
Manifest
$ rpki-client -vvf repo-rpki.idnic.net/repo/9b733dcf-9f5e-4775-9ce7-9dd525b44b86/1/33D2F1EAE44634CCF2B028FDCA2A11513D83B42D.mft
File: 33D2F1EAE44634CCF2B028FDCA2A11513D83B42D.mft (raw, json)
Hash identifier: ZYZkNWBa0rj3c6hMTNhpJfGo+ZbBKwx7JsNn5Gl9n0s=
Subject key identifier: 22:F3:D2:27:0D:56:B9:84:0A:FB:CF:B9:B6:D7:92:B9:A2:7F:5C:85
Authority key identifier: 33:D2:F1:EA:E4:46:34:CC:F2:B0:28:FD:CA:2A:11:51:3D:83:B4:2D
Certificate issuer: /CN=33D2F1EAE44634CCF2B028FDCA2A11513D83B42D
Certificate serial: 69C744D706AFB13631C8CB49A3280BC43282C4B2
Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/33D2F1EAE44634CCF2B028FDCA2A11513D83B42D.cer
Subject info access: rsync://repo-rpki.idnic.net/repo/9b733dcf-9f5e-4775-9ce7-9dd525b44b86/1/33D2F1EAE44634CCF2B028FDCA2A11513D83B42D.mft
Manifest number: 011E
Signing time: Tue 28 Apr 2026 11:32:40 +0000
Manifest this update: Tue 28 Apr 2026 11:27:40 +0000
Manifest next update: Fri 01 May 2026 16:43:40 +0000
Files and hashes: 1: 33D2F1EAE44634CCF2B028FDCA2A11513D83B42D.crl (hash: e7/m3oD4/2oYJkDL81s3SPJfC0PHy8T5gb0hZXEIjCc=)
2: 323030313a6466333a643334303a3a2f34382d3438203d3e20313532373439.roa (hash: Y6M3Rf10ondFVRavAz+BHrKvcEeqI6mWIsztyFy7iY4=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
69:c7:44:d7:06:af:b1:36:31:c8:cb:49:a3:28:0b:c4:32:82:c4:b2
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=33D2F1EAE44634CCF2B028FDCA2A11513D83B42D
Validity
Not Before: Apr 28 11:27:40 2026 GMT
Not After : May 1 16:43:40 2026 GMT
Subject: CN=22F3D2270D56B9840AFBCFB9B6D792B9A27F5C85
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d4:dd:9f:ae:16:f6:50:b2:f2:bf:dc:f9:c9:ec:
35:03:f8:7f:df:c6:37:29:22:8a:e4:bf:3b:57:a7:
b6:53:72:c8:b6:f4:74:7e:8f:b1:ff:a4:ec:f9:2b:
17:5e:a1:8f:c2:6f:92:c0:05:97:70:1d:46:1b:24:
e9:15:f8:d7:d4:e2:b0:63:66:7c:40:99:18:92:e8:
a4:84:5d:49:9b:f0:8b:4f:48:3d:a6:e7:53:d6:9d:
20:c3:fd:8d:4d:f9:27:5e:54:9b:57:c7:84:de:8d:
c8:80:0f:fa:8a:8a:e4:78:3a:22:42:46:1e:4f:9b:
8a:64:11:7c:87:72:b7:42:e0:d4:59:e0:0d:e1:52:
cd:8d:b8:55:5c:36:32:a1:3b:fe:0d:66:9c:02:6c:
a1:2b:17:6f:8f:96:8f:14:2e:e2:5e:8c:a2:eb:85:
f4:0c:a8:a8:63:bc:da:e1:a5:f8:44:ae:c9:e1:14:
e1:7d:6f:3c:b8:69:4d:2e:03:21:fb:cf:73:b7:04:
cf:a8:ab:d4:e0:2c:4f:93:e3:2a:5c:9d:f5:4f:60:
f8:52:f7:8f:02:45:8d:0d:09:60:22:6d:4e:a1:00:
fd:4f:d4:02:85:14:7f:22:85:9a:ee:73:ae:ba:a5:
2c:ce:a9:37:1f:77:23:2f:0d:83:93:00:e9:2d:53:
84:2f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
22:F3:D2:27:0D:56:B9:84:0A:FB:CF:B9:B6:D7:92:B9:A2:7F:5C:85
X509v3 Authority Key Identifier:
keyid:33:D2:F1:EA:E4:46:34:CC:F2:B0:28:FD:CA:2A:11:51:3D:83:B4:2D
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://repo-rpki.idnic.net/repo/9b733dcf-9f5e-4775-9ce7-9dd525b44b86/1/33D2F1EAE44634CCF2B028FDCA2A11513D83B42D.crl
Authority Information Access:
CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/33D2F1EAE44634CCF2B028FDCA2A11513D83B42D.cer
Subject Information Access:
Signed Object - URI:rsync://repo-rpki.idnic.net/repo/9b733dcf-9f5e-4775-9ce7-9dd525b44b86/1/33D2F1EAE44634CCF2B028FDCA2A11513D83B42D.mft
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
6c:cf:54:33:e5:71:df:26:59:85:cc:3c:52:5f:91:2c:e0:c2:
c5:6b:ea:e1:d2:10:75:be:8c:69:c4:aa:15:8c:e1:b7:46:46:
d0:76:c0:df:f2:09:56:f9:26:4d:45:7f:54:55:09:c4:43:e6:
8d:6e:fe:6a:f4:c3:35:4e:db:55:22:92:a3:75:f1:cc:44:e4:
76:e2:bf:a1:3e:a7:52:e9:db:b3:08:f9:49:25:3c:db:ec:b1:
72:b8:e0:f3:96:a2:e4:1c:9a:ad:94:4c:31:5a:5c:f3:68:3a:
fd:8b:e4:3f:4c:48:b0:ce:34:f5:7c:7f:d0:58:b8:27:49:9e:
dc:52:a4:4f:81:2e:f8:a6:51:69:89:72:39:b4:c6:87:91:6b:
7d:57:98:48:2b:2a:f7:66:28:ef:64:94:63:7e:50:e7:55:38:
e8:1c:ab:93:00:b2:93:e2:3e:5a:6c:f7:fd:0b:45:2e:4e:a3:
8f:1e:75:dc:0e:08:60:b5:01:e9:16:1e:b2:4e:b9:b2:79:5f:
df:80:ad:22:28:e4:19:b7:4c:b1:ce:b9:a9:92:72:80:97:2d:
0e:62:4c:87:d6:fd:e4:b9:d6:bd:b9:2a:08:6e:38:f4:2d:cc:
25:cb:00:97:2d:f3:0d:5c:17:e1:6f:6f:59:da:67:86:88:6c:
a2:13:54:ad
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jul 19 05:02:11 2026 by rpki-client