Manifest
$ rpki-client -vvf repo-rpki.idnic.net/repo/7ba0b3f1-974f-4205-bdce-0f9f5b7250dc/0/339257A0C7951203C012BA5AF19EDB52E6790B03.mft
File: 339257A0C7951203C012BA5AF19EDB52E6790B03.mft (raw, json)
Hash identifier: BEvOFhTX7WAFm2r/pWRWxbjwthmXXTfDT0DdJgqSDEU=
Subject key identifier: 2E:E7:D0:DB:09:37:C9:A6:4A:00:EC:71:94:D3:BD:EC:31:DF:86:6D
Authority key identifier: 33:92:57:A0:C7:95:12:03:C0:12:BA:5A:F1:9E:DB:52:E6:79:0B:03
Certificate issuer: /CN=339257A0C7951203C012BA5AF19EDB52E6790B03
Certificate serial: 2E834BA1410D8F0F2EC0482E36B0768FCB89D7D4
Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/339257A0C7951203C012BA5AF19EDB52E6790B03.cer
Subject info access: rsync://repo-rpki.idnic.net/repo/7ba0b3f1-974f-4205-bdce-0f9f5b7250dc/0/339257A0C7951203C012BA5AF19EDB52E6790B03.mft
Manifest number: 028E
Signing time: Wed 29 Apr 2026 05:21:14 +0000
Manifest this update: Wed 29 Apr 2026 05:16:14 +0000
Manifest next update: Sat 02 May 2026 08:04:14 +0000
Files and hashes: 1: 3130332e38372e36302e302f32322d3234203d3e20313336303932.roa (hash: IG1xkP17/hC/ImkkCYcinf8gtC3kZiUA7WdckI5avsY=)
2: 339257A0C7951203C012BA5AF19EDB52E6790B03.crl (hash: LuVD/FNuerWgwNwiqoL9vyC0Yy7XufUXO9NFVaAD++4=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
2e:83:4b:a1:41:0d:8f:0f:2e:c0:48:2e:36:b0:76:8f:cb:89:d7:d4
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=339257A0C7951203C012BA5AF19EDB52E6790B03
Validity
Not Before: Apr 29 05:16:14 2026 GMT
Not After : May 2 08:04:14 2026 GMT
Subject: CN=2EE7D0DB0937C9A64A00EC7194D3BDEC31DF866D
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b2:85:d5:92:6d:9c:51:da:9b:c0:5a:9c:e1:b0:
cc:50:5a:41:84:17:e2:99:86:7c:00:1e:c1:3b:22:
fe:9f:44:20:05:2f:16:39:cc:46:02:59:5f:85:03:
b0:be:e3:3d:09:63:58:ec:c4:c4:dc:82:77:c5:9d:
b9:5d:9c:6e:99:22:f5:10:da:2c:c9:f8:21:21:54:
89:3d:33:60:59:13:a4:29:e7:ca:b4:bf:e2:51:27:
5f:b7:0f:d7:c9:a5:5d:7c:09:14:05:17:d5:76:b9:
5c:1b:ad:47:2c:c3:d8:32:e7:d2:e9:48:cc:01:7b:
53:29:16:6c:cf:f7:df:f9:73:0b:1e:49:04:6c:68:
8d:fe:a4:e5:d7:54:04:42:f6:de:8b:f5:c5:18:ea:
14:17:4b:c0:d5:a3:92:ff:4b:a8:48:c3:42:4e:88:
9e:4a:4e:7c:e1:c3:5c:e5:49:23:1f:c4:a5:99:10:
f0:95:7c:67:51:f5:b8:c1:b5:8e:2c:dd:09:f8:6c:
83:43:2c:a3:20:dd:ed:18:e5:9f:f1:d3:55:e3:ab:
a2:b2:ea:d1:2a:2b:f5:e8:89:1a:08:49:ac:52:2e:
44:c1:ab:a2:f1:fe:ba:0b:63:b5:35:51:d7:57:fd:
5b:fd:21:2b:b8:f6:f1:b5:b4:7c:54:50:63:91:84:
37:43
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
2E:E7:D0:DB:09:37:C9:A6:4A:00:EC:71:94:D3:BD:EC:31:DF:86:6D
X509v3 Authority Key Identifier:
keyid:33:92:57:A0:C7:95:12:03:C0:12:BA:5A:F1:9E:DB:52:E6:79:0B:03
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://repo-rpki.idnic.net/repo/7ba0b3f1-974f-4205-bdce-0f9f5b7250dc/0/339257A0C7951203C012BA5AF19EDB52E6790B03.crl
Authority Information Access:
CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/339257A0C7951203C012BA5AF19EDB52E6790B03.cer
Subject Information Access:
Signed Object - URI:rsync://repo-rpki.idnic.net/repo/7ba0b3f1-974f-4205-bdce-0f9f5b7250dc/0/339257A0C7951203C012BA5AF19EDB52E6790B03.mft
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
5e:43:68:92:8c:40:db:8e:8f:c9:36:de:30:25:e1:d6:15:78:
32:bf:7c:27:f3:16:67:d0:b8:6c:d9:cf:87:38:f8:58:53:42:
17:02:14:63:96:8d:5a:ab:50:f5:1d:81:5d:56:14:dd:66:ef:
3e:11:5b:d9:62:57:38:f5:c3:87:06:e8:5f:d8:45:9a:59:6b:
68:28:d7:83:07:70:f0:e3:29:fa:1b:27:f9:dc:31:25:f1:41:
c4:cd:29:db:04:e1:f3:42:14:08:4e:9d:fb:7b:2f:25:64:b4:
68:7c:dc:e2:8e:a5:87:37:bf:df:6b:ab:3c:14:99:36:2e:f9:
57:2a:f6:57:bd:cc:2c:14:db:ab:4c:6a:8e:36:de:b7:38:74:
c3:8c:48:56:28:1a:07:de:2c:2e:bd:44:e9:c5:79:08:8f:39:
78:72:ba:c1:16:6c:d5:ab:9d:d8:62:86:8c:83:12:1b:19:f4:
2d:0d:2c:0b:ca:bf:b1:ac:1a:5b:cd:09:b2:8f:e2:ab:a5:c4:
85:b5:3a:f2:dd:d2:43:8d:3f:c3:1a:2f:50:e5:ac:70:ce:67:
82:fe:df:be:e3:91:9b:e3:f9:fd:33:97:44:02:70:f6:d8:b2:
cb:8d:33:b8:88:2e:4e:d7:34:e7:a4:9f:b0:a4:55:46:fe:42:
4d:c9:40:57
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jun 3 03:08:37 2026 by rpki-client