Manifest
$ rpki-client -vvf repo-rpki.idnic.net/repo/dbc6da19-84be-4a50-b466-1e86ddbcc35f/0/85EA86756371BA89BB1AE846B5C30DDB816ACDB9.mft
File: 85EA86756371BA89BB1AE846B5C30DDB816ACDB9.mft (raw, json)
Hash identifier: /up7+tDQNoAYbYFwkG42dgEBIUYt8ZWP/bAX5eMLSfk=
Subject key identifier: 3B:C5:C8:DB:6B:54:3B:5E:3C:5A:81:12:28:90:74:3C:44:43:95:49
Authority key identifier: 85:EA:86:75:63:71:BA:89:BB:1A:E8:46:B5:C3:0D:DB:81:6A:CD:B9
Certificate issuer: /CN=85EA86756371BA89BB1AE846B5C30DDB816ACDB9
Certificate serial: 677956A1E32C413DE7936DB3AA2FDABA03EA6594
Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/85EA86756371BA89BB1AE846B5C30DDB816ACDB9.cer
Subject info access: rsync://repo-rpki.idnic.net/repo/dbc6da19-84be-4a50-b466-1e86ddbcc35f/0/85EA86756371BA89BB1AE846B5C30DDB816ACDB9.mft
Manifest number: 026D
Signing time: Wed 29 Apr 2026 00:40:03 +0000
Manifest this update: Wed 29 Apr 2026 00:35:03 +0000
Manifest next update: Sat 02 May 2026 01:10:03 +0000
Files and hashes: 1: 85EA86756371BA89BB1AE846B5C30DDB816ACDB9.crl (hash: vA2CsPaC3ukdIQEadcrcLevT9Bi2QuemhKzYeZ2zmcs=)
2: 3130332e3137342e37382e302f32342d3234203d3e20313331363939.roa (hash: lKFSHdHF3wWJIcTGvyjieSUWfDWF+TAqKVs638owOUk=)
3: 3130332e3137342e37392e302f32342d3234203d3e20313331363939.roa (hash: gMUmsfmmNczaAd+9ZeeQYOcgGDct+Ydmufmg2U5oVEk=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
67:79:56:a1:e3:2c:41:3d:e7:93:6d:b3:aa:2f:da:ba:03:ea:65:94
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=85EA86756371BA89BB1AE846B5C30DDB816ACDB9
Validity
Not Before: Apr 29 00:35:03 2026 GMT
Not After : May 2 01:10:03 2026 GMT
Subject: CN=3BC5C8DB6B543B5E3C5A81122890743C44439549
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b6:4c:60:12:3b:ca:6e:f9:3f:09:90:5c:99:55:
50:f4:67:0e:dd:92:55:bc:77:d5:0d:b0:bc:0a:32:
78:1a:a7:c6:61:a2:e5:ec:aa:45:82:11:3c:53:fb:
ec:09:34:5d:a4:49:63:63:1e:8f:9c:fe:91:98:ed:
8c:46:c8:90:f7:bc:7d:92:6d:7d:7d:e4:5b:78:0d:
03:51:de:12:fe:12:4e:f1:e8:83:d6:37:0a:b8:f9:
ef:aa:5e:86:28:74:e1:0d:2c:a5:a3:a4:9d:34:38:
0f:19:8b:7c:81:60:2d:ba:ce:2d:93:54:48:7e:0f:
e3:bf:c1:7f:78:e6:30:23:5f:4e:f4:85:5d:78:6b:
eb:f9:30:30:90:2c:0e:8e:16:49:b2:64:9e:f4:85:
16:67:af:86:fb:22:c2:54:a1:f6:18:76:ff:20:e0:
67:a9:1c:79:09:26:4c:ce:8e:a1:39:e9:cc:1c:6e:
24:3f:fb:d3:58:2a:f6:22:4e:93:00:7a:5a:28:70:
32:61:69:33:57:fc:38:16:3e:94:80:71:81:cc:6b:
b9:6f:69:b4:db:bf:f1:35:91:b4:7f:d1:b6:40:24:
21:80:8d:b3:30:df:75:cd:33:a0:df:5e:87:8a:5a:
3c:a4:2c:ba:7c:7b:74:e7:29:9a:69:1c:a2:6f:4a:
b0:51
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
3B:C5:C8:DB:6B:54:3B:5E:3C:5A:81:12:28:90:74:3C:44:43:95:49
X509v3 Authority Key Identifier:
keyid:85:EA:86:75:63:71:BA:89:BB:1A:E8:46:B5:C3:0D:DB:81:6A:CD:B9
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://repo-rpki.idnic.net/repo/dbc6da19-84be-4a50-b466-1e86ddbcc35f/0/85EA86756371BA89BB1AE846B5C30DDB816ACDB9.crl
Authority Information Access:
CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/85EA86756371BA89BB1AE846B5C30DDB816ACDB9.cer
Subject Information Access:
Signed Object - URI:rsync://repo-rpki.idnic.net/repo/dbc6da19-84be-4a50-b466-1e86ddbcc35f/0/85EA86756371BA89BB1AE846B5C30DDB816ACDB9.mft
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
ac:3a:81:8a:51:09:aa:c3:64:11:5d:2d:3b:81:a3:80:29:eb:
82:32:16:10:ba:44:b7:2a:78:53:5a:bc:67:58:18:ba:36:0b:
40:ab:47:87:bd:40:a7:a9:56:d7:4c:b1:26:74:dc:9e:2b:e0:
38:a6:fa:31:5f:9e:58:72:b5:68:39:85:40:37:75:52:bb:81:
ca:af:35:4a:50:92:f8:c2:e5:b2:21:23:d4:d8:66:af:72:37:
93:ab:1a:7d:7e:2e:df:91:d3:bf:ab:01:bb:58:21:5d:3f:ec:
c0:98:88:7a:00:45:53:e3:c5:5a:25:72:5a:d3:fd:66:89:ea:
f9:cf:ca:d5:aa:cc:e1:ab:7d:7d:5c:a0:bb:32:49:6e:b0:2a:
66:f8:1b:e6:7c:9d:7d:61:5b:73:7c:ff:a9:95:bb:61:34:42:
f3:64:bf:ee:af:c0:69:0d:b4:0c:16:3a:2f:a1:0c:7e:5a:5d:
61:98:4f:b7:58:34:c9:93:83:b7:4e:95:0b:49:9b:d1:bb:91:
d7:f4:e1:6d:fe:06:71:23:2c:e4:9e:52:83:23:7d:d6:22:42:
ec:0b:fb:f3:a8:93:6d:95:fc:09:1f:4a:a1:9b:bb:0c:a5:48:
8a:76:5a:b9:da:7e:b1:70:d4:72:44:65:fb:01:42:8a:d9:bf:
b8:d7:38:01
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jun 3 03:12:02 2026 by rpki-client