Manifest
$ rpki-client -vvf repo-rpki.idnic.net/repo/4b388f6e-9974-4457-af4b-5c9c82f50e97/0/3A5EDACC61BD7D05EBD424BBDBF51D4C50852A67.mft
File: 3A5EDACC61BD7D05EBD424BBDBF51D4C50852A67.mft (raw, json)
Hash identifier: 41zxpu7pq9f733voERpAW+hMI1EP+9tFZJR8DorsUHM=
Subject key identifier: 4A:82:67:C3:50:E2:D5:20:43:D0:31:AC:9F:2A:68:9B:59:83:BF:BA
Authority key identifier: 3A:5E:DA:CC:61:BD:7D:05:EB:D4:24:BB:DB:F5:1D:4C:50:85:2A:67
Certificate issuer: /CN=3A5EDACC61BD7D05EBD424BBDBF51D4C50852A67
Certificate serial: 614610ED70270C495DB44DF73807EAEBA268C63A
Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/3A5EDACC61BD7D05EBD424BBDBF51D4C50852A67.cer
Subject info access: rsync://repo-rpki.idnic.net/repo/4b388f6e-9974-4457-af4b-5c9c82f50e97/0/3A5EDACC61BD7D05EBD424BBDBF51D4C50852A67.mft
Manifest number: 01CE
Signing time: Tue 28 Apr 2026 03:01:08 +0000
Manifest this update: Tue 28 Apr 2026 02:56:08 +0000
Manifest next update: Fri 01 May 2026 12:19:08 +0000
Files and hashes: 1: 3A5EDACC61BD7D05EBD424BBDBF51D4C50852A67.crl (hash: MP0vV/ZQa+yS5kn9ZT5y/6I8d0hhu+XAIMhJKUnfRso=)
2: 3130332e3232372e3138362e302f32332d3233203d3e20313432333730.roa (hash: 3zQk9upVSJWkItBhOHjhF9LmJ3TZRFQ3YyxRO9QMpwQ=)
3: 3130332e3232372e3138362e302f32342d3234203d3e20313432333730.roa (hash: L8aLRD8MqNnwy6amY9WuFOXX9HpXdpUvSsxC7oIswc4=)
4: 3130332e3232372e3138372e302f32342d3234203d3e20313432333730.roa (hash: 9Uf4ulFgzLDelJ37ckoyeTkyvf3uIkPeeowXypaqZ6c=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
61:46:10:ed:70:27:0c:49:5d:b4:4d:f7:38:07:ea:eb:a2:68:c6:3a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3A5EDACC61BD7D05EBD424BBDBF51D4C50852A67
Validity
Not Before: Apr 28 02:56:08 2026 GMT
Not After : May 1 12:19:08 2026 GMT
Subject: CN=4A8267C350E2D52043D031AC9F2A689B5983BFBA
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a3:53:57:cd:35:e9:47:5c:41:43:e1:6b:0a:67:
a8:9a:15:d5:e9:6a:a0:50:df:6f:cd:3e:11:e7:7d:
ca:07:3c:02:52:1e:c9:4f:2a:77:d3:ea:b4:a9:83:
e8:13:49:0b:52:ec:b2:83:cf:f8:82:4b:ac:ee:56:
bf:0e:a5:18:8f:31:fd:02:d5:46:5b:61:dc:7a:de:
51:24:dd:52:89:82:73:9c:a4:47:a3:7e:f9:f2:4e:
8a:4a:28:33:d1:59:c2:c5:33:ab:e9:48:a5:01:4a:
d0:09:a5:8f:1f:09:41:aa:90:eb:0b:7c:ed:af:4c:
bf:d5:f4:87:8b:70:bb:d9:07:b8:51:75:57:cf:46:
04:f5:ed:15:1e:a1:48:2a:50:ca:b8:45:72:a6:83:
92:b4:3b:1a:82:61:a4:ad:83:1d:2e:40:f4:f4:2f:
e3:c7:4e:77:62:a7:24:03:ea:37:6d:04:ba:b8:42:
eb:11:e8:50:a3:9b:ea:cd:35:23:64:cb:2e:e8:91:
2a:7c:e6:eb:f1:94:7a:13:83:ef:06:30:35:60:c3:
0c:34:92:17:c6:70:be:f6:f8:34:10:20:78:22:9e:
30:ed:8f:95:fc:9b:1f:25:64:ba:d2:e6:38:0f:e9:
ee:fd:98:1d:c5:b3:27:3d:10:96:5a:04:b2:11:be:
da:53
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
4A:82:67:C3:50:E2:D5:20:43:D0:31:AC:9F:2A:68:9B:59:83:BF:BA
X509v3 Authority Key Identifier:
keyid:3A:5E:DA:CC:61:BD:7D:05:EB:D4:24:BB:DB:F5:1D:4C:50:85:2A:67
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://repo-rpki.idnic.net/repo/4b388f6e-9974-4457-af4b-5c9c82f50e97/0/3A5EDACC61BD7D05EBD424BBDBF51D4C50852A67.crl
Authority Information Access:
CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/3A5EDACC61BD7D05EBD424BBDBF51D4C50852A67.cer
Subject Information Access:
Signed Object - URI:rsync://repo-rpki.idnic.net/repo/4b388f6e-9974-4457-af4b-5c9c82f50e97/0/3A5EDACC61BD7D05EBD424BBDBF51D4C50852A67.mft
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
38:a7:a3:d2:07:67:07:42:68:81:84:98:73:41:79:64:64:2d:
4d:0c:b0:c6:83:06:c4:c1:91:93:a8:b9:13:08:c2:0c:ae:7e:
cb:33:1f:5d:5e:65:54:01:c0:4d:e9:f2:7b:16:16:73:2d:d6:
9f:48:19:9c:b4:72:8e:91:2d:f2:1b:ea:0c:db:9d:ff:a4:f0:
44:54:8c:49:c3:24:91:66:de:80:e1:40:03:71:53:25:dc:58:
0c:ef:fa:6e:4d:8d:61:d6:26:8a:a0:09:c4:47:16:3d:46:55:
07:4e:c5:d5:88:f2:04:6f:ea:7a:3f:66:35:fd:aa:45:7b:d0:
f1:77:25:63:45:fe:d2:7b:63:67:15:ff:12:7e:29:39:c1:01:
48:58:86:1f:0d:dd:23:4e:63:24:38:03:d0:84:cc:51:60:e5:
16:34:dd:2b:bc:b3:6d:7f:1a:aa:ca:03:fd:21:69:ca:d4:fc:
8a:e2:55:d1:03:80:a4:1e:24:5b:1a:97:6e:41:cc:fb:24:1d:
c4:11:77:2a:88:ae:2f:e3:c2:19:9c:4c:09:5c:32:78:ea:5d:
5c:a2:da:74:00:9e:97:60:7b:aa:86:b3:6d:87:e5:89:98:19:
97:21:1a:ad:97:a8:c9:d3:fb:88:b9:fa:98:9d:70:d1:8a:7b:
22:33:d4:ef
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jun 3 03:38:33 2026 by rpki-client