Manifest
$ rpki-client -vvf repo-rpki.idnic.net/repo/ccd53948-ddf3-449a-bf2b-cf3f7ae176d3/0/3E2173CCE67F75D29F1CAAA739E6CC6727D6E088.mft
File: 3E2173CCE67F75D29F1CAAA739E6CC6727D6E088.mft (raw, json)
Hash identifier: u2sF2Y2geW7PoFQjgbjl5aaLcBqz2waUoOtQFneJokU=
Subject key identifier: 62:2E:4F:CA:CB:D5:EA:C6:5B:4A:5B:C3:26:DA:D6:2B:8E:4E:7F:67
Authority key identifier: 3E:21:73:CC:E6:7F:75:D2:9F:1C:AA:A7:39:E6:CC:67:27:D6:E0:88
Certificate issuer: /CN=3E2173CCE67F75D29F1CAAA739E6CC6727D6E088
Certificate serial: 20A8F360FD22684C9637694A565771367CA07D06
Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/3E2173CCE67F75D29F1CAAA739E6CC6727D6E088.cer
Subject info access: rsync://repo-rpki.idnic.net/repo/ccd53948-ddf3-449a-bf2b-cf3f7ae176d3/0/3E2173CCE67F75D29F1CAAA739E6CC6727D6E088.mft
Manifest number: 0261
Signing time: Mon 27 Apr 2026 14:10:02 +0000
Manifest this update: Mon 27 Apr 2026 14:05:02 +0000
Manifest next update: Thu 30 Apr 2026 18:59:02 +0000
Files and hashes: 1: 3130332e39382e3131362e302f32332d3233203d3e20313336383230.roa (hash: 5WMxfKjZT65hcUd7WB/JBj/IGlOrVSKyagiTEPB+Bbc=)
2: 3E2173CCE67F75D29F1CAAA739E6CC6727D6E088.crl (hash: MVl+hmxQyLVoqynNRPcxNazz39yOUEaUM79sYzY4dDk=)
3: 3130332e39382e3131392e302f32342d3234203d3e20313336383230.roa (hash: FKvQcIFjQ4jSFjJqopycW3C8xU5WMAd9DxBpUx0ooOo=)
4: 3130332e39382e3131362e302f32342d3234203d3e20313336383230.roa (hash: qDp/9A0Y/ulunffQZxElvfIaE/NdFYhZkLbByr51VdA=)
5: 3130332e39382e3131372e302f32342d3234203d3e20313336383230.roa (hash: 8PLaaC5TWKChl2hi+NScu0gokk1yJzx4RjePXT89r4I=)
6: 3130332e39382e3131382e302f32332d3233203d3e20313336383230.roa (hash: EGqCere+OuMmi+yewJcL8GzC3eQu4ZQkb/8gD6T4+6E=)
7: 3130332e39382e3131382e302f32342d3234203d3e20313336383230.roa (hash: HVqoW+0C33urp1QDrxDJSlQoD43x8mh1qkHLG7bhXAk=)
8: 3130332e39382e3131362e302f32322d3232203d3e20313336383230.roa (hash: i54NYnK2GA2WJM2OLug4LshIBq/PRL0PgNo2Bs8E9pY=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
20:a8:f3:60:fd:22:68:4c:96:37:69:4a:56:57:71:36:7c:a0:7d:06
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3E2173CCE67F75D29F1CAAA739E6CC6727D6E088
Validity
Not Before: Apr 27 14:05:02 2026 GMT
Not After : Apr 30 18:59:02 2026 GMT
Subject: CN=622E4FCACBD5EAC65B4A5BC326DAD62B8E4E7F67
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b5:51:f9:30:00:29:d6:e4:45:7f:89:66:39:13:
38:4e:63:88:94:75:74:ff:5b:be:bb:a9:0c:0e:b7:
c8:08:fc:c8:11:a9:b9:ab:b4:06:a1:9d:00:fd:e1:
66:c2:fc:14:26:46:7c:6f:f2:55:78:b1:ac:d7:c5:
f3:a4:2d:e5:b1:39:e8:75:b1:44:4e:87:42:5b:dc:
53:8c:ed:ed:84:b6:dd:98:c7:4e:81:54:83:79:38:
58:9e:c0:4f:52:4d:65:ec:df:ce:d3:58:7f:ba:71:
03:34:7b:0c:35:ff:6b:4e:f0:d2:e2:20:d7:f9:8d:
37:02:87:36:e2:40:4f:ca:62:01:c0:1f:a6:64:84:
17:22:36:90:a5:e5:65:c6:16:d1:ef:ba:bd:07:75:
fe:dd:1a:c5:aa:59:65:c5:03:48:89:69:05:dc:a3:
eb:43:ea:3a:20:40:2b:53:fd:42:19:ca:dc:22:f4:
5f:90:c6:9c:83:0b:50:4a:a1:29:a0:a7:bf:7f:ee:
c2:eb:09:ba:64:28:91:7a:95:9e:3e:49:35:81:ee:
78:35:c0:e2:9e:e1:fc:4f:90:df:f7:00:c2:39:69:
92:8a:1a:a5:ed:c6:36:18:20:c1:ee:a9:ef:06:c9:
f7:dc:eb:2a:43:81:d0:8c:3c:c7:41:27:d9:88:0a:
db:a1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
62:2E:4F:CA:CB:D5:EA:C6:5B:4A:5B:C3:26:DA:D6:2B:8E:4E:7F:67
X509v3 Authority Key Identifier:
keyid:3E:21:73:CC:E6:7F:75:D2:9F:1C:AA:A7:39:E6:CC:67:27:D6:E0:88
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://repo-rpki.idnic.net/repo/ccd53948-ddf3-449a-bf2b-cf3f7ae176d3/0/3E2173CCE67F75D29F1CAAA739E6CC6727D6E088.crl
Authority Information Access:
CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/3E2173CCE67F75D29F1CAAA739E6CC6727D6E088.cer
Subject Information Access:
Signed Object - URI:rsync://repo-rpki.idnic.net/repo/ccd53948-ddf3-449a-bf2b-cf3f7ae176d3/0/3E2173CCE67F75D29F1CAAA739E6CC6727D6E088.mft
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
4b:79:80:6a:a7:96:9d:5a:ae:44:27:11:30:59:e3:e1:ff:7b:
ea:0c:e6:f4:b6:f4:62:49:74:f0:3c:40:b0:fe:62:36:71:0b:
f4:cd:ee:27:03:69:9b:58:d4:e8:71:bd:40:25:2d:6c:4c:5d:
9b:f1:4e:b6:9f:6e:18:12:56:e2:8e:27:e3:99:40:26:76:78:
dd:fc:a9:5c:17:62:d8:3d:02:b2:69:b6:ae:3c:af:ee:fd:b5:
08:d6:aa:2d:f8:3c:84:3c:eb:b0:21:b7:ac:6e:44:5e:11:b4:
e4:fe:c0:e4:48:21:66:b7:46:e8:16:99:f0:d2:c2:52:c5:ba:
16:68:fd:d4:13:b3:ff:b5:55:bc:c8:8a:07:da:10:85:e2:af:
6b:4a:39:f2:bf:ca:3f:af:9a:b5:6f:77:80:7e:00:24:19:cc:
d0:43:09:89:df:5e:2f:5f:d3:7c:af:36:f6:1b:b7:b1:cf:3a:
84:37:af:8c:1a:e0:be:43:09:98:41:24:ae:38:04:9e:7a:30:
62:0a:30:bf:ad:d3:c8:d1:20:28:44:a4:7b:83:e5:3c:bf:6d:
1d:2b:08:f4:b8:42:1a:e8:f8:4d:4e:32:07:8d:6d:55:2c:8d:
8c:9b:0d:a0:b1:20:98:d2:11:32:9e:33:5d:8e:1c:7b:60:41:
bf:31:27:1b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jun 3 03:07:53 2026 by rpki-client