
Manifest
$ rpki-client -vvf repo-rpki.idnic.net/repo/52bd0e94-8603-457f-b537-9231084bc450/0/3D6B7D1E7183962CFDED189F6C36FFF303A0DA00.mft
File: 3D6B7D1E7183962CFDED189F6C36FFF303A0DA00.mft (raw, json)
Hash identifier: ZcH8ps76ElZn/fFFBSIqOp2U0kgzvvmftiCkVKmDTQg=
Subject key identifier: 5A:86:40:B1:95:58:0F:C1:F4:3D:9E:23:36:F4:25:BC:B4:84:9A:51
Authority key identifier: 3D:6B:7D:1E:71:83:96:2C:FD:ED:18:9F:6C:36:FF:F3:03:A0:DA:00
Certificate issuer: /CN=3D6B7D1E7183962CFDED189F6C36FFF303A0DA00
Certificate serial: 35EA6C614BAC2FDE9D5FBA59646B72EF0AB12798
Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/3D6B7D1E7183962CFDED189F6C36FFF303A0DA00.cer
Subject info access: rsync://repo-rpki.idnic.net/repo/52bd0e94-8603-457f-b537-9231084bc450/0/3D6B7D1E7183962CFDED189F6C36FFF303A0DA00.mft
Manifest number: 0171
Signing time: Mon 27 Apr 2026 16:20:53 +0000
Manifest this update: Mon 27 Apr 2026 16:15:53 +0000
Manifest next update: Thu 30 Apr 2026 23:47:53 +0000
Files and hashes: 1: 3D6B7D1E7183962CFDED189F6C36FFF303A0DA00.crl (hash: 1Q040efQpK7ppAddsrVUXul0N/XqoJe0tR3jTH0/RT4=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
35:ea:6c:61:4b:ac:2f:de:9d:5f:ba:59:64:6b:72:ef:0a:b1:27:98
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3D6B7D1E7183962CFDED189F6C36FFF303A0DA00
Validity
Not Before: Apr 27 16:15:53 2026 GMT
Not After : Apr 30 23:47:53 2026 GMT
Subject: CN=5A8640B195580FC1F43D9E2336F425BCB4849A51
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b1:12:ae:63:cd:26:ab:9d:26:f6:3b:dc:0c:0e:
ca:f5:f4:6c:63:8a:fb:88:2a:e0:24:9d:4b:43:95:
9b:98:06:9f:ca:6e:b1:c9:62:28:39:b5:35:64:1d:
89:fa:c7:31:2a:f2:ad:23:26:30:77:83:1b:db:2a:
fb:9e:41:5d:36:1f:e6:6a:e5:ad:23:a1:be:ba:a6:
c1:89:ff:af:a7:d5:0a:da:39:ae:77:4a:93:b4:b6:
4e:4d:59:5a:23:97:c0:77:c5:ba:55:08:5b:cf:bf:
a7:32:2f:80:0d:98:97:12:68:e9:50:83:63:07:cd:
42:27:ac:88:93:41:ab:5b:cd:08:f1:ec:c3:22:39:
69:de:0c:8f:64:2f:1b:90:fe:62:54:d1:4b:eb:4f:
54:30:0d:f6:e3:4c:4c:fe:6f:f0:28:3e:43:54:2e:
fc:fd:7c:0e:77:88:9a:99:a2:39:6c:03:e7:a3:36:
d4:1b:45:59:a5:e0:d0:9d:97:9a:b5:00:44:4d:10:
2f:bc:4e:aa:34:91:44:cb:49:cc:2c:d9:7e:87:02:
85:38:da:db:61:20:2a:0d:1b:1e:75:90:2e:60:95:
a8:b7:36:c6:4f:cd:a0:19:0b:37:df:e0:e6:3f:46:
ae:71:1d:19:97:9c:a4:34:4a:5c:11:41:2b:0f:26:
52:b7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
5A:86:40:B1:95:58:0F:C1:F4:3D:9E:23:36:F4:25:BC:B4:84:9A:51
X509v3 Authority Key Identifier:
keyid:3D:6B:7D:1E:71:83:96:2C:FD:ED:18:9F:6C:36:FF:F3:03:A0:DA:00
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://repo-rpki.idnic.net/repo/52bd0e94-8603-457f-b537-9231084bc450/0/3D6B7D1E7183962CFDED189F6C36FFF303A0DA00.crl
Authority Information Access:
CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/3D6B7D1E7183962CFDED189F6C36FFF303A0DA00.cer
Subject Information Access:
Signed Object - URI:rsync://repo-rpki.idnic.net/repo/52bd0e94-8603-457f-b537-9231084bc450/0/3D6B7D1E7183962CFDED189F6C36FFF303A0DA00.mft
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
5b:1e:2f:14:89:02:d0:b0:a1:1c:21:ad:a2:67:b4:ec:fc:c9:
f8:e2:81:4a:f8:cc:8d:50:e8:ba:3d:11:a6:f7:47:84:4c:78:
da:8d:53:0c:c1:7f:7e:fd:f3:b2:9e:2a:20:11:c6:bc:56:60:
aa:22:33:aa:dc:cc:ab:31:05:0a:9c:32:04:61:f3:6c:8c:d7:
d7:1e:ee:e8:04:44:b1:26:18:bf:23:b0:56:56:d1:3e:ee:63:
ba:b0:d6:8e:35:8b:6d:ad:bb:bc:6b:50:dd:b5:f0:dc:7a:df:
bf:d3:e0:80:21:e7:31:93:c0:ed:36:e9:8f:ed:e3:8b:e4:55:
5b:ca:a7:fa:40:95:60:db:cd:21:ef:1f:dc:11:a4:23:3d:0b:
43:6d:f3:f6:c5:95:08:8f:55:01:ab:f9:d5:b0:72:24:bb:88:
4e:e9:b9:ef:68:2e:cd:09:d2:e7:9c:7c:aa:d5:ac:3a:e8:13:
75:b6:63:91:db:c3:8c:e3:20:5e:04:8f:52:bf:50:b0:38:3f:
73:09:38:91:24:98:8e:9b:c2:21:ec:5e:14:98:f5:ce:b4:0b:
4a:27:63:ac:83:7a:ea:59:c9:44:10:b2:b7:25:8b:bf:cd:e0:
55:63:f0:48:34:e4:f6:fd:44:aa:17:8c:87:f6:33:20:07:a1:
87:e4:d3:5f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jun 3 03:11:49 2026 by rpki-client