
Manifest
$ rpki-client -vvf repo-rpki.idnic.net/repo/5e314858-b33a-4b65-9a55-dce41e223873/0/3BA5C10190ADC96EE34EB4A6D054457022CBDEE9.mft
File: 3BA5C10190ADC96EE34EB4A6D054457022CBDEE9.mft (raw, json)
Hash identifier: i3DSEHjRJX2yxC+7x7pwndnysDuHkx8t6A4CSmkiJdk=
Subject key identifier: AA:08:9E:BD:5F:82:23:24:DC:C4:6F:33:CB:0E:29:3C:EE:C9:99:A5
Authority key identifier: 3B:A5:C1:01:90:AD:C9:6E:E3:4E:B4:A6:D0:54:45:70:22:CB:DE:E9
Certificate issuer: /CN=3BA5C10190ADC96EE34EB4A6D054457022CBDEE9
Certificate serial: 700D0691EB9DE5C877F324753AFEB2435CB478A1
Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/3BA5C10190ADC96EE34EB4A6D054457022CBDEE9.cer
Subject info access: rsync://repo-rpki.idnic.net/repo/5e314858-b33a-4b65-9a55-dce41e223873/0/3BA5C10190ADC96EE34EB4A6D054457022CBDEE9.mft
Manifest number: 0273
Signing time: Tue 28 Apr 2026 15:42:15 +0000
Manifest this update: Tue 28 Apr 2026 15:37:15 +0000
Manifest next update: Sat 02 May 2026 01:56:15 +0000
Files and hashes: 1: 3130332e3139302e36302e302f32342d3234203d3e20313439393031.roa (hash: 8e+1wP0igCl8ySWWw4cagUwBCAMaKEsf+lcRjBN0WSU=)
2: 3BA5C10190ADC96EE34EB4A6D054457022CBDEE9.crl (hash: 7R8ZgMQGrRaqH9yeAO2uDRCDq15UuwBpEDH+PUbjYz4=)
3: 3130332e3139302e36302e302f32332d3233203d3e20313439393031.roa (hash: 51ekgtNLYDLFINvFYDj/N8stn5dpVipAbdc9vPbRQ7I=)
4: 3130332e3139302e36312e302f32342d3234203d3e20313439393031.roa (hash: xOxv8Fz6Tpmz/YRUuUjQ79JRZubX1fq53E188IFgqko=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
70:0d:06:91:eb:9d:e5:c8:77:f3:24:75:3a:fe:b2:43:5c:b4:78:a1
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3BA5C10190ADC96EE34EB4A6D054457022CBDEE9
Validity
Not Before: Apr 28 15:37:15 2026 GMT
Not After : May 2 01:56:15 2026 GMT
Subject: CN=AA089EBD5F822324DCC46F33CB0E293CEEC999A5
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bc:ce:dd:3a:20:85:d1:73:9b:69:65:43:97:f9:
73:6b:41:ba:65:42:37:33:3c:bb:55:a5:26:13:e6:
80:b6:aa:bd:ed:20:4b:5e:26:9d:e5:d9:95:69:8d:
c5:de:4a:a3:b2:19:3c:63:6d:7b:41:ae:4b:c4:e9:
57:fa:9c:b9:e3:a4:fa:1e:d7:56:db:df:f5:47:41:
a4:c5:34:98:09:ab:8b:c3:f3:eb:e8:a3:41:e3:3b:
8f:78:95:10:78:8b:78:8e:cb:58:46:79:f5:f2:34:
f2:61:27:9f:7a:5d:ce:ba:e9:ba:eb:3e:1d:1c:5b:
3a:75:c8:fc:15:6d:a2:18:df:9c:d0:a8:88:18:22:
9a:b7:75:54:3c:3d:3a:a7:b2:08:3f:9b:74:83:2e:
11:9e:67:bd:2a:35:d8:36:19:d1:66:a8:54:bf:e9:
a0:1e:64:a4:aa:20:a9:73:ee:44:1a:48:d5:e8:a0:
73:b9:97:78:60:56:6b:ec:0a:a6:e7:80:54:47:56:
5c:d4:16:45:35:c5:fb:6e:47:ac:cb:91:ad:db:fd:
a0:51:3a:3c:f0:c8:17:4a:5e:5b:f0:6e:e9:16:02:
93:eb:01:3c:2e:93:0d:e4:e7:18:08:e9:4d:8e:86:
c2:96:6d:5f:5c:f2:2a:60:d0:a6:6a:17:8d:73:98:
0e:a7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
AA:08:9E:BD:5F:82:23:24:DC:C4:6F:33:CB:0E:29:3C:EE:C9:99:A5
X509v3 Authority Key Identifier:
keyid:3B:A5:C1:01:90:AD:C9:6E:E3:4E:B4:A6:D0:54:45:70:22:CB:DE:E9
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://repo-rpki.idnic.net/repo/5e314858-b33a-4b65-9a55-dce41e223873/0/3BA5C10190ADC96EE34EB4A6D054457022CBDEE9.crl
Authority Information Access:
CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/3BA5C10190ADC96EE34EB4A6D054457022CBDEE9.cer
Subject Information Access:
Signed Object - URI:rsync://repo-rpki.idnic.net/repo/5e314858-b33a-4b65-9a55-dce41e223873/0/3BA5C10190ADC96EE34EB4A6D054457022CBDEE9.mft
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
32:c3:17:2f:82:98:57:d4:73:09:9e:dd:f1:63:b6:c5:75:04:
0d:7f:a6:4c:44:8c:4e:d9:91:d5:7d:fa:a1:e8:00:36:71:db:
5f:32:54:f3:ae:65:39:7f:81:6a:7c:c6:2c:6f:9f:c0:c5:23:
00:8f:84:8f:b7:54:91:d3:ab:85:27:02:40:31:a3:5d:7c:36:
56:b3:43:38:f2:7a:7f:36:a6:66:02:6e:88:f5:2a:65:69:ec:
5c:d6:2a:bd:e1:b7:b2:ef:96:dd:ba:82:4b:29:83:4f:83:53:
ac:bf:97:15:5f:62:47:f6:07:7a:92:eb:8d:9a:2b:10:32:b7:
30:91:21:55:84:c1:1b:1e:40:a3:66:a9:54:19:8f:24:3b:ae:
e4:d2:6a:54:4f:0e:89:a2:a9:a4:5a:8e:52:2c:5f:59:c6:b4:
ba:b0:35:bb:6c:6c:86:cd:1f:d8:d3:bd:85:ae:d3:89:7c:7e:
d5:2d:5b:c4:d2:9b:b4:37:95:39:a7:29:27:d2:18:1d:ba:ba:
f9:ce:70:2c:aa:4d:0c:c9:12:3b:c9:70:b8:93:c7:3a:41:36:
9e:68:37:fe:0f:31:1d:c1:63:4b:9b:4c:ef:d3:8c:09:60:96:
53:c4:80:f7:e5:38:11:c2:fa:33:f6:ae:88:97:b0:50:5d:f8:
53:6e:de:c2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jun 3 03:08:33 2026 by rpki-client