Manifest
$ rpki-client -vvf repo-rpki.idnic.net/repo/b853afdd-2e09-4773-8be4-6fd0ee90b040/0/3E788037924369AA3B8E52A5857804BE5D285FA2.mft
File: 3E788037924369AA3B8E52A5857804BE5D285FA2.mft (raw, json)
Hash identifier: q3BVXCh+Qd553I7ajQettDVjKJbokcRRHpk7As4HhBU=
Subject key identifier: 6D:8D:BF:02:24:13:36:D8:80:D4:DD:40:4A:3C:39:76:93:8E:3B:AE
Authority key identifier: 3E:78:80:37:92:43:69:AA:3B:8E:52:A5:85:78:04:BE:5D:28:5F:A2
Certificate issuer: /CN=3E788037924369AA3B8E52A5857804BE5D285FA2
Certificate serial: 18508120E7E99B6B352A959A0BE65C48B17380D9
Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/3E788037924369AA3B8E52A5857804BE5D285FA2.cer
Subject info access: rsync://repo-rpki.idnic.net/repo/b853afdd-2e09-4773-8be4-6fd0ee90b040/0/3E788037924369AA3B8E52A5857804BE5D285FA2.mft
Manifest number: 02DE
Signing time: Tue 28 Apr 2026 01:32:08 +0000
Manifest this update: Tue 28 Apr 2026 01:27:08 +0000
Manifest next update: Fri 01 May 2026 05:49:08 +0000
Files and hashes: 1: 3E788037924369AA3B8E52A5857804BE5D285FA2.crl (hash: OQGOOVwJu3QLBv7K9zOdut+92RwCvnwAkM85Kl9nrpg=)
2: 3130332e3137392e3131372e302f32342d3234203d3e20313431363435.roa (hash: ilhPhYMwxjxcNC74Yon3xYNd0uQUNUNF+7YCYR6VBOw=)
3: 3130332e3136322e35342e302f32342d3234203d3e20313431363435.roa (hash: T+TvJ8L62bCZqFmpIphffr8c4LXSlLo4atPH9poDMJ0=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
18:50:81:20:e7:e9:9b:6b:35:2a:95:9a:0b:e6:5c:48:b1:73:80:d9
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3E788037924369AA3B8E52A5857804BE5D285FA2
Validity
Not Before: Apr 28 01:27:08 2026 GMT
Not After : May 1 05:49:08 2026 GMT
Subject: CN=6D8DBF02241336D880D4DD404A3C3976938E3BAE
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d9:28:ac:25:7a:2a:99:e0:9d:57:34:20:c7:6b:
a5:02:96:0a:62:e5:02:73:35:c7:4a:3d:3d:cf:54:
f3:27:ac:b4:79:47:fb:0e:2e:c2:95:3e:a7:f5:98:
63:6e:e3:b2:18:32:6a:37:5f:5e:50:b1:e3:8d:de:
ef:8d:b7:1b:9a:fe:5f:b7:9e:0b:1d:57:67:b0:3b:
b7:11:7b:e9:71:9a:36:22:95:3b:7f:15:dc:c1:4a:
b5:84:e3:06:84:d5:1d:dd:0f:ad:a9:74:3b:c7:49:
26:51:43:7a:41:c9:22:f5:b2:2c:61:3f:d5:b2:46:
86:2e:b5:4c:83:8b:86:6c:ca:28:a3:0e:31:b1:8c:
f6:29:1a:ee:f0:1f:63:06:1f:41:ad:41:19:df:a6:
20:80:bf:1f:cc:b1:63:37:a2:01:2e:df:1b:56:f5:
58:26:1d:b6:42:31:ed:7e:4f:ce:98:7c:b4:bc:84:
73:54:11:e8:c8:a5:29:15:b7:0a:2c:b8:81:95:30:
ce:9b:8b:27:56:58:ef:43:12:d1:d3:c5:30:1b:2e:
6c:c5:32:2d:c0:c9:75:59:b4:eb:d0:0d:0c:8c:11:
c1:f9:c1:de:c2:0c:3e:97:12:96:c2:14:fd:c0:d9:
41:da:dc:46:c1:28:0f:f2:9b:b7:e6:6b:7e:14:c5:
d1:c7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
6D:8D:BF:02:24:13:36:D8:80:D4:DD:40:4A:3C:39:76:93:8E:3B:AE
X509v3 Authority Key Identifier:
keyid:3E:78:80:37:92:43:69:AA:3B:8E:52:A5:85:78:04:BE:5D:28:5F:A2
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://repo-rpki.idnic.net/repo/b853afdd-2e09-4773-8be4-6fd0ee90b040/0/3E788037924369AA3B8E52A5857804BE5D285FA2.crl
Authority Information Access:
CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/3E788037924369AA3B8E52A5857804BE5D285FA2.cer
Subject Information Access:
Signed Object - URI:rsync://repo-rpki.idnic.net/repo/b853afdd-2e09-4773-8be4-6fd0ee90b040/0/3E788037924369AA3B8E52A5857804BE5D285FA2.mft
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
4b:01:9d:e5:42:0d:81:b3:bc:3f:3c:80:19:d1:88:9d:6d:06:
d1:c2:4b:bb:40:d3:cf:a5:f5:33:2f:e1:84:2d:ab:cb:10:08:
80:61:a3:d2:bf:3c:12:00:0d:80:50:b3:63:b4:23:39:6a:34:
41:50:b8:92:83:79:74:cb:c4:83:0e:23:7b:90:59:ba:83:d8:
78:a2:ec:82:51:ca:8b:32:1d:3c:a5:74:23:8e:21:00:5c:0e:
d3:d2:3e:83:78:4c:14:6b:08:62:3f:73:5b:b3:d8:25:cb:79:
23:22:a5:44:78:d4:e1:65:4f:03:31:84:be:09:80:4a:30:8c:
d4:a4:6f:90:2a:ea:64:b9:d2:4c:4b:86:4a:7e:e1:50:cf:c7:
d6:e7:01:15:0e:a7:f3:14:f8:fb:6d:3b:92:d4:0f:a0:7b:47:
8a:04:d8:2d:bd:61:6a:18:10:7e:27:df:24:f4:f5:0f:8b:f6:
2e:a4:e1:ed:a0:f0:55:7a:44:75:d9:cf:ff:32:cc:02:f2:18:
ab:90:d5:50:74:6c:8a:bc:6b:f7:cc:7b:1d:c5:43:b9:3e:78:
15:be:3e:42:88:53:70:f6:e2:fc:e9:6f:0a:5f:43:1f:47:6b:
2e:10:b6:11:00:4a:46:e2:f1:f5:b5:6e:d3:ef:3e:a9:76:ba:
08:7a:73:14
-----BEGIN CERTIFICATE-----
MIIFMjCCBBqgAwIBAgIUGFCBIOfpm2s1KpWaC+ZcSLFzgNkwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoM0U3ODgwMzc5MjQzNjlBQTNCOEU1MkE1ODU3ODA0QkU1
RDI4NUZBMjAeFw0yNjA0MjgwMTI3MDhaFw0yNjA1MDEwNTQ5MDhaMDMxMTAvBgNV
BAMTKDZEOERCRjAyMjQxMzM2RDg4MEQ0REQ0MDRBM0MzOTc2OTM4RTNCQUUwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDZKKwleiqZ4J1XNCDHa6UClgpi
5QJzNcdKPT3PVPMnrLR5R/sOLsKVPqf1mGNu47IYMmo3X15QseON3u+Ntxua/l+3
ngsdV2ewO7cRe+lxmjYilTt/FdzBSrWE4waE1R3dD62pdDvHSSZRQ3pBySL1sixh
P9WyRoYutUyDi4ZsyiijDjGxjPYpGu7wH2MGH0GtQRnfpiCAvx/MsWM3ogEu3xtW
9VgmHbZCMe1+T86YfLS8hHNUEejIpSkVtwosuIGVMM6biydWWO9DEtHTxTAbLmzF
Mi3AyXVZtOvQDQyMEcH5wd7CDD6XEpbCFP3A2UHa3EbBKA/ym7fma34UxdHHAgMB
AAGjggI8MIICODAdBgNVHQ4EFgQUbY2/AiQTNtiA1N1ASjw5dpOOO64wHwYDVR0j
BBgwFoAUPniAN5JDaao7jlKlhXgEvl0oX6IwDgYDVR0PAQH/BAQDAgeAMIGFBgNV
HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby9i
ODUzYWZkZC0yZTA5LTQ3NzMtOGJlNC02ZmQwZWU5MGIwNDAvMC8zRTc4ODAzNzky
NDM2OUFBM0I4RTUyQTU4NTc4MDRCRTVEMjg1RkEyLmNybDB0BggrBgEFBQcBAQRo
MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv
L0lETklDLUlELzIvM0U3ODgwMzc5MjQzNjlBQTNCOEU1MkE1ODU3ODA0QkU1RDI4
NUZBMi5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6
Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vYjg1M2FmZGQtMmUwOS00NzczLThi
ZTQtNmZkMGVlOTBiMDQwLzAvM0U3ODgwMzc5MjQzNjlBQTNCOEU1MkE1ODU3ODA0
QkU1RDI4NUZBMi5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF
BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC
BQAwDQYJKoZIhvcNAQELBQADggEBAEsBneVCDYGzvD88gBnRiJ1tBtHCS7tA08+l
9TMv4YQtq8sQCIBho9K/PBIADYBQs2O0IzlqNEFQuJKDeXTLxIMOI3uQWbqD2Hii
7IJRyosyHTyldCOOIQBcDtPSPoN4TBRrCGI/c1uz2CXLeSMipUR41OFlTwMxhL4J
gEowjNSkb5Aq6mS50kxLhkp+4VDPx9bnARUOp/MU+PttO5LUD6B7R4oE2C29YWoY
EH4n3yT09Q+L9i6k4e2g8FV6RHXZz/8yzALyGKuQ1VB0bIq8a/fMex3FQ7k+eBW+
PkKIU3D24vzpbwpfQx9Hay4QthEASkbi8fW1btPvPql2ugh6cxQ=
-----END CERTIFICATE-----
Generated at Wed Jun 3 03:09:11 2026 by rpki-client