1b:d5:94:f0:9c:
af:03:d8:b1:f8:db:eb:f8:8d:93:42:7e:08:cd:0c:ac:2a:59:
2d:20:26:cc
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jun 3 03:33:21 2026 by rpki-client