Manifest
$ rpki-client -vvf repo-rpki.idnic.net/repo/5a519aeb-5c56-4cb3-94a0-0f400ea6a375/0/3D64FD900E2E64CB159D0067167853AAFC8A7E97.mft
File: 3D64FD900E2E64CB159D0067167853AAFC8A7E97.mft (raw, json)
Hash identifier: CVd7UGZtcKAoJBegSWClt51Lnc1TrPCIFUXPCZCNh+A=
Subject key identifier: FE:4D:D1:F8:88:C8:4D:E9:FB:08:51:66:FC:59:34:1A:C8:12:FD:DE
Authority key identifier: 3D:64:FD:90:0E:2E:64:CB:15:9D:00:67:16:78:53:AA:FC:8A:7E:97
Certificate issuer: /CN=3D64FD900E2E64CB159D0067167853AAFC8A7E97
Certificate serial: 29424FC060A20001F5E35691D561DBD42535A2F9
Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/3D64FD900E2E64CB159D0067167853AAFC8A7E97.cer
Subject info access: rsync://repo-rpki.idnic.net/repo/5a519aeb-5c56-4cb3-94a0-0f400ea6a375/0/3D64FD900E2E64CB159D0067167853AAFC8A7E97.mft
Manifest number: 0298
Signing time: Tue 28 Apr 2026 22:42:34 +0000
Manifest this update: Tue 28 Apr 2026 22:37:34 +0000
Manifest next update: Sat 02 May 2026 01:49:34 +0000
Files and hashes: 1: 323430343a666563303a3235303a3a2f34382d3438203d3e20313338383636.roa (hash: sYsKqli8EUEzTvSQXavM3oM1AVTdmnNeXY5Ib9nTkXk=)
2: 323430343a666563303a353a3a2f34382d3438203d3e20313338383636.roa (hash: QBM9H9rd8+lS4gn1TV/zjjSpwBwL7sSfYx4yVL1I50s=)
3: 323430343a666563303a373037313a3a2f34382d3438203d3e20313338383636.roa (hash: wr6UHliebQd7p9YyHhYQ444oA44R+pMzEhtNFNELTlg=)
4: 3130332e3134302e3133302e302f32342d3234203d3e20313338383636.roa (hash: leJRaO/XwJWgxh16G1+pzuj6rSObDQD7X96tNPAU2yM=)
5: 323430343a666563303a313a3a2f34382d3438203d3e20313338383636.roa (hash: /v/t0LVvwP8ItAgvAEV4d3ird2OFydIuyNvk7Hjv9rU=)
6: 3130332e3134302e3133312e302f32342d3234203d3e20313338383636.roa (hash: dnJ5obqkVlUW9vc+OWxA0COB4dW3hY4AwINjzDhf/2I=)
7: 323430343a666563303a323a3a2f34382d3438203d3e20313338383636.roa (hash: oP5w04R+DVBIXz7VN32/pUudJby5Bdnn9OzpJHzqMrY=)
8: 3D64FD900E2E64CB159D0067167853AAFC8A7E97.crl (hash: GPVn9u1tzcM9stufUu6KMpapYwEzyZGgJ4Pr8GQY2v0=)
9: 323430343a666563303a333a3a2f34382d3438203d3e20313338383636.roa (hash: KM8HCAE941ny+NeclcPdlUg9VIqsSih6MjHoa5IqXb8=)
10: 323430343a666563303a3a2f33322d3332203d3e20313338383636.roa (hash: 7h+0gopoSFJ2M48QEyz8CL99eJtVxfcZjzTpUAYVTZo=)
11: 323430343a666563303a3a2f33322d3438203d3e20313338383636.roa (hash: znbfpwqo/RqJTtKokVQJprWVfIE6ZeyWhe8h0U97wlw=)
12: 3130332e3134302e3133302e302f32332d3234203d3e20313338383636.roa (hash: cJFNfS5UPmik4Tu/P1Y8olkkeC16bO4wOvGv71A6WXE=)
13: 323430343a666563303a343a3a2f34382d3438203d3e20313338383636.roa (hash: C6l6zdsNHMzfA4VroXv38wYjaYdlZyMXfkyZpHinjgQ=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
29:42:4f:c0:60:a2:00:01:f5:e3:56:91:d5:61:db:d4:25:35:a2:f9
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3D64FD900E2E64CB159D0067167853AAFC8A7E97
Validity
Not Before: Apr 28 22:37:34 2026 GMT
Not After : May 2 01:49:34 2026 GMT
Subject: CN=FE4DD1F888C84DE9FB085166FC59341AC812FDDE
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d8:3e:f1:99:2c:38:32:2a:fe:06:e0:d0:64:e3:
e9:40:47:8c:13:33:78:cf:7e:1c:04:33:3e:dd:39:
43:35:de:7f:b7:2f:36:cd:54:b2:d2:a0:a6:b8:2b:
db:bb:9c:dd:ae:8f:11:95:2a:5e:af:08:98:da:9f:
71:db:42:b4:ce:d0:36:08:54:d1:6a:f6:16:d1:9c:
a8:f0:24:31:30:19:1a:e6:5f:e6:75:8f:9a:45:e1:
a4:97:9a:9b:95:8c:e9:32:32:d2:d8:87:ba:16:f3:
b6:94:dc:dd:1a:c8:27:1e:76:3f:aa:2e:2c:0c:ac:
d0:f5:a7:2a:a4:c2:c3:8b:c0:14:d5:21:24:58:b3:
89:d8:55:97:77:29:72:de:70:17:7d:93:c3:fa:8d:
ab:4e:dd:77:17:e7:a9:38:23:f2:5d:3d:fe:6d:e8:
da:d7:25:01:5c:4b:e6:11:ad:7a:a2:57:df:2f:db:
d9:b6:3c:c1:fc:24:87:fc:13:04:41:4a:7f:dd:f2:
00:bd:49:6a:a9:23:d9:63:bd:aa:19:40:26:b4:07:
75:8e:2d:59:b8:9a:42:11:63:a6:54:8a:18:42:a4:
5a:90:53:b7:0f:8d:be:f5:17:f5:87:3e:25:ee:1c:
05:3f:1f:19:5b:bf:a4:50:17:e3:fa:50:ba:72:d6:
8e:f7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
FE:4D:D1:F8:88:C8:4D:E9:FB:08:51:66:FC:59:34:1A:C8:12:FD:DE
X509v3 Authority Key Identifier:
keyid:3D:64:FD:90:0E:2E:64:CB:15:9D:00:67:16:78:53:AA:FC:8A:7E:97
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://repo-rpki.idnic.net/repo/5a519aeb-5c56-4cb3-94a0-0f400ea6a375/0/3D64FD900E2E64CB159D0067167853AAFC8A7E97.crl
Authority Information Access:
CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/3D64FD900E2E64CB159D0067167853AAFC8A7E97.cer
Subject Information Access:
Signed Object - URI:rsync://repo-rpki.idnic.net/repo/5a519aeb-5c56-4cb3-94a0-0f400ea6a375/0/3D64FD900E2E64CB159D0067167853AAFC8A7E97.mft
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
a1:80:c4:8b:f7:14:ca:28:49:c8:98:f8:02:f1:c1:e9:60:bf:
c4:8e:50:e9:04:ef:c2:dd:50:cd:30:24:ff:50:2e:3a:ff:39:
ac:7f:14:3f:36:a1:3b:a3:fa:cb:f3:dc:53:bb:1b:00:c0:21:
0c:2f:f4:45:3f:72:d0:49:a6:61:44:dd:f4:60:bc:9a:59:9c:
2d:a4:47:24:54:81:0f:d1:a2:d7:af:90:29:91:29:47:70:60:
ff:e0:4a:dc:9d:ed:14:7f:5f:1b:86:0d:50:90:5d:4c:57:4b:
e8:17:bd:66:55:09:ae:11:87:84:25:2f:7c:37:07:84:1f:a1:
ee:27:e3:56:87:44:da:c3:38:d4:b8:ad:ef:5a:c1:1c:77:b2:
cb:37:c9:c3:77:a2:8a:ed:50:67:39:90:4d:1e:10:d9:c8:68:
9c:ec:7d:f0:f7:c3:8b:6b:ec:7f:61:0c:66:3e:c7:4e:90:f2:
91:11:96:98:3c:cf:0b:e6:94:5b:1d:81:35:7d:a2:6e:7a:42:
52:d7:c1:9b:bd:18:2a:0c:2a:e5:aa:ce:c0:8c:4f:ed:ff:05:
d6:02:1b:67:0c:c6:36:b6:55:42:2f:a6:57:ca:b7:d0:15:19:
3e:b5:30:24:91:18:37:e7:16:42:3e:db:bf:3f:f7:7a:c9:e0:
71:c0:6a:6e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jun 3 03:08:44 2026 by rpki-client