
Manifest
$ rpki-client -vvf repo-rpki.idnic.net/repo/248ec5eb-0354-4d87-b2be-08ffad4aa06a/0/3CECA6A5D2B138F5E05CE815D6A9D905E9E07BF4.mft
File: 3CECA6A5D2B138F5E05CE815D6A9D905E9E07BF4.mft (raw, json)
Hash identifier: PvZwgEyKZj52kO/Vn6/pdIp9l1CE5qiAPmkDVOFga3U=
Subject key identifier: D9:71:2A:9B:DF:0B:3B:53:88:8F:06:1E:76:91:19:5A:9F:F3:C9:1C
Authority key identifier: 3C:EC:A6:A5:D2:B1:38:F5:E0:5C:E8:15:D6:A9:D9:05:E9:E0:7B:F4
Certificate issuer: /CN=3CECA6A5D2B138F5E05CE815D6A9D905E9E07BF4
Certificate serial: 5860821898282ECA52203579D2CCE342CD9E3041
Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/3CECA6A5D2B138F5E05CE815D6A9D905E9E07BF4.cer
Subject info access: rsync://repo-rpki.idnic.net/repo/248ec5eb-0354-4d87-b2be-08ffad4aa06a/0/3CECA6A5D2B138F5E05CE815D6A9D905E9E07BF4.mft
Manifest number: F3
Signing time: Tue 28 Apr 2026 12:41:03 +0000
Manifest this update: Tue 28 Apr 2026 12:36:03 +0000
Manifest next update: Fri 01 May 2026 16:30:03 +0000
Files and hashes: 1: 3CECA6A5D2B138F5E05CE815D6A9D905E9E07BF4.crl (hash: iL5nyEuNPs2sq8yg05y+Yq+G8ELj4pm6Pyny6aF/BCQ=)
2: 33362e35302e34342e302f32332d3234203d3e20313532303130.roa (hash: homg5w1o8Ac7RkByH0/Fbb96kiXTeJPDkxjgg7Q4x1k=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
58:60:82:18:98:28:2e:ca:52:20:35:79:d2:cc:e3:42:cd:9e:30:41
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3CECA6A5D2B138F5E05CE815D6A9D905E9E07BF4
Validity
Not Before: Apr 28 12:36:03 2026 GMT
Not After : May 1 16:30:03 2026 GMT
Subject: CN=D9712A9BDF0B3B53888F061E7691195A9FF3C91C
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9a:53:08:a0:53:6f:05:cf:30:7d:a8:93:9a:bf:
92:92:66:f0:20:43:76:c1:1a:f8:75:23:f9:01:ce:
cd:b0:dd:d9:a8:c4:0e:fb:1a:11:d0:98:d0:26:4d:
da:21:3c:bd:b9:80:d9:44:dd:7d:66:dd:16:b8:fc:
97:0a:be:70:f2:49:4d:b1:c6:e3:a2:a9:90:8b:29:
a7:c3:8f:e4:2a:5a:1f:2e:44:60:21:8b:31:0e:61:
a8:f0:22:64:cd:ce:b0:e7:3b:dd:ed:c7:2a:19:9e:
28:f0:fe:d5:c6:84:df:98:12:78:a7:48:ee:a4:64:
f8:21:89:60:62:0d:ab:b7:69:04:7e:68:e1:6f:17:
83:42:98:aa:e6:9c:85:0d:ba:53:fd:72:99:2d:5b:
a5:30:71:52:b4:83:a0:4c:44:8a:b9:ac:5e:8e:b7:
e8:95:cf:44:d0:78:be:9d:c1:79:39:86:01:94:83:
35:1d:29:da:eb:92:a9:d8:14:17:f5:1d:63:dc:01:
dd:8f:2f:66:37:18:28:b5:9d:b1:ef:e6:f3:2d:33:
d6:1e:1c:2d:52:5e:40:62:0c:aa:df:b6:7c:de:02:
8e:b4:d8:b2:f7:e6:28:9a:0f:14:f3:49:de:41:a7:
5e:05:67:aa:00:e5:c2:2f:68:5f:97:bc:0f:33:17:
29:45
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D9:71:2A:9B:DF:0B:3B:53:88:8F:06:1E:76:91:19:5A:9F:F3:C9:1C
X509v3 Authority Key Identifier:
keyid:3C:EC:A6:A5:D2:B1:38:F5:E0:5C:E8:15:D6:A9:D9:05:E9:E0:7B:F4
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://repo-rpki.idnic.net/repo/248ec5eb-0354-4d87-b2be-08ffad4aa06a/0/3CECA6A5D2B138F5E05CE815D6A9D905E9E07BF4.crl
Authority Information Access:
CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/3CECA6A5D2B138F5E05CE815D6A9D905E9E07BF4.cer
Subject Information Access:
Signed Object - URI:rsync://repo-rpki.idnic.net/repo/248ec5eb-0354-4d87-b2be-08ffad4aa06a/0/3CECA6A5D2B138F5E05CE815D6A9D905E9E07BF4.mft
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
92:bf:ef:e3:1d:76:48:23:b6:95:96:27:b7:11:1e:a3:93:e1:
86:03:b2:e1:2e:4e:21:93:8e:09:f9:44:b4:da:a7:c5:8b:04:
59:4d:b9:f4:74:da:d4:9e:79:da:0b:98:3a:26:34:f2:44:73:
75:a6:98:8f:57:b4:2a:4a:b0:00:fe:14:6b:f1:e4:06:64:bb:
31:fb:47:2f:fc:ed:70:1f:a3:e8:f2:6a:0c:c0:6b:4e:89:5e:
3a:db:79:64:5a:32:38:9e:3e:6a:f1:87:65:ba:03:9a:4d:8e:
ba:9c:c2:dc:5b:49:77:48:2e:f4:63:a5:be:74:eb:ed:15:11:
4b:6c:60:dd:04:4d:07:97:3b:ac:c1:40:6c:53:91:6f:2b:b0:
e4:7c:d4:0b:2a:0e:32:14:d2:ac:02:84:6b:35:8e:39:27:65:
d1:46:c9:ee:d1:a2:ab:80:e3:6c:cd:59:7c:a5:80:0d:6b:c8:
12:f7:3f:19:6d:e7:fa:38:f7:36:99:fb:4c:b4:06:77:b5:6b:
79:e2:c6:60:19:fb:0d:f5:fd:56:e5:04:15:4e:21:b7:a3:a8:
3e:bf:dd:ca:e8:5e:f7:ab:eb:09:4b:db:6c:53:4b:49:96:06:
cf:13:9a:90:af:fc:45:2e:c4:35:dc:28:f9:9c:3e:11:88:e6:
00:4a:68:58
-----BEGIN CERTIFICATE-----
MIIFMjCCBBqgAwIBAgIUWGCCGJgoLspSIDV50szjQs2eMEEwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoM0NFQ0E2QTVEMkIxMzhGNUUwNUNFODE1RDZBOUQ5MDVF
OUUwN0JGNDAeFw0yNjA0MjgxMjM2MDNaFw0yNjA1MDExNjMwMDNaMDMxMTAvBgNV
BAMTKEQ5NzEyQTlCREYwQjNCNTM4ODhGMDYxRTc2OTExOTVBOUZGM0M5MUMwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCaUwigU28FzzB9qJOav5KSZvAg
Q3bBGvh1I/kBzs2w3dmoxA77GhHQmNAmTdohPL25gNlE3X1m3Ra4/JcKvnDySU2x
xuOiqZCLKafDj+QqWh8uRGAhizEOYajwImTNzrDnO93txyoZnijw/tXGhN+YEnin
SO6kZPghiWBiDau3aQR+aOFvF4NCmKrmnIUNulP9cpktW6UwcVK0g6BMRIq5rF6O
t+iVz0TQeL6dwXk5hgGUgzUdKdrrkqnYFBf1HWPcAd2PL2Y3GCi1nbHv5vMtM9Ye
HC1SXkBiDKrftnzeAo602LL35iiaDxTzSd5Bp14FZ6oA5cIvaF+XvA8zFylFAgMB
AAGjggI8MIICODAdBgNVHQ4EFgQU2XEqm98LO1OIjwYedpEZWp/zyRwwHwYDVR0j
BBgwFoAUPOympdKxOPXgXOgV1qnZBenge/QwDgYDVR0PAQH/BAQDAgeAMIGFBgNV
HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby8y
NDhlYzVlYi0wMzU0LTRkODctYjJiZS0wOGZmYWQ0YWEwNmEvMC8zQ0VDQTZBNUQy
QjEzOEY1RTA1Q0U4MTVENkE5RDkwNUU5RTA3QkY0LmNybDB0BggrBgEFBQcBAQRo
MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv
L0lETklDLUlELzIvM0NFQ0E2QTVEMkIxMzhGNUUwNUNFODE1RDZBOUQ5MDVFOUUw
N0JGNC5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6
Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vMjQ4ZWM1ZWItMDM1NC00ZDg3LWIy
YmUtMDhmZmFkNGFhMDZhLzAvM0NFQ0E2QTVEMkIxMzhGNUUwNUNFODE1RDZBOUQ5
MDVFOUUwN0JGNC5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF
BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC
BQAwDQYJKoZIhvcNAQELBQADggEBAJK/7+MddkgjtpWWJ7cRHqOT4YYDsuEuTiGT
jgn5RLTap8WLBFlNufR02tSeedoLmDomNPJEc3WmmI9XtCpKsAD+FGvx5AZkuzH7
Ry/87XAfo+jyagzAa06JXjrbeWRaMjiePmrxh2W6A5pNjrqcwtxbSXdILvRjpb50
6+0VEUtsYN0ETQeXO6zBQGxTkW8rsOR81AsqDjIU0qwChGs1jjknZdFGye7RoquA
42zNWXylgA1ryBL3Pxlt5/o49zaZ+0y0Bne1a3nixmAZ+w31/VblBBVOIbejqD6/
3croXver6wlL22xTS0mWBs8TmpCv/EUuxDXcKPmcPhGI5gBKaFg=
-----END CERTIFICATE-----
Generated at Wed Jun 3 03:15:27 2026 by rpki-client