Manifest
$ rpki-client -vvf repo-rpki.idnic.net/repo/9229ca50-e95c-45bb-9c30-63e12af7a5e1/0/3448C84DDFF9B9912D9D17493FEBDB9FBA0B39BB.mft
File: 3448C84DDFF9B9912D9D17493FEBDB9FBA0B39BB.mft (raw, json)
Hash identifier: Eg/6nDtIYnWKvjqvuLWTGD6zUCx8VmF21oN205zlFps=
Subject key identifier: FC:96:02:26:3A:C7:F5:99:AB:3D:15:53:DE:5B:8C:98:9C:D0:B7:01
Authority key identifier: 34:48:C8:4D:DF:F9:B9:91:2D:9D:17:49:3F:EB:DB:9F:BA:0B:39:BB
Certificate issuer: /CN=3448C84DDFF9B9912D9D17493FEBDB9FBA0B39BB
Certificate serial: 73DA0540076BFE97766362D074EB4473A12C1D6F
Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/3448C84DDFF9B9912D9D17493FEBDB9FBA0B39BB.cer
Subject info access: rsync://repo-rpki.idnic.net/repo/9229ca50-e95c-45bb-9c30-63e12af7a5e1/0/3448C84DDFF9B9912D9D17493FEBDB9FBA0B39BB.mft
Manifest number: 0269
Signing time: Tue 28 Apr 2026 06:31:08 +0000
Manifest this update: Tue 28 Apr 2026 06:26:08 +0000
Manifest next update: Fri 01 May 2026 15:29:08 +0000
Files and hashes: 1: 3130332e3139312e35372e302f32342d3234203d3e20313331373433.roa (hash: 1Ri1ZJBh09re6NP+bhwgfUJY8sYHU8itfO+apymQ4g0=)
2: 3130332e3139312e35362e302f32332d3233203d3e20313331373433.roa (hash: 4X8Kz+hrvczZsab/uaMNm2DvsPE7IvXYSmEJwXv1W3g=)
3: 3448C84DDFF9B9912D9D17493FEBDB9FBA0B39BB.crl (hash: 0EAFxTTo/jiGnq4O0J1bncXH029AQo1IHwJbLD4J9q4=)
4: 3130332e3139312e35362e302f32342d3234203d3e20313331373433.roa (hash: oupcLDUmMHLFoLDlfsFGLMKtLOlyWvfSlJ+uVUfUPvg=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
73:da:05:40:07:6b:fe:97:76:63:62:d0:74:eb:44:73:a1:2c:1d:6f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3448C84DDFF9B9912D9D17493FEBDB9FBA0B39BB
Validity
Not Before: Apr 28 06:26:08 2026 GMT
Not After : May 1 15:29:08 2026 GMT
Subject: CN=FC9602263AC7F599AB3D1553DE5B8C989CD0B701
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a9:5a:ce:de:c2:06:03:a1:79:db:ec:9f:88:92:
70:f0:a4:16:9d:01:18:68:49:13:d6:ad:69:2b:93:
9a:50:02:f1:0d:5d:da:4a:5c:5b:e4:7f:f6:a5:57:
cb:86:bc:bd:42:b0:27:20:a2:8b:7d:8b:bf:ba:34:
9a:72:d7:5c:fd:8b:eb:ce:74:60:6b:4a:27:b4:03:
0c:9e:a1:e6:53:2c:12:93:f7:5c:26:96:54:6f:92:
43:51:33:9d:78:80:8f:cd:ef:3f:bf:3d:73:22:9d:
82:df:06:b6:bb:fc:83:4b:27:63:53:ad:e8:1e:e4:
6b:c4:ce:6c:45:61:91:d0:03:2c:6c:93:e7:5e:e1:
16:60:7d:66:99:6a:68:98:bf:e9:4a:06:94:77:75:
08:be:30:6a:ed:54:47:1c:6f:35:9c:9c:dd:46:6b:
17:dd:24:e0:4a:0d:7a:c6:fd:5e:49:52:f7:f8:66:
b6:f7:bc:43:27:d1:91:b4:c0:7f:7f:bf:ad:04:b9:
cb:21:11:22:57:d2:5e:86:38:d2:d4:f2:dc:fd:cd:
b1:cd:da:1f:3f:19:14:61:15:7d:d8:cd:c0:8f:65:
3d:a4:5a:0f:cc:5b:d2:2b:fe:be:83:1f:81:86:26:
8c:3b:0b:c3:43:79:dc:3a:b5:20:46:80:f2:ac:e0:
20:49
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
FC:96:02:26:3A:C7:F5:99:AB:3D:15:53:DE:5B:8C:98:9C:D0:B7:01
X509v3 Authority Key Identifier:
keyid:34:48:C8:4D:DF:F9:B9:91:2D:9D:17:49:3F:EB:DB:9F:BA:0B:39:BB
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://repo-rpki.idnic.net/repo/9229ca50-e95c-45bb-9c30-63e12af7a5e1/0/3448C84DDFF9B9912D9D17493FEBDB9FBA0B39BB.crl
Authority Information Access:
CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/3448C84DDFF9B9912D9D17493FEBDB9FBA0B39BB.cer
Subject Information Access:
Signed Object - URI:rsync://repo-rpki.idnic.net/repo/9229ca50-e95c-45bb-9c30-63e12af7a5e1/0/3448C84DDFF9B9912D9D17493FEBDB9FBA0B39BB.mft
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
9d:6b:27:40:db:ce:5a:32:07:1c:92:28:95:86:e9:70:2e:7e:
71:60:ec:8b:05:b9:31:3b:3e:bd:52:e6:49:f4:75:0e:0a:e0:
43:7c:b9:84:05:c5:56:de:15:ca:34:40:06:9b:1d:d9:53:fd:
e4:a8:d2:f5:c2:e6:0c:0c:e6:8e:b7:23:c5:06:f7:16:c7:e3:
0b:5a:06:46:63:5e:35:3d:ae:a7:11:0b:dc:83:5c:40:a6:06:
57:a1:5c:a5:0f:9a:b7:85:e3:90:db:fd:f3:f3:e2:72:65:28:
03:83:e0:b0:0a:2c:1a:3a:52:c8:51:bb:7e:60:2e:40:df:d9:
49:8b:47:42:72:ed:f7:66:38:e9:0c:13:3e:df:18:69:06:8f:
54:29:41:79:b5:a2:d1:d6:9b:45:89:21:f1:3f:48:95:bb:f8:
e0:be:0b:b4:41:f0:b6:41:27:41:99:cc:d1:66:1d:b3:52:fa:
29:65:09:a4:48:4f:96:5c:91:b9:8c:91:c5:97:10:95:92:ae:
66:42:05:b2:69:55:a6:1d:0a:15:7c:d6:73:2f:80:df:13:4b:
b8:9b:2e:d6:a9:bb:42:43:6a:84:ac:87:e7:74:85:4b:0c:3f:
1b:72:e9:5e:cb:50:46:14:76:9d:0b:24:81:88:62:eb:16:2e:
70:bf:92:e3
-----BEGIN CERTIFICATE-----
MIIFMjCCBBqgAwIBAgIUc9oFQAdr/pd2Y2LQdOtEc6EsHW8wDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoMzQ0OEM4NERERkY5Qjk5MTJEOUQxNzQ5M0ZFQkRCOUZC
QTBCMzlCQjAeFw0yNjA0MjgwNjI2MDhaFw0yNjA1MDExNTI5MDhaMDMxMTAvBgNV
BAMTKEZDOTYwMjI2M0FDN0Y1OTlBQjNEMTU1M0RFNUI4Qzk4OUNEMEI3MDEwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCpWs7ewgYDoXnb7J+IknDwpBad
ARhoSRPWrWkrk5pQAvENXdpKXFvkf/alV8uGvL1CsCcgoot9i7+6NJpy11z9i+vO
dGBrSie0AwyeoeZTLBKT91wmllRvkkNRM514gI/N7z+/PXMinYLfBra7/INLJ2NT
rege5GvEzmxFYZHQAyxsk+de4RZgfWaZamiYv+lKBpR3dQi+MGrtVEccbzWcnN1G
axfdJOBKDXrG/V5JUvf4Zrb3vEMn0ZG0wH9/v60EucshESJX0l6GONLU8tz9zbHN
2h8/GRRhFX3YzcCPZT2kWg/MW9Ir/r6DH4GGJow7C8NDedw6tSBGgPKs4CBJAgMB
AAGjggI8MIICODAdBgNVHQ4EFgQU/JYCJjrH9ZmrPRVT3luMmJzQtwEwHwYDVR0j
BBgwFoAUNEjITd/5uZEtnRdJP+vbn7oLObswDgYDVR0PAQH/BAQDAgeAMIGFBgNV
HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby85
MjI5Y2E1MC1lOTVjLTQ1YmItOWMzMC02M2UxMmFmN2E1ZTEvMC8zNDQ4Qzg0RERG
RjlCOTkxMkQ5RDE3NDkzRkVCREI5RkJBMEIzOUJCLmNybDB0BggrBgEFBQcBAQRo
MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv
L0lETklDLUlELzIvMzQ0OEM4NERERkY5Qjk5MTJEOUQxNzQ5M0ZFQkRCOUZCQTBC
MzlCQi5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6
Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vOTIyOWNhNTAtZTk1Yy00NWJiLTlj
MzAtNjNlMTJhZjdhNWUxLzAvMzQ0OEM4NERERkY5Qjk5MTJEOUQxNzQ5M0ZFQkRC
OUZCQTBCMzlCQi5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF
BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC
BQAwDQYJKoZIhvcNAQELBQADggEBAJ1rJ0DbzloyBxySKJWG6XAufnFg7IsFuTE7
Pr1S5kn0dQ4K4EN8uYQFxVbeFco0QAabHdlT/eSo0vXC5gwM5o63I8UG9xbH4wta
BkZjXjU9rqcRC9yDXECmBlehXKUPmreF45Db/fPz4nJlKAOD4LAKLBo6UshRu35g
LkDf2UmLR0Jy7fdmOOkMEz7fGGkGj1QpQXm1otHWm0WJIfE/SJW7+OC+C7RB8LZB
J0GZzNFmHbNS+illCaRIT5ZckbmMkcWXEJWSrmZCBbJpVaYdChV81nMvgN8TS7ib
Ltapu0JDaoSsh+d0hUsMPxty6V7LUEYUdp0LJIGIYusWLnC/kuM=
-----END CERTIFICATE-----
Generated at Wed Jun 3 03:14:18 2026 by rpki-client