Manifest
$ rpki-client -vvf repo-rpki.idnic.net/repo/52cd9cea-3bf4-4a9c-aee6-00339c06550b/0/2BDFAFA70A11BFBF6C982BBF2C2C084DE80E034E.mft
File: 2BDFAFA70A11BFBF6C982BBF2C2C084DE80E034E.mft (raw, json)
Hash identifier: BE+iQd9ilBL4duJjmSJ7nZ7hJPb8WkLbFtQU2SvB02E=
Subject key identifier: BE:E8:7C:8C:CA:30:ED:AB:C3:CF:43:BC:A1:10:96:0B:6A:60:BE:13
Authority key identifier: 2B:DF:AF:A7:0A:11:BF:BF:6C:98:2B:BF:2C:2C:08:4D:E8:0E:03:4E
Certificate issuer: /CN=2BDFAFA70A11BFBF6C982BBF2C2C084DE80E034E
Certificate serial: 4EE60375F2B084823F469FE7DA087BD0A9A4BBF9
Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/2BDFAFA70A11BFBF6C982BBF2C2C084DE80E034E.cer
Subject info access: rsync://repo-rpki.idnic.net/repo/52cd9cea-3bf4-4a9c-aee6-00339c06550b/0/2BDFAFA70A11BFBF6C982BBF2C2C084DE80E034E.mft
Manifest number: 03E8
Signing time: Tue 28 Apr 2026 20:32:21 +0000
Manifest this update: Tue 28 Apr 2026 20:27:21 +0000
Manifest next update: Sat 02 May 2026 04:09:21 +0000
Files and hashes: 1: 3130332e3136392e322e302f32332d3234203d3e203137393935.roa (hash: IRRwlFxdlw58Hq9FIW3eCT24cVIv6qhlkYjQet5GmTc=)
2: 2BDFAFA70A11BFBF6C982BBF2C2C084DE80E034E.crl (hash: P8j4byeq2hRQGhGaLAHM0rdtXxIafZfYqhXtpsoSBRQ=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
4e:e6:03:75:f2:b0:84:82:3f:46:9f:e7:da:08:7b:d0:a9:a4:bb:f9
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2BDFAFA70A11BFBF6C982BBF2C2C084DE80E034E
Validity
Not Before: Apr 28 20:27:21 2026 GMT
Not After : May 2 04:09:21 2026 GMT
Subject: CN=BEE87C8CCA30EDABC3CF43BCA110960B6A60BE13
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b9:0d:f8:66:a5:15:97:b3:e4:20:89:c2:97:fa:
88:16:3d:8f:4f:66:c3:91:80:4e:ec:99:2e:10:49:
68:0c:cd:a4:f8:6d:f7:c9:b2:8c:a9:4b:71:a4:60:
d2:aa:73:bc:19:4b:81:02:8b:07:97:6d:23:48:1e:
ed:f6:53:64:f9:85:7f:b5:60:ef:ce:07:50:3a:9b:
8f:4b:ef:f9:fc:7a:dd:07:9d:70:bd:b6:cd:3f:d2:
7f:3f:40:2e:30:45:5e:5b:32:b8:f7:c9:9a:bc:8e:
d8:27:ce:11:4d:67:1d:56:c8:4b:ca:57:02:7e:cd:
dc:b5:0d:20:f4:61:23:c7:8e:0d:88:63:cc:92:17:
f8:89:f9:fd:10:a2:6d:ee:42:16:e4:37:1f:a5:10:
f9:c2:24:dd:18:21:c5:89:b1:ec:f8:07:0b:97:c6:
9e:05:d5:2f:0e:80:84:dd:28:66:3e:fc:b8:9a:b3:
0c:19:bd:de:3e:81:1a:4c:85:fd:90:47:f6:68:cf:
94:14:dd:9e:fd:1c:8b:42:15:7b:3d:aa:ed:03:a5:
54:46:02:7b:49:05:eb:54:1c:e8:3d:4b:55:a1:6e:
12:f8:50:34:52:fa:c0:6f:27:d8:e3:07:e0:c8:81:
3f:42:6a:96:47:dc:a0:40:5f:b7:a3:1e:8f:c8:ed:
50:23
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
BE:E8:7C:8C:CA:30:ED:AB:C3:CF:43:BC:A1:10:96:0B:6A:60:BE:13
X509v3 Authority Key Identifier:
keyid:2B:DF:AF:A7:0A:11:BF:BF:6C:98:2B:BF:2C:2C:08:4D:E8:0E:03:4E
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://repo-rpki.idnic.net/repo/52cd9cea-3bf4-4a9c-aee6-00339c06550b/0/2BDFAFA70A11BFBF6C982BBF2C2C084DE80E034E.crl
Authority Information Access:
CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/2BDFAFA70A11BFBF6C982BBF2C2C084DE80E034E.cer
Subject Information Access:
Signed Object - URI:rsync://repo-rpki.idnic.net/repo/52cd9cea-3bf4-4a9c-aee6-00339c06550b/0/2BDFAFA70A11BFBF6C982BBF2C2C084DE80E034E.mft
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
bc:56:33:9d:c1:09:57:a0:0c:6e:e5:09:7f:9a:e5:05:2b:65:
54:a0:9c:3c:96:55:2d:1f:74:fc:c5:31:11:ef:8f:4a:c6:39:
30:39:ce:c4:22:af:94:aa:71:d7:48:85:1c:a6:8d:cd:48:70:
c9:dd:04:21:7c:61:28:51:c2:b6:45:d9:78:8e:e6:a3:08:f6:
a9:d8:47:62:71:fe:30:9b:b9:86:43:aa:ba:32:99:f9:b7:09:
78:8f:34:1d:ca:46:ed:b5:f0:59:5d:96:4c:52:be:11:c7:41:
fb:d4:56:aa:5e:77:09:1d:c8:d9:54:5e:67:1a:81:e0:34:b2:
d0:04:67:01:7f:1d:7f:f2:4a:5a:4d:c1:be:4d:92:bc:20:37:
49:ba:22:e5:42:0f:55:02:bc:49:1a:24:f2:ca:59:d5:37:55:
d5:ba:f3:be:95:f9:6b:d1:4d:c9:6d:6a:b5:f1:6a:02:de:c9:
d4:e7:b3:81:00:25:aa:93:cd:92:b5:7b:c3:7d:b9:9e:27:2b:
44:50:b7:56:62:df:f2:73:43:c0:fb:d6:ad:95:36:e0:24:8c:
1c:bb:7b:77:2e:c5:b1:88:1c:74:11:ab:d4:98:0d:51:64:6a:
4f:1d:c0:e6:e8:38:35:57:45:2a:71:20:02:78:6e:57:26:84:
98:fe:1b:8e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jun 3 03:11:18 2026 by rpki-client