Manifest
$ rpki-client -vvf repo-rpki.idnic.net/repo/729401d0-26a7-4787-b68a-182b152a9513/0/3FBFE92D5B220E9B36B37BCD3091D754EA8156D3.mft
File: 3FBFE92D5B220E9B36B37BCD3091D754EA8156D3.mft (raw, json)
Hash identifier: eKcVc+piUOL/QC9gX7S0bHsfsH7XUp1B8gFN16VHvm0=
Subject key identifier: B3:E7:5C:D5:41:19:8D:DA:0D:DC:06:9E:8E:DC:D5:1D:01:3A:4F:05
Authority key identifier: 3F:BF:E9:2D:5B:22:0E:9B:36:B3:7B:CD:30:91:D7:54:EA:81:56:D3
Certificate issuer: /CN=3FBFE92D5B220E9B36B37BCD3091D754EA8156D3
Certificate serial: 0FAC22F24986FE47B28FBFD7444ED74B8DEA54D7
Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/3FBFE92D5B220E9B36B37BCD3091D754EA8156D3.cer
Subject info access: rsync://repo-rpki.idnic.net/repo/729401d0-26a7-4787-b68a-182b152a9513/0/3FBFE92D5B220E9B36B37BCD3091D754EA8156D3.mft
Manifest number: 0223
Signing time: Tue 28 Apr 2026 05:22:07 +0000
Manifest this update: Tue 28 Apr 2026 05:17:07 +0000
Manifest next update: Fri 01 May 2026 08:03:07 +0000
Files and hashes: 1: 3FBFE92D5B220E9B36B37BCD3091D754EA8156D3.crl (hash: 0PE2xoCEIHyV2CVEzb843HG0GGBgu8P1W8Zzhfxg/78=)
2: 3130332e342e37362e302f32332d3234203d3e20313530323136.roa (hash: ncYGXRGoDNxvYIX3PcGqdrJLj1FxUvjJrqOvy1GAKxo=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
0f:ac:22:f2:49:86:fe:47:b2:8f:bf:d7:44:4e:d7:4b:8d:ea:54:d7
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3FBFE92D5B220E9B36B37BCD3091D754EA8156D3
Validity
Not Before: Apr 28 05:17:07 2026 GMT
Not After : May 1 08:03:07 2026 GMT
Subject: CN=B3E75CD541198DDA0DDC069E8EDCD51D013A4F05
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bc:d4:63:62:4b:aa:ec:bc:80:c6:e0:4f:1e:4e:
9f:93:5c:a3:4e:a5:cd:d9:1d:6d:31:88:9a:95:0a:
64:2f:37:6c:3e:51:89:1e:2b:19:c9:f9:9f:b8:84:
32:66:ce:47:10:ee:ed:f8:48:7b:e1:3e:f8:a6:e0:
5c:81:bb:21:05:6c:cf:f1:df:55:26:a4:ca:40:51:
ec:e0:e5:66:5e:8d:a5:87:ba:d9:97:63:79:05:7b:
56:cd:ce:de:00:08:97:63:a4:78:ff:d2:2f:4f:12:
2a:0c:77:04:d5:e2:41:29:b4:d9:01:72:8a:7d:2d:
94:e5:97:00:8f:1f:31:4a:c9:33:96:d9:1b:3e:46:
c8:7d:28:13:aa:40:25:03:15:0f:83:24:cd:14:81:
c0:6c:e1:a3:ce:cc:ad:6b:a3:44:e0:49:07:0e:6a:
e9:22:2f:b1:81:6f:76:33:5e:c5:25:97:e9:eb:78:
00:d1:f9:60:c4:03:47:9c:8d:71:07:ea:d4:80:7f:
e6:e4:1c:82:ad:32:f0:d9:ee:70:2c:4b:b3:fc:0d:
b9:98:d3:19:69:9d:75:44:ac:a9:1a:64:07:ef:00:
1a:21:a3:a5:51:94:42:1f:f4:a0:eb:1d:87:d8:da:
19:06:de:16:e9:a4:7e:ef:bf:ac:57:c1:e1:d1:79:
86:fd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B3:E7:5C:D5:41:19:8D:DA:0D:DC:06:9E:8E:DC:D5:1D:01:3A:4F:05
X509v3 Authority Key Identifier:
keyid:3F:BF:E9:2D:5B:22:0E:9B:36:B3:7B:CD:30:91:D7:54:EA:81:56:D3
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://repo-rpki.idnic.net/repo/729401d0-26a7-4787-b68a-182b152a9513/0/3FBFE92D5B220E9B36B37BCD3091D754EA8156D3.crl
Authority Information Access:
CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/3FBFE92D5B220E9B36B37BCD3091D754EA8156D3.cer
Subject Information Access:
Signed Object - URI:rsync://repo-rpki.idnic.net/repo/729401d0-26a7-4787-b68a-182b152a9513/0/3FBFE92D5B220E9B36B37BCD3091D754EA8156D3.mft
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
14:51:05:7e:01:d6:2c:45:b6:8b:f6:eb:de:93:d4:3f:63:a9:
e9:d2:fd:c0:3d:84:81:8f:22:2a:aa:24:9e:90:5f:71:e2:e9:
fe:77:ea:6c:94:eb:ef:2d:ec:0d:fc:5d:32:f7:bb:cd:7a:ef:
f2:15:6e:1c:c9:15:74:95:ca:af:69:77:01:8c:58:28:61:ec:
c0:ac:8e:51:00:a3:1c:fb:88:2e:cb:d0:0e:cf:b0:1d:50:ee:
4b:d8:1b:a6:5a:7c:68:e9:2e:e0:09:b1:0b:44:52:8f:60:6c:
5b:7d:f2:89:3f:0c:7c:e6:ed:57:a9:8e:c7:29:53:1f:8f:a5:
e6:dd:c5:e1:be:76:c7:26:70:e3:8e:e6:dc:76:59:40:1d:fa:
f1:a3:1f:eb:60:20:fc:4a:d6:c7:7f:5a:c4:3d:85:e9:ac:df:
c8:85:bf:85:71:32:7b:ee:cd:16:78:53:f0:88:45:7f:f5:c5:
2e:9c:cd:45:58:a9:07:fb:3b:36:49:b5:63:ee:87:24:d1:ed:
6a:6b:78:47:52:ef:79:9e:e1:88:b0:52:b0:ee:9c:b2:30:39:
44:31:c9:0f:86:c0:f6:2b:b3:bf:ab:78:ad:12:35:9b:d2:cb:
bf:c4:28:d4:4f:5d:54:dd:3e:86:fb:ee:91:a1:b9:2b:fa:ab:
b3:ab:4e:6a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jun 3 03:09:12 2026 by rpki-client