
Manifest
$ rpki-client -vvf repo-rpki.idnic.net/repo/48c07441-cd9d-4d85-aab4-65f5dd4ed7e0/0/3241D89371FF3D3AFC0BA911E316A825484B3FDA.mft
File: 3241D89371FF3D3AFC0BA911E316A825484B3FDA.mft (raw, json)
Hash identifier: YSR7WBMuX3zIieKpaTh+uO6cGho+Na3zEHpKq+qd+Ug=
Subject key identifier: 5D:B6:0F:96:A2:ED:FF:7C:4B:FE:FE:FB:73:E2:00:E6:CC:47:68:9F
Authority key identifier: 32:41:D8:93:71:FF:3D:3A:FC:0B:A9:11:E3:16:A8:25:48:4B:3F:DA
Certificate issuer: /CN=3241D89371FF3D3AFC0BA911E316A825484B3FDA
Certificate serial: 030CDAD40CCAB4356857E7238E9B038A936FD4A8
Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/3241D89371FF3D3AFC0BA911E316A825484B3FDA.cer
Subject info access: rsync://repo-rpki.idnic.net/repo/48c07441-cd9d-4d85-aab4-65f5dd4ed7e0/0/3241D89371FF3D3AFC0BA911E316A825484B3FDA.mft
Manifest number: 0162
Signing time: Tue 28 Apr 2026 17:22:14 +0000
Manifest this update: Tue 28 Apr 2026 17:17:14 +0000
Manifest next update: Fri 01 May 2026 17:29:14 +0000
Files and hashes: 1: 33362e35302e39372e302f32342d3234203d3e20313532333939.roa (hash: 82ZZd9ZKqDtwhlONQ96AcoNzTHzQmEXlz9QIND1/UOU=)
2: 3241D89371FF3D3AFC0BA911E316A825484B3FDA.crl (hash: 9G83brr3PxaSCRi323c5RC4LOqcIUQdbQ8412CrRIQA=)
3: 33362e35302e39372e302f32342d3234203d3e20333936393832.roa (hash: vBd/o6+RGsJU4ZF5dz1yRiYJvku7rSkDAbo5yX1o1lY=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
03:0c:da:d4:0c:ca:b4:35:68:57:e7:23:8e:9b:03:8a:93:6f:d4:a8
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3241D89371FF3D3AFC0BA911E316A825484B3FDA
Validity
Not Before: Apr 28 17:17:14 2026 GMT
Not After : May 1 17:29:14 2026 GMT
Subject: CN=5DB60F96A2EDFF7C4BFEFEFB73E200E6CC47689F
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c4:c4:58:3f:5b:97:1a:1d:2e:ee:93:65:30:27:
26:62:24:cf:47:d5:3c:ba:9e:90:07:a3:67:3b:55:
0a:57:25:e2:fa:87:f6:45:a7:c1:74:62:30:9e:ca:
6f:5a:45:06:92:30:f0:aa:a0:37:fa:b2:84:31:ca:
de:74:69:88:06:4e:da:f4:2c:41:f3:b7:d0:57:ed:
44:52:e1:7d:29:40:f7:fc:15:7a:25:9f:27:8c:16:
c5:ca:91:ef:df:ea:f4:c7:8f:42:88:c5:bf:cb:27:
4e:31:23:ad:0b:8b:51:a5:86:dc:21:83:45:37:1a:
0d:27:58:0f:22:b9:35:2e:2e:93:0f:5b:28:76:50:
5c:41:4d:e1:b4:b5:0a:86:4b:f0:1b:38:f6:31:8b:
47:18:21:65:7f:ee:12:10:d2:1a:d5:18:3d:2f:92:
ef:1d:ee:4b:bf:4e:08:fd:46:59:f7:98:ef:ac:d8:
b7:fc:0a:f8:db:26:88:32:be:67:f3:7a:a3:b6:f5:
c0:98:da:79:2d:85:7e:45:71:33:a4:3c:20:4e:25:
4a:77:7e:0c:59:23:6b:45:09:7e:a3:eb:5a:0c:d2:
9f:d7:cf:2c:39:ac:d3:df:93:e3:93:95:2c:30:83:
fa:75:0b:23:8d:41:31:10:a4:d8:08:3c:5d:f7:f4:
31:83
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
5D:B6:0F:96:A2:ED:FF:7C:4B:FE:FE:FB:73:E2:00:E6:CC:47:68:9F
X509v3 Authority Key Identifier:
keyid:32:41:D8:93:71:FF:3D:3A:FC:0B:A9:11:E3:16:A8:25:48:4B:3F:DA
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://repo-rpki.idnic.net/repo/48c07441-cd9d-4d85-aab4-65f5dd4ed7e0/0/3241D89371FF3D3AFC0BA911E316A825484B3FDA.crl
Authority Information Access:
CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/3241D89371FF3D3AFC0BA911E316A825484B3FDA.cer
Subject Information Access:
Signed Object - URI:rsync://repo-rpki.idnic.net/repo/48c07441-cd9d-4d85-aab4-65f5dd4ed7e0/0/3241D89371FF3D3AFC0BA911E316A825484B3FDA.mft
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
84:4f:fd:bc:58:a5:21:c4:9b:55:08:5f:b1:b8:aa:be:af:de:
50:7e:ce:bb:a4:b4:d2:87:c8:07:99:d3:99:d5:93:a4:87:cd:
5f:13:c4:4f:60:2f:87:78:4f:b8:79:20:5d:91:1b:0d:30:38:
e0:8a:15:8f:2b:3d:aa:35:6c:dc:77:63:ab:ca:3a:f2:06:a9:
fd:69:08:7f:d8:97:a0:4b:54:78:d5:01:d4:d1:1c:7c:95:f8:
e8:85:de:f1:26:28:23:ee:70:6b:b2:8b:01:1c:3c:c8:fc:43:
a2:fd:76:cf:44:37:02:26:b1:3e:22:d7:91:8b:71:04:de:b8:
55:8b:bc:1f:86:e8:0f:3b:4f:ad:26:94:9c:2c:30:44:02:44:
3e:44:f0:6d:2e:f4:2c:dc:e6:5c:8c:71:f8:15:d4:b4:4a:f7:
d7:f5:8b:b4:ba:97:0a:63:44:27:ce:c9:31:96:ac:ec:e9:0b:
cf:55:8e:02:9e:7f:cf:30:32:66:05:55:44:3a:40:68:0b:f3:
7c:20:f6:09:1f:f5:7d:b6:11:e4:d2:16:c8:d1:76:e1:b5:ea:
7c:ec:b7:57:64:cb:b1:fb:8c:b6:6d:c0:65:8f:9b:89:59:fa:
78:b6:58:ae:c9:8b:49:45:c4:e0:ea:81:f0:87:1a:33:ff:e5:
c1:de:05:3d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jun 3 03:14:35 2026 by rpki-client