Manifest
$ rpki-client -vvf repo-rpki.idnic.net/repo/280a8dfd-a679-444a-b9a8-6e3cb481a079/0/901FA7FD9132963972C91517CDC7E5EE9077E078.mft
File: 901FA7FD9132963972C91517CDC7E5EE9077E078.mft (raw, json)
Hash identifier: IGhFeyuRJ2ASw3CNSs2UEw6ISGg9pitiy6/09icOuPs=
Subject key identifier: 33:03:ED:87:01:BB:FE:D7:36:39:A8:C8:D0:4D:B4:71:70:38:61:2A
Authority key identifier: 90:1F:A7:FD:91:32:96:39:72:C9:15:17:CD:C7:E5:EE:90:77:E0:78
Certificate issuer: /CN=901FA7FD9132963972C91517CDC7E5EE9077E078
Certificate serial: 37E121D2B17BF42623DB1577F020114A53FA65CE
Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/901FA7FD9132963972C91517CDC7E5EE9077E078.cer
Subject info access: rsync://repo-rpki.idnic.net/repo/280a8dfd-a679-444a-b9a8-6e3cb481a079/0/901FA7FD9132963972C91517CDC7E5EE9077E078.mft
Manifest number: 0191
Signing time: Tue 28 Apr 2026 00:50:57 +0000
Manifest this update: Tue 28 Apr 2026 00:45:57 +0000
Manifest next update: Fri 01 May 2026 01:17:57 +0000
Files and hashes: 1: 901FA7FD9132963972C91517CDC7E5EE9077E078.crl (hash: qiZqBVC1XJcQ5+t+Eb9FQmXejs0PsOgTs7Z6pCyZNgM=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
37:e1:21:d2:b1:7b:f4:26:23:db:15:77:f0:20:11:4a:53:fa:65:ce
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=901FA7FD9132963972C91517CDC7E5EE9077E078
Validity
Not Before: Apr 28 00:45:57 2026 GMT
Not After : May 1 01:17:57 2026 GMT
Subject: CN=3303ED8701BBFED73639A8C8D04DB4717038612A
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b7:3a:0c:18:ac:d2:b9:ec:61:f6:39:40:ce:f1:
96:e5:55:36:79:5e:d6:1a:96:4e:41:87:be:3a:ea:
a8:c5:67:a7:d3:d5:f9:64:b5:55:ef:58:1f:1f:35:
1e:08:b9:94:1d:71:cb:0b:db:74:bd:5d:f2:0b:87:
e6:22:8c:a4:3c:89:c8:6c:cf:ae:4c:79:cb:57:ce:
97:39:13:c4:42:06:20:7d:19:0f:73:ca:74:ba:b3:
26:6e:f4:f0:71:47:22:6e:e4:eb:4d:c7:06:56:5b:
fa:5b:4d:41:b8:0a:76:2e:96:a3:1c:dc:e4:10:5f:
c3:ec:ea:3a:70:4e:cc:09:a8:f4:23:5c:c1:02:4e:
fc:fd:19:ff:67:b7:9b:97:24:7d:92:3c:74:21:3d:
59:a1:71:1e:74:d7:4f:8a:a8:d9:62:ad:f7:73:7d:
0e:bb:5a:45:c5:18:f5:f5:10:10:c4:5c:eb:2c:86:
aa:a6:a0:13:4d:72:1c:5e:0d:15:c8:7a:af:29:8e:
b8:23:d0:99:fc:51:67:ba:33:f0:fd:e9:0d:02:30:
71:96:a8:c4:36:e4:19:c4:18:2e:e2:11:b5:de:22:
e4:5a:ed:27:75:57:61:50:88:c7:bf:93:ba:98:de:
a4:4b:85:13:e7:aa:74:d4:05:1d:44:b6:41:cb:d7:
58:6d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
33:03:ED:87:01:BB:FE:D7:36:39:A8:C8:D0:4D:B4:71:70:38:61:2A
X509v3 Authority Key Identifier:
keyid:90:1F:A7:FD:91:32:96:39:72:C9:15:17:CD:C7:E5:EE:90:77:E0:78
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://repo-rpki.idnic.net/repo/280a8dfd-a679-444a-b9a8-6e3cb481a079/0/901FA7FD9132963972C91517CDC7E5EE9077E078.crl
Authority Information Access:
CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/901FA7FD9132963972C91517CDC7E5EE9077E078.cer
Subject Information Access:
Signed Object - URI:rsync://repo-rpki.idnic.net/repo/280a8dfd-a679-444a-b9a8-6e3cb481a079/0/901FA7FD9132963972C91517CDC7E5EE9077E078.mft
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
4a:b4:1d:f5:26:63:50:9b:f8:a7:a2:96:91:b2:a1:ae:96:c0:
e3:f2:ba:d7:d7:30:ca:8c:9b:75:73:1c:dc:0f:83:de:b2:8c:
6d:0a:b4:17:14:03:31:f0:48:39:91:99:9b:c4:5b:6f:5f:75:
9e:bf:96:29:54:a7:51:ff:e9:83:ec:ad:53:af:ab:6f:ac:f8:
2e:81:ed:36:a9:c1:b3:32:f2:de:64:07:55:78:89:75:62:e4:
d3:48:46:a6:14:80:7c:6e:75:27:02:14:37:5e:ce:3b:13:92:
ea:6b:9b:d2:ea:aa:20:41:c8:02:5a:2f:6d:35:84:5e:2b:c3:
ba:92:24:c0:e2:cd:e6:a0:3a:ed:4a:32:f0:5f:9a:32:dc:31:
5a:91:ce:7e:ef:d5:2c:78:c4:0e:f6:a8:f6:47:5b:66:8c:96:
f2:7a:b8:38:5f:d0:6f:25:93:0d:e9:8d:9c:b2:d8:14:1d:16:
fe:de:82:04:5c:fb:89:ce:a2:c1:90:4d:8d:d6:41:a0:59:49:
d5:be:d1:f0:d8:c1:fe:41:fb:d0:7c:a5:45:04:d2:98:b4:24:
2e:7d:60:66:30:22:cd:b5:ea:24:58:72:8d:2e:f7:fe:10:81:
88:54:3c:86:8e:2f:1e:9f:2f:b4:a9:d7:d7:cf:84:d1:b9:29:
00:31:1f:c0
-----BEGIN CERTIFICATE-----
MIIFMjCCBBqgAwIBAgIUN+Eh0rF79CYj2xV38CARSlP6Zc4wDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoOTAxRkE3RkQ5MTMyOTYzOTcyQzkxNTE3Q0RDN0U1RUU5
MDc3RTA3ODAeFw0yNjA0MjgwMDQ1NTdaFw0yNjA1MDEwMTE3NTdaMDMxMTAvBgNV
BAMTKDMzMDNFRDg3MDFCQkZFRDczNjM5QThDOEQwNERCNDcxNzAzODYxMkEwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC3OgwYrNK57GH2OUDO8ZblVTZ5
XtYalk5Bh7466qjFZ6fT1flktVXvWB8fNR4IuZQdccsL23S9XfILh+YijKQ8ichs
z65MectXzpc5E8RCBiB9GQ9zynS6syZu9PBxRyJu5OtNxwZWW/pbTUG4CnYulqMc
3OQQX8Ps6jpwTswJqPQjXMECTvz9Gf9nt5uXJH2SPHQhPVmhcR5010+KqNlirfdz
fQ67WkXFGPX1EBDEXOsshqqmoBNNchxeDRXIeq8pjrgj0Jn8UWe6M/D96Q0CMHGW
qMQ25BnEGC7iEbXeIuRa7Sd1V2FQiMe/k7qY3qRLhRPnqnTUBR1EtkHL11htAgMB
AAGjggI8MIICODAdBgNVHQ4EFgQUMwPthwG7/tc2OajI0E20cXA4YSowHwYDVR0j
BBgwFoAUkB+n/ZEyljlyyRUXzcfl7pB34HgwDgYDVR0PAQH/BAQDAgeAMIGFBgNV
HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby8y
ODBhOGRmZC1hNjc5LTQ0NGEtYjlhOC02ZTNjYjQ4MWEwNzkvMC85MDFGQTdGRDkx
MzI5NjM5NzJDOTE1MTdDREM3RTVFRTkwNzdFMDc4LmNybDB0BggrBgEFBQcBAQRo
MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv
L0lETklDLUlELzIvOTAxRkE3RkQ5MTMyOTYzOTcyQzkxNTE3Q0RDN0U1RUU5MDc3
RTA3OC5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6
Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vMjgwYThkZmQtYTY3OS00NDRhLWI5
YTgtNmUzY2I0ODFhMDc5LzAvOTAxRkE3RkQ5MTMyOTYzOTcyQzkxNTE3Q0RDN0U1
RUU5MDc3RTA3OC5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF
BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC
BQAwDQYJKoZIhvcNAQELBQADggEBAEq0HfUmY1Cb+KeilpGyoa6WwOPyutfXMMqM
m3VzHNwPg96yjG0KtBcUAzHwSDmRmZvEW29fdZ6/lilUp1H/6YPsrVOvq2+s+C6B
7TapwbMy8t5kB1V4iXVi5NNIRqYUgHxudScCFDdezjsTkuprm9LqqiBByAJaL201
hF4rw7qSJMDizeagOu1KMvBfmjLcMVqRzn7v1Sx4xA72qPZHW2aMlvJ6uDhf0G8l
kw3pjZyy2BQdFv7eggRc+4nOosGQTY3WQaBZSdW+0fDYwf5B+9B8pUUE0pi0JC59
YGYwIs216iRYco0u9/4QgYhUPIaOLx6fL7Sp19fPhNG5KQAxH8A=
-----END CERTIFICATE-----
Generated at Wed Jun 3 03:09:02 2026 by rpki-client