Manifest
$ rpki-client -vvf repo-rpki.idnic.net/repo/3baf365e-05de-4c39-bf96-83e939bed7df/0/33F0041B7CC6D4139AB23B3CD10C56E51233C589.mft
File: 33F0041B7CC6D4139AB23B3CD10C56E51233C589.mft (raw, json)
Hash identifier: Rx3vzrenE5Ni3YQKcIrhqeyDFjc/n7Yw51gjXFJcIKY=
Subject key identifier: BC:EC:D6:3D:58:D3:C6:61:E8:71:60:D7:E9:0F:B1:A9:90:57:71:BD
Authority key identifier: 33:F0:04:1B:7C:C6:D4:13:9A:B2:3B:3C:D1:0C:56:E5:12:33:C5:89
Certificate issuer: /CN=33F0041B7CC6D4139AB23B3CD10C56E51233C589
Certificate serial: 5A87817648C0A7A5C22EBA57DF96F4541E1164F0
Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/33F0041B7CC6D4139AB23B3CD10C56E51233C589.cer
Subject info access: rsync://repo-rpki.idnic.net/repo/3baf365e-05de-4c39-bf96-83e939bed7df/0/33F0041B7CC6D4139AB23B3CD10C56E51233C589.mft
Manifest number: 056C
Signing time: Tue 28 Apr 2026 17:32:01 +0000
Manifest this update: Tue 28 Apr 2026 17:27:01 +0000
Manifest next update: Fri 01 May 2026 23:01:01 +0000
Files and hashes: 1: 33F0041B7CC6D4139AB23B3CD10C56E51233C589.crl (hash: 5Yj9uM/fZkKtlO14fvFcgFErrdEIm+W9I/lk3GzOciQ=)
2: 3130332e3135322e372e302f32342d3234203d3e20313430343236.roa (hash: SqOaXQt4sheoHjLEWCQY+hr/jk21P7Mbb0/p3ua6+Wo=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
5a:87:81:76:48:c0:a7:a5:c2:2e:ba:57:df:96:f4:54:1e:11:64:f0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=33F0041B7CC6D4139AB23B3CD10C56E51233C589
Validity
Not Before: Apr 28 17:27:01 2026 GMT
Not After : May 1 23:01:01 2026 GMT
Subject: CN=BCECD63D58D3C661E87160D7E90FB1A9905771BD
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ee:78:af:ea:85:02:bc:15:c0:82:25:81:de:29:
1a:c7:f3:30:4b:44:da:f0:08:13:86:06:be:d4:44:
b0:c5:5a:d1:fc:5b:00:ae:c4:11:f8:3a:a9:30:bc:
e0:7b:03:09:32:6d:2e:1c:05:df:1d:61:cb:e8:54:
83:2c:e3:48:51:59:ea:53:75:c7:9c:3e:7f:13:bd:
d4:04:c5:f9:50:7b:f7:ba:3f:f7:fd:51:8e:80:1c:
cb:85:ba:f8:ce:e2:b8:dd:54:99:7f:3d:b5:e8:c5:
f5:b4:1c:91:c8:05:fa:54:82:5e:02:68:36:b5:c5:
97:bf:f8:88:4a:ce:f2:35:98:0e:92:5a:7c:cf:ac:
96:99:f1:91:8c:50:07:f9:24:71:9c:0d:1a:75:25:
90:e1:ff:d4:eb:52:3c:f2:96:d5:0e:c7:cb:cb:c6:
4e:d7:d2:e5:92:11:a1:2c:72:cb:fa:d2:26:d6:d8:
0a:92:43:ea:ad:a3:45:7e:28:6d:5f:0f:c3:b3:ee:
9b:69:dc:1c:4f:69:c9:72:61:d3:0c:b7:aa:89:d4:
78:18:7b:da:2e:6b:16:e6:87:b3:10:4f:ce:92:b2:
e1:75:85:6c:79:a5:32:33:e7:c4:fa:1a:23:5b:c5:
6f:08:ff:99:3b:4d:ef:c4:11:a4:f3:54:59:26:5a:
ac:f7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
BC:EC:D6:3D:58:D3:C6:61:E8:71:60:D7:E9:0F:B1:A9:90:57:71:BD
X509v3 Authority Key Identifier:
keyid:33:F0:04:1B:7C:C6:D4:13:9A:B2:3B:3C:D1:0C:56:E5:12:33:C5:89
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://repo-rpki.idnic.net/repo/3baf365e-05de-4c39-bf96-83e939bed7df/0/33F0041B7CC6D4139AB23B3CD10C56E51233C589.crl
Authority Information Access:
CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/33F0041B7CC6D4139AB23B3CD10C56E51233C589.cer
Subject Information Access:
Signed Object - URI:rsync://repo-rpki.idnic.net/repo/3baf365e-05de-4c39-bf96-83e939bed7df/0/33F0041B7CC6D4139AB23B3CD10C56E51233C589.mft
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
0a:60:56:93:0c:9c:f6:a5:26:04:86:01:46:be:01:85:0a:86:
28:56:92:91:cf:ed:cd:46:ab:b7:6d:97:c8:20:b0:b5:e5:51:
9a:44:4b:88:e6:81:b9:86:16:e3:6b:70:cf:65:70:7e:68:0f:
30:e5:40:2c:2d:b3:91:68:51:23:93:22:d4:8f:a8:98:de:0f:
92:45:3c:65:c5:f2:04:13:d7:f6:76:73:df:e9:2d:7e:37:fd:
95:f8:71:3c:9d:f2:49:63:3a:94:7c:d3:a3:ea:fd:5d:85:16:
fe:f8:98:69:f1:17:e0:9e:77:ba:9c:4e:9b:4b:2d:34:65:00:
7f:9f:2f:96:09:27:07:ab:14:02:f0:86:33:32:02:72:35:93:
9f:d8:9c:c2:7d:b1:58:57:44:a5:59:e7:af:76:81:7e:d7:b9:
da:b9:f0:90:ab:23:9b:be:5a:d5:c1:55:7d:54:7b:db:1f:03:
9c:30:69:99:89:c0:4f:48:38:49:71:f2:81:22:a8:bb:2a:9b:
b2:a7:a4:6f:04:26:ca:d8:1b:73:d7:d7:d5:1c:4b:b7:5c:14:
06:9e:43:2c:cb:b9:f3:00:06:40:be:f1:15:5c:bf:fd:77:cf:
84:88:88:82:95:41:2e:6a:c3:01:a8:33:1d:bc:80:6f:48:ca:
c9:80:96:39
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jun 3 03:08:36 2026 by rpki-client