Manifest
$ rpki-client -vvf repo-rpki.idnic.net/repo/a43336f8-e546-462c-8410-b7732b6c8015/0/A3969B26389933D7D21F3A8D757CB9C5687740E4.mft
File: A3969B26389933D7D21F3A8D757CB9C5687740E4.mft (raw, json)
Hash identifier: GS84onFTMt3bCAYZDTa1+GvGRm2xB4nCwG+Uzr3NQHg=
Subject key identifier: BB:49:6B:B9:A3:15:C8:0E:23:9D:0D:60:FC:B8:70:6B:D0:53:C2:87
Authority key identifier: A3:96:9B:26:38:99:33:D7:D2:1F:3A:8D:75:7C:B9:C5:68:77:40:E4
Certificate issuer: /CN=A3969B26389933D7D21F3A8D757CB9C5687740E4
Certificate serial: 721CD25691338F71B8C0C95E312B2C76F2A960B6
Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/A3969B26389933D7D21F3A8D757CB9C5687740E4.cer
Subject info access: rsync://repo-rpki.idnic.net/repo/a43336f8-e546-462c-8410-b7732b6c8015/0/A3969B26389933D7D21F3A8D757CB9C5687740E4.mft
Manifest number: 027F
Signing time: Tue 28 Apr 2026 21:20:03 +0000
Manifest this update: Tue 28 Apr 2026 21:15:03 +0000
Manifest next update: Sat 02 May 2026 00:54:03 +0000
Files and hashes: 1: A3969B26389933D7D21F3A8D757CB9C5687740E4.crl (hash: YnaZ5uM0Nst1sOd305UDqb3hns2Q6/3YVJ/K0mx/o00=)
2: 3130332e3138392e39372e302f32342d3234203d3e203435333035.roa (hash: dPESLlDldiPlxlzMP4pyOofDIOVuijVKtCZRkw6hNwI=)
3: 3130332e3138392e39362e302f32342d3234203d3e203435333035.roa (hash: qtEscO6Ss1ZidJKujaFpouGEgWx2zLweILJixQSY1+s=)
4: 3130332e3138392e39362e302f32332d3234203d3e203435333035.roa (hash: apN+h9rMVlve5QQ11UHOBtDmWt+4qBPMklHSwzuoZf0=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
72:1c:d2:56:91:33:8f:71:b8:c0:c9:5e:31:2b:2c:76:f2:a9:60:b6
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A3969B26389933D7D21F3A8D757CB9C5687740E4
Validity
Not Before: Apr 28 21:15:03 2026 GMT
Not After : May 2 00:54:03 2026 GMT
Subject: CN=BB496BB9A315C80E239D0D60FCB8706BD053C287
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c1:8d:4c:52:ac:9c:f0:1f:bd:70:a0:fe:4e:12:
0d:2f:90:6d:d0:13:d7:32:d8:00:c5:1f:b0:a2:70:
dc:c8:b7:cc:2d:78:20:1c:43:f7:87:6c:4b:76:31:
82:db:0e:da:a7:8e:a6:04:bf:d9:0c:7d:6b:d9:3f:
3f:35:10:38:4a:2e:bb:77:4c:f0:fb:7f:58:e3:39:
ba:91:55:05:29:8d:5b:af:62:f9:27:0a:7b:ff:48:
0b:22:1a:da:a9:ba:3e:55:28:e9:fb:05:a9:aa:38:
ed:5e:11:dc:3e:c7:2e:d6:f9:a7:e6:8a:84:a7:48:
1d:8e:d0:3a:6a:a2:55:40:c2:54:aa:f1:1e:61:fe:
37:bf:80:4c:0d:82:5c:2d:a7:3b:bc:71:26:52:07:
a2:a2:c4:5c:9e:03:1f:62:a3:ff:70:7a:76:7a:65:
37:c5:f2:a5:f6:a3:7c:f3:a5:e1:ad:32:44:e5:31:
55:fb:da:ea:aa:50:ba:c9:4d:fd:0d:02:6a:aa:fa:
5e:c1:f0:d3:4b:3d:7c:45:2a:22:48:8c:4d:85:38:
07:9b:d8:b9:5e:62:e2:79:ca:5d:b0:49:fe:2d:ff:
2a:45:fb:b3:20:1d:a4:10:8e:11:3e:2a:e3:a1:74:
40:d3:f2:99:a6:85:73:ba:87:ac:73:59:2f:a4:0b:
03:ed
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
BB:49:6B:B9:A3:15:C8:0E:23:9D:0D:60:FC:B8:70:6B:D0:53:C2:87
X509v3 Authority Key Identifier:
keyid:A3:96:9B:26:38:99:33:D7:D2:1F:3A:8D:75:7C:B9:C5:68:77:40:E4
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://repo-rpki.idnic.net/repo/a43336f8-e546-462c-8410-b7732b6c8015/0/A3969B26389933D7D21F3A8D757CB9C5687740E4.crl
Authority Information Access:
CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/A3969B26389933D7D21F3A8D757CB9C5687740E4.cer
Subject Information Access:
Signed Object - URI:rsync://repo-rpki.idnic.net/repo/a43336f8-e546-462c-8410-b7732b6c8015/0/A3969B26389933D7D21F3A8D757CB9C5687740E4.mft
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
9e:77:d1:ee:9e:95:aa:2d:bf:20:06:82:ca:ca:4b:3e:cc:d6:
c1:ae:5a:f3:d0:96:ff:99:c1:1a:8e:d2:3f:0d:af:ac:91:ac:
c4:c3:7f:5a:62:73:5d:1a:4b:89:31:4d:e5:63:ce:79:b1:a5:
18:b4:4c:01:e9:c8:f3:fa:11:e6:fe:6c:78:96:e0:9f:08:ff:
ea:aa:36:dc:31:39:8c:67:a2:00:a6:1f:2b:dc:95:65:09:78:
40:a6:bd:66:25:a2:a0:4e:3b:cb:18:4e:3e:b7:90:e5:14:eb:
0d:dd:f4:b0:4f:bf:77:d3:96:4b:25:d3:56:c4:d2:d9:57:e9:
85:d5:a9:23:29:b9:72:72:b8:f4:0f:0b:e7:8d:32:b9:e4:50:
58:3b:c3:30:dd:2c:0c:76:80:6e:46:42:ce:63:34:09:0f:cd:
ff:7b:bd:b1:06:ef:a1:7a:32:90:b5:81:89:3a:28:e3:a2:b3:
2a:b9:82:0e:6b:74:1b:86:76:22:1c:cd:c2:7f:25:02:7c:db:
f7:19:2c:db:cd:5d:c0:aa:9e:0e:97:dd:13:cb:0f:41:ad:42:
12:02:96:c8:61:4b:c8:3c:32:4e:67:01:4d:0f:6f:5b:c5:16:
69:43:10:8d:ee:41:1f:00:1b:ae:d7:4a:3e:77:62:71:33:4e:
50:21:67:4a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jul 19 05:03:30 2026 by rpki-client