Manifest
$ rpki-client -vvf repo-rpki.idnic.net/repo/8a493be1-f064-49e6-949a-cb3ecbfc8f46/0/2BB13827423575141DA0F1C57B33E7DE5D7A63A6.mft
File: 2BB13827423575141DA0F1C57B33E7DE5D7A63A6.mft (raw, json)
Hash identifier: nA+3Q2kDjlZGs+EFNv+90o6mlrk6lVWIDhtpGaEowfM=
Subject key identifier: 0F:FD:53:7A:F7:A7:79:41:7E:39:C4:09:9E:63:81:DE:05:05:3E:76
Authority key identifier: 2B:B1:38:27:42:35:75:14:1D:A0:F1:C5:7B:33:E7:DE:5D:7A:63:A6
Certificate issuer: /CN=2BB13827423575141DA0F1C57B33E7DE5D7A63A6
Certificate serial: 2D68A308FFBA5EFC7AB5CEF2D2FCD28CFA6DD73D
Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/2BB13827423575141DA0F1C57B33E7DE5D7A63A6.cer
Subject info access: rsync://repo-rpki.idnic.net/repo/8a493be1-f064-49e6-949a-cb3ecbfc8f46/0/2BB13827423575141DA0F1C57B33E7DE5D7A63A6.mft
Manifest number: 03D1
Signing time: Tue 28 Apr 2026 07:33:43 +0000
Manifest this update: Tue 28 Apr 2026 07:28:43 +0000
Manifest next update: Fri 01 May 2026 11:53:43 +0000
Files and hashes: 1: 3130332e3233312e38332e302f32342d3234203d3e20313331373335.roa (hash: UN6dazoYFxgS6jdi8SmiPFiRAzrs0mSEhCBMn6iEnws=)
2: 2BB13827423575141DA0F1C57B33E7DE5D7A63A6.crl (hash: dhHhcA2z+mV4yj6IxNHU/A72S567gpr6F/Z7Aa5siSI=)
3: 3130332e3233312e38302e302f32342d3234203d3e20313331373335.roa (hash: cnM0NMAQN+nEB2uerjw6Qf1nArdtxZQ6ojcs75GS7ak=)
4: 3130332e3233312e38312e302f32342d3234203d3e20313331373335.roa (hash: yDXbsqxukA4XHHQjS7wVsIWS20Xlf5VSX6w1YkD0k4s=)
5: 3130332e3233312e38322e302f32342d3234203d3e20313331373335.roa (hash: 8zUKTcgIM2YuD1hdzVzeO7drrLCkIVs9L0M7lsGNsV4=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
2d:68:a3:08:ff:ba:5e:fc:7a:b5:ce:f2:d2:fc:d2:8c:fa:6d:d7:3d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2BB13827423575141DA0F1C57B33E7DE5D7A63A6
Validity
Not Before: Apr 28 07:28:43 2026 GMT
Not After : May 1 11:53:43 2026 GMT
Subject: CN=0FFD537AF7A779417E39C4099E6381DE05053E76
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ab:be:cf:4a:83:88:62:71:0b:5e:f7:04:95:4e:
61:5e:5f:21:0e:6b:59:c6:d4:32:ad:32:1d:46:6e:
8a:94:14:dc:f4:8e:e6:6e:6e:5c:27:aa:f2:41:21:
74:f4:75:e4:f5:30:f3:2e:81:22:f1:f6:74:70:23:
8b:20:db:fe:86:46:a9:10:c4:b8:78:f9:bf:ff:4e:
17:31:49:7e:41:00:0f:60:99:96:a4:41:54:e7:75:
ac:e1:9e:48:7f:a1:91:db:a0:d1:38:e3:dd:3d:b9:
6a:f0:5d:7f:3a:51:94:0e:ac:e4:10:84:90:5c:9c:
ad:db:61:de:64:20:8e:63:24:ce:18:e5:f4:ee:ea:
31:63:a2:11:52:27:7d:ba:c3:e6:1b:5c:2d:01:e8:
ca:13:1b:f5:6e:f8:35:9c:db:6a:db:03:df:5c:41:
2d:cd:64:6c:f7:0e:aa:0b:81:c4:53:6e:63:95:19:
84:13:d6:1c:28:ef:f2:62:f3:41:8f:4e:9f:0d:3d:
ae:f3:ab:cb:cf:43:a3:cd:23:86:ac:96:1e:87:cc:
4c:e6:06:b4:53:a9:10:9e:1d:44:d5:a9:de:70:97:
91:4c:10:a6:f5:b3:c9:ca:c1:c1:4e:30:d8:17:c6:
86:55:4d:c6:51:ab:d6:8f:1b:90:c2:a3:1e:b9:33:
e5:07
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
0F:FD:53:7A:F7:A7:79:41:7E:39:C4:09:9E:63:81:DE:05:05:3E:76
X509v3 Authority Key Identifier:
keyid:2B:B1:38:27:42:35:75:14:1D:A0:F1:C5:7B:33:E7:DE:5D:7A:63:A6
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://repo-rpki.idnic.net/repo/8a493be1-f064-49e6-949a-cb3ecbfc8f46/0/2BB13827423575141DA0F1C57B33E7DE5D7A63A6.crl
Authority Information Access:
CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/2BB13827423575141DA0F1C57B33E7DE5D7A63A6.cer
Subject Information Access:
Signed Object - URI:rsync://repo-rpki.idnic.net/repo/8a493be1-f064-49e6-949a-cb3ecbfc8f46/0/2BB13827423575141DA0F1C57B33E7DE5D7A63A6.mft
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
63:ab:3b:ec:b6:dd:96:fd:f6:4d:e3:f3:9c:07:a9:1c:65:87:
94:70:e1:40:5e:eb:b5:7b:df:9e:ff:54:da:88:c2:ba:12:b1:
94:9c:d5:30:69:14:87:7c:c3:17:d6:7e:17:6e:a5:dc:ed:75:
ee:58:5c:8a:14:1f:9b:e6:63:c1:e6:0d:c1:f6:d7:5a:27:2c:
4f:ee:1d:bd:d0:6e:77:69:42:62:df:5c:f4:c8:35:d3:7d:40:
91:29:e2:1b:fb:19:08:a6:34:95:5d:63:86:9d:c1:b2:6e:e7:
06:a1:e8:61:b8:93:9e:a3:05:a3:6a:e6:2b:f2:4d:5e:7e:d5:
f8:18:31:91:7b:94:db:ec:94:c9:5b:0d:56:c5:43:13:3b:07:
f8:f7:2d:8d:08:01:0a:d2:2b:b1:42:fe:a1:e4:4c:30:1c:02:
23:cf:cb:65:d5:57:41:61:e7:fc:f6:80:84:16:9a:b0:0a:d9:
fd:d1:0f:c9:e4:3e:ba:01:1a:67:c1:55:28:d5:39:2b:5c:84:
3d:89:09:fd:aa:e6:ce:72:b3:f7:d4:03:b3:7f:5a:53:1b:25:
ad:f8:bd:d8:be:a6:c6:08:e3:42:c7:a4:b8:1c:1c:89:32:1f:
8c:cb:f4:6e:6f:e3:90:26:c2:1b:9f:9f:6b:98:aa:f0:fe:42:
d2:d2:3f:03
-----BEGIN CERTIFICATE-----
MIIFMjCCBBqgAwIBAgIULWijCP+6Xvx6tc7y0vzSjPpt1z0wDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoMkJCMTM4Mjc0MjM1NzUxNDFEQTBGMUM1N0IzM0U3REU1
RDdBNjNBNjAeFw0yNjA0MjgwNzI4NDNaFw0yNjA1MDExMTUzNDNaMDMxMTAvBgNV
BAMTKDBGRkQ1MzdBRjdBNzc5NDE3RTM5QzQwOTlFNjM4MURFMDUwNTNFNzYwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCrvs9Kg4hicQte9wSVTmFeXyEO
a1nG1DKtMh1GboqUFNz0juZublwnqvJBIXT0deT1MPMugSLx9nRwI4sg2/6GRqkQ
xLh4+b//ThcxSX5BAA9gmZakQVTndazhnkh/oZHboNE44909uWrwXX86UZQOrOQQ
hJBcnK3bYd5kII5jJM4Y5fTu6jFjohFSJ326w+YbXC0B6MoTG/Vu+DWc22rbA99c
QS3NZGz3DqoLgcRTbmOVGYQT1hwo7/Ji80GPTp8NPa7zq8vPQ6PNI4aslh6HzEzm
BrRTqRCeHUTVqd5wl5FMEKb1s8nKwcFOMNgXxoZVTcZRq9aPG5DCox65M+UHAgMB
AAGjggI8MIICODAdBgNVHQ4EFgQUD/1TeveneUF+OcQJnmOB3gUFPnYwHwYDVR0j
BBgwFoAUK7E4J0I1dRQdoPHFezPn3l16Y6YwDgYDVR0PAQH/BAQDAgeAMIGFBgNV
HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby84
YTQ5M2JlMS1mMDY0LTQ5ZTYtOTQ5YS1jYjNlY2JmYzhmNDYvMC8yQkIxMzgyNzQy
MzU3NTE0MURBMEYxQzU3QjMzRTdERTVEN0E2M0E2LmNybDB0BggrBgEFBQcBAQRo
MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv
L0lETklDLUlELzIvMkJCMTM4Mjc0MjM1NzUxNDFEQTBGMUM1N0IzM0U3REU1RDdB
NjNBNi5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6
Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vOGE0OTNiZTEtZjA2NC00OWU2LTk0
OWEtY2IzZWNiZmM4ZjQ2LzAvMkJCMTM4Mjc0MjM1NzUxNDFEQTBGMUM1N0IzM0U3
REU1RDdBNjNBNi5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF
BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC
BQAwDQYJKoZIhvcNAQELBQADggEBAGOrO+y23Zb99k3j85wHqRxlh5Rw4UBe67V7
357/VNqIwroSsZSc1TBpFId8wxfWfhdupdztde5YXIoUH5vmY8HmDcH211onLE/u
Hb3QbndpQmLfXPTINdN9QJEp4hv7GQimNJVdY4adwbJu5wah6GG4k56jBaNq5ivy
TV5+1fgYMZF7lNvslMlbDVbFQxM7B/j3LY0IAQrSK7FC/qHkTDAcAiPPy2XVV0Fh
5/z2gIQWmrAK2f3RD8nkProBGmfBVSjVOStchD2JCf2q5s5ys/fUA7N/WlMbJa34
vdi+psYI40LHpLgcHIkyH4zL9G5v45Amwhufn2uYqvD+QtLSPwM=
-----END CERTIFICATE-----
Generated at Wed Jun 3 03:09:08 2026 by rpki-client