Manifest
$ rpki-client -vvf repo-rpki.idnic.net/repo/e3505cb3-b55e-40e4-ac79-6365606f4ef9/0/3ECE7D2E9C2FF3D5D30D294D7492C3FEF651BAAA.mft
File: 3ECE7D2E9C2FF3D5D30D294D7492C3FEF651BAAA.mft (raw, json)
Hash identifier: u3JFhTmHpoR/8xRoBaPau0I9Yigpz5Y3nI/V0SoQ0ew=
Subject key identifier: 73:22:75:B0:28:17:88:97:9B:A2:53:21:B6:35:3D:58:20:F4:0D:21
Authority key identifier: 3E:CE:7D:2E:9C:2F:F3:D5:D3:0D:29:4D:74:92:C3:FE:F6:51:BA:AA
Certificate issuer: /CN=3ECE7D2E9C2FF3D5D30D294D7492C3FEF651BAAA
Certificate serial: 5D498651A6D2CB2B2BDB27962EFA99CA821C8D8D
Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/3ECE7D2E9C2FF3D5D30D294D7492C3FEF651BAAA.cer
Subject info access: rsync://repo-rpki.idnic.net/repo/e3505cb3-b55e-40e4-ac79-6365606f4ef9/0/3ECE7D2E9C2FF3D5D30D294D7492C3FEF651BAAA.mft
Manifest number: 03BA
Signing time: Wed 29 Apr 2026 01:42:13 +0000
Manifest this update: Wed 29 Apr 2026 01:37:13 +0000
Manifest next update: Sat 02 May 2026 07:22:13 +0000
Files and hashes: 1: 3130332e3137312e3138322e302f32332d3233203d3e20313432333735.roa (hash: ZekPVbkZv4xzJt/yLeKvpGj167I44IK/Nn+MbKBEWIw=)
2: 3130332e3137312e3138322e302f32342d3234203d3e20313432333735.roa (hash: lPqYVTgcLQCHKvr5EjKBo1vqOUFedVpnKD0PBfrckZ4=)
3: 3130332e3137312e3138332e302f32342d3234203d3e20313432333735.roa (hash: //zquDXouiLBNlJyTbiIiX2XMyjS3OOuOm+C49S1bEQ=)
4: 3ECE7D2E9C2FF3D5D30D294D7492C3FEF651BAAA.crl (hash: 0cd5rlfh4QYclgxf+FX4un0WGLT1h41N6BJLN53KrUY=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
5d:49:86:51:a6:d2:cb:2b:2b:db:27:96:2e:fa:99:ca:82:1c:8d:8d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3ECE7D2E9C2FF3D5D30D294D7492C3FEF651BAAA
Validity
Not Before: Apr 29 01:37:13 2026 GMT
Not After : May 2 07:22:13 2026 GMT
Subject: CN=732275B0281788979BA25321B6353D5820F40D21
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:af:9d:82:30:ee:a4:f7:cc:f2:91:6e:76:98:9c:
f3:4f:3f:a5:5c:db:10:a6:b0:fe:5a:31:f7:39:07:
39:01:a1:e0:cf:4f:20:38:88:b4:89:47:22:0f:31:
a6:fd:b3:ed:9c:73:64:0a:d8:84:de:25:d5:39:75:
a7:6a:58:4a:87:47:c6:3a:2d:80:96:9f:90:2f:0e:
fa:c9:dd:e7:af:0b:90:0b:b8:a0:61:fc:29:5b:83:
8d:18:06:77:44:cc:fb:32:52:7d:e1:e1:06:ef:70:
a9:46:a0:9e:47:e9:6d:f9:fb:ca:5f:78:d0:cb:98:
16:46:a6:b3:fc:41:6d:31:98:1d:90:a9:dc:61:43:
ff:ed:48:fb:8d:b6:41:b3:87:ac:c5:32:d2:0c:ef:
62:f0:ad:7c:52:38:30:5d:c6:1c:d9:03:04:86:6f:
a8:39:d7:0c:10:dd:03:b2:55:93:40:44:ab:0b:9f:
f3:5f:b5:35:29:53:03:6d:b5:a6:c7:5e:fe:12:c4:
f1:27:59:90:d0:6f:d4:ff:c6:4a:18:ed:66:74:f0:
7a:84:bc:06:8e:01:12:91:dc:59:29:6b:44:5b:00:
a3:a8:0b:8f:11:1e:eb:9c:48:72:90:78:20:85:fa:
ad:55:0d:90:f2:0f:e1:36:7b:dd:2a:ce:f5:1b:fa:
4f:45
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
73:22:75:B0:28:17:88:97:9B:A2:53:21:B6:35:3D:58:20:F4:0D:21
X509v3 Authority Key Identifier:
keyid:3E:CE:7D:2E:9C:2F:F3:D5:D3:0D:29:4D:74:92:C3:FE:F6:51:BA:AA
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://repo-rpki.idnic.net/repo/e3505cb3-b55e-40e4-ac79-6365606f4ef9/0/3ECE7D2E9C2FF3D5D30D294D7492C3FEF651BAAA.crl
Authority Information Access:
CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/3ECE7D2E9C2FF3D5D30D294D7492C3FEF651BAAA.cer
Subject Information Access:
Signed Object - URI:rsync://repo-rpki.idnic.net/repo/e3505cb3-b55e-40e4-ac79-6365606f4ef9/0/3ECE7D2E9C2FF3D5D30D294D7492C3FEF651BAAA.mft
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
12:13:42:25:d8:8b:71:00:14:d4:fa:44:50:e0:13:de:92:87:
23:6d:7d:d6:d0:93:3b:39:17:a0:f2:bc:51:04:07:d8:33:d4:
b2:57:64:77:d3:08:97:6f:ab:21:f9:67:20:4e:4b:c6:bc:41:
11:86:b0:98:97:35:d1:aa:4d:cc:18:41:a9:8e:37:53:a4:3b:
00:cd:2e:ed:5f:3d:38:25:55:9b:ca:5d:d9:d3:23:b4:6a:be:
eb:2f:1d:38:28:94:f2:5f:44:d3:b3:6a:6d:bd:1c:44:77:02:
42:07:df:0a:9c:78:1d:ad:96:c1:4b:b3:e6:bb:2e:48:f3:03:
f6:36:3d:ec:94:2a:75:37:fb:98:af:d8:c4:55:6d:c2:3f:ea:
b0:a0:30:af:57:ac:f3:a2:33:f3:4a:35:6f:d4:9b:90:91:90:
2e:0c:8b:95:d7:17:8d:a7:3a:61:27:7f:e1:53:3f:e0:77:26:
e9:8b:59:b3:f8:57:06:72:ba:19:bf:4e:72:59:0b:51:7d:70:
16:e4:c9:b0:02:63:e9:5e:83:a7:df:b7:83:c9:63:11:4d:85:
ff:45:95:cb:29:69:f6:c4:a2:fb:5a:48:a7:8f:f7:95:67:a1:
3b:44:11:06:60:9c:c6:bf:b0:c5:43:34:9b:e5:a6:a9:58:fe:
73:1a:91:8c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jun 3 03:14:49 2026 by rpki-client