Manifest
$ rpki-client -vvf repo-rpki.idnic.net/repo/2d78b50b-449c-454b-850d-f20803789b58/0/3809A288AA4D4C241EA6011D90DBF2693B3333D2.mft
File: 3809A288AA4D4C241EA6011D90DBF2693B3333D2.mft (raw, json)
Hash identifier: IxRiQLc/RhNFkXdJE6CvFErtt/P0fLYS7sfzKMPYjxw=
Subject key identifier: F2:E0:9F:89:57:87:D6:3F:E6:8B:6D:EA:84:0C:40:6C:63:FA:59:6B
Authority key identifier: 38:09:A2:88:AA:4D:4C:24:1E:A6:01:1D:90:DB:F2:69:3B:33:33:D2
Certificate issuer: /CN=3809A288AA4D4C241EA6011D90DBF2693B3333D2
Certificate serial: 5C6DC6749279918B431B19E10F78C054A808D832
Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/3809A288AA4D4C241EA6011D90DBF2693B3333D2.cer
Subject info access: rsync://repo-rpki.idnic.net/repo/2d78b50b-449c-454b-850d-f20803789b58/0/3809A288AA4D4C241EA6011D90DBF2693B3333D2.mft
Manifest number: 36
Signing time: Tue 28 Apr 2026 22:10:03 +0000
Manifest this update: Tue 28 Apr 2026 22:05:03 +0000
Manifest next update: Sat 02 May 2026 07:13:03 +0000
Files and hashes: 1: 3809A288AA4D4C241EA6011D90DBF2693B3333D2.crl (hash: 7HF4q6Rvx5f5MYVLjFKOaE5uQlwwn5gOqiAC7/OdLXQ=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
5c:6d:c6:74:92:79:91:8b:43:1b:19:e1:0f:78:c0:54:a8:08:d8:32
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3809A288AA4D4C241EA6011D90DBF2693B3333D2
Validity
Not Before: Apr 28 22:05:03 2026 GMT
Not After : May 2 07:13:03 2026 GMT
Subject: CN=F2E09F895787D63FE68B6DEA840C406C63FA596B
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bc:8d:1c:ce:f6:96:26:6b:ba:c9:9d:3f:e7:4d:
0e:8d:2a:93:11:49:e7:4d:ed:b3:5f:8a:4e:16:af:
b8:24:04:a7:1e:a4:69:23:e9:c6:84:61:5d:e3:cc:
27:48:a5:85:c6:4d:67:42:f9:c8:b6:43:db:c8:3d:
98:98:b3:25:36:74:b6:9a:0c:67:17:06:13:47:17:
2e:24:86:f4:20:d6:3c:79:e5:5b:25:45:de:97:70:
94:60:03:fe:40:63:8a:3c:7b:63:27:62:e9:5f:5d:
3f:66:c2:e6:a6:cb:a6:5c:a4:7c:ec:b4:43:bc:e5:
d0:d1:54:ac:19:a0:b6:c3:a1:c9:89:f7:c0:3a:ff:
b7:50:b3:9b:92:b4:77:78:2c:00:fd:8b:04:84:39:
e9:12:7f:53:50:e6:fc:94:34:a7:f5:9a:28:aa:22:
87:d5:98:b6:c3:87:c1:e4:e1:f6:f2:12:92:ad:0d:
3e:c8:9c:52:b0:99:dd:ad:2c:25:1e:02:5e:7f:a1:
be:93:da:2f:5b:21:cc:8b:7a:8e:f7:e3:d0:1b:da:
b0:8a:5f:a7:b8:4f:42:a4:85:9d:20:cc:75:ea:39:
68:3f:10:4b:2b:77:0d:8b:4f:88:83:04:93:f4:43:
a6:25:4e:31:93:49:5d:a8:26:b7:c4:08:53:71:e9:
21:6f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F2:E0:9F:89:57:87:D6:3F:E6:8B:6D:EA:84:0C:40:6C:63:FA:59:6B
X509v3 Authority Key Identifier:
keyid:38:09:A2:88:AA:4D:4C:24:1E:A6:01:1D:90:DB:F2:69:3B:33:33:D2
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://repo-rpki.idnic.net/repo/2d78b50b-449c-454b-850d-f20803789b58/0/3809A288AA4D4C241EA6011D90DBF2693B3333D2.crl
Authority Information Access:
CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/3809A288AA4D4C241EA6011D90DBF2693B3333D2.cer
Subject Information Access:
Signed Object - URI:rsync://repo-rpki.idnic.net/repo/2d78b50b-449c-454b-850d-f20803789b58/0/3809A288AA4D4C241EA6011D90DBF2693B3333D2.mft
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
06:0a:43:47:cb:1b:10:1c:04:f8:54:7a:55:e2:49:5e:94:4e:
45:6b:3a:f7:cb:ee:d7:a2:69:cc:83:e2:fb:58:6f:ae:a0:29:
55:71:cf:51:c0:37:48:c8:c4:c0:17:47:f2:cd:ad:f0:42:e9:
eb:36:c9:13:bc:4d:fb:41:90:7f:f8:7a:f9:0e:60:8d:4a:56:
ca:53:bc:62:60:83:04:94:08:43:a8:a3:f3:cd:d7:c8:e1:59:
f6:60:cd:aa:e0:b6:10:5e:f3:72:c3:3f:cf:3e:47:f3:22:3a:
00:b3:a2:c4:4e:1b:f9:71:80:5d:c9:8e:ba:59:af:35:6b:7f:
d4:c2:92:82:0d:e8:83:2c:ec:38:ea:73:e4:21:07:a4:ea:cb:
c8:b6:45:87:7e:aa:27:12:a2:26:48:6a:76:dc:14:e4:8d:c3:
22:e6:80:e7:2e:53:cf:39:18:58:0f:a5:d0:5f:7f:a6:0a:ac:
31:c3:55:0c:5e:8c:f0:30:fd:ce:23:45:a1:66:6a:65:d4:2f:
64:6c:8d:ea:0e:15:52:81:70:87:23:a1:ba:87:3e:cc:07:99:
b5:53:92:ef:01:74:54:21:81:16:2f:9f:a6:74:eb:a9:bd:34:
3c:e7:2f:d9:eb:f1:0e:a6:7d:d7:f1:e8:4f:9b:c9:fa:ec:ad:
85:ce:65:24
-----BEGIN CERTIFICATE-----
MIIFMjCCBBqgAwIBAgIUXG3GdJJ5kYtDGxnhD3jAVKgI2DIwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoMzgwOUEyODhBQTRENEMyNDFFQTYwMTFEOTBEQkYyNjkz
QjMzMzNEMjAeFw0yNjA0MjgyMjA1MDNaFw0yNjA1MDIwNzEzMDNaMDMxMTAvBgNV
BAMTKEYyRTA5Rjg5NTc4N0Q2M0ZFNjhCNkRFQTg0MEM0MDZDNjNGQTU5NkIwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC8jRzO9pYma7rJnT/nTQ6NKpMR
SedN7bNfik4Wr7gkBKcepGkj6caEYV3jzCdIpYXGTWdC+ci2Q9vIPZiYsyU2dLaa
DGcXBhNHFy4khvQg1jx55VslRd6XcJRgA/5AY4o8e2MnYulfXT9mwuamy6ZcpHzs
tEO85dDRVKwZoLbDocmJ98A6/7dQs5uStHd4LAD9iwSEOekSf1NQ5vyUNKf1miiq
IofVmLbDh8Hk4fbyEpKtDT7InFKwmd2tLCUeAl5/ob6T2i9bIcyLeo7349Ab2rCK
X6e4T0KkhZ0gzHXqOWg/EEsrdw2LT4iDBJP0Q6YlTjGTSV2oJrfECFNx6SFvAgMB
AAGjggI8MIICODAdBgNVHQ4EFgQU8uCfiVeH1j/mi23qhAxAbGP6WWswHwYDVR0j
BBgwFoAUOAmiiKpNTCQepgEdkNvyaTszM9IwDgYDVR0PAQH/BAQDAgeAMIGFBgNV
HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby8y
ZDc4YjUwYi00NDljLTQ1NGItODUwZC1mMjA4MDM3ODliNTgvMC8zODA5QTI4OEFB
NEQ0QzI0MUVBNjAxMUQ5MERCRjI2OTNCMzMzM0QyLmNybDB0BggrBgEFBQcBAQRo
MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv
L0lETklDLUlELzIvMzgwOUEyODhBQTRENEMyNDFFQTYwMTFEOTBEQkYyNjkzQjMz
MzNEMi5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6
Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vMmQ3OGI1MGItNDQ5Yy00NTRiLTg1
MGQtZjIwODAzNzg5YjU4LzAvMzgwOUEyODhBQTRENEMyNDFFQTYwMTFEOTBEQkYy
NjkzQjMzMzNEMi5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF
BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC
BQAwDQYJKoZIhvcNAQELBQADggEBAAYKQ0fLGxAcBPhUelXiSV6UTkVrOvfL7tei
acyD4vtYb66gKVVxz1HAN0jIxMAXR/LNrfBC6es2yRO8TftBkH/4evkOYI1KVspT
vGJggwSUCEOoo/PN18jhWfZgzargthBe83LDP88+R/MiOgCzosROG/lxgF3JjrpZ
rzVrf9TCkoIN6IMs7Djqc+QhB6Tqy8i2RYd+qicSoiZIanbcFOSNwyLmgOcuU885
GFgPpdBff6YKrDHDVQxejPAw/c4jRaFmamXUL2RsjeoOFVKBcIcjobqHPswHmbVT
ku8BdFQhgRYvn6Z066m9NDznL9nr8Q6mfdfx6E+byfrsrYXOZSQ=
-----END CERTIFICATE-----
Generated at Wed Jun 3 03:15:58 2026 by rpki-client