Manifest
$ rpki-client -vvf repo-rpki.idnic.net/repo/4f377711-1e3d-4e5a-a4ac-05a1c502ad28/0/A0A2A5CA8C20A7CF6DA1325C9BD5C3376F3FE0B3.mft
File: A0A2A5CA8C20A7CF6DA1325C9BD5C3376F3FE0B3.mft (raw, json)
Hash identifier: zWjrnnr3wRzwyL/PlJhpWw5qNP3fnMs3sTTVAqu9W/g=
Subject key identifier: D4:C1:D4:8A:2E:96:34:1D:68:86:66:5C:8E:B7:F1:5D:5B:92:9A:6B
Authority key identifier: A0:A2:A5:CA:8C:20:A7:CF:6D:A1:32:5C:9B:D5:C3:37:6F:3F:E0:B3
Certificate issuer: /CN=A0A2A5CA8C20A7CF6DA1325C9BD5C3376F3FE0B3
Certificate serial: 414EB2F44CDD6E3229DD9950020F99AC44113E21
Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/A0A2A5CA8C20A7CF6DA1325C9BD5C3376F3FE0B3.cer
Subject info access: rsync://repo-rpki.idnic.net/repo/4f377711-1e3d-4e5a-a4ac-05a1c502ad28/0/A0A2A5CA8C20A7CF6DA1325C9BD5C3376F3FE0B3.mft
Manifest number: 034D
Signing time: Tue 28 Apr 2026 16:41:02 +0000
Manifest this update: Tue 28 Apr 2026 16:36:02 +0000
Manifest next update: Sat 02 May 2026 02:18:02 +0000
Files and hashes: 1: 3130332e3135372e35352e302f32342d3234203d3e20313336303730.roa (hash: SaglbTs2Sm97iqGUTpHLhK4uFUxx2JxCBReDItgEQOA=)
2: 323030313a6466303a313730303a3a2f34382d3438203d3e20313336303730.roa (hash: DZhIHh+Q1/lFglHPCtQYtJARiOU+Khz/cuUC8LvdiAk=)
3: A0A2A5CA8C20A7CF6DA1325C9BD5C3376F3FE0B3.crl (hash: YSWIVCeDdegqU6FJDa1jDBiKsmbgaNx21gAOEB1DGJQ=)
4: 3130332e3135372e35352e302f32342d3234203d3e20333936393832.roa (hash: ta8cyJGAuX8M5px06fD7ixeqP65bXdztJIzRgtjjUTw=)
5: 3130332e38342e3131362e302f32342d3234203d3e20313336303730.roa (hash: uFvJDDnE+LzWscDNPWULjpdUKOX2mvB/YxTyjJbL490=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
41:4e:b2:f4:4c:dd:6e:32:29:dd:99:50:02:0f:99:ac:44:11:3e:21
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A0A2A5CA8C20A7CF6DA1325C9BD5C3376F3FE0B3
Validity
Not Before: Apr 28 16:36:02 2026 GMT
Not After : May 2 02:18:02 2026 GMT
Subject: CN=D4C1D48A2E96341D6886665C8EB7F15D5B929A6B
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:be:74:65:f4:a4:58:26:22:f6:e0:c1:bd:73:f2:
0a:e3:8d:71:d3:ac:b9:cb:18:ed:aa:18:b7:7f:d1:
18:27:ea:79:81:c4:60:ac:b4:aa:d6:c6:f0:64:00:
48:02:e1:87:8c:5c:41:f5:bc:0d:6e:82:54:55:a8:
19:e4:b4:17:39:09:99:43:4b:06:09:20:c9:e8:90:
63:c7:34:1c:aa:fd:46:56:8c:13:47:82:5b:20:69:
ce:fc:ed:8f:33:91:3a:47:35:90:ad:6d:e3:01:46:
21:d6:8a:8a:81:b2:7a:e1:fa:ae:47:2e:b2:cb:47:
f7:53:59:a2:6c:09:39:9e:7d:33:6b:a0:ec:ad:f3:
5f:38:ce:57:a4:2a:9f:53:52:a6:47:36:f8:83:c4:
44:82:df:ce:29:7b:91:ec:86:12:a9:4f:61:2c:b8:
c1:ff:87:6f:fd:d6:3d:58:bd:6b:56:a7:96:87:d0:
0f:f0:40:ae:d4:6f:d4:c2:92:d5:b0:9e:4b:2e:a6:
a1:34:58:54:f5:c8:f5:86:6e:76:05:a6:16:9a:2c:
3a:07:35:81:2f:80:99:b4:25:01:13:65:6c:f5:c9:
51:25:ae:cb:63:72:9f:38:ac:8c:80:8b:3f:71:dc:
8f:e6:ff:a7:e0:93:9a:b7:cb:2c:48:dd:a1:89:9b:
c9:a1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D4:C1:D4:8A:2E:96:34:1D:68:86:66:5C:8E:B7:F1:5D:5B:92:9A:6B
X509v3 Authority Key Identifier:
keyid:A0:A2:A5:CA:8C:20:A7:CF:6D:A1:32:5C:9B:D5:C3:37:6F:3F:E0:B3
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://repo-rpki.idnic.net/repo/4f377711-1e3d-4e5a-a4ac-05a1c502ad28/0/A0A2A5CA8C20A7CF6DA1325C9BD5C3376F3FE0B3.crl
Authority Information Access:
CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/A0A2A5CA8C20A7CF6DA1325C9BD5C3376F3FE0B3.cer
Subject Information Access:
Signed Object - URI:rsync://repo-rpki.idnic.net/repo/4f377711-1e3d-4e5a-a4ac-05a1c502ad28/0/A0A2A5CA8C20A7CF6DA1325C9BD5C3376F3FE0B3.mft
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
8b:65:9b:cd:b8:3f:b6:8d:ad:45:74:ba:db:3b:31:1c:b3:f9:
e2:8c:b1:14:08:f0:cc:ed:66:f3:0d:27:e2:80:02:2b:59:29:
4f:7d:73:b0:b9:e8:fa:0e:a1:67:08:bb:ee:43:fe:03:6b:35:
0c:81:00:b9:1f:75:19:2f:ab:de:73:f4:02:bd:ad:2b:f3:38:
57:c5:06:d3:3a:d4:3c:f4:20:69:d8:49:98:f0:41:c0:27:be:
bf:76:26:3c:10:2d:d0:7d:6b:3a:50:fe:02:a1:1d:18:0b:db:
82:84:72:06:22:74:97:12:b2:1e:96:f9:ea:40:d7:b1:7f:67:
37:47:ce:97:a6:9d:08:9a:28:c5:b3:9f:75:8d:b0:0f:c3:de:
c4:91:b1:b4:07:d3:19:ad:74:60:80:16:eb:9b:1b:88:52:ad:
09:ad:0a:30:97:69:d9:fd:5c:d4:80:26:47:17:ad:fa:c8:5d:
83:48:37:17:05:40:1d:4f:48:07:d0:04:1c:7d:ac:9e:5e:a0:
94:d5:ad:35:4e:5f:8c:57:78:c7:6f:47:36:e6:1a:1d:22:e0:
7d:3e:c5:c9:3f:fd:d3:26:b4:1d:f6:16:42:74:cc:b8:52:33:
26:2f:44:b1:04:56:73:eb:8f:3d:94:f9:e3:e7:14:88:14:b7:
6f:e2:77:4e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jun 3 03:11:45 2026 by rpki-client