Manifest
$ rpki-client -vvf repo-rpki.idnic.net/repo/6bfa4265-bb58-46e2-8309-3ad3981a3516/0/9F02A9B87CC5F81A22E8E58D2EC12E6E06588A03.mft
File: 9F02A9B87CC5F81A22E8E58D2EC12E6E06588A03.mft (raw, json)
Hash identifier: hkTncgETInjEsAuriZh6OMNkZHsN7H8Nz2/O+tlZopY=
Subject key identifier: C0:AC:E4:10:91:49:88:1E:4A:4C:CA:92:03:5C:32:89:52:29:79:BA
Authority key identifier: 9F:02:A9:B8:7C:C5:F8:1A:22:E8:E5:8D:2E:C1:2E:6E:06:58:8A:03
Certificate issuer: /CN=9F02A9B87CC5F81A22E8E58D2EC12E6E06588A03
Certificate serial: 0CEF8A7CD08FB44DC56DA1B12196E6B0AE8823DA
Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/9F02A9B87CC5F81A22E8E58D2EC12E6E06588A03.cer
Subject info access: rsync://repo-rpki.idnic.net/repo/6bfa4265-bb58-46e2-8309-3ad3981a3516/0/9F02A9B87CC5F81A22E8E58D2EC12E6E06588A03.mft
Manifest number: 03DA
Signing time: Mon 27 Apr 2026 11:31:49 +0000
Manifest this update: Mon 27 Apr 2026 11:26:49 +0000
Manifest next update: Thu 30 Apr 2026 18:07:49 +0000
Files and hashes: 1: 9F02A9B87CC5F81A22E8E58D2EC12E6E06588A03.crl (hash: oK61FU43fsZKaWUpXbb/fc7aMH3JQuWPARt7WSg3cqY=)
2: 3130332e3137302e3233362e302f32332d3234203d3e20313338383535.roa (hash: uPrqe+3VY4iMsKPq0O6BgXZ3jDOMsF1P9U++HibeByE=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
0c:ef:8a:7c:d0:8f:b4:4d:c5:6d:a1:b1:21:96:e6:b0:ae:88:23:da
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=9F02A9B87CC5F81A22E8E58D2EC12E6E06588A03
Validity
Not Before: Apr 27 11:26:49 2026 GMT
Not After : Apr 30 18:07:49 2026 GMT
Subject: CN=C0ACE4109149881E4A4CCA92035C3289522979BA
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c5:a4:97:61:b8:a8:15:02:32:22:bb:b9:66:9f:
97:2b:85:90:cc:e9:f2:fc:d3:d8:3d:b1:32:0c:2f:
09:78:0b:73:6e:fe:82:a3:89:33:a0:8b:98:9b:1a:
de:a6:f1:fb:b4:a9:14:d6:52:dc:14:9f:5d:7f:42:
19:0e:b7:24:3d:7d:c1:50:9c:b1:7f:72:b9:fc:8e:
36:1a:d9:03:18:75:3f:ad:4a:8e:99:a1:2a:59:54:
eb:11:39:70:8b:fa:77:87:5f:0f:8f:66:a2:88:18:
8f:97:e9:a2:a2:7c:3d:d8:46:63:26:17:db:82:f2:
23:ff:3b:f6:82:57:5c:8f:77:8e:27:23:07:a6:2b:
e9:78:c1:ed:9c:5b:91:ae:6c:a2:00:6d:6c:46:10:
27:14:a8:db:05:a1:bd:78:43:52:00:87:d8:b5:3d:
15:31:c6:21:ad:6b:ea:47:25:1a:6f:30:30:ae:98:
cc:db:26:bd:47:f6:e2:62:bd:61:c1:59:37:00:f5:
5a:4d:69:ba:44:26:21:ca:bd:2d:9f:f2:9f:26:83:
e0:80:cb:dc:2b:5b:31:79:23:0b:4b:74:b7:5c:93:
67:e4:b3:be:13:35:54:15:70:a7:3f:65:e1:5d:bc:
ed:ca:aa:6b:d1:f0:35:99:5a:55:de:40:5e:b3:3f:
9b:95
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C0:AC:E4:10:91:49:88:1E:4A:4C:CA:92:03:5C:32:89:52:29:79:BA
X509v3 Authority Key Identifier:
keyid:9F:02:A9:B8:7C:C5:F8:1A:22:E8:E5:8D:2E:C1:2E:6E:06:58:8A:03
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://repo-rpki.idnic.net/repo/6bfa4265-bb58-46e2-8309-3ad3981a3516/0/9F02A9B87CC5F81A22E8E58D2EC12E6E06588A03.crl
Authority Information Access:
CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/9F02A9B87CC5F81A22E8E58D2EC12E6E06588A03.cer
Subject Information Access:
Signed Object - URI:rsync://repo-rpki.idnic.net/repo/6bfa4265-bb58-46e2-8309-3ad3981a3516/0/9F02A9B87CC5F81A22E8E58D2EC12E6E06588A03.mft
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
31:67:b5:e8:20:7d:b8:2e:4c:79:f1:73:a2:fc:d1:1c:66:c1:
9e:33:3a:29:8c:6b:ff:d7:0d:24:4e:af:d7:35:c8:03:19:6c:
6a:da:ad:9c:c5:bd:6f:f6:9b:24:23:7c:4d:6c:69:49:dc:42:
e6:83:67:95:55:22:4f:87:ae:dd:78:91:0a:1c:0a:22:0d:e9:
f1:7b:db:19:fa:67:26:8e:32:ab:71:fe:4e:30:50:60:6e:2c:
e0:14:60:ce:47:b6:53:53:2a:a4:3b:4b:26:41:4d:1e:21:43:
2c:9e:78:03:7a:f2:fa:8e:e3:21:4d:fb:56:df:2e:18:23:e4:
6c:7f:61:61:10:4c:7e:9c:33:83:37:9b:79:c9:6e:2a:86:50:
61:f5:b6:f8:9d:c3:3b:e0:d4:a3:c3:24:0a:da:c7:6e:8a:55:
6a:ce:f1:c2:da:13:56:e0:3d:43:43:1e:0e:6d:51:30:46:82:
49:15:1f:ef:e4:14:8d:ba:91:c9:58:f9:4b:0f:5e:e2:98:20:
08:1f:03:ec:5f:2a:d4:16:db:f0:79:02:19:3a:6a:88:f9:9c:
de:58:8b:16:57:7a:b0:3a:79:bc:20:9e:2e:c1:f8:4b:f4:5a:
3a:b4:d5:93:34:d4:89:27:bb:58:db:15:5c:d9:38:c5:52:09:
ba:6e:70:60
-----BEGIN CERTIFICATE-----
MIIFMjCCBBqgAwIBAgIUDO+KfNCPtE3FbaGxIZbmsK6II9owDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoOUYwMkE5Qjg3Q0M1RjgxQTIyRThFNThEMkVDMTJFNkUw
NjU4OEEwMzAeFw0yNjA0MjcxMTI2NDlaFw0yNjA0MzAxODA3NDlaMDMxMTAvBgNV
BAMTKEMwQUNFNDEwOTE0OTg4MUU0QTRDQ0E5MjAzNUMzMjg5NTIyOTc5QkEwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDFpJdhuKgVAjIiu7lmn5crhZDM
6fL809g9sTIMLwl4C3Nu/oKjiTOgi5ibGt6m8fu0qRTWUtwUn11/QhkOtyQ9fcFQ
nLF/crn8jjYa2QMYdT+tSo6ZoSpZVOsROXCL+neHXw+PZqKIGI+X6aKifD3YRmMm
F9uC8iP/O/aCV1yPd44nIwemK+l4we2cW5GubKIAbWxGECcUqNsFob14Q1IAh9i1
PRUxxiGta+pHJRpvMDCumMzbJr1H9uJivWHBWTcA9VpNabpEJiHKvS2f8p8mg+CA
y9wrWzF5IwtLdLdck2fks74TNVQVcKc/ZeFdvO3KqmvR8DWZWlXeQF6zP5uVAgMB
AAGjggI8MIICODAdBgNVHQ4EFgQUwKzkEJFJiB5KTMqSA1wyiVIpebowHwYDVR0j
BBgwFoAUnwKpuHzF+Boi6OWNLsEubgZYigMwDgYDVR0PAQH/BAQDAgeAMIGFBgNV
HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby82
YmZhNDI2NS1iYjU4LTQ2ZTItODMwOS0zYWQzOTgxYTM1MTYvMC85RjAyQTlCODdD
QzVGODFBMjJFOEU1OEQyRUMxMkU2RTA2NTg4QTAzLmNybDB0BggrBgEFBQcBAQRo
MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv
L0lETklDLUlELzIvOUYwMkE5Qjg3Q0M1RjgxQTIyRThFNThEMkVDMTJFNkUwNjU4
OEEwMy5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6
Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vNmJmYTQyNjUtYmI1OC00NmUyLTgz
MDktM2FkMzk4MWEzNTE2LzAvOUYwMkE5Qjg3Q0M1RjgxQTIyRThFNThEMkVDMTJF
NkUwNjU4OEEwMy5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF
BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC
BQAwDQYJKoZIhvcNAQELBQADggEBADFnteggfbguTHnxc6L80RxmwZ4zOimMa//X
DSROr9c1yAMZbGrarZzFvW/2myQjfE1saUncQuaDZ5VVIk+Hrt14kQocCiIN6fF7
2xn6ZyaOMqtx/k4wUGBuLOAUYM5HtlNTKqQ7SyZBTR4hQyyeeAN68vqO4yFN+1bf
Lhgj5Gx/YWEQTH6cM4M3m3nJbiqGUGH1tvidwzvg1KPDJArax26KVWrO8cLaE1bg
PUNDHg5tUTBGgkkVH+/kFI26kclY+UsPXuKYIAgfA+xfKtQW2/B5Ahk6aoj5nN5Y
ixZXerA6ebwgni7B+Ev0Wjq01ZM01Iknu1jbFVzZOMVSCbpucGA=
-----END CERTIFICATE-----
Generated at Wed Jun 3 03:08:19 2026 by rpki-client