Manifest
$ rpki-client -vvf repo-rpki.idnic.net/repo/8d703b80-2e78-4d11-ab74-08017e422d6e/0/C33BE6D76C1444B4695CC56D706802967A2A404E.mft
File: C33BE6D76C1444B4695CC56D706802967A2A404E.mft (raw, json)
Hash identifier: vjmvaOBqnv+37j8MvUU6oAhbmigpr3Rx/pE8/OrQXdg=
Subject key identifier: AE:46:C1:49:05:2B:DC:FC:75:44:19:9A:CC:CD:0C:6F:05:C1:CC:3C
Authority key identifier: C3:3B:E6:D7:6C:14:44:B4:69:5C:C5:6D:70:68:02:96:7A:2A:40:4E
Certificate issuer: /CN=C33BE6D76C1444B4695CC56D706802967A2A404E
Certificate serial: 54E5FD87FA8C8483BF728421B61F915F34F8332D
Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/C33BE6D76C1444B4695CC56D706802967A2A404E.cer
Subject info access: rsync://repo-rpki.idnic.net/repo/8d703b80-2e78-4d11-ab74-08017e422d6e/0/C33BE6D76C1444B4695CC56D706802967A2A404E.mft
Manifest number: 01A2
Signing time: Mon 27 Apr 2026 02:31:52 +0000
Manifest this update: Mon 27 Apr 2026 02:26:52 +0000
Manifest next update: Thu 30 Apr 2026 11:34:52 +0000
Files and hashes: 1: 3130332e35352e33312e302f32342d3234203d3e20313530343834.roa (hash: tAaom1u9dzc8ncYAUwE5XCycjaJDPimabJR/V9nJlmE=)
2: C33BE6D76C1444B4695CC56D706802967A2A404E.crl (hash: i6wr2FECeqHAOL++gVQAVpGsczvx1C/lDSMknAJHR8U=)
3: 3130332e35352e33302e302f32332d3233203d3e20313530343834.roa (hash: ZuMnDiHxEL/U8SL8BhAZDvs5aB1dq2I0QG/IhKrpVW8=)
4: 3130332e35352e33302e302f32342d3234203d3e20313530343834.roa (hash: aZfOFjCWcMoRejMmCl7p7stqIRB0AZ4Tzh7bIJ8bPos=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
54:e5:fd:87:fa:8c:84:83:bf:72:84:21:b6:1f:91:5f:34:f8:33:2d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=C33BE6D76C1444B4695CC56D706802967A2A404E
Validity
Not Before: Apr 27 02:26:52 2026 GMT
Not After : Apr 30 11:34:52 2026 GMT
Subject: CN=AE46C149052BDCFC7544199ACCCD0C6F05C1CC3C
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cc:e4:fe:13:a4:c3:82:44:f5:e2:ec:58:77:d4:
27:a2:ac:39:f3:2c:b0:d6:c7:55:ab:20:44:c9:38:
33:d7:ce:27:d1:d6:99:da:a6:b1:a7:38:9c:0c:ad:
31:06:96:9e:16:a5:21:30:77:c4:a5:e1:98:de:d7:
f1:5e:ef:25:c6:b3:fa:3b:8e:8b:76:c3:b4:42:06:
62:c4:6d:db:a9:8a:fc:f7:e0:9f:3b:16:1f:e4:ab:
63:3d:f2:26:46:dc:6a:5f:f3:17:35:32:4f:23:f2:
a2:15:a0:fa:6c:55:6a:f6:06:9a:a7:2d:aa:bc:11:
1e:01:a5:fe:fa:0e:71:ec:70:8c:40:be:c7:06:50:
4e:fe:5b:d7:c4:53:38:db:d0:ae:f1:f1:16:d6:d8:
d9:70:d3:c9:bb:a6:e0:39:7f:1f:ef:8d:b3:20:86:
e3:f8:60:57:29:15:94:54:e9:41:b6:0c:03:95:28:
a5:c6:cd:e5:54:6a:52:1a:f1:2e:f2:de:17:74:8f:
82:ee:df:52:72:45:48:1f:ba:bd:bd:21:f1:7c:bf:
78:8c:41:20:d5:e0:cc:eb:b7:ab:b7:00:d8:6d:d6:
74:a9:f7:1c:0b:22:d5:2a:8e:5f:4d:97:3b:c0:48:
16:82:35:32:d7:c6:39:63:ea:e1:bd:44:76:e0:8a:
97:b1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
AE:46:C1:49:05:2B:DC:FC:75:44:19:9A:CC:CD:0C:6F:05:C1:CC:3C
X509v3 Authority Key Identifier:
keyid:C3:3B:E6:D7:6C:14:44:B4:69:5C:C5:6D:70:68:02:96:7A:2A:40:4E
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://repo-rpki.idnic.net/repo/8d703b80-2e78-4d11-ab74-08017e422d6e/0/C33BE6D76C1444B4695CC56D706802967A2A404E.crl
Authority Information Access:
CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/C33BE6D76C1444B4695CC56D706802967A2A404E.cer
Subject Information Access:
Signed Object - URI:rsync://repo-rpki.idnic.net/repo/8d703b80-2e78-4d11-ab74-08017e422d6e/0/C33BE6D76C1444B4695CC56D706802967A2A404E.mft
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
49:30:ad:a7:39:30:5e:24:b4:c9:0e:37:c4:3e:59:74:41:1d:
1f:30:64:ef:9a:56:be:84:0c:20:c7:4d:3e:f8:93:93:75:58:
a4:3f:32:45:13:09:1d:2b:da:e8:f8:86:cb:2e:bc:78:8d:5b:
c2:91:e7:ce:93:44:f1:d0:a6:da:ce:71:d6:1d:ee:7a:82:53:
e8:ae:6d:a2:11:12:54:af:f3:d8:0f:9f:7e:f5:7f:69:cd:82:
3c:0e:2f:33:08:3b:b7:38:8e:c1:1e:df:fd:95:f4:32:76:19:
85:f7:6d:7d:99:c1:9e:7d:2f:d0:86:a8:e5:34:07:9c:ab:20:
aa:12:76:bd:8c:a5:ed:c7:8e:a7:fd:c6:4a:78:10:f6:1f:e5:
50:b8:72:8d:30:61:eb:92:65:39:ac:79:d0:5d:72:eb:b2:1c:
4d:68:58:14:d3:82:ee:2f:cf:39:2c:7d:92:72:88:35:a7:e9:
9c:70:b9:9c:d9:1e:25:ef:b9:5b:4c:e4:47:5a:48:23:03:ce:
f8:be:60:5a:c6:66:0e:e4:65:ad:7b:2d:98:6d:08:dc:6b:33:
c8:89:0e:4d:5c:d4:73:42:7f:26:54:ee:07:20:4c:b9:21:00:
6e:37:a8:30:94:44:25:ed:c4:40:75:3f:42:f8:3d:21:b1:08:
36:bf:6a:aa
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jun 3 03:15:19 2026 by rpki-client