Manifest
$ rpki-client -vvf repo-rpki.idnic.net/repo/8b1664a7-c9c9-4442-8718-9aec9e2110a2/0/FF89F23BCBC42635E97AE15A7FB69E1E09A97DAF.mft
File: FF89F23BCBC42635E97AE15A7FB69E1E09A97DAF.mft (raw, json)
Hash identifier: lBbbM7ba7+U8uEan2zTdqq2NUczo8M+LhmFaGhd0P4Y=
Subject key identifier: D2:78:92:D8:63:32:69:EE:57:AF:EA:EE:2A:DB:8A:A6:9A:88:9F:BB
Authority key identifier: FF:89:F2:3B:CB:C4:26:35:E9:7A:E1:5A:7F:B6:9E:1E:09:A9:7D:AF
Certificate issuer: /CN=FF89F23BCBC42635E97AE15A7FB69E1E09A97DAF
Certificate serial: 4C075A99DC79263321946F3C34815718C8244409
Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/FF89F23BCBC42635E97AE15A7FB69E1E09A97DAF.cer
Subject info access: rsync://repo-rpki.idnic.net/repo/8b1664a7-c9c9-4442-8718-9aec9e2110a2/0/FF89F23BCBC42635E97AE15A7FB69E1E09A97DAF.mft
Manifest number: 02FE
Signing time: Tue 28 Apr 2026 16:22:26 +0000
Manifest this update: Tue 28 Apr 2026 16:17:26 +0000
Manifest next update: Sat 02 May 2026 00:53:26 +0000
Files and hashes: 1: 3130332e3136332e3138342e302f32342d3234203d3e20313432333636.roa (hash: siPS5QoYum/BXEiNROt4IMRxgn1AB6K77rmnuo2DlKI=)
2: 3130332e3136332e3138352e302f32342d3234203d3e20313432333636.roa (hash: pdL/jDmC/bRYeiHS8cnl+uvo57Pja48iQZSIZZK07no=)
3: FF89F23BCBC42635E97AE15A7FB69E1E09A97DAF.crl (hash: B8cB1mJsHE6FDxjaB+LG+vtp9hOxkkCbV15HXvolfok=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
4c:07:5a:99:dc:79:26:33:21:94:6f:3c:34:81:57:18:c8:24:44:09
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=FF89F23BCBC42635E97AE15A7FB69E1E09A97DAF
Validity
Not Before: Apr 28 16:17:26 2026 GMT
Not After : May 2 00:53:26 2026 GMT
Subject: CN=D27892D8633269EE57AFEAEE2ADB8AA69A889FBB
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ca:17:26:86:04:43:82:ca:2e:11:40:58:9a:1f:
aa:26:14:03:54:66:b2:e7:bf:13:0f:65:9c:c6:ea:
a3:1f:98:cd:63:31:9a:68:ff:64:60:11:0f:60:26:
a3:1f:ad:a3:8a:95:32:a9:8a:a5:7d:ff:59:e9:be:
8a:2d:83:cc:8b:8c:8b:e6:7f:dc:80:25:55:26:0c:
9c:5d:10:9a:d9:5d:01:07:f6:8a:58:d9:7d:00:3e:
f2:31:17:4a:a8:83:7b:85:f4:30:de:d6:f3:67:2a:
d8:61:92:09:c1:cf:77:62:39:cb:40:03:b8:fe:5a:
a9:83:69:64:5a:27:f4:82:c7:c3:34:ac:cb:11:1e:
29:3f:59:b2:05:51:c3:85:ac:50:5e:6d:c8:0b:22:
69:03:c0:68:e8:cc:4a:83:05:be:8a:93:fc:d2:27:
e6:62:40:c4:7a:77:b3:3d:8d:ed:13:6e:32:e5:e3:
fa:0e:d7:8e:00:d6:bd:14:5f:d7:cb:e9:5d:ff:e8:
e6:58:66:53:f4:bb:fd:75:6b:5e:55:9d:e4:e3:8f:
e3:dc:db:04:7e:08:10:9a:bf:40:30:26:bc:5d:e3:
a2:78:bc:58:dd:07:c1:04:ba:c5:a8:0a:29:a8:d6:
ad:31:e9:d9:a6:a8:d2:3b:11:b2:fe:44:7d:f0:b4:
38:c5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D2:78:92:D8:63:32:69:EE:57:AF:EA:EE:2A:DB:8A:A6:9A:88:9F:BB
X509v3 Authority Key Identifier:
keyid:FF:89:F2:3B:CB:C4:26:35:E9:7A:E1:5A:7F:B6:9E:1E:09:A9:7D:AF
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://repo-rpki.idnic.net/repo/8b1664a7-c9c9-4442-8718-9aec9e2110a2/0/FF89F23BCBC42635E97AE15A7FB69E1E09A97DAF.crl
Authority Information Access:
CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/FF89F23BCBC42635E97AE15A7FB69E1E09A97DAF.cer
Subject Information Access:
Signed Object - URI:rsync://repo-rpki.idnic.net/repo/8b1664a7-c9c9-4442-8718-9aec9e2110a2/0/FF89F23BCBC42635E97AE15A7FB69E1E09A97DAF.mft
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
2c:e8:f1:db:00:01:98:26:06:a9:ef:0f:0c:12:ff:11:31:9d:
b4:86:9b:22:c3:72:74:2f:33:4e:e4:c1:b5:d9:24:5c:72:d3:
1c:3c:f7:96:97:dd:51:ab:f1:ac:0e:78:16:08:d3:8f:4a:e8:
21:c5:e0:57:12:cd:ed:26:41:21:41:8d:f5:b3:82:7a:e0:ea:
bd:c5:1e:d9:c2:4d:e0:2d:64:70:fd:6c:a5:b7:70:3e:3d:5e:
69:72:68:8d:9a:21:be:b5:01:ce:d5:b5:47:c9:ae:4c:bb:36:
89:a1:94:64:87:61:83:54:b3:3e:59:a2:f9:84:ab:41:76:a5:
e3:32:62:5f:fd:60:6a:48:51:d4:d0:81:52:7f:a6:96:8a:ad:
9b:55:c8:47:72:dc:b9:70:58:39:9a:b8:cc:6b:3b:11:b7:60:
c2:47:bb:59:bb:15:bc:00:0e:fd:79:61:28:c3:dc:7c:37:43:
2f:e6:2c:37:23:56:f2:78:be:4b:6a:63:b0:bc:7b:28:82:f6:
73:62:27:89:8f:f9:2b:09:d7:a4:98:8c:77:09:80:57:d8:bd:
bc:84:b5:15:80:2b:ef:31:e2:13:ec:ab:5e:89:ee:c8:d9:2d:
d0:62:ee:4d:23:1d:37:31:85:23:cf:c3:af:c8:12:dc:82:48:
dd:1a:4e:bf
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jun 3 03:11:45 2026 by rpki-client