Manifest
$ rpki-client -vvf repo-rpki.idnic.net/repo/5c34dc3f-308f-4de1-a365-701bd9cf1004/0/4337E9FF91A0CB65CE1EB8FAEB6108F5E37BB657.mft
File: 4337E9FF91A0CB65CE1EB8FAEB6108F5E37BB657.mft (raw, json)
Hash identifier: ufWi2rwlR0k95pf3YRQxkd71Jfevxx4tynnDNpyHayQ=
Subject key identifier: 5B:40:48:CF:02:A7:9D:6A:08:63:05:89:73:38:A9:E4:7E:A4:3B:0C
Authority key identifier: 43:37:E9:FF:91:A0:CB:65:CE:1E:B8:FA:EB:61:08:F5:E3:7B:B6:57
Certificate issuer: /CN=4337E9FF91A0CB65CE1EB8FAEB6108F5E37BB657
Certificate serial: 70C46198440BCDE1840D94C7F0C6E6050C1801A8
Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/4337E9FF91A0CB65CE1EB8FAEB6108F5E37BB657.cer
Subject info access: rsync://repo-rpki.idnic.net/repo/5c34dc3f-308f-4de1-a365-701bd9cf1004/0/4337E9FF91A0CB65CE1EB8FAEB6108F5E37BB657.mft
Manifest number: 0341
Signing time: Tue 28 Apr 2026 02:51:22 +0000
Manifest this update: Tue 28 Apr 2026 02:46:22 +0000
Manifest next update: Fri 01 May 2026 13:21:22 +0000
Files and hashes: 1: 3130332e3137362e39362e302f32342d3234203d3e20313437313331.roa (hash: wEdCO3YyXLUpfkiKLdOWDdPh+9yeo9Z0D5c9ufB6gOc=)
2: 4337E9FF91A0CB65CE1EB8FAEB6108F5E37BB657.crl (hash: UwHMhFfbuyaCty0PevHw7sNoUqCLgUpyY3/vQCe/ZBo=)
3: 3130332e3137362e39372e302f32342d3234203d3e20313437313331.roa (hash: 0qCM2olgS4oE+YIGItrwN9xQiW2Tx+5S0Vcz+QMGK2k=)
4: 3130332e3137362e39362e302f32332d3233203d3e20313437313331.roa (hash: IqsL3oGkvgtcuhjnxANij8h6uajCYq8Mf2MQq3urX+s=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
70:c4:61:98:44:0b:cd:e1:84:0d:94:c7:f0:c6:e6:05:0c:18:01:a8
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4337E9FF91A0CB65CE1EB8FAEB6108F5E37BB657
Validity
Not Before: Apr 28 02:46:22 2026 GMT
Not After : May 1 13:21:22 2026 GMT
Subject: CN=5B4048CF02A79D6A086305897338A9E47EA43B0C
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9a:3c:77:b2:3d:f0:08:b8:be:47:d5:07:39:f6:
ec:db:2c:5f:ff:fc:67:91:09:14:c4:1b:1a:7f:14:
b9:15:0f:4c:7c:45:91:89:96:d8:d3:75:b5:46:26:
61:f8:2b:20:35:9f:22:e9:7c:05:5f:c2:ec:70:d2:
c8:70:f6:26:f3:a1:61:46:a4:c9:be:7c:89:5b:0b:
eb:5c:da:9f:ec:a4:d3:79:52:40:83:e2:de:e3:1f:
2b:08:aa:35:89:32:cc:fb:2d:54:88:ed:f5:f1:38:
bc:3f:02:17:5a:59:08:8f:3f:b0:b3:39:f6:e4:0a:
17:c0:b8:2a:aa:ae:cb:a4:01:87:c6:4d:06:86:84:
f5:2c:4c:60:0c:ba:8d:f5:33:fc:37:23:43:95:07:
9d:c7:aa:0b:6d:4a:6d:6a:27:82:16:f8:52:07:fc:
e0:63:72:1b:20:ee:da:04:04:4f:bf:9e:ff:25:c8:
80:d6:c6:b0:c3:ba:9a:6b:20:bc:b9:c4:18:89:1f:
4d:cf:cf:87:61:bf:d4:08:d7:ba:35:34:1d:33:6c:
58:c3:36:b9:72:88:cf:37:74:6e:92:af:bd:25:42:
36:21:b5:74:36:6c:af:a7:b9:3c:db:17:47:a8:a5:
1f:3a:4c:d4:bc:d7:89:6a:63:02:b8:25:e9:ce:8b:
21:6d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
5B:40:48:CF:02:A7:9D:6A:08:63:05:89:73:38:A9:E4:7E:A4:3B:0C
X509v3 Authority Key Identifier:
keyid:43:37:E9:FF:91:A0:CB:65:CE:1E:B8:FA:EB:61:08:F5:E3:7B:B6:57
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://repo-rpki.idnic.net/repo/5c34dc3f-308f-4de1-a365-701bd9cf1004/0/4337E9FF91A0CB65CE1EB8FAEB6108F5E37BB657.crl
Authority Information Access:
CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/4337E9FF91A0CB65CE1EB8FAEB6108F5E37BB657.cer
Subject Information Access:
Signed Object - URI:rsync://repo-rpki.idnic.net/repo/5c34dc3f-308f-4de1-a365-701bd9cf1004/0/4337E9FF91A0CB65CE1EB8FAEB6108F5E37BB657.mft
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
84:58:8e:80:9c:5f:68:44:b4:2c:e8:f3:86:95:55:11:da:fa:
62:a7:a0:0b:6a:65:41:4e:66:27:69:0b:ba:83:e3:5a:ec:da:
9c:eb:8a:3a:b4:ef:e1:7c:3d:01:ad:91:00:ee:ce:7b:97:4b:
8d:e5:ba:3a:ff:e7:78:33:a5:fe:31:14:fd:f9:83:e8:3a:c9:
f8:72:cc:fd:df:46:ec:90:75:85:77:b6:7f:be:42:ca:25:8e:
25:95:00:2e:aa:8b:a5:69:fc:1b:90:33:c6:5a:23:d6:7c:9a:
1b:05:b9:26:eb:6d:43:66:f4:95:dc:8c:aa:f6:49:46:80:d2:
0c:29:4d:c6:db:84:c6:d1:d3:b2:cb:bb:2d:db:29:d8:aa:9e:
9f:b5:cc:78:e1:b5:94:39:3e:8d:26:c6:76:ac:42:7f:90:08:
68:46:1b:9a:65:65:ce:2a:6f:3a:c7:a6:df:36:75:b8:d9:b0:
6c:ba:68:26:7d:11:0c:3b:7f:24:bc:cd:b5:85:f4:3d:c5:4f:
69:fc:c7:0a:53:88:ae:2d:99:97:c8:65:7e:0d:13:82:2c:b0:
be:85:62:b0:c5:32:19:d0:ce:0e:17:3c:d8:b8:d6:60:04:5d:
43:e0:fb:4f:ba:ee:ac:54:cd:da:6c:af:21:32:ea:30:45:7a:
65:7a:13:8f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jul 19 04:57:27 2026 by rpki-client