Manifest
$ rpki-client -vvf repo-rpki.idnic.net/repo/d5908b83-7f44-46e0-8535-6fb84b59d58a/0/0BB3D1874063172B5374865233070332233FB7B3.mft
File: 0BB3D1874063172B5374865233070332233FB7B3.mft (raw, json)
Hash identifier: 73gzyrX71PWhaZ9H2wOI6WLjtEzBGxcbznzYoMVL+nY=
Subject key identifier: 8A:3C:D1:26:59:3F:3C:A0:94:7C:BB:99:A2:D4:1C:0B:53:A3:0A:40
Authority key identifier: 0B:B3:D1:87:40:63:17:2B:53:74:86:52:33:07:03:32:23:3F:B7:B3
Certificate issuer: /CN=0BB3D1874063172B5374865233070332233FB7B3
Certificate serial: 2099574166FAB8A506CE62FB4744BDFC565CEF8B
Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/0BB3D1874063172B5374865233070332233FB7B3.cer
Subject info access: rsync://repo-rpki.idnic.net/repo/d5908b83-7f44-46e0-8535-6fb84b59d58a/0/0BB3D1874063172B5374865233070332233FB7B3.mft
Manifest number: 0569
Signing time: Mon 27 Apr 2026 14:01:37 +0000
Manifest this update: Mon 27 Apr 2026 13:56:37 +0000
Manifest next update: Thu 30 Apr 2026 14:35:37 +0000
Files and hashes: 1: 0BB3D1874063172B5374865233070332233FB7B3.crl (hash: IhslIvWOY/p0ejvS8utNaxqDqFGk95KnGY4qLGidOg0=)
2: 3131372e3130342e3139322e302f31392d3234203d3e203233363636.roa (hash: zCm8uejNjkpY+DjdGXgrEnekcPvtN86UHanFShqlM6g=)
3: 3230322e3135332e31362e302f32302d3234203d3e203233363636.roa (hash: 5FOROrvQq+0t+Mk/ACrrEVqg06jInBJCBz0qroNhCeU=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
20:99:57:41:66:fa:b8:a5:06:ce:62:fb:47:44:bd:fc:56:5c:ef:8b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0BB3D1874063172B5374865233070332233FB7B3
Validity
Not Before: Apr 27 13:56:37 2026 GMT
Not After : Apr 30 14:35:37 2026 GMT
Subject: CN=8A3CD126593F3CA0947CBB99A2D41C0B53A30A40
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d5:3f:45:8d:5c:c2:58:69:88:15:fc:04:ac:f7:
53:64:0c:5a:ef:a0:f5:6e:92:24:15:62:81:93:a7:
ab:1b:58:ed:ea:4b:5c:4f:ca:aa:5b:79:c1:b3:b0:
0d:c6:dc:2d:58:c2:75:bf:0a:39:55:00:6d:09:36:
55:19:b5:95:57:11:70:8f:1b:d1:c0:e8:65:ab:1e:
92:7e:9a:1e:eb:a7:f7:dc:f2:1d:37:30:a8:79:bf:
b5:97:ff:e6:e3:5a:76:f1:11:35:f4:28:b4:4e:7a:
bb:fb:56:d7:ba:29:cb:e8:df:a5:44:89:85:17:4d:
9b:46:9c:3f:56:80:ef:90:18:f2:95:61:54:58:f4:
9c:a8:1f:2d:95:2d:2e:19:df:83:98:27:51:9e:03:
09:39:31:0a:84:1c:c6:80:14:c9:c3:4d:3b:28:2b:
aa:60:6e:57:d2:5b:ea:fb:02:5f:ee:cf:33:f9:a9:
4f:16:33:e2:7c:05:92:c3:b1:2d:f0:2b:58:a1:3a:
79:a8:c7:2e:c6:9e:7e:57:b3:29:90:9c:8f:70:4f:
50:c4:a0:e3:aa:42:5a:3d:0a:da:c2:38:82:dd:87:
d0:51:ce:07:bc:a5:18:74:fc:e0:f7:46:70:09:5f:
ef:59:da:7e:d4:84:c3:0a:75:43:39:19:f3:36:07:
40:a1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
8A:3C:D1:26:59:3F:3C:A0:94:7C:BB:99:A2:D4:1C:0B:53:A3:0A:40
X509v3 Authority Key Identifier:
keyid:0B:B3:D1:87:40:63:17:2B:53:74:86:52:33:07:03:32:23:3F:B7:B3
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://repo-rpki.idnic.net/repo/d5908b83-7f44-46e0-8535-6fb84b59d58a/0/0BB3D1874063172B5374865233070332233FB7B3.crl
Authority Information Access:
CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/0BB3D1874063172B5374865233070332233FB7B3.cer
Subject Information Access:
Signed Object - URI:rsync://repo-rpki.idnic.net/repo/d5908b83-7f44-46e0-8535-6fb84b59d58a/0/0BB3D1874063172B5374865233070332233FB7B3.mft
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
85:d7:c4:cf:e8:5c:05:db:d5:8b:00:49:93:33:c8:3c:12:cf:
a3:77:ed:33:63:ce:dd:bd:2b:f7:21:12:79:9f:38:72:be:14:
f9:99:cc:09:0a:99:7c:52:38:a6:8f:08:ec:0b:1d:21:04:49:
e6:25:31:f7:36:7b:11:09:d7:32:dd:ac:66:93:36:c9:63:f6:
32:42:b9:5f:cf:2b:c4:77:05:b8:d4:d1:b8:86:73:dc:72:d7:
5b:73:17:02:a3:1f:b7:bf:b5:79:7b:d2:84:68:a6:14:28:9b:
27:41:15:ec:78:a1:b2:f0:01:c4:64:7c:8a:3f:ae:be:08:13:
68:3e:07:17:14:af:0b:df:5e:2b:42:0f:3f:b4:a1:88:e0:60:
f5:1b:47:14:1a:40:56:a2:78:b7:81:db:45:39:03:71:eb:93:
f5:90:25:4f:2b:a1:91:b1:56:2c:0f:d1:76:3a:80:34:d6:a5:
1c:43:03:8d:7d:64:7b:53:6d:94:ae:30:59:33:e5:f8:d2:8b:
02:7b:b9:3b:1d:e7:58:13:da:1c:59:35:1d:52:c3:7f:39:9d:
d0:fc:4b:9a:28:64:71:22:d5:7a:6b:3d:99:84:60:e6:e6:41:
65:6b:bf:d0:22:bb:a9:b3:d7:09:ff:7e:bf:ae:e9:c2:11:88:
13:f9:8f:fb
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jun 3 03:38:19 2026 by rpki-client