Manifest
$ rpki-client -vvf repo-rpki.idnic.net/repo/98e4610a-a794-4059-97d9-f2c69da54c8b/0/9D9BA670F21C20BCB7B427858AE542C5ACA3FE45.mft
File: 9D9BA670F21C20BCB7B427858AE542C5ACA3FE45.mft (raw, json)
Hash identifier: WEk7dMP7cy0/H13KAXU6iBIjHIq7opEV0aaXryOVsnY=
Subject key identifier: A7:76:4E:73:1B:C2:11:C3:2E:E5:41:41:D4:5F:AF:10:9A:CF:E2:51
Authority key identifier: 9D:9B:A6:70:F2:1C:20:BC:B7:B4:27:85:8A:E5:42:C5:AC:A3:FE:45
Certificate issuer: /CN=9D9BA670F21C20BCB7B427858AE542C5ACA3FE45
Certificate serial: 0F2181E44FBC4B2923C93E39C8E60B9E8D9DA436
Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/9D9BA670F21C20BCB7B427858AE542C5ACA3FE45.cer
Subject info access: rsync://repo-rpki.idnic.net/repo/98e4610a-a794-4059-97d9-f2c69da54c8b/0/9D9BA670F21C20BCB7B427858AE542C5ACA3FE45.mft
Manifest number: 3C
Signing time: Tue 28 Apr 2026 00:22:34 +0000
Manifest this update: Tue 28 Apr 2026 00:17:34 +0000
Manifest next update: Fri 01 May 2026 03:28:34 +0000
Files and hashes: 1: 9D9BA670F21C20BCB7B427858AE542C5ACA3FE45.crl (hash: jGrG89WeWxwXvlfrufnxcd49s8YyuxRmyTd+M/dpArM=)
2: 3230332e33332e33352e302f32342d3234203d3e203137383835.roa (hash: oUENuD0SMegzfgG7zCwjryjELhYU0l7sm/nxY+l6d1M=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
0f:21:81:e4:4f:bc:4b:29:23:c9:3e:39:c8:e6:0b:9e:8d:9d:a4:36
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=9D9BA670F21C20BCB7B427858AE542C5ACA3FE45
Validity
Not Before: Apr 28 00:17:34 2026 GMT
Not After : May 1 03:28:34 2026 GMT
Subject: CN=A7764E731BC211C32EE54141D45FAF109ACFE251
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c5:7b:36:fe:0c:c5:74:ac:13:1b:69:2d:53:70:
77:95:c4:83:79:68:36:57:e7:d7:39:64:14:d7:37:
9b:67:e8:57:52:a3:ad:b4:91:af:6a:f2:c1:aa:46:
45:f8:ba:8b:56:58:07:2e:67:9f:f8:20:f1:fa:ca:
d4:d1:5d:30:65:3a:23:d4:f2:91:4e:6e:ec:09:60:
21:59:d7:c6:b8:db:48:fe:61:13:47:c4:7b:e3:ed:
39:6d:39:ca:b7:77:9b:c1:75:82:a0:11:bd:cc:79:
be:e2:f2:4f:8c:f6:be:b9:77:18:17:ce:9b:91:77:
87:be:63:28:84:c1:3e:05:35:d4:b1:1c:38:05:0a:
33:d8:31:ed:97:1b:79:8a:33:c4:d4:ee:db:21:74:
be:dc:0c:e3:70:7e:cc:a6:ca:69:70:17:87:74:c6:
3b:5f:c0:81:fd:da:db:be:79:f6:1d:4b:3d:35:31:
3a:c9:f9:b6:b9:f2:79:3d:73:08:e3:b0:ac:2a:1f:
95:64:ee:42:59:1c:06:8c:ba:e2:0c:ac:71:a8:43:
2f:65:99:4e:7d:e7:1b:2a:70:c4:d4:2b:01:64:e1:
88:63:17:be:16:cc:ff:18:d4:1d:c4:34:e9:78:b3:
0b:cd:4c:fa:f1:16:cc:d9:3f:39:ad:67:d2:e6:e2:
ad:07
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A7:76:4E:73:1B:C2:11:C3:2E:E5:41:41:D4:5F:AF:10:9A:CF:E2:51
X509v3 Authority Key Identifier:
keyid:9D:9B:A6:70:F2:1C:20:BC:B7:B4:27:85:8A:E5:42:C5:AC:A3:FE:45
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://repo-rpki.idnic.net/repo/98e4610a-a794-4059-97d9-f2c69da54c8b/0/9D9BA670F21C20BCB7B427858AE542C5ACA3FE45.crl
Authority Information Access:
CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/9D9BA670F21C20BCB7B427858AE542C5ACA3FE45.cer
Subject Information Access:
Signed Object - URI:rsync://repo-rpki.idnic.net/repo/98e4610a-a794-4059-97d9-f2c69da54c8b/0/9D9BA670F21C20BCB7B427858AE542C5ACA3FE45.mft
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
39:1d:92:f6:56:52:eb:17:18:f9:3f:76:bf:4a:6d:57:6f:60:
43:cf:c7:b6:d4:a7:4a:b7:08:a0:33:ff:84:98:d4:d0:de:9c:
fc:f9:19:3a:30:fb:e4:c7:05:04:ea:9c:ad:b1:f6:c1:d5:35:
ed:38:de:64:5b:5b:8b:b3:19:ce:ea:5a:39:0c:b9:13:13:b4:
9a:0e:fb:a0:3b:90:37:d3:fd:ad:89:84:6a:64:4f:e8:27:20:
49:01:07:71:54:45:cd:7a:d1:75:0f:4c:52:d1:f1:79:d6:1f:
c9:2d:36:6b:41:b9:69:1f:28:64:70:2c:6f:72:e9:38:8b:58:
a6:80:71:67:ee:05:54:2e:d1:d2:b3:49:11:5d:7c:46:01:c0:
23:20:e8:21:8f:7e:a1:ec:60:08:57:29:14:e8:4e:8c:25:d2:
50:cc:99:82:38:31:05:12:14:e9:ea:fd:9b:65:f3:73:6e:ea:
86:d7:f2:94:e7:5b:a1:a4:77:f2:33:58:96:3b:87:54:80:c7:
9a:02:ad:34:23:6a:ca:45:bd:0a:64:28:c0:9a:7f:29:d7:b7:
e1:9c:f1:5e:b2:76:68:17:d3:60:58:df:11:9c:bc:c7:3d:f6:
b9:cf:89:66:22:f0:98:a2:24:dc:1e:a3:68:0b:c8:fb:56:d3:
3c:05:90:77
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jun 3 03:22:49 2026 by rpki-client