Manifest
$ rpki-client -vvf repo-rpki.idnic.net/repo/16c1c529-6244-4503-af56-69459e4a760f/0/A398FBDF357790C7DC67C6D92A15A3D4617558A6.mft
File: A398FBDF357790C7DC67C6D92A15A3D4617558A6.mft (raw, json)
Hash identifier: evfx8PPIyQvnxm/mbfLVMkv29H3pGoJyfkrHpYMzFMk=
Subject key identifier: 89:0A:43:7E:24:42:E4:9C:6A:64:99:44:23:0B:C1:41:45:D1:63:31
Authority key identifier: A3:98:FB:DF:35:77:90:C7:DC:67:C6:D9:2A:15:A3:D4:61:75:58:A6
Certificate issuer: /CN=A398FBDF357790C7DC67C6D92A15A3D4617558A6
Certificate serial: 5F5F52D39DDBCEDFDB9D4D771EF04D032AD0EFA2
Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/A398FBDF357790C7DC67C6D92A15A3D4617558A6.cer
Subject info access: rsync://repo-rpki.idnic.net/repo/16c1c529-6244-4503-af56-69459e4a760f/0/A398FBDF357790C7DC67C6D92A15A3D4617558A6.mft
Manifest number: 03D9
Signing time: Mon 27 Apr 2026 23:30:01 +0000
Manifest this update: Mon 27 Apr 2026 23:25:01 +0000
Manifest next update: Fri 01 May 2026 01:10:01 +0000
Files and hashes: 1: 3130332e3135382e3136322e302f32342d3234203d3e203137393935.roa (hash: C2QFcfs/YhAogD6WV5sZt+GhgdgTDt0K+flb9n7TxLw=)
2: A398FBDF357790C7DC67C6D92A15A3D4617558A6.crl (hash: 3wU69CLpzrY84NenFq8Z7xTqX0YnBq9i3L6NYHI5UpU=)
3: 3130332e3135382e3136322e302f32332d3233203d3e203137393935.roa (hash: NxcYlLW+ZkGtzpqXd2yoeS5VdB40v+IZaaf0YTRRXYQ=)
4: 3130332e3135382e3136332e302f32342d3234203d3e203137393935.roa (hash: VC593Cs/cLK37Y65raPKe4El4PGI0Yr3mzjDSbZO0QM=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
5f:5f:52:d3:9d:db:ce:df:db:9d:4d:77:1e:f0:4d:03:2a:d0:ef:a2
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A398FBDF357790C7DC67C6D92A15A3D4617558A6
Validity
Not Before: Apr 27 23:25:01 2026 GMT
Not After : May 1 01:10:01 2026 GMT
Subject: CN=890A437E2442E49C6A649944230BC14145D16331
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:95:71:7e:57:41:ed:96:03:1b:e0:9e:54:a5:c3:
45:d4:0d:b2:89:ab:04:87:68:30:48:dd:b1:e0:ea:
dd:cf:64:70:fe:25:a6:d8:f0:70:51:c9:f0:61:dc:
7a:38:a3:ce:ee:7d:55:15:a5:fe:78:25:cd:1e:25:
9a:0f:86:52:7b:c6:04:f1:7d:3b:8f:20:fb:84:20:
06:e4:33:98:ba:99:90:bc:0b:9b:de:7a:ac:7b:18:
9f:9b:fc:00:37:cb:46:83:c6:9c:75:20:dd:41:76:
77:b8:0e:63:ad:ff:d8:7c:9e:80:ce:d4:a7:52:68:
a4:45:f2:09:40:aa:2a:64:51:fd:15:b8:79:32:a4:
b2:c1:b1:f8:66:ef:92:3c:8c:c8:f2:7a:86:4c:4b:
cc:32:36:fc:94:2d:3e:e3:2f:e1:c0:3d:e6:51:71:
30:d7:fc:28:24:18:f9:97:c2:67:d7:a3:e3:d9:2e:
25:58:71:73:07:70:45:d9:53:0b:28:2d:81:b0:e0:
6a:e2:36:c5:f9:f8:bb:fa:60:9c:d4:e0:09:0d:ba:
89:55:37:2f:88:b2:dc:b3:c9:fe:4d:60:fb:fd:19:
db:f3:28:1d:77:a3:59:ed:a6:28:09:33:a1:58:23:
d4:61:81:c4:20:62:68:89:46:7b:75:7a:64:b8:21:
f2:dd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
89:0A:43:7E:24:42:E4:9C:6A:64:99:44:23:0B:C1:41:45:D1:63:31
X509v3 Authority Key Identifier:
keyid:A3:98:FB:DF:35:77:90:C7:DC:67:C6:D9:2A:15:A3:D4:61:75:58:A6
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://repo-rpki.idnic.net/repo/16c1c529-6244-4503-af56-69459e4a760f/0/A398FBDF357790C7DC67C6D92A15A3D4617558A6.crl
Authority Information Access:
CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/A398FBDF357790C7DC67C6D92A15A3D4617558A6.cer
Subject Information Access:
Signed Object - URI:rsync://repo-rpki.idnic.net/repo/16c1c529-6244-4503-af56-69459e4a760f/0/A398FBDF357790C7DC67C6D92A15A3D4617558A6.mft
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
93:28:8e:7c:84:73:bb:01:f3:d8:82:45:ed:48:71:77:c5:82:
99:e8:6d:2e:21:5a:a3:91:8f:03:d8:11:31:7e:57:af:7a:4e:
02:4a:7f:1f:55:ea:fc:08:c1:fa:96:ba:be:94:b7:6e:93:8f:
67:e5:d9:dc:f9:17:5d:a5:11:75:ef:99:4b:84:e7:f6:7f:6b:
ee:2c:68:c2:3a:8a:78:3f:e6:b6:6b:70:3c:4e:39:a8:35:43:
26:cb:12:c7:11:95:bf:51:44:7b:fa:25:8a:37:00:16:95:cb:
5f:be:5b:2b:f4:43:f2:a4:9a:13:de:b3:bf:5c:24:c0:c7:5f:
be:c3:4d:ae:c2:5a:57:0a:af:58:00:e4:5e:31:0e:a0:c9:07:
30:18:7f:41:ff:e6:d1:a7:ac:81:c0:ff:9a:58:c6:bf:a2:1a:
ba:f7:06:0a:ef:d5:e8:f7:8c:fb:ef:4c:4d:96:1f:8c:c3:2c:
98:9c:b6:0d:82:74:83:60:d2:53:80:ca:0e:e3:a5:b6:0e:17:
db:06:59:46:bc:73:6b:95:47:87:7a:81:be:e5:fa:26:b5:ac:
63:4d:3a:f2:83:72:65:3b:53:18:f9:93:b1:57:01:e6:c2:06:
fa:ae:ad:7a:24:06:9c:eb:d3:37:94:81:c8:d4:4f:c8:ad:a2:
57:d2:30:31
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jun 3 03:09:12 2026 by rpki-client