Manifest
$ rpki-client -vvf repo-rpki.idnic.net/repo/e504793c-c209-469a-8e3c-eb3f5a83863f/0/FA86E23853549D2EF1D9F9C9222147A550E36A38.mft
File: FA86E23853549D2EF1D9F9C9222147A550E36A38.mft (raw, json)
Hash identifier: xtxvi9/H+6+ktZu76ggxBnV/UCzSQ1EY3UN/fPH7wLs=
Subject key identifier: 4F:2F:9F:EF:91:F2:72:26:D8:93:40:48:71:48:84:22:BD:58:F6:72
Authority key identifier: FA:86:E2:38:53:54:9D:2E:F1:D9:F9:C9:22:21:47:A5:50:E3:6A:38
Certificate issuer: /CN=FA86E23853549D2EF1D9F9C9222147A550E36A38
Certificate serial: 3518B0BEE7067A4AE890D054FBD30B13BCCE4B28
Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/FA86E23853549D2EF1D9F9C9222147A550E36A38.cer
Subject info access: rsync://repo-rpki.idnic.net/repo/e504793c-c209-469a-8e3c-eb3f5a83863f/0/FA86E23853549D2EF1D9F9C9222147A550E36A38.mft
Manifest number: 0235
Signing time: Mon 27 Apr 2026 20:20:53 +0000
Manifest this update: Mon 27 Apr 2026 20:15:53 +0000
Manifest next update: Fri 01 May 2026 08:10:53 +0000
Files and hashes: 1: 3130332e35352e32382e302f32342d3234203d3e20313530343837.roa (hash: s4D3k54ePgFL3DJuO1+sPM7ighm+hIZ0dRBFdpACJIQ=)
2: 3130332e35352e32392e302f32342d3234203d3e20313530343837.roa (hash: Zcui17ZIB7y9MI9lypagYjRYe4mnYqSwkXUNcZtsFwo=)
3: 3130332e35352e32382e302f32332d3234203d3e20313530343837.roa (hash: 8iSBjCuogDhcUBYZIPXuvYllDkYyp+uiEvzE8S7/ER4=)
4: FA86E23853549D2EF1D9F9C9222147A550E36A38.crl (hash: k0FllTVLXxWYiNI71hyrGE1Tu65HNTO0Uy8rSOuCBfw=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
35:18:b0:be:e7:06:7a:4a:e8:90:d0:54:fb:d3:0b:13:bc:ce:4b:28
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=FA86E23853549D2EF1D9F9C9222147A550E36A38
Validity
Not Before: Apr 27 20:15:53 2026 GMT
Not After : May 1 08:10:53 2026 GMT
Subject: CN=4F2F9FEF91F27226D893404871488422BD58F672
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c3:a5:af:01:21:77:20:0c:bc:a2:ae:d4:e8:a2:
40:ba:e2:ce:96:e1:40:51:37:25:7a:34:f1:21:3f:
f5:0a:8a:28:49:d1:75:00:ef:2a:41:d8:fb:ba:e3:
b0:70:39:10:7b:99:83:d2:86:91:90:7c:32:44:1d:
bc:25:0f:76:d1:e5:03:62:21:5e:e4:4d:ed:39:f2:
61:95:ea:23:20:f5:24:fb:19:8a:4a:8f:55:15:3d:
19:71:55:b9:26:ef:ed:9b:b0:80:a6:f9:fc:5e:b8:
b9:99:cf:63:51:7e:fa:7c:21:bb:af:cf:c1:5f:f6:
db:6a:b2:95:45:66:c0:57:7a:c0:d1:0d:3e:4d:5a:
dd:40:1f:51:cc:5c:9b:35:f8:7f:b6:6b:84:61:2e:
7e:6e:c6:5a:02:e1:8c:8b:1d:03:97:d9:61:c2:65:
b2:45:f9:74:ce:5e:9d:f9:47:21:87:31:f6:af:31:
40:bd:6f:6d:6f:63:e5:cd:25:dc:32:4a:9f:96:c4:
bd:a9:f7:45:dc:76:40:83:e5:fe:99:e0:91:8b:40:
47:9c:2d:f7:f1:fd:b0:7c:8a:75:cb:0f:08:d0:c5:
98:fb:ae:31:ae:ba:5d:31:08:93:95:bc:e5:e6:a3:
a0:bf:37:e0:3e:5f:6a:4a:ae:45:58:49:68:5a:7b:
2b:6b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
4F:2F:9F:EF:91:F2:72:26:D8:93:40:48:71:48:84:22:BD:58:F6:72
X509v3 Authority Key Identifier:
keyid:FA:86:E2:38:53:54:9D:2E:F1:D9:F9:C9:22:21:47:A5:50:E3:6A:38
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://repo-rpki.idnic.net/repo/e504793c-c209-469a-8e3c-eb3f5a83863f/0/FA86E23853549D2EF1D9F9C9222147A550E36A38.crl
Authority Information Access:
CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/FA86E23853549D2EF1D9F9C9222147A550E36A38.cer
Subject Information Access:
Signed Object - URI:rsync://repo-rpki.idnic.net/repo/e504793c-c209-469a-8e3c-eb3f5a83863f/0/FA86E23853549D2EF1D9F9C9222147A550E36A38.mft
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
7b:0f:11:b4:17:c5:7a:ff:ed:04:92:49:0f:cb:d1:52:8b:69:
6e:7e:e0:7e:24:cf:30:46:87:a0:16:18:d7:93:33:f4:5a:76:
66:f3:41:0f:b9:49:5b:a4:e6:74:9b:0b:b2:33:c2:92:14:f1:
20:d8:21:0d:c6:5b:8b:9c:34:82:f3:c0:b6:00:69:9d:b5:23:
c6:70:9f:53:b7:11:1a:d8:a2:5d:98:7e:e1:0d:98:e3:19:b8:
02:d6:5b:11:ed:07:76:e0:63:ca:36:91:2e:df:2e:3a:df:d1:
36:c7:1c:a5:d3:b2:a5:47:5d:e4:fe:c9:7d:36:b5:fd:55:cf:
11:1c:a7:64:21:10:79:29:c6:b8:45:56:4c:9c:5f:17:5a:7d:
21:fc:1f:90:e0:9b:f4:34:a3:63:0f:cd:d8:fc:b8:58:93:53:
0e:af:1d:11:50:cb:38:da:7f:6e:4c:7f:93:95:1a:b6:1b:5a:
97:77:b6:02:b7:a8:dc:4f:bd:29:6c:92:3e:cb:04:f5:95:f6:
38:a6:19:46:95:3f:45:a0:3f:64:a7:58:67:8e:d3:bf:70:4c:
5d:21:83:dd:14:60:ba:69:20:69:f2:70:59:e3:9a:8e:98:f2:
93:f6:64:cc:9d:0d:d5:21:6c:17:c8:d4:6c:3f:a8:66:bb:a8:
db:f1:08:47
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jun 3 03:09:23 2026 by rpki-client