
Manifest
$ rpki-client -vvf repo-rpki.idnic.net/repo/cf9c029a-db51-4a0e-9203-6ee2332df83f/0/D1C35136280415655DEC1D442C7C982FD36A5B86.mft
File: D1C35136280415655DEC1D442C7C982FD36A5B86.mft (raw, json)
Hash identifier: tnbMottbhPL8N89SQxPGR53r6jIVY5+907xj5OarSDA=
Subject key identifier: 85:0D:B2:B3:C4:D2:82:8D:D0:73:80:10:6B:8C:A9:72:E0:DF:59:60
Authority key identifier: D1:C3:51:36:28:04:15:65:5D:EC:1D:44:2C:7C:98:2F:D3:6A:5B:86
Certificate issuer: /CN=D1C35136280415655DEC1D442C7C982FD36A5B86
Certificate serial: 67AD34B583DC500FBBE29C4516F46A437E7F1A01
Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/D1C35136280415655DEC1D442C7C982FD36A5B86.cer
Subject info access: rsync://repo-rpki.idnic.net/repo/cf9c029a-db51-4a0e-9203-6ee2332df83f/0/D1C35136280415655DEC1D442C7C982FD36A5B86.mft
Manifest number: DD
Signing time: Wed 29 Apr 2026 01:32:43 +0000
Manifest this update: Wed 29 Apr 2026 01:27:43 +0000
Manifest next update: Sat 02 May 2026 05:49:43 +0000
Files and hashes: 1: 323030313a6466323a336430303a3a2f34382d3438203d3e20313336383339.roa (hash: EbL+LGKDt0V5U6jXXy9+v+fX+4Su7Ml6HM1hNFrtkbw=)
2: 3130332e39382e3233392e302f32342d3234203d3e20313336383339.roa (hash: t33hGK2tWrXOFyyr6frOa0APXlIHVzP4IgSNamcMq50=)
3: D1C35136280415655DEC1D442C7C982FD36A5B86.crl (hash: fasKrd+S+fueaWhIK6Vh25o+ifYOP2GFpfpLJATpAo0=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
67:ad:34:b5:83:dc:50:0f:bb:e2:9c:45:16:f4:6a:43:7e:7f:1a:01
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=D1C35136280415655DEC1D442C7C982FD36A5B86
Validity
Not Before: Apr 29 01:27:43 2026 GMT
Not After : May 2 05:49:43 2026 GMT
Subject: CN=850DB2B3C4D2828DD07380106B8CA972E0DF5960
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b9:e0:7c:80:15:c4:2d:d7:36:24:1f:ad:85:de:
fe:f4:0e:45:ad:71:1a:42:6a:22:be:87:85:35:ab:
47:b0:78:68:81:13:3e:b2:57:26:08:bf:b2:aa:a1:
eb:95:21:00:76:9e:67:f1:19:c2:52:f0:5c:cf:9c:
c5:67:26:84:6f:07:2b:41:2f:65:a2:23:9b:25:73:
c9:9c:bb:9e:2e:7e:69:22:78:67:96:27:b6:3d:a0:
94:b1:7b:bf:33:98:e7:4a:2e:61:44:ae:a5:e5:a3:
a7:c1:98:c2:9a:6d:15:8f:df:65:69:fa:de:8d:3e:
8e:93:3d:bd:b8:3b:49:3e:28:18:78:b7:98:aa:6e:
e6:3c:39:c0:e7:cb:f4:51:f2:3b:cb:53:c6:a8:53:
25:0a:94:4c:a4:11:d2:b3:b3:8e:7e:03:f2:10:33:
1b:68:ce:bc:e0:b2:0d:b4:28:ab:ea:4c:9c:a5:60:
a8:5a:2e:80:ed:30:a2:5d:96:de:cf:da:e6:62:f7:
49:1c:21:ee:68:03:fb:e4:61:f3:61:03:69:0d:bd:
b4:42:bd:0f:f6:85:dd:c1:6e:76:98:8c:aa:0a:09:
e9:ff:0b:3d:65:b8:fd:79:8f:4e:f1:5b:db:6f:30:
24:f1:2e:2f:c3:0c:ed:7e:cf:96:63:58:a4:66:d8:
4a:6d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
85:0D:B2:B3:C4:D2:82:8D:D0:73:80:10:6B:8C:A9:72:E0:DF:59:60
X509v3 Authority Key Identifier:
keyid:D1:C3:51:36:28:04:15:65:5D:EC:1D:44:2C:7C:98:2F:D3:6A:5B:86
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://repo-rpki.idnic.net/repo/cf9c029a-db51-4a0e-9203-6ee2332df83f/0/D1C35136280415655DEC1D442C7C982FD36A5B86.crl
Authority Information Access:
CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/D1C35136280415655DEC1D442C7C982FD36A5B86.cer
Subject Information Access:
Signed Object - URI:rsync://repo-rpki.idnic.net/repo/cf9c029a-db51-4a0e-9203-6ee2332df83f/0/D1C35136280415655DEC1D442C7C982FD36A5B86.mft
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
61:15:6c:79:04:93:44:27:54:dd:f5:3d:08:9f:92:7d:e2:04:
23:9b:ad:d8:00:d8:c8:e5:8a:2d:b0:46:ad:01:6f:bd:8d:8c:
04:30:93:9d:8f:91:b0:17:44:6a:c0:fc:92:e5:93:37:f3:e2:
7e:7e:ea:31:95:f1:43:c7:d8:7b:de:c7:da:8d:01:af:15:bd:
e3:b9:1c:a0:b8:10:93:eb:55:db:40:34:82:d7:03:6f:28:dc:
b5:a6:f2:c0:88:1b:fc:07:b2:ed:b5:16:d1:16:f3:c0:66:49:
36:1c:ff:75:17:ba:0d:1e:a3:11:14:20:f4:f1:c6:f9:7d:08:
08:2c:84:22:b3:5c:0f:7e:63:64:b6:89:ba:36:f3:dc:b2:3c:
98:44:fb:2e:ab:ed:53:a0:df:12:78:c0:f1:03:b5:3b:46:7c:
dc:54:a2:88:cb:a8:cc:5a:4b:55:52:32:d5:f9:55:35:ad:78:
67:ff:93:a1:6f:43:f5:3c:37:ec:94:e5:7d:b0:30:f8:75:8e:
3a:ae:bf:92:be:73:84:b8:de:0a:f9:c0:de:8e:82:03:62:ff:
f2:a3:c9:86:8a:3b:e2:e3:19:44:e0:1e:f8:70:59:e1:3c:69:
32:9a:cb:eb:e4:27:3a:ec:97:94:6c:b6:1d:12:78:69:a2:3a:
a6:d1:ab:a7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jun 3 03:25:48 2026 by rpki-client