Manifest
$ rpki-client -vvf repo-rpki.idnic.net/repo/e595b7d4-3aab-4b83-94b2-c4267b2ae0a0/0/23093B0E58201D339EAA3983654297729EB3D7FD.mft
File: 23093B0E58201D339EAA3983654297729EB3D7FD.mft (raw, json)
Hash identifier: FB/YpR1NZx38wl7K91PRVIUXK+i248aIsNWh6xYMRDo=
Subject key identifier: 3F:B2:0C:AB:09:F4:E9:6C:21:7D:AB:93:6B:40:14:66:5A:E2:13:44
Authority key identifier: 23:09:3B:0E:58:20:1D:33:9E:AA:39:83:65:42:97:72:9E:B3:D7:FD
Certificate issuer: /CN=23093B0E58201D339EAA3983654297729EB3D7FD
Certificate serial: 02D65A896293183FE0B338C1FFC0AE234615A5E3
Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/23093B0E58201D339EAA3983654297729EB3D7FD.cer
Subject info access: rsync://repo-rpki.idnic.net/repo/e595b7d4-3aab-4b83-94b2-c4267b2ae0a0/0/23093B0E58201D339EAA3983654297729EB3D7FD.mft
Manifest number: 02CF
Signing time: Mon 27 Apr 2026 22:02:43 +0000
Manifest this update: Mon 27 Apr 2026 21:57:43 +0000
Manifest next update: Fri 01 May 2026 09:17:43 +0000
Files and hashes: 1: 3130332e3136362e3231322e302f32332d3233203d3e20313431393537.roa (hash: I3IiUxQVB0K6AHHH6hadb9zyg87yVWrhTKPdESrGNC4=)
2: 3130332e3136362e3231322e302f32342d3234203d3e20313431393537.roa (hash: 1T/005+fcGS3bHhfnGHMDWx9bEqPsgYOiwCk3qFgrG8=)
3: 23093B0E58201D339EAA3983654297729EB3D7FD.crl (hash: cICI9R1W4iPNS05Q8FtEaGPrBqZw+jPYPPRMt2f7goU=)
4: 3130332e3136362e3231332e302f32342d3234203d3e20313431393537.roa (hash: +q+2lGJsfE4ezep6xSn8bk3REU1n8oNlxOWiZdJkL5s=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
02:d6:5a:89:62:93:18:3f:e0:b3:38:c1:ff:c0:ae:23:46:15:a5:e3
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=23093B0E58201D339EAA3983654297729EB3D7FD
Validity
Not Before: Apr 27 21:57:43 2026 GMT
Not After : May 1 09:17:43 2026 GMT
Subject: CN=3FB20CAB09F4E96C217DAB936B4014665AE21344
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:f7:f5:b4:76:51:0a:b5:fd:34:39:19:6d:5b:ff:
26:ec:d7:42:b2:57:d0:92:ab:83:73:48:1f:4e:4e:
66:3b:17:e4:82:18:46:ea:8e:72:26:33:20:0d:e2:
d4:fd:08:3c:47:7c:53:ac:14:6b:44:5a:ff:1c:82:
36:4a:79:3f:53:c6:bb:c8:87:0b:0d:fa:dd:e1:07:
36:21:42:27:41:7b:ae:32:17:f9:d4:ca:af:05:09:
0e:67:2c:a5:c5:b5:24:de:c2:90:76:42:61:57:78:
dc:2e:78:78:23:68:56:94:8b:02:f6:c3:ae:91:95:
27:1f:c9:ef:19:4b:af:d9:0c:90:f7:fb:6f:40:7a:
2e:3f:2f:00:ea:71:31:2b:9f:b2:ab:92:c5:db:31:
6d:22:c4:4c:76:aa:57:e5:91:26:56:2b:4b:a7:9d:
b8:0b:3b:7e:cc:11:9f:3e:84:39:90:2a:db:ea:e8:
82:57:0a:4c:08:cf:80:0f:9d:13:1f:5c:ab:ec:c1:
00:e3:0a:91:b5:19:89:70:b8:2c:8d:d0:d0:30:77:
fd:ac:6d:29:5b:b4:38:08:92:d6:42:fa:ec:b4:9f:
50:20:32:0c:a6:e3:e4:97:5a:b2:9e:4e:ae:b7:33:
b9:50:3e:7b:32:6d:79:20:bf:27:d2:58:9a:ad:0d:
e1:83
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
3F:B2:0C:AB:09:F4:E9:6C:21:7D:AB:93:6B:40:14:66:5A:E2:13:44
X509v3 Authority Key Identifier:
keyid:23:09:3B:0E:58:20:1D:33:9E:AA:39:83:65:42:97:72:9E:B3:D7:FD
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://repo-rpki.idnic.net/repo/e595b7d4-3aab-4b83-94b2-c4267b2ae0a0/0/23093B0E58201D339EAA3983654297729EB3D7FD.crl
Authority Information Access:
CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/23093B0E58201D339EAA3983654297729EB3D7FD.cer
Subject Information Access:
Signed Object - URI:rsync://repo-rpki.idnic.net/repo/e595b7d4-3aab-4b83-94b2-c4267b2ae0a0/0/23093B0E58201D339EAA3983654297729EB3D7FD.mft
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
a8:ba:58:f7:7f:98:3e:ce:1c:7c:b4:06:1e:6e:09:2e:10:df:
df:0e:8e:55:6a:a5:e2:b3:34:f8:66:77:37:c5:67:a8:34:47:
bf:d8:07:5b:87:19:df:c4:92:a8:59:f9:43:c6:1a:33:65:27:
4e:5b:9c:31:37:82:30:d4:66:c4:ef:a4:91:39:e8:d2:3d:f2:
90:4a:94:30:f3:c8:0a:19:18:90:86:63:a6:4c:a3:b5:ae:aa:
b7:f5:51:79:03:44:65:a0:53:aa:a5:8d:69:67:b2:e5:0b:af:
3a:ec:f7:66:44:4d:bf:aa:9e:c6:d3:49:7b:aa:e9:0d:54:33:
99:77:1c:2d:2e:91:39:74:68:d2:00:4a:80:66:ee:fa:45:b1:
c1:41:74:87:51:e3:84:c5:85:47:de:60:fb:2e:9c:14:b7:23:
23:b6:36:c3:9e:29:99:be:ef:91:79:f4:12:d9:9c:01:4e:62:
85:44:1b:0b:67:d5:b1:44:98:2c:69:be:6f:aa:7f:e6:7b:5b:
26:b8:30:db:fb:3a:18:6d:84:2c:6b:63:0d:c8:10:83:2c:cb:
88:99:ff:f4:88:49:9d:c3:75:30:ab:af:cf:83:e9:19:24:1b:
35:94:12:a5:86:68:4c:4c:7f:7e:4f:1d:0a:4d:36:f0:54:b6:
81:f0:a4:46
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jul 19 06:38:56 2026 by rpki-client