Manifest
$ rpki-client -vvf repo-rpki.idnic.net/repo/837694b7-3256-4666-a3fe-6e82e783b1e1/0/3C52D4A86ABDDD0D6DA631737F78DC205EEC239B.mft
File: 3C52D4A86ABDDD0D6DA631737F78DC205EEC239B.mft (raw, json)
Hash identifier: ETRgRlsy9b9HDHGRqSQq4JMT/M2MoRcQ5zqvWCbZi2s=
Subject key identifier: A3:5C:C4:32:6D:A6:5B:4F:84:03:84:97:65:91:D9:F1:23:71:BF:7B
Authority key identifier: 3C:52:D4:A8:6A:BD:DD:0D:6D:A6:31:73:7F:78:DC:20:5E:EC:23:9B
Certificate issuer: /CN=3C52D4A86ABDDD0D6DA631737F78DC205EEC239B
Certificate serial: 0E9CB63E426BAC29998C5C86390A0EAD8657570B
Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/3C52D4A86ABDDD0D6DA631737F78DC205EEC239B.cer
Subject info access: rsync://repo-rpki.idnic.net/repo/837694b7-3256-4666-a3fe-6e82e783b1e1/0/3C52D4A86ABDDD0D6DA631737F78DC205EEC239B.mft
Manifest number: 021C
Signing time: Tue 28 Apr 2026 17:10:49 +0000
Manifest this update: Tue 28 Apr 2026 17:05:49 +0000
Manifest next update: Fri 01 May 2026 23:09:49 +0000
Files and hashes: 1: 3130332e35342e3137302e302f32342d3234203d3e20313336303532.roa (hash: 4d1ijz/rU+DejuJXb/c4cK45ZvNx5vBw0rsE3pI0Nk8=)
2: 3130332e35342e3137312e302f32342d3234203d3e20313431303731.roa (hash: A15JvoKxrrNNly8QbNKG17HNlGfUgFoFqcNw47K8k1o=)
3: 3C52D4A86ABDDD0D6DA631737F78DC205EEC239B.crl (hash: gZJsFFBVIWTQXflfwoRaJy4D6LD1cSyGCVTJ3x37GOQ=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
0e:9c:b6:3e:42:6b:ac:29:99:8c:5c:86:39:0a:0e:ad:86:57:57:0b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3C52D4A86ABDDD0D6DA631737F78DC205EEC239B
Validity
Not Before: Apr 28 17:05:49 2026 GMT
Not After : May 1 23:09:49 2026 GMT
Subject: CN=A35CC4326DA65B4F840384976591D9F12371BF7B
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e7:e4:bd:f3:a6:82:66:22:bc:49:49:f2:f4:42:
9d:a7:87:05:91:d7:ba:01:2a:6c:67:fb:db:97:1e:
83:a6:0e:d1:48:60:9a:8d:d1:6e:fa:17:69:6e:b9:
5c:45:39:09:cc:20:6e:e9:10:55:f5:ef:7b:4a:6c:
19:6a:84:f5:9e:e9:76:ad:08:85:c4:42:e2:91:3f:
dc:60:37:11:4b:a0:70:f9:5a:7f:f0:e3:35:b5:3b:
0c:b3:25:6e:d5:a8:90:18:6f:3f:5f:e9:f9:a8:a9:
00:cc:88:2d:f0:6c:bd:79:f4:bf:3e:e5:7b:f7:34:
5d:9e:d8:e2:15:3b:62:8f:f2:34:f4:c9:1e:a1:35:
3b:97:59:27:2f:38:be:ff:bb:19:e6:02:94:d4:49:
df:c5:48:2e:22:7b:08:c4:71:0c:cf:51:5c:a5:57:
cb:cd:e1:31:dc:85:20:8b:08:7c:51:b6:ea:0a:5c:
8b:e2:c0:6f:58:5e:5f:74:1d:9b:89:be:36:53:bf:
4e:ac:39:f1:c3:ab:a2:1e:73:a0:11:30:78:24:0c:
e7:34:2b:a8:c7:e8:52:39:e9:d3:35:45:92:70:91:
d3:0b:de:75:e8:96:42:85:d1:31:cb:19:8f:7c:a2:
cf:18:0b:8b:79:c5:6d:5f:13:b4:ed:c3:d1:73:1c:
1d:75
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A3:5C:C4:32:6D:A6:5B:4F:84:03:84:97:65:91:D9:F1:23:71:BF:7B
X509v3 Authority Key Identifier:
keyid:3C:52:D4:A8:6A:BD:DD:0D:6D:A6:31:73:7F:78:DC:20:5E:EC:23:9B
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://repo-rpki.idnic.net/repo/837694b7-3256-4666-a3fe-6e82e783b1e1/0/3C52D4A86ABDDD0D6DA631737F78DC205EEC239B.crl
Authority Information Access:
CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/3C52D4A86ABDDD0D6DA631737F78DC205EEC239B.cer
Subject Information Access:
Signed Object - URI:rsync://repo-rpki.idnic.net/repo/837694b7-3256-4666-a3fe-6e82e783b1e1/0/3C52D4A86ABDDD0D6DA631737F78DC205EEC239B.mft
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
7a:54:1f:6d:93:27:23:76:87:20:a9:be:cb:0f:8f:48:d9:80:
ea:35:4c:3d:91:8c:f0:0b:94:19:e0:ee:67:ae:44:1c:3d:24:
ab:ed:37:ce:7b:4c:6d:31:a0:44:42:46:eb:ba:90:81:40:77:
48:11:fa:be:3b:44:a4:0a:1d:ff:75:11:a2:9c:d5:12:7d:c3:
10:0d:5a:cb:a1:a8:c6:e2:2c:13:72:28:da:1d:74:c1:52:0d:
f9:d1:50:3c:e0:41:34:d9:d1:d6:d9:a7:d3:29:01:7b:35:7d:
05:f0:2c:58:c5:1b:8b:c6:7f:59:5d:7a:e2:fa:50:41:8f:4e:
68:4d:39:46:2b:8f:d9:e5:1e:b0:ef:cb:41:d4:e4:02:6e:6b:
de:76:7c:c5:35:d0:0f:b3:e5:b1:7c:cf:ea:a7:57:d6:89:33:
e0:99:ba:6b:98:80:64:63:a4:8d:54:9a:97:8b:85:49:0f:df:
a1:41:71:fa:53:66:d8:07:39:5c:67:ad:38:97:83:e0:f8:03:
77:c1:46:d0:18:c4:4b:39:ed:ed:e6:f4:61:1d:aa:10:a4:8a:
72:3a:f3:cd:fc:66:f5:f8:1e:58:34:41:4f:9f:df:5f:e2:d3:
46:c0:99:3c:a4:7a:60:4a:1a:f2:e6:d1:22:b2:3d:cc:10:a4:
82:22:35:f7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jul 19 04:53:32 2026 by rpki-client