Manifest
$ rpki-client -vvf repo-rpki.idnic.net/repo/29226948-b1a1-4294-9150-6af0e0bebfb8/0/3FD6EB17E67ACC4060F777F5A4E3F9A027AB3F9A.mft
File: 3FD6EB17E67ACC4060F777F5A4E3F9A027AB3F9A.mft (raw, json)
Hash identifier: 6zi/UU5cDuYAbNbxotW2rDcX8N5qxqFC2HGIGbNtqy4=
Subject key identifier: 20:27:52:59:5B:68:0A:12:45:0A:6D:FD:7B:6B:91:3E:5B:84:15:9A
Authority key identifier: 3F:D6:EB:17:E6:7A:CC:40:60:F7:77:F5:A4:E3:F9:A0:27:AB:3F:9A
Certificate issuer: /CN=3FD6EB17E67ACC4060F777F5A4E3F9A027AB3F9A
Certificate serial: 7FA1DC3F767A756E35E6115B34BB894BDA724005
Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/3FD6EB17E67ACC4060F777F5A4E3F9A027AB3F9A.cer
Subject info access: rsync://repo-rpki.idnic.net/repo/29226948-b1a1-4294-9150-6af0e0bebfb8/0/3FD6EB17E67ACC4060F777F5A4E3F9A027AB3F9A.mft
Manifest number: 029C
Signing time: Tue 28 Apr 2026 02:42:07 +0000
Manifest this update: Tue 28 Apr 2026 02:37:07 +0000
Manifest next update: Fri 01 May 2026 13:35:07 +0000
Files and hashes: 1: 3130332e3138342e3132322e302f32342d3234203d3e20313439373035.roa (hash: Iu3jqOF1OKCYSUkajjnPtBWzUDppzjUa82PRV4A9qHs=)
2: 3130332e3138342e3132332e302f32342d3234203d3e20313439373035.roa (hash: DTS/Msv2+J+yWcCmX3IMnnNepiaqaJENVR2ewyRj56c=)
3: 3FD6EB17E67ACC4060F777F5A4E3F9A027AB3F9A.crl (hash: xpz7nBWmugt0vweuk5a8SrUxQe0ohFdS5Mm4gXEy0bo=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
7f:a1:dc:3f:76:7a:75:6e:35:e6:11:5b:34:bb:89:4b:da:72:40:05
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3FD6EB17E67ACC4060F777F5A4E3F9A027AB3F9A
Validity
Not Before: Apr 28 02:37:07 2026 GMT
Not After : May 1 13:35:07 2026 GMT
Subject: CN=202752595B680A12450A6DFD7B6B913E5B84159A
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b7:e2:bd:d7:70:46:81:90:b1:0d:25:d4:31:20:
c7:ff:78:de:67:41:7b:4e:81:51:77:9a:72:0d:34:
33:f5:e8:7f:08:bb:05:73:9b:5b:49:e5:22:fa:55:
79:0f:70:c6:5a:ac:aa:4b:9b:2d:60:5b:eb:2c:6b:
3b:e3:d1:a5:2b:13:0c:29:c1:02:a4:67:d8:7d:98:
96:7f:63:ab:3e:92:cb:2b:8c:26:e3:d2:0c:0b:e5:
ab:18:c9:54:1d:91:3b:ee:ac:4e:bd:b8:26:0b:72:
06:0d:09:44:37:bd:e5:89:32:10:c5:9b:c5:c4:a3:
ed:05:6a:02:2c:d4:5f:29:0a:ca:e6:5f:47:73:08:
f9:11:26:f8:ab:7e:3d:70:2d:de:08:4e:63:83:44:
6a:33:34:92:ed:d0:8e:bc:ee:08:7d:65:28:0d:5c:
51:f1:c0:39:a5:df:f6:df:8c:93:b2:53:1e:a8:b0:
31:00:51:a1:92:4f:6b:91:dd:b3:da:95:fe:46:8c:
f4:27:20:4a:9c:59:30:d2:fc:e8:27:63:39:02:55:
5c:40:87:84:65:f5:15:e6:08:87:f2:a5:c4:a7:3a:
b9:ff:b1:64:33:90:7e:23:fb:43:78:84:3d:b2:fd:
92:97:84:55:c3:7b:5c:da:3c:9a:2f:7e:10:ae:57:
17:97
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
20:27:52:59:5B:68:0A:12:45:0A:6D:FD:7B:6B:91:3E:5B:84:15:9A
X509v3 Authority Key Identifier:
keyid:3F:D6:EB:17:E6:7A:CC:40:60:F7:77:F5:A4:E3:F9:A0:27:AB:3F:9A
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://repo-rpki.idnic.net/repo/29226948-b1a1-4294-9150-6af0e0bebfb8/0/3FD6EB17E67ACC4060F777F5A4E3F9A027AB3F9A.crl
Authority Information Access:
CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/3FD6EB17E67ACC4060F777F5A4E3F9A027AB3F9A.cer
Subject Information Access:
Signed Object - URI:rsync://repo-rpki.idnic.net/repo/29226948-b1a1-4294-9150-6af0e0bebfb8/0/3FD6EB17E67ACC4060F777F5A4E3F9A027AB3F9A.mft
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
97:6d:b9:d5:87:07:38:44:d1:8b:1f:c5:f5:72:9a:af:6e:13:
cc:cc:5b:6a:0c:c0:92:9b:b1:93:6c:01:4a:c2:ad:bd:94:f3:
dc:74:f0:d2:61:b6:e2:40:3b:15:a1:fe:0c:fd:40:9e:99:d7:
9e:4d:b0:0b:7b:df:e7:05:88:b9:12:5d:92:bd:0c:65:0d:fe:
1a:4b:9d:f8:59:3a:14:35:c6:80:ff:91:be:2a:4d:38:8f:22:
3b:38:1e:70:91:0c:d2:b5:bb:9c:1f:35:2e:bd:60:9f:b7:5f:
4f:3a:9d:50:12:77:04:7b:92:72:d2:3e:f3:64:0a:b2:dc:84:
7c:c1:4d:cd:96:1b:fa:41:db:11:f2:82:75:8e:77:6f:a6:13:
7e:09:95:5f:c0:99:82:bd:3b:7b:6b:f5:0b:cc:93:c2:b6:6d:
6b:d9:ca:55:7f:17:a0:21:c3:9c:d0:05:90:d5:90:e8:79:cd:
9e:4b:39:22:21:84:32:b9:3e:cb:ba:fb:e5:f8:13:b3:ef:26:
64:4e:05:dd:28:d6:b7:de:47:91:14:40:54:7e:d6:2c:52:d5:
20:10:ef:1f:d8:76:c3:87:d6:02:61:89:53:c1:9f:97:18:a1:
54:37:ef:59:b7:f5:b3:46:ae:a6:3b:0f:4b:4e:37:fd:88:d4:
02:d8:e5:76
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jun 3 03:37:32 2026 by rpki-client