Manifest
$ rpki-client -vvf repo-rpki.idnic.net/repo/3cc5605d-f17a-4010-9253-210c64f148bd/0/D21A3597D7B5EBD9A547680F1C2ED7A464DD9F26.mft
File: D21A3597D7B5EBD9A547680F1C2ED7A464DD9F26.mft (raw, json)
Hash identifier: DQa3p903nK+ShB3kTMC38ELte0PTBh05TywLJiW9SZc=
Subject key identifier: 0C:D8:5B:23:9B:62:A0:9D:53:AA:CA:86:D8:75:CD:7A:71:E3:02:81
Authority key identifier: D2:1A:35:97:D7:B5:EB:D9:A5:47:68:0F:1C:2E:D7:A4:64:DD:9F:26
Certificate issuer: /CN=D21A3597D7B5EBD9A547680F1C2ED7A464DD9F26
Certificate serial: 165F5A0316BC9C2F161934D2C2B327A92F3E49B7
Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/D21A3597D7B5EBD9A547680F1C2ED7A464DD9F26.cer
Subject info access: rsync://repo-rpki.idnic.net/repo/3cc5605d-f17a-4010-9253-210c64f148bd/0/D21A3597D7B5EBD9A547680F1C2ED7A464DD9F26.mft
Manifest number: 0283
Signing time: Mon 27 Apr 2026 01:02:02 +0000
Manifest this update: Mon 27 Apr 2026 00:57:02 +0000
Manifest next update: Thu 30 Apr 2026 12:44:02 +0000
Files and hashes: 1: D21A3597D7B5EBD9A547680F1C2ED7A464DD9F26.crl (hash: +ozS3lsBcJTEwKDfOaEJMTEGmKROyo4ykYZPUabtVYA=)
2: 3130332e3138332e362e302f32332d3234203d3e20313439343037.roa (hash: HNI0ArO+KsvaMgGqtyRRpqs1evvFTKgd+Siy8K2ur7A=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
16:5f:5a:03:16:bc:9c:2f:16:19:34:d2:c2:b3:27:a9:2f:3e:49:b7
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=D21A3597D7B5EBD9A547680F1C2ED7A464DD9F26
Validity
Not Before: Apr 27 00:57:02 2026 GMT
Not After : Apr 30 12:44:02 2026 GMT
Subject: CN=0CD85B239B62A09D53AACA86D875CD7A71E30281
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ba:d0:a9:f4:01:0c:99:54:c2:de:2d:4e:d1:d2:
a2:6a:a9:98:a4:89:74:76:cd:93:91:45:ad:68:d2:
06:75:0d:07:d8:7e:a1:92:52:0c:bf:66:c4:1f:c5:
97:48:a5:6c:16:15:84:ba:f9:fb:31:d8:69:e3:8c:
97:4f:02:6a:0f:96:7f:fb:26:b7:fa:e3:51:71:61:
f4:7a:96:1f:a4:ad:e6:bb:d1:c8:05:80:34:a5:17:
6b:80:65:08:4a:ba:bb:6a:b5:dd:a4:05:1f:9d:a2:
7b:ef:53:0f:fd:19:fd:de:fb:30:4c:cc:53:96:18:
b0:29:fd:be:a4:41:72:6e:5e:13:1e:b8:3e:95:ac:
f5:dc:5d:93:1c:17:12:f1:26:db:e5:1c:f3:e2:e5:
f4:12:e5:60:ba:cd:b1:77:22:93:ff:7d:db:2f:29:
ca:0f:57:b2:9a:48:77:ea:7c:d0:86:26:68:bb:ba:
78:90:5e:70:2a:f9:39:97:06:2b:95:9a:b3:9a:0c:
36:52:16:3c:18:15:c6:07:da:e2:4d:3b:1f:9a:48:
86:b7:ca:13:17:9c:ce:a8:5e:d6:0a:bc:3e:73:b4:
0c:1d:1c:79:41:24:62:27:f6:80:85:ef:7e:7c:c7:
6e:09:28:bd:55:07:9a:45:b6:74:b9:3e:69:0a:7e:
38:6f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
0C:D8:5B:23:9B:62:A0:9D:53:AA:CA:86:D8:75:CD:7A:71:E3:02:81
X509v3 Authority Key Identifier:
keyid:D2:1A:35:97:D7:B5:EB:D9:A5:47:68:0F:1C:2E:D7:A4:64:DD:9F:26
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://repo-rpki.idnic.net/repo/3cc5605d-f17a-4010-9253-210c64f148bd/0/D21A3597D7B5EBD9A547680F1C2ED7A464DD9F26.crl
Authority Information Access:
CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/D21A3597D7B5EBD9A547680F1C2ED7A464DD9F26.cer
Subject Information Access:
Signed Object - URI:rsync://repo-rpki.idnic.net/repo/3cc5605d-f17a-4010-9253-210c64f148bd/0/D21A3597D7B5EBD9A547680F1C2ED7A464DD9F26.mft
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
b6:80:dd:43:36:d0:40:96:28:e5:c0:b1:e9:37:58:57:7f:85:
15:1f:c8:60:db:c3:b0:fb:0a:69:3a:4e:d0:3e:ed:ae:3e:4d:
67:93:50:fb:b3:e4:97:ae:23:7c:53:7c:17:ab:e6:78:45:c9:
99:36:92:c3:22:c0:77:04:38:69:66:dc:85:68:ea:c2:0d:ec:
01:aa:30:ec:44:16:bc:cd:2e:d9:2f:a3:17:dd:10:42:21:91:
a3:c0:5e:44:46:a1:1b:a5:fa:13:0e:62:08:5b:23:fd:06:0c:
bb:4c:17:dd:fd:f4:82:62:69:80:de:ee:e1:3e:93:b0:9e:a5:
d2:fc:f9:0e:0b:f1:2b:1d:40:c0:f3:f8:d3:e7:0c:51:c9:e9:
cd:7e:19:64:bd:1a:e8:96:6a:86:8b:57:ee:ea:dd:34:88:26:
5b:a9:46:d7:e3:42:8d:3b:8f:3f:ec:e9:44:c7:bc:07:ca:6c:
68:a4:14:f5:c1:9b:0d:f5:e2:7e:b4:a7:82:a1:16:2a:98:43:
7e:c1:7e:07:a2:9f:62:70:a9:40:76:93:f8:16:ac:8a:7a:8c:
8d:e6:8a:3c:03:fa:69:e3:fa:71:ff:cb:d2:03:08:d2:a9:37:
d7:60:4b:e3:46:ab:fe:e4:eb:e8:57:a9:ca:fc:8c:78:95:95:
df:86:56:73
-----BEGIN CERTIFICATE-----
MIIFMjCCBBqgAwIBAgIUFl9aAxa8nC8WGTTSwrMnqS8+SbcwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoRDIxQTM1OTdEN0I1RUJEOUE1NDc2ODBGMUMyRUQ3QTQ2
NEREOUYyNjAeFw0yNjA0MjcwMDU3MDJaFw0yNjA0MzAxMjQ0MDJaMDMxMTAvBgNV
BAMTKDBDRDg1QjIzOUI2MkEwOUQ1M0FBQ0E4NkQ4NzVDRDdBNzFFMzAyODEwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC60Kn0AQyZVMLeLU7R0qJqqZik
iXR2zZORRa1o0gZ1DQfYfqGSUgy/ZsQfxZdIpWwWFYS6+fsx2GnjjJdPAmoPln/7
Jrf641FxYfR6lh+krea70cgFgDSlF2uAZQhKurtqtd2kBR+donvvUw/9Gf3e+zBM
zFOWGLAp/b6kQXJuXhMeuD6VrPXcXZMcFxLxJtvlHPPi5fQS5WC6zbF3IpP/fdsv
KcoPV7KaSHfqfNCGJmi7uniQXnAq+TmXBiuVmrOaDDZSFjwYFcYH2uJNOx+aSIa3
yhMXnM6oXtYKvD5ztAwdHHlBJGIn9oCF7358x24JKL1VB5pFtnS5PmkKfjhvAgMB
AAGjggI8MIICODAdBgNVHQ4EFgQUDNhbI5tioJ1TqsqG2HXNenHjAoEwHwYDVR0j
BBgwFoAU0ho1l9e169mlR2gPHC7XpGTdnyYwDgYDVR0PAQH/BAQDAgeAMIGFBgNV
HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby8z
Y2M1NjA1ZC1mMTdhLTQwMTAtOTI1My0yMTBjNjRmMTQ4YmQvMC9EMjFBMzU5N0Q3
QjVFQkQ5QTU0NzY4MEYxQzJFRDdBNDY0REQ5RjI2LmNybDB0BggrBgEFBQcBAQRo
MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv
L0lETklDLUlELzIvRDIxQTM1OTdEN0I1RUJEOUE1NDc2ODBGMUMyRUQ3QTQ2NERE
OUYyNi5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6
Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vM2NjNTYwNWQtZjE3YS00MDEwLTky
NTMtMjEwYzY0ZjE0OGJkLzAvRDIxQTM1OTdEN0I1RUJEOUE1NDc2ODBGMUMyRUQ3
QTQ2NEREOUYyNi5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF
BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC
BQAwDQYJKoZIhvcNAQELBQADggEBALaA3UM20ECWKOXAsek3WFd/hRUfyGDbw7D7
Cmk6TtA+7a4+TWeTUPuz5JeuI3xTfBer5nhFyZk2ksMiwHcEOGlm3IVo6sIN7AGq
MOxEFrzNLtkvoxfdEEIhkaPAXkRGoRul+hMOYghbI/0GDLtMF9399IJiaYDe7uE+
k7CepdL8+Q4L8SsdQMDz+NPnDFHJ6c1+GWS9GuiWaoaLV+7q3TSIJlupRtfjQo07
jz/s6UTHvAfKbGikFPXBmw314n60p4KhFiqYQ37Bfgein2JwqUB2k/gWrIp6jI3m
ijwD+mnj+nH/y9IDCNKpN9dgS+NGq/7k6+hXqcr8jHiVld+GVnM=
-----END CERTIFICATE-----
Generated at Wed Jun 3 03:12:08 2026 by rpki-client