
Manifest
$ rpki-client -vvf repo-rpki.idnic.net/repo/38c7396c-4bbe-4c6e-8f50-442c205e070c/0/3D1D449731556F8E1451DE65BB2E0F88EFCE0CA0.mft
File: 3D1D449731556F8E1451DE65BB2E0F88EFCE0CA0.mft (raw, json)
Hash identifier: /OusdHfXWCljyU3/tHoERCS7qCi+fANofUwwSCh09uc=
Subject key identifier: 1C:04:5B:E9:23:43:E7:6A:18:4C:D7:7D:A2:51:99:FF:8F:0C:29:EB
Authority key identifier: 3D:1D:44:97:31:55:6F:8E:14:51:DE:65:BB:2E:0F:88:EF:CE:0C:A0
Certificate issuer: /CN=3D1D449731556F8E1451DE65BB2E0F88EFCE0CA0
Certificate serial: 411DA07B772148FC5FFC988697D9C2FF8CA061BE
Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/3D1D449731556F8E1451DE65BB2E0F88EFCE0CA0.cer
Subject info access: rsync://repo-rpki.idnic.net/repo/38c7396c-4bbe-4c6e-8f50-442c205e070c/0/3D1D449731556F8E1451DE65BB2E0F88EFCE0CA0.mft
Manifest number: 056A
Signing time: Mon 27 Apr 2026 23:11:31 +0000
Manifest this update: Mon 27 Apr 2026 23:06:31 +0000
Manifest next update: Fri 01 May 2026 08:32:31 +0000
Files and hashes: 1: 3D1D449731556F8E1451DE65BB2E0F88EFCE0CA0.crl (hash: ixqJXAy5PDN9aY8yhuR+DoQQtBGv3/f3ZjjYpMze9+M=)
2: 3230322e39332e3131322e302f32302d3234203d3e203233363936.roa (hash: LtScTHZoxOHSbHhuqbZIrkhW+lipK1u0xCr0E9aMFWE=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
41:1d:a0:7b:77:21:48:fc:5f:fc:98:86:97:d9:c2:ff:8c:a0:61:be
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3D1D449731556F8E1451DE65BB2E0F88EFCE0CA0
Validity
Not Before: Apr 27 23:06:31 2026 GMT
Not After : May 1 08:32:31 2026 GMT
Subject: CN=1C045BE92343E76A184CD77DA25199FF8F0C29EB
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bf:83:f7:8d:b2:56:72:5e:69:0c:0f:88:4a:87:
bc:82:c6:cc:d1:d8:48:63:78:d8:30:81:9f:f6:2c:
b4:ba:aa:c4:b3:dd:b0:ee:f9:09:16:c6:e7:da:90:
c5:26:d6:e8:0a:c2:f3:19:72:81:dc:b9:f4:c8:dc:
21:65:60:84:f9:81:ea:26:c7:f4:e1:d3:17:fb:4d:
a4:c0:cd:0f:98:e5:b5:9d:03:42:ba:9b:45:50:4b:
8f:c3:e0:89:ff:5e:f2:97:51:6c:3d:e7:05:2f:38:
97:fc:d4:28:bb:22:9b:63:a8:cc:cb:1c:a2:22:f6:
4e:6f:ff:c1:d5:de:5c:6c:87:7b:f8:92:68:0f:b9:
c3:24:8b:e7:df:bc:9f:bc:0c:5a:1d:f3:b1:7b:6a:
4f:ad:fc:7c:1e:48:34:e7:28:51:02:d9:0e:aa:df:
22:76:62:0d:a9:b8:5b:f9:b1:6b:f9:17:ac:f1:8b:
2f:9f:a7:89:81:fc:2b:5d:c2:db:eb:81:35:31:fe:
74:09:09:18:5b:08:31:e2:fc:29:79:97:2e:81:2d:
be:22:3b:a2:73:ab:77:e6:e3:d4:df:0c:8c:a9:9b:
c9:e8:fd:f3:2e:74:28:ec:ab:1e:c2:fc:06:57:da:
da:14:64:f6:f0:96:cd:4e:96:e9:de:ab:d4:d5:b6:
5e:b1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
1C:04:5B:E9:23:43:E7:6A:18:4C:D7:7D:A2:51:99:FF:8F:0C:29:EB
X509v3 Authority Key Identifier:
keyid:3D:1D:44:97:31:55:6F:8E:14:51:DE:65:BB:2E:0F:88:EF:CE:0C:A0
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://repo-rpki.idnic.net/repo/38c7396c-4bbe-4c6e-8f50-442c205e070c/0/3D1D449731556F8E1451DE65BB2E0F88EFCE0CA0.crl
Authority Information Access:
CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/3D1D449731556F8E1451DE65BB2E0F88EFCE0CA0.cer
Subject Information Access:
Signed Object - URI:rsync://repo-rpki.idnic.net/repo/38c7396c-4bbe-4c6e-8f50-442c205e070c/0/3D1D449731556F8E1451DE65BB2E0F88EFCE0CA0.mft
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
11:aa:3a:ac:fd:04:5f:5e:28:09:aa:23:a3:17:56:a6:14:3d:
2d:ec:09:24:8f:83:d0:43:f0:02:b3:be:7f:6c:b7:b5:a0:25:
bf:88:8f:ef:96:2f:c9:b9:7c:c3:07:51:51:17:53:a3:cb:6f:
47:a2:f7:8e:f0:b3:5f:1f:40:82:09:ad:a6:1e:5a:a4:63:63:
67:03:f6:93:a4:a8:76:37:0b:aa:20:98:ae:6c:ea:25:b5:31:
94:33:9f:69:c1:d7:92:d4:44:83:40:04:72:87:6f:df:2e:26:
0d:c7:bd:88:90:71:a4:f5:26:3d:6d:13:74:41:b6:9d:5d:19:
92:b0:05:03:74:60:ac:f8:66:af:ca:b6:5e:f5:3b:fd:75:16:
e6:7b:22:00:11:9b:69:e4:60:a1:bd:4f:9d:e4:af:4f:b6:31:
e0:16:53:89:d6:a3:64:7b:0b:11:d8:00:e8:09:c6:5e:0e:42:
89:53:7f:3b:f8:9b:75:f1:9e:68:de:06:14:b9:eb:d7:cb:a3:
f6:d9:72:2c:c3:15:e1:c9:26:c4:7d:57:fb:c7:99:1a:7c:9f:
82:51:24:88:43:03:2f:8b:75:7d:ef:c7:38:fa:11:d4:21:be:
d3:e8:6e:ef:b6:96:75:ca:f7:bb:ad:1f:6b:48:d9:a0:35:a9:
c0:3b:39:d8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jun 3 03:09:04 2026 by rpki-client