Manifest
$ rpki-client -vvf repo-rpki.idnic.net/repo/8783ed28-5881-47da-ae66-e1db67942eb1/0/3FF5F93CDAB2F666B963C41BB83ED3E35130D530.mft
File: 3FF5F93CDAB2F666B963C41BB83ED3E35130D530.mft (raw, json)
Hash identifier: ClsAk+0qZFBIKD3qnKo1mXigz0jeDlfBQdsbzz5SKaE=
Subject key identifier: CD:DB:B0:A0:EA:09:C1:0D:48:33:BD:DD:DE:32:A0:0F:15:DF:43:8E
Authority key identifier: 3F:F5:F9:3C:DA:B2:F6:66:B9:63:C4:1B:B8:3E:D3:E3:51:30:D5:30
Certificate issuer: /CN=3FF5F93CDAB2F666B963C41BB83ED3E35130D530
Certificate serial: 7DED9F9B3C1C002134CDC89088386A2FA5C778C1
Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/3FF5F93CDAB2F666B963C41BB83ED3E35130D530.cer
Subject info access: rsync://repo-rpki.idnic.net/repo/8783ed28-5881-47da-ae66-e1db67942eb1/0/3FF5F93CDAB2F666B963C41BB83ED3E35130D530.mft
Manifest number: 01F7
Signing time: Wed 29 Apr 2026 09:02:36 +0000
Manifest this update: Wed 29 Apr 2026 08:57:36 +0000
Manifest next update: Sat 02 May 2026 11:43:36 +0000
Files and hashes: 1: 3FF5F93CDAB2F666B963C41BB83ED3E35130D530.crl (hash: QOWZGx2T4R68bY46mxN+4lQSFJYtKKuXCvoR17ISlYE=)
2: 3130332e35312e3130332e302f32342d3234203d3e20313339343332.roa (hash: M4XvK4+KSlb81JlrVQsMEAe2ZSv8ZUvIs/IgDYzVWX8=)
3: 3130332e3232352e39372e302f32342d3234203d3e20313339343332.roa (hash: OZaXLB6WOsZ0iT1ekgvM7U/1Xm1GvHimP1k0atvZFXA=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
7d:ed:9f:9b:3c:1c:00:21:34:cd:c8:90:88:38:6a:2f:a5:c7:78:c1
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3FF5F93CDAB2F666B963C41BB83ED3E35130D530
Validity
Not Before: Apr 29 08:57:36 2026 GMT
Not After : May 2 11:43:36 2026 GMT
Subject: CN=CDDBB0A0EA09C10D4833BDDDDE32A00F15DF438E
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e9:70:53:05:ba:31:68:c0:d2:d5:67:ec:7c:06:
52:39:db:ad:dd:e9:d9:58:88:27:d9:2a:16:73:e6:
31:93:11:07:c0:df:59:7c:0a:8d:29:ca:72:7e:67:
91:b1:4e:26:6b:0b:ec:2d:7e:d6:53:0e:7d:9c:0c:
12:2e:93:e1:3c:f5:9f:fa:42:c3:f0:9c:95:fe:bf:
c2:b4:67:49:47:94:42:2d:26:51:00:47:9c:12:83:
90:47:d6:1e:a6:c6:8c:d8:da:dc:d1:3d:d0:d3:1b:
43:d3:c4:1c:a1:43:53:a1:b3:30:c0:c9:d3:e5:1c:
16:a4:a2:1e:86:60:72:03:ec:be:98:6d:1b:c8:a8:
50:1d:c3:cf:1b:85:74:8a:cc:e0:8a:01:58:ec:8f:
2c:5f:4c:7d:66:b7:1b:28:2a:c0:e1:5b:49:d0:5e:
69:34:b6:70:e4:ce:28:1c:22:b3:8f:7f:be:12:07:
f4:2c:bf:82:f6:5a:6f:aa:73:6c:c9:71:61:c3:da:
9d:f6:e7:b7:7f:f2:85:82:28:cc:c0:bf:37:cc:09:
89:50:fd:8c:d5:1f:29:02:ac:b5:d3:c4:d1:e8:19:
70:4f:a1:f0:71:3d:04:13:40:0f:ce:d5:bc:d1:26:
99:9f:51:b7:1c:e0:17:3b:97:33:85:f6:6d:d9:b3:
8a:c5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
CD:DB:B0:A0:EA:09:C1:0D:48:33:BD:DD:DE:32:A0:0F:15:DF:43:8E
X509v3 Authority Key Identifier:
keyid:3F:F5:F9:3C:DA:B2:F6:66:B9:63:C4:1B:B8:3E:D3:E3:51:30:D5:30
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://repo-rpki.idnic.net/repo/8783ed28-5881-47da-ae66-e1db67942eb1/0/3FF5F93CDAB2F666B963C41BB83ED3E35130D530.crl
Authority Information Access:
CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/3FF5F93CDAB2F666B963C41BB83ED3E35130D530.cer
Subject Information Access:
Signed Object - URI:rsync://repo-rpki.idnic.net/repo/8783ed28-5881-47da-ae66-e1db67942eb1/0/3FF5F93CDAB2F666B963C41BB83ED3E35130D530.mft
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
9e:7a:68:15:0c:71:ca:e4:e7:c7:00:9d:27:ea:42:b6:52:c6:
30:f2:f6:f4:05:69:31:55:64:67:97:0f:73:9a:10:85:29:e2:
8f:d1:a7:c7:f0:59:e8:ce:90:d9:d8:19:85:89:88:9c:bc:39:
f3:8f:62:70:24:4a:06:f6:9b:bf:44:58:e6:f9:5d:a5:e3:cb:
ab:77:09:06:55:d7:3b:ee:7f:93:5b:be:7a:73:f4:93:81:a1:
45:0a:91:35:c1:cb:dc:59:9f:fc:fc:5e:f0:ec:d6:97:3d:ec:
00:ad:d8:06:a0:f4:a7:79:d7:f3:17:04:64:5d:ac:3a:9f:86:
d0:49:01:e9:68:6b:c0:32:07:d6:a2:0d:e6:c4:80:60:9b:4b:
c6:95:a8:12:2b:af:01:d6:5b:01:51:52:ce:e5:ba:e8:ed:ce:
83:82:4b:65:24:41:cf:df:a1:51:ed:3e:9c:c4:d5:71:49:1c:
a4:c1:07:d9:69:ab:83:eb:95:11:c1:70:41:a1:7f:bd:b1:4b:
64:a5:04:5e:3e:be:bb:f4:e5:b0:a8:aa:30:69:8f:ee:c7:7b:
9d:d2:71:1f:2b:7a:c6:6c:57:01:93:76:e8:19:fc:f3:98:45:
3d:73:e9:87:7c:59:57:4f:77:09:5f:96:c3:6f:15:b8:85:84:
2f:aa:58:64
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jun 3 03:22:28 2026 by rpki-client