Manifest
$ rpki-client -vvf repo-rpki.idnic.net/repo/4d970032-08ea-4890-bdba-6309a497917d/0/3D789FAF5F7EBE6938C4C723DCD2EED785C35E4F.mft
File: 3D789FAF5F7EBE6938C4C723DCD2EED785C35E4F.mft (raw, json)
Hash identifier: cZnbWONr2BcbceZL+AMf3DMT3CMoOPvpnPXKmTmynkA=
Subject key identifier: 29:4E:89:6A:B3:68:1E:2C:4D:13:6C:AD:38:62:73:2A:63:72:92:75
Authority key identifier: 3D:78:9F:AF:5F:7E:BE:69:38:C4:C7:23:DC:D2:EE:D7:85:C3:5E:4F
Certificate issuer: /CN=3D789FAF5F7EBE6938C4C723DCD2EED785C35E4F
Certificate serial: 5B382FA1480719E391839F4F092AD1D7CA519BED
Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/3D789FAF5F7EBE6938C4C723DCD2EED785C35E4F.cer
Subject info access: rsync://repo-rpki.idnic.net/repo/4d970032-08ea-4890-bdba-6309a497917d/0/3D789FAF5F7EBE6938C4C723DCD2EED785C35E4F.mft
Manifest number: 024D
Signing time: Mon 27 Apr 2026 07:31:04 +0000
Manifest this update: Mon 27 Apr 2026 07:26:04 +0000
Manifest next update: Thu 30 Apr 2026 18:52:04 +0000
Files and hashes: 1: 3130332e32382e3136332e302f32342d3234203d3e203536323539.roa (hash: NAFqFIaSAImXyE9eWh33YjJ4/n4BJqvDNhOBlZ2+l28=)
2: 3130332e31302e3235332e302f32342d3234203d3e203536323539.roa (hash: HvzvMBj5qU+NExWSjTWqrdpmvH/WBtBrlcSKkhbhERc=)
3: 3D789FAF5F7EBE6938C4C723DCD2EED785C35E4F.crl (hash: /1+jp4RuZs3loNW6AjnCeVMdof1Y+mQDbFDskmJSzLs=)
4: 3130332e36352e39362e302f32332d3234203d3e203536323539.roa (hash: GJQ3NUFsB2nVnSk1uRZagjtzrc7ng31cjwY1HHOp2FQ=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
5b:38:2f:a1:48:07:19:e3:91:83:9f:4f:09:2a:d1:d7:ca:51:9b:ed
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3D789FAF5F7EBE6938C4C723DCD2EED785C35E4F
Validity
Not Before: Apr 27 07:26:04 2026 GMT
Not After : Apr 30 18:52:04 2026 GMT
Subject: CN=294E896AB3681E2C4D136CAD3862732A63729275
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d9:d0:67:5e:db:20:8e:e8:a2:55:be:3a:01:2b:
b2:db:ea:dc:ec:0f:08:0d:97:54:3f:9f:94:e6:b8:
b3:cb:05:b2:dc:a5:31:c5:43:ac:2c:1d:9d:ad:cd:
e6:a7:6b:ef:7c:98:b6:d8:ff:1f:75:6d:c4:98:f1:
75:1c:02:91:cc:ec:5e:ca:aa:e7:39:b7:d7:99:24:
39:65:6d:11:af:ee:0c:d5:47:46:13:0c:82:e1:36:
ba:5e:70:eb:6c:17:32:eb:7a:97:ba:a0:ed:29:2c:
9f:2f:a9:0f:0b:ee:51:62:70:06:9d:27:7e:b7:d0:
bc:26:91:72:35:bd:4e:b9:b1:45:88:68:d3:60:b5:
20:37:52:a5:d1:de:e7:8a:69:24:c9:7c:9a:f5:dd:
18:05:eb:63:ca:3d:a9:33:33:4b:d1:72:f7:66:3a:
1b:d5:0c:4d:ea:3f:98:45:09:f0:ef:1f:5b:1c:15:
01:74:e3:13:80:5c:2f:81:40:c2:76:cd:52:7c:e4:
c3:90:29:55:f9:ca:5c:4c:bc:4d:1a:29:c0:dc:1f:
12:4b:17:d9:6d:22:0f:26:f2:4b:d9:e1:11:cb:e4:
ba:69:19:15:fc:ef:c5:c6:dc:a9:63:52:40:a6:98:
d6:13:68:1c:d8:a2:cc:f9:27:8c:21:3e:54:0e:6b:
84:d7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
29:4E:89:6A:B3:68:1E:2C:4D:13:6C:AD:38:62:73:2A:63:72:92:75
X509v3 Authority Key Identifier:
keyid:3D:78:9F:AF:5F:7E:BE:69:38:C4:C7:23:DC:D2:EE:D7:85:C3:5E:4F
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://repo-rpki.idnic.net/repo/4d970032-08ea-4890-bdba-6309a497917d/0/3D789FAF5F7EBE6938C4C723DCD2EED785C35E4F.crl
Authority Information Access:
CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/3D789FAF5F7EBE6938C4C723DCD2EED785C35E4F.cer
Subject Information Access:
Signed Object - URI:rsync://repo-rpki.idnic.net/repo/4d970032-08ea-4890-bdba-6309a497917d/0/3D789FAF5F7EBE6938C4C723DCD2EED785C35E4F.mft
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
86:1f:09:60:ff:a3:53:4e:95:86:2f:de:e4:b4:29:05:56:9e:
fd:b0:68:f6:22:d6:19:7b:bf:c1:b3:62:4e:a0:33:4c:91:7a:
e6:ed:89:bc:61:b9:e4:7e:fe:cc:1b:e0:b2:e8:22:92:2a:35:
f2:ae:a1:fe:d3:9a:53:3c:d0:23:90:f1:64:8f:2d:5c:7f:14:
eb:ed:0e:c2:4e:b4:8b:54:6e:73:f4:9c:e5:e6:d5:71:55:27:
76:d4:7b:e1:c1:3b:96:ae:36:37:03:83:ac:4d:7a:0f:30:7a:
e8:ca:f7:8b:37:34:a0:dc:46:c2:03:c1:66:a3:4d:5e:a1:74:
4f:8f:0b:84:b7:37:2f:92:aa:50:ba:dc:6e:a1:23:52:01:02:
39:02:c7:70:4f:b5:90:ab:85:d9:7b:68:55:c5:4a:22:42:b5:
fa:d1:8a:1e:03:f9:b9:de:74:51:df:17:32:3f:b4:ab:65:a9:
88:45:d2:b7:87:b7:f4:33:f2:80:db:d7:88:06:b6:0d:63:b2:
16:1b:8d:2e:92:b3:44:9a:f5:fd:b8:64:9f:39:e3:25:9b:8f:
a1:7f:18:c2:60:b5:b3:25:31:04:ee:af:67:8f:de:f6:38:66:
1a:4f:72:13:7d:98:28:e8:ce:dd:1b:96:90:11:a6:88:87:6a:
44:70:25:fe
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jun 3 03:14:15 2026 by rpki-client