Manifest
$ rpki-client -vvf repo-rpki.idnic.net/repo/3144d97a-e3fb-4ffc-b7f7-f7b8b6659ac4/1/D5C9299AE00F0035704B10A84310B3C3DAD9BE19.mft
File: D5C9299AE00F0035704B10A84310B3C3DAD9BE19.mft (raw, json)
Hash identifier: PmsRnYn9aHeM6PuDTAcLnJZ/Mp0+1walBl8RdSa31TY=
Subject key identifier: 11:09:FE:D8:58:E4:39:48:90:FE:66:BF:62:1B:11:0D:FA:D6:32:B7
Authority key identifier: D5:C9:29:9A:E0:0F:00:35:70:4B:10:A8:43:10:B3:C3:DA:D9:BE:19
Certificate issuer: /CN=D5C9299AE00F0035704B10A84310B3C3DAD9BE19
Certificate serial: 5DC3590B19419794594EE296B5FB02FDCB22B7C7
Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/D5C9299AE00F0035704B10A84310B3C3DAD9BE19.cer
Subject info access: rsync://repo-rpki.idnic.net/repo/3144d97a-e3fb-4ffc-b7f7-f7b8b6659ac4/1/D5C9299AE00F0035704B10A84310B3C3DAD9BE19.mft
Manifest number: 0141
Signing time: Mon 27 Apr 2026 11:42:36 +0000
Manifest this update: Mon 27 Apr 2026 11:37:36 +0000
Manifest next update: Thu 30 Apr 2026 18:18:36 +0000
Files and hashes: 1: D5C9299AE00F0035704B10A84310B3C3DAD9BE19.crl (hash: JsMkuKMSugfBQ0JHrS1y82tarZVkGQngwGvYZ6I4bA4=)
2: 3130332e3136302e3230312e302f32342d3234203d3e20313431363030.roa (hash: VrbRBoxOLArpkrqv0CgqRXIbC24YLbBmO0Yj8Vtecy4=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
5d:c3:59:0b:19:41:97:94:59:4e:e2:96:b5:fb:02:fd:cb:22:b7:c7
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=D5C9299AE00F0035704B10A84310B3C3DAD9BE19
Validity
Not Before: Apr 27 11:37:36 2026 GMT
Not After : Apr 30 18:18:36 2026 GMT
Subject: CN=1109FED858E4394890FE66BF621B110DFAD632B7
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:af:3a:9b:55:4a:a6:2d:46:cc:a7:d8:d5:0c:ef:
af:05:6d:f7:20:47:5e:83:f4:0e:8e:a5:9b:f7:45:
6e:5a:fc:ff:66:57:0e:3c:ea:a5:2b:00:44:14:7c:
a1:fd:d0:98:4a:b4:70:ef:9b:52:0c:2f:dc:8e:88:
2b:3c:60:04:72:08:58:bb:df:13:0d:6d:5c:b4:e9:
6f:33:e5:86:1d:65:d1:1b:37:a7:9f:38:a5:04:9a:
c6:5f:c0:42:19:3d:eb:9f:92:f4:05:68:66:b7:97:
8f:a7:09:95:5d:dc:94:74:cc:2d:56:bd:c5:ca:16:
39:d8:3c:87:8c:eb:81:05:95:62:76:2c:10:17:f8:
2e:b4:8f:70:d0:01:80:f4:7b:5d:94:c5:f2:ea:e8:
5b:1f:6a:52:8f:5b:dd:87:a9:9b:03:3e:49:20:de:
2e:62:16:93:76:db:bb:bb:03:1f:f5:1b:e4:8b:79:
e5:f5:39:80:64:e8:29:da:fc:dc:fa:91:26:ff:fb:
58:42:c1:ab:27:47:4a:c9:9a:23:fd:2a:0f:25:98:
a1:08:10:38:e7:67:b7:80:b7:32:3c:36:ed:b1:f8:
d3:aa:7f:93:c2:bc:b7:36:0a:fd:62:71:29:c4:b8:
29:78:eb:85:26:a8:41:fe:86:9e:0a:f0:f2:87:b9:
46:7f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
11:09:FE:D8:58:E4:39:48:90:FE:66:BF:62:1B:11:0D:FA:D6:32:B7
X509v3 Authority Key Identifier:
keyid:D5:C9:29:9A:E0:0F:00:35:70:4B:10:A8:43:10:B3:C3:DA:D9:BE:19
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://repo-rpki.idnic.net/repo/3144d97a-e3fb-4ffc-b7f7-f7b8b6659ac4/1/D5C9299AE00F0035704B10A84310B3C3DAD9BE19.crl
Authority Information Access:
CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/D5C9299AE00F0035704B10A84310B3C3DAD9BE19.cer
Subject Information Access:
Signed Object - URI:rsync://repo-rpki.idnic.net/repo/3144d97a-e3fb-4ffc-b7f7-f7b8b6659ac4/1/D5C9299AE00F0035704B10A84310B3C3DAD9BE19.mft
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
59:57:f6:01:15:3e:d4:cb:15:37:d5:c4:df:31:42:20:e9:35:
7d:96:d9:3b:cf:e1:55:68:8a:ea:20:84:a9:e9:65:82:af:6d:
c9:17:bc:04:9f:83:40:40:50:94:01:36:92:62:f1:0b:0a:aa:
92:82:20:d5:78:12:c4:bd:15:03:79:56:92:3c:ac:b8:5d:0a:
10:05:fc:e8:ae:68:b2:45:fa:68:a9:99:15:4c:a6:18:7d:aa:
11:0a:47:3b:58:97:de:44:1f:d6:d6:63:4d:63:a4:e2:99:e2:
66:29:35:bd:2d:ba:83:5d:22:8c:7c:24:15:cf:c9:cb:83:40:
f0:9b:48:d1:af:de:7a:d5:b7:8c:e2:f6:35:75:bb:2b:e8:57:
d5:88:af:44:f3:d0:79:33:2e:a4:b9:73:30:52:5f:1f:53:52:
95:5d:ba:2d:0a:67:de:4d:22:19:42:71:4c:5a:45:05:0a:4d:
43:1f:19:ff:c1:50:b7:82:65:0d:b9:3c:20:87:bc:c2:de:ea:
16:cd:4b:c9:ef:34:9f:dc:9a:2e:bd:ce:d8:f1:fc:f2:d6:38:
bd:69:b6:b3:1f:8a:27:8d:ea:f3:fd:60:bb:03:da:5d:df:d3:
c7:d9:3c:c5:7a:78:5f:c3:6a:d4:b4:ab:04:09:ad:10:c1:d7:
cc:7c:27:0c
-----BEGIN CERTIFICATE-----
MIIFMjCCBBqgAwIBAgIUXcNZCxlBl5RZTuKWtfsC/csit8cwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoRDVDOTI5OUFFMDBGMDAzNTcwNEIxMEE4NDMxMEIzQzNE
QUQ5QkUxOTAeFw0yNjA0MjcxMTM3MzZaFw0yNjA0MzAxODE4MzZaMDMxMTAvBgNV
BAMTKDExMDlGRUQ4NThFNDM5NDg5MEZFNjZCRjYyMUIxMTBERkFENjMyQjcwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCvOptVSqYtRsyn2NUM768Fbfcg
R16D9A6OpZv3RW5a/P9mVw486qUrAEQUfKH90JhKtHDvm1IML9yOiCs8YARyCFi7
3xMNbVy06W8z5YYdZdEbN6efOKUEmsZfwEIZPeufkvQFaGa3l4+nCZVd3JR0zC1W
vcXKFjnYPIeM64EFlWJ2LBAX+C60j3DQAYD0e12UxfLq6FsfalKPW92HqZsDPkkg
3i5iFpN227u7Ax/1G+SLeeX1OYBk6Cna/Nz6kSb/+1hCwasnR0rJmiP9Kg8lmKEI
EDjnZ7eAtzI8Nu2x+NOqf5PCvLc2Cv1icSnEuCl464UmqEH+hp4K8PKHuUZ/AgMB
AAGjggI8MIICODAdBgNVHQ4EFgQUEQn+2FjkOUiQ/ma/YhsRDfrWMrcwHwYDVR0j
BBgwFoAU1ckpmuAPADVwSxCoQxCzw9rZvhkwDgYDVR0PAQH/BAQDAgeAMIGFBgNV
HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby8z
MTQ0ZDk3YS1lM2ZiLTRmZmMtYjdmNy1mN2I4YjY2NTlhYzQvMS9ENUM5Mjk5QUUw
MEYwMDM1NzA0QjEwQTg0MzEwQjNDM0RBRDlCRTE5LmNybDB0BggrBgEFBQcBAQRo
MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv
L0lETklDLUlELzIvRDVDOTI5OUFFMDBGMDAzNTcwNEIxMEE4NDMxMEIzQzNEQUQ5
QkUxOS5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6
Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vMzE0NGQ5N2EtZTNmYi00ZmZjLWI3
ZjctZjdiOGI2NjU5YWM0LzEvRDVDOTI5OUFFMDBGMDAzNTcwNEIxMEE4NDMxMEIz
QzNEQUQ5QkUxOS5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF
BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC
BQAwDQYJKoZIhvcNAQELBQADggEBAFlX9gEVPtTLFTfVxN8xQiDpNX2W2TvP4VVo
iuoghKnpZYKvbckXvASfg0BAUJQBNpJi8QsKqpKCINV4EsS9FQN5VpI8rLhdChAF
/OiuaLJF+mipmRVMphh9qhEKRztYl95EH9bWY01jpOKZ4mYpNb0tuoNdIox8JBXP
ycuDQPCbSNGv3nrVt4zi9jV1uyvoV9WIr0Tz0HkzLqS5czBSXx9TUpVdui0KZ95N
IhlCcUxaRQUKTUMfGf/BULeCZQ25PCCHvMLe6hbNS8nvNJ/cmi69ztjx/PLWOL1p
trMfiieN6vP9YLsD2l3f08fZPMV6eF/DatS0qwQJrRDB18x8Jww=
-----END CERTIFICATE-----
Generated at Sun Jul 19 06:39:13 2026 by rpki-client