Manifest
$ rpki-client -vvf repo-rpki.idnic.net/repo/b883e3be-57e2-4125-a0c5-9a9ea501bf05/0/90508FF980097E19CEF65ED72A856616A6F690AB.mft
File: 90508FF980097E19CEF65ED72A856616A6F690AB.mft (raw, json)
Hash identifier: opsJWYusCAVv8Kt8Ej8gQfqJl1amcWtLth09/yHE4+M=
Subject key identifier: 18:FA:97:33:23:4B:0A:60:14:17:9C:A0:BC:2F:35:0D:87:D5:7F:2A
Authority key identifier: 90:50:8F:F9:80:09:7E:19:CE:F6:5E:D7:2A:85:66:16:A6:F6:90:AB
Certificate issuer: /CN=90508FF980097E19CEF65ED72A856616A6F690AB
Certificate serial: 2DC16630FC87D8143F85D8995EFA0C7BE3EAA5FB
Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/90508FF980097E19CEF65ED72A856616A6F690AB.cer
Subject info access: rsync://repo-rpki.idnic.net/repo/b883e3be-57e2-4125-a0c5-9a9ea501bf05/0/90508FF980097E19CEF65ED72A856616A6F690AB.mft
Manifest number: 056E
Signing time: Tue 28 Apr 2026 18:12:17 +0000
Manifest this update: Tue 28 Apr 2026 18:07:17 +0000
Manifest next update: Fri 01 May 2026 21:44:17 +0000
Files and hashes: 1: 3130332e3131392e3232382e302f32332d3234203d3e203634333135.roa (hash: JNjDlAZZhJPbXz9QnoPN2kXEdVorueRNiZ3y4BzRO+s=)
2: 90508FF980097E19CEF65ED72A856616A6F690AB.crl (hash: 063vElKCl+peptADVS/L9xWkVII1jK94yJflnBF8EXU=)
3: 3130332e3131392e3233312e302f32342d3234203d3e203634333135.roa (hash: 7pdp3iomZV1Sl4nuURLGWWHMiPLMkvx/Ece8HW9MQqg=)
4: 3130332e3131392e3233302e302f32342d3234203d3e203634333135.roa (hash: NUlokuFe9GARtT8KTw9qoKUuu+MeiOKu86jOn++3TJ0=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
2d:c1:66:30:fc:87:d8:14:3f:85:d8:99:5e:fa:0c:7b:e3:ea:a5:fb
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=90508FF980097E19CEF65ED72A856616A6F690AB
Validity
Not Before: Apr 28 18:07:17 2026 GMT
Not After : May 1 21:44:17 2026 GMT
Subject: CN=18FA9733234B0A6014179CA0BC2F350D87D57F2A
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e6:f3:46:93:25:14:bb:d1:2a:9d:ea:e7:bf:92:
6a:2b:82:79:9d:3c:95:07:f9:43:61:7f:43:28:3f:
e1:e3:aa:bf:7a:7f:d4:22:36:a7:83:4f:2c:3b:da:
38:e3:d9:cb:91:d0:f1:ba:96:5c:f3:07:d8:37:d6:
cb:3d:bb:aa:bf:cb:50:24:bb:f9:9e:9a:98:31:4d:
be:78:75:11:d1:2f:32:27:e6:02:56:46:f4:0a:3b:
d3:dc:b8:98:35:d2:e0:cb:c2:ce:77:93:a7:a7:24:
75:a0:03:b7:08:bc:2b:aa:ca:ae:d8:6d:a1:0e:2a:
88:90:eb:47:11:e4:50:cf:3a:1d:cb:c4:a5:41:26:
6d:3f:b1:12:65:25:68:79:ce:6e:af:58:1f:ab:cb:
51:0b:1a:ed:23:6f:6a:41:98:93:84:3c:f6:e9:f3:
25:03:71:67:28:54:99:0a:77:20:e1:82:2f:cc:36:
02:62:18:7e:35:11:68:dd:c3:c2:2a:85:d9:92:de:
ea:06:89:55:ed:b2:6d:d5:70:4c:ff:ad:52:df:48:
e6:79:31:01:5d:8b:f4:d8:ef:43:c2:29:e3:6f:95:
da:5f:dc:08:39:f6:89:a1:d7:b3:80:fa:c1:5d:9b:
7f:aa:d9:89:7b:ef:52:e2:8c:95:3c:8b:af:e0:5c:
88:17
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
18:FA:97:33:23:4B:0A:60:14:17:9C:A0:BC:2F:35:0D:87:D5:7F:2A
X509v3 Authority Key Identifier:
keyid:90:50:8F:F9:80:09:7E:19:CE:F6:5E:D7:2A:85:66:16:A6:F6:90:AB
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://repo-rpki.idnic.net/repo/b883e3be-57e2-4125-a0c5-9a9ea501bf05/0/90508FF980097E19CEF65ED72A856616A6F690AB.crl
Authority Information Access:
CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/90508FF980097E19CEF65ED72A856616A6F690AB.cer
Subject Information Access:
Signed Object - URI:rsync://repo-rpki.idnic.net/repo/b883e3be-57e2-4125-a0c5-9a9ea501bf05/0/90508FF980097E19CEF65ED72A856616A6F690AB.mft
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
60:7f:4a:46:0e:ae:bb:af:7a:c8:df:9f:27:79:47:1b:78:fb:
78:5b:a6:96:5e:71:d0:27:fa:43:01:f1:e7:71:60:53:54:fc:
9b:be:65:57:eb:d1:12:2d:41:ac:3f:b1:56:29:9c:8e:f4:b6:
b4:23:50:0e:a7:37:10:2c:4c:79:98:b6:d0:59:57:a7:ee:e3:
e0:0a:7d:2d:6e:cb:46:5a:0c:cd:ee:de:a0:21:76:45:ca:e8:
b0:db:2b:14:cf:0e:9c:f7:d6:45:33:31:a1:bd:e5:0a:e7:22:
d5:f6:a9:82:70:ff:ba:20:6b:44:a0:d8:a7:57:84:ea:aa:2d:
ed:04:4a:63:78:86:47:24:47:06:37:ba:3d:34:d5:d2:79:b7:
fd:48:f1:b9:a4:14:f7:71:27:10:68:75:ef:61:5b:57:0d:be:
95:f9:b5:78:97:46:2a:f8:26:ee:43:66:52:7d:63:9d:35:26:
35:e7:5b:bd:32:82:29:c0:24:82:00:e6:76:11:3b:23:f1:1b:
50:c6:8a:c4:9a:cf:86:ca:ac:cc:4a:ff:25:ca:ba:43:64:8d:
8f:b9:82:7c:b9:be:fd:30:c9:31:9d:d1:73:e2:ff:2f:81:f4:
1e:d5:44:28:f9:03:2d:3b:41:6c:8c:e8:73:0e:f9:86:58:6d:
c5:8b:41:91
-----BEGIN CERTIFICATE-----
MIIFMjCCBBqgAwIBAgIULcFmMPyH2BQ/hdiZXvoMe+PqpfswDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoOTA1MDhGRjk4MDA5N0UxOUNFRjY1RUQ3MkE4NTY2MTZB
NkY2OTBBQjAeFw0yNjA0MjgxODA3MTdaFw0yNjA1MDEyMTQ0MTdaMDMxMTAvBgNV
BAMTKDE4RkE5NzMzMjM0QjBBNjAxNDE3OUNBMEJDMkYzNTBEODdENTdGMkEwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDm80aTJRS70Sqd6ue/kmorgnmd
PJUH+UNhf0MoP+Hjqr96f9QiNqeDTyw72jjj2cuR0PG6llzzB9g31ss9u6q/y1Ak
u/mempgxTb54dRHRLzIn5gJWRvQKO9PcuJg10uDLws53k6enJHWgA7cIvCuqyq7Y
baEOKoiQ60cR5FDPOh3LxKVBJm0/sRJlJWh5zm6vWB+ry1ELGu0jb2pBmJOEPPbp
8yUDcWcoVJkKdyDhgi/MNgJiGH41EWjdw8IqhdmS3uoGiVXtsm3VcEz/rVLfSOZ5
MQFdi/TY70PCKeNvldpf3Ag59omh17OA+sFdm3+q2Yl771LijJU8i6/gXIgXAgMB
AAGjggI8MIICODAdBgNVHQ4EFgQUGPqXMyNLCmAUF5ygvC81DYfVfyowHwYDVR0j
BBgwFoAUkFCP+YAJfhnO9l7XKoVmFqb2kKswDgYDVR0PAQH/BAQDAgeAMIGFBgNV
HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby9i
ODgzZTNiZS01N2UyLTQxMjUtYTBjNS05YTllYTUwMWJmMDUvMC85MDUwOEZGOTgw
MDk3RTE5Q0VGNjVFRDcyQTg1NjYxNkE2RjY5MEFCLmNybDB0BggrBgEFBQcBAQRo
MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv
L0lETklDLUlELzIvOTA1MDhGRjk4MDA5N0UxOUNFRjY1RUQ3MkE4NTY2MTZBNkY2
OTBBQi5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6
Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vYjg4M2UzYmUtNTdlMi00MTI1LWEw
YzUtOWE5ZWE1MDFiZjA1LzAvOTA1MDhGRjk4MDA5N0UxOUNFRjY1RUQ3MkE4NTY2
MTZBNkY2OTBBQi5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF
BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC
BQAwDQYJKoZIhvcNAQELBQADggEBAGB/SkYOrruvesjfnyd5Rxt4+3hbppZecdAn
+kMB8edxYFNU/Ju+ZVfr0RItQaw/sVYpnI70trQjUA6nNxAsTHmYttBZV6fu4+AK
fS1uy0ZaDM3u3qAhdkXK6LDbKxTPDpz31kUzMaG95QrnItX2qYJw/7oga0Sg2KdX
hOqqLe0ESmN4hkckRwY3uj001dJ5t/1I8bmkFPdxJxBode9hW1cNvpX5tXiXRir4
Ju5DZlJ9Y501JjXnW70yginAJIIA5nYROyPxG1DGisSaz4bKrMxK/yXKukNkjY+5
gny5vv0wyTGd0XPi/y+B9B7VRCj5Ay07QWyM6HMO+YZYbcWLQZE=
-----END CERTIFICATE-----
Generated at Wed Jun 3 03:08:35 2026 by rpki-client