Manifest
$ rpki-client -vvf repo-rpki.idnic.net/repo/1ecfd3f5-85da-48a7-b502-f61a59796c33/0/889933E416F356762F7F72858168C9C8A2E241C7.mft
File: 889933E416F356762F7F72858168C9C8A2E241C7.mft (raw, json)
Hash identifier: aAyUCHtz1eIU2CMx5vwLiNxiuXHcWkdVf1db9Dlzhsk=
Subject key identifier: 29:89:AB:BA:1A:C6:5C:B4:97:2A:7F:0F:51:5D:B7:FF:91:A8:C4:F7
Authority key identifier: 88:99:33:E4:16:F3:56:76:2F:7F:72:85:81:68:C9:C8:A2:E2:41:C7
Certificate issuer: /CN=889933E416F356762F7F72858168C9C8A2E241C7
Certificate serial: 64072ECA1FC6BC31C9EF2780D677C679661AE1E9
Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/889933E416F356762F7F72858168C9C8A2E241C7.cer
Subject info access: rsync://repo-rpki.idnic.net/repo/1ecfd3f5-85da-48a7-b502-f61a59796c33/0/889933E416F356762F7F72858168C9C8A2E241C7.mft
Manifest number: 0247
Signing time: Mon 27 Apr 2026 23:00:44 +0000
Manifest this update: Mon 27 Apr 2026 22:55:44 +0000
Manifest next update: Fri 01 May 2026 07:49:44 +0000
Files and hashes: 1: 3130332e3136372e3233362e302f32342d3234203d3e20313432333038.roa (hash: 5GvdROYQ95okUa1oax+KkGlSNt0oNcXWExwR/dpYZcg=)
2: 3130332e3136372e3233372e302f32342d3234203d3e20313432333038.roa (hash: hhBm/QT4y8ib7FGAltONinYNWg1PiVjj/mn1RgecAFk=)
3: 889933E416F356762F7F72858168C9C8A2E241C7.crl (hash: 2U6YI6LXS/f1T8mKe3300Wv9Oi1zOwqr6/R5C+RAgUE=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
64:07:2e:ca:1f:c6:bc:31:c9:ef:27:80:d6:77:c6:79:66:1a:e1:e9
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=889933E416F356762F7F72858168C9C8A2E241C7
Validity
Not Before: Apr 27 22:55:44 2026 GMT
Not After : May 1 07:49:44 2026 GMT
Subject: CN=2989ABBA1AC65CB4972A7F0F515DB7FF91A8C4F7
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ba:0e:9b:fa:dd:7b:85:b0:c3:7b:16:96:cf:e7:
f0:ce:23:27:bf:84:b5:30:9f:6f:55:b4:06:2d:e2:
dc:76:9c:99:65:33:2d:21:1b:43:16:d8:d5:43:00:
11:ec:9c:36:ce:7e:6f:c8:7c:68:5c:03:ee:8a:33:
b1:9c:33:2c:52:34:32:ca:54:0d:ec:41:b7:5a:ad:
18:98:0f:51:fb:9c:2b:97:fb:da:77:ce:34:90:34:
0a:5f:d1:7e:b0:e3:76:9a:31:cc:73:1e:5e:7f:73:
14:53:08:dd:7a:0b:ed:73:28:0f:b9:0e:cd:42:ec:
27:ac:8e:a2:38:26:7e:a8:ac:d6:60:2b:28:80:4a:
99:11:3f:cc:8a:c0:ff:9d:87:fa:86:90:c5:69:93:
42:f8:d8:06:cf:29:7d:e1:da:3f:23:73:cc:11:ec:
58:7a:d1:d1:65:f5:6e:92:f5:07:1a:96:da:89:8a:
86:9e:31:6d:68:92:70:20:7c:f9:85:ae:5f:fd:6a:
d8:5b:41:bd:bf:db:a5:1c:da:da:25:b1:94:41:3c:
ab:a1:ed:d6:b4:9e:ec:46:a6:8e:5e:b7:dc:e2:03:
49:be:a5:3a:f5:f5:72:17:e2:f2:48:04:9e:af:a5:
44:29:8f:d5:49:31:e7:5e:c6:c8:42:90:e2:0d:45:
50:c1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
29:89:AB:BA:1A:C6:5C:B4:97:2A:7F:0F:51:5D:B7:FF:91:A8:C4:F7
X509v3 Authority Key Identifier:
keyid:88:99:33:E4:16:F3:56:76:2F:7F:72:85:81:68:C9:C8:A2:E2:41:C7
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://repo-rpki.idnic.net/repo/1ecfd3f5-85da-48a7-b502-f61a59796c33/0/889933E416F356762F7F72858168C9C8A2E241C7.crl
Authority Information Access:
CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/889933E416F356762F7F72858168C9C8A2E241C7.cer
Subject Information Access:
Signed Object - URI:rsync://repo-rpki.idnic.net/repo/1ecfd3f5-85da-48a7-b502-f61a59796c33/0/889933E416F356762F7F72858168C9C8A2E241C7.mft
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
05:ba:1a:be:bf:04:eb:44:06:b0:e8:c0:c6:24:55:96:ce:ec:
fd:06:7d:16:05:ad:cc:4c:79:74:85:d9:a6:c4:1d:fc:67:c5:
be:be:98:77:96:38:a2:19:a8:d9:f2:f6:b1:33:4d:aa:1e:d1:
2b:6c:e1:f2:e1:e6:dd:04:0c:08:41:12:60:a3:57:2d:d5:9e:
53:6b:ab:17:12:74:7f:2b:bc:6d:0e:db:12:10:70:43:dc:bd:
67:27:26:a1:49:da:1f:0b:bd:cd:c9:45:3a:4f:e5:42:9e:1c:
e4:be:73:57:ef:90:7f:89:66:67:0b:0c:55:e1:5a:dd:74:e7:
43:df:1e:7a:9b:27:2a:02:be:95:55:6f:f1:ba:20:fc:89:92:
85:10:0c:a1:a6:81:78:4f:a9:72:49:a1:c0:1e:5e:6b:99:b9:
32:01:44:9a:03:f2:c8:d9:7e:d1:0e:50:0c:e7:aa:a7:59:d5:
42:c1:65:93:ec:7c:2d:8d:94:d7:9b:7d:2c:ea:71:aa:75:92:
c5:42:4b:b6:b3:2a:c6:ad:2a:65:2d:c9:9f:73:c9:94:0b:cb:
aa:16:30:b9:22:9b:09:91:44:46:0a:6b:d2:1b:ac:b2:2a:c2:
67:7e:39:5a:b4:bc:02:e8:92:2c:4e:2e:e7:38:8b:61:39:60:
77:56:79:b1
-----BEGIN CERTIFICATE-----
MIIFMjCCBBqgAwIBAgIUZAcuyh/GvDHJ7yeA1nfGeWYa4ekwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoODg5OTMzRTQxNkYzNTY3NjJGN0Y3Mjg1ODE2OEM5QzhB
MkUyNDFDNzAeFw0yNjA0MjcyMjU1NDRaFw0yNjA1MDEwNzQ5NDRaMDMxMTAvBgNV
BAMTKDI5ODlBQkJBMUFDNjVDQjQ5NzJBN0YwRjUxNURCN0ZGOTFBOEM0RjcwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC6Dpv63XuFsMN7FpbP5/DOIye/
hLUwn29VtAYt4tx2nJllMy0hG0MW2NVDABHsnDbOfm/IfGhcA+6KM7GcMyxSNDLK
VA3sQbdarRiYD1H7nCuX+9p3zjSQNApf0X6w43aaMcxzHl5/cxRTCN16C+1zKA+5
Ds1C7CesjqI4Jn6orNZgKyiASpkRP8yKwP+dh/qGkMVpk0L42AbPKX3h2j8jc8wR
7Fh60dFl9W6S9QcaltqJioaeMW1oknAgfPmFrl/9athbQb2/26Uc2tolsZRBPKuh
7da0nuxGpo5et9ziA0m+pTr19XIX4vJIBJ6vpUQpj9VJMedexshCkOINRVDBAgMB
AAGjggI8MIICODAdBgNVHQ4EFgQUKYmruhrGXLSXKn8PUV23/5GoxPcwHwYDVR0j
BBgwFoAUiJkz5BbzVnYvf3KFgWjJyKLiQccwDgYDVR0PAQH/BAQDAgeAMIGFBgNV
HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby8x
ZWNmZDNmNS04NWRhLTQ4YTctYjUwMi1mNjFhNTk3OTZjMzMvMC84ODk5MzNFNDE2
RjM1Njc2MkY3RjcyODU4MTY4QzlDOEEyRTI0MUM3LmNybDB0BggrBgEFBQcBAQRo
MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv
L0lETklDLUlELzIvODg5OTMzRTQxNkYzNTY3NjJGN0Y3Mjg1ODE2OEM5QzhBMkUy
NDFDNy5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6
Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vMWVjZmQzZjUtODVkYS00OGE3LWI1
MDItZjYxYTU5Nzk2YzMzLzAvODg5OTMzRTQxNkYzNTY3NjJGN0Y3Mjg1ODE2OEM5
QzhBMkUyNDFDNy5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF
BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC
BQAwDQYJKoZIhvcNAQELBQADggEBAAW6Gr6/BOtEBrDowMYkVZbO7P0GfRYFrcxM
eXSF2abEHfxnxb6+mHeWOKIZqNny9rEzTaoe0Sts4fLh5t0EDAhBEmCjVy3VnlNr
qxcSdH8rvG0O2xIQcEPcvWcnJqFJ2h8Lvc3JRTpP5UKeHOS+c1fvkH+JZmcLDFXh
Wt1050PfHnqbJyoCvpVVb/G6IPyJkoUQDKGmgXhPqXJJocAeXmuZuTIBRJoD8sjZ
ftEOUAznqqdZ1ULBZZPsfC2NlNebfSzqcap1ksVCS7azKsatKmUtyZ9zyZQLy6oW
MLkimwmRREYKa9IbrLIqwmd+OVq0vALokixOLuc4i2E5YHdWebE=
-----END CERTIFICATE-----
Generated at Wed Jun 3 03:59:00 2026 by rpki-client