
Manifest
$ rpki-client -vvf repo-rpki.idnic.net/repo/34a23c4e-3932-43bd-8176-f6251ddea842/0/F40A3B698C292462E4AF862C69FB242F66E56191.mft
File: F40A3B698C292462E4AF862C69FB242F66E56191.mft (raw, json)
Hash identifier: fDX4LrfvoYSG6SxggPx0mr5rdLnym/OrB3vdDC+KqyQ=
Subject key identifier: CF:5A:0B:DA:A3:42:80:9D:39:CE:AD:FE:FB:14:AA:CA:07:A3:81:C7
Authority key identifier: F4:0A:3B:69:8C:29:24:62:E4:AF:86:2C:69:FB:24:2F:66:E5:61:91
Certificate issuer: /CN=F40A3B698C292462E4AF862C69FB242F66E56191
Certificate serial: 5E4B87A946EFA9D493A2041EA2CE6482F7486C29
Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/F40A3B698C292462E4AF862C69FB242F66E56191.cer
Subject info access: rsync://repo-rpki.idnic.net/repo/34a23c4e-3932-43bd-8176-f6251ddea842/0/F40A3B698C292462E4AF862C69FB242F66E56191.mft
Manifest number: 036C
Signing time: Tue 28 Apr 2026 15:31:05 +0000
Manifest this update: Tue 28 Apr 2026 15:26:05 +0000
Manifest next update: Fri 01 May 2026 16:23:05 +0000
Files and hashes: 1: 3130332e3137342e33362e302f32332d3234203d3e20313331313131.roa (hash: gIT/zHc/1K0b1PiVmUPHw03fHkctz7eSoTHWuLp5tjo=)
2: F40A3B698C292462E4AF862C69FB242F66E56191.crl (hash: LEonXfQbqzKu80/I7h2v5pKPui7bRWdAd/Zy3KGmIqY=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
5e:4b:87:a9:46:ef:a9:d4:93:a2:04:1e:a2:ce:64:82:f7:48:6c:29
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F40A3B698C292462E4AF862C69FB242F66E56191
Validity
Not Before: Apr 28 15:26:05 2026 GMT
Not After : May 1 16:23:05 2026 GMT
Subject: CN=CF5A0BDAA342809D39CEADFEFB14AACA07A381C7
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ec:ca:75:9b:06:c4:ef:ce:6c:ab:ee:1f:20:8f:
54:9d:b5:fc:c2:32:15:19:95:29:a9:33:35:47:3c:
c1:3a:50:4c:37:55:28:15:66:b0:09:c9:e2:ef:e5:
1c:84:c8:ca:09:20:30:9e:e0:0c:2e:4c:8d:ac:02:
4c:1e:a0:f6:51:b9:cb:72:6f:36:88:f9:c2:38:c0:
67:8c:ed:8b:35:78:25:71:23:c6:ba:64:51:21:3e:
ff:86:c5:55:d8:d6:a8:09:fc:21:6a:5a:8f:25:37:
62:86:0d:f7:e2:5a:7f:c2:cf:0e:63:8d:1e:44:6b:
bc:b4:ad:75:17:ec:9b:8c:65:b8:54:f2:03:2e:82:
95:d1:c4:bc:f5:d5:cb:95:b1:e0:e2:1e:e9:76:09:
7d:8e:24:5d:55:7b:42:db:14:2e:fd:6e:03:09:a5:
ce:6d:f5:15:76:42:4a:e6:59:e1:8a:da:37:a8:6e:
c9:d3:31:fe:ae:1e:18:4e:cc:ea:7f:12:bd:2d:7a:
a6:1b:5f:28:ef:8b:3d:2d:43:d1:dd:40:77:fc:99:
d1:38:70:2b:ac:c1:56:36:31:85:68:c8:0c:18:b5:
e6:ed:16:9b:8a:c3:7d:15:60:b1:3c:c7:b5:21:47:
f8:47:82:7f:dc:9e:95:9a:83:98:ee:5c:d1:c1:bc:
48:09
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
CF:5A:0B:DA:A3:42:80:9D:39:CE:AD:FE:FB:14:AA:CA:07:A3:81:C7
X509v3 Authority Key Identifier:
keyid:F4:0A:3B:69:8C:29:24:62:E4:AF:86:2C:69:FB:24:2F:66:E5:61:91
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://repo-rpki.idnic.net/repo/34a23c4e-3932-43bd-8176-f6251ddea842/0/F40A3B698C292462E4AF862C69FB242F66E56191.crl
Authority Information Access:
CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/F40A3B698C292462E4AF862C69FB242F66E56191.cer
Subject Information Access:
Signed Object - URI:rsync://repo-rpki.idnic.net/repo/34a23c4e-3932-43bd-8176-f6251ddea842/0/F40A3B698C292462E4AF862C69FB242F66E56191.mft
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
3d:d6:16:a6:51:78:40:d2:78:9c:2e:57:40:94:7a:e8:fb:0b:
f8:cb:6e:15:05:2c:1a:5b:f1:18:e3:37:bf:d0:9a:e6:10:6b:
69:09:52:b0:76:bd:83:00:5d:d0:d9:b9:a7:c9:ef:f9:b7:89:
93:26:85:fb:44:d5:a4:c1:85:a7:a6:e0:4a:d1:94:ea:5d:e4:
53:ca:05:cb:7d:f8:51:be:d4:22:70:25:be:7f:dc:2e:cf:7b:
cc:92:41:95:8a:1e:19:47:a0:f3:47:dd:8b:86:95:aa:85:93:
e6:c8:c0:35:22:52:1b:97:2b:aa:4b:69:c8:d2:20:93:f8:d5:
30:bf:1a:4d:50:64:58:2f:71:22:5c:df:08:51:a4:d5:6a:46:
05:24:38:5f:0e:ec:f0:24:1f:aa:09:34:f4:65:f8:02:91:29:
8d:42:d0:a6:06:d3:c0:09:36:d1:b5:1c:e8:4a:cf:0c:45:1b:
b0:63:51:3c:84:6a:09:21:4f:4a:b5:88:6c:1f:59:0f:5f:a9:
ee:7a:45:45:31:c0:24:ac:a2:59:77:88:c0:36:1c:b2:e2:5c:
06:12:1e:5c:65:f1:db:a8:f4:ca:7b:fa:d3:04:e0:b6:58:38:
3f:ab:82:ac:5f:9d:e8:42:3e:c6:c0:78:56:56:f3:c5:0f:63:
d7:c9:79:b1
-----BEGIN CERTIFICATE-----
MIIFMjCCBBqgAwIBAgIUXkuHqUbvqdSTogQeos5kgvdIbCkwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoRjQwQTNCNjk4QzI5MjQ2MkU0QUY4NjJDNjlGQjI0MkY2
NkU1NjE5MTAeFw0yNjA0MjgxNTI2MDVaFw0yNjA1MDExNjIzMDVaMDMxMTAvBgNV
BAMTKENGNUEwQkRBQTM0MjgwOUQzOUNFQURGRUZCMTRBQUNBMDdBMzgxQzcwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDsynWbBsTvzmyr7h8gj1SdtfzC
MhUZlSmpMzVHPME6UEw3VSgVZrAJyeLv5RyEyMoJIDCe4AwuTI2sAkweoPZRucty
bzaI+cI4wGeM7Ys1eCVxI8a6ZFEhPv+GxVXY1qgJ/CFqWo8lN2KGDffiWn/Czw5j
jR5Ea7y0rXUX7JuMZbhU8gMugpXRxLz11cuVseDiHul2CX2OJF1Ve0LbFC79bgMJ
pc5t9RV2QkrmWeGK2jeobsnTMf6uHhhOzOp/Er0teqYbXyjviz0tQ9HdQHf8mdE4
cCuswVY2MYVoyAwYtebtFpuKw30VYLE8x7UhR/hHgn/cnpWag5juXNHBvEgJAgMB
AAGjggI8MIICODAdBgNVHQ4EFgQUz1oL2qNCgJ05zq3++xSqygejgccwHwYDVR0j
BBgwFoAU9Ao7aYwpJGLkr4YsafskL2blYZEwDgYDVR0PAQH/BAQDAgeAMIGFBgNV
HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby8z
NGEyM2M0ZS0zOTMyLTQzYmQtODE3Ni1mNjI1MWRkZWE4NDIvMC9GNDBBM0I2OThD
MjkyNDYyRTRBRjg2MkM2OUZCMjQyRjY2RTU2MTkxLmNybDB0BggrBgEFBQcBAQRo
MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv
L0lETklDLUlELzIvRjQwQTNCNjk4QzI5MjQ2MkU0QUY4NjJDNjlGQjI0MkY2NkU1
NjE5MS5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6
Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vMzRhMjNjNGUtMzkzMi00M2JkLTgx
NzYtZjYyNTFkZGVhODQyLzAvRjQwQTNCNjk4QzI5MjQ2MkU0QUY4NjJDNjlGQjI0
MkY2NkU1NjE5MS5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF
BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC
BQAwDQYJKoZIhvcNAQELBQADggEBAD3WFqZReEDSeJwuV0CUeuj7C/jLbhUFLBpb
8RjjN7/QmuYQa2kJUrB2vYMAXdDZuafJ7/m3iZMmhftE1aTBhaem4ErRlOpd5FPK
Bct9+FG+1CJwJb5/3C7Pe8ySQZWKHhlHoPNH3YuGlaqFk+bIwDUiUhuXK6pLacjS
IJP41TC/Gk1QZFgvcSJc3whRpNVqRgUkOF8O7PAkH6oJNPRl+AKRKY1C0KYG08AJ
NtG1HOhKzwxFG7BjUTyEagkhT0q1iGwfWQ9fqe56RUUxwCSsoll3iMA2HLLiXAYS
Hlxl8duo9Mp7+tME4LZYOD+rgqxfnehCPsbAeFZW88UPY9fJebE=
-----END CERTIFICATE-----
Generated at Wed Jun 3 03:17:59 2026 by rpki-client