Manifest
$ rpki-client -vvf repo-rpki.idnic.net/repo/ee61e5ae-e45f-4ee3-8f6b-7cb59d61783b/0/3D20522B51AEAA41F59490E2D55C36DEB6C21C77.mft
File: 3D20522B51AEAA41F59490E2D55C36DEB6C21C77.mft (raw, json)
Hash identifier: bO9vHSiUqqWAJ3Q4pJF5VEs4d2Vy5+iNBstB75rGyd4=
Subject key identifier: EE:F7:F7:0E:B2:BD:8C:EB:4B:64:51:81:45:76:44:C2:60:96:02:92
Authority key identifier: 3D:20:52:2B:51:AE:AA:41:F5:94:90:E2:D5:5C:36:DE:B6:C2:1C:77
Certificate issuer: /CN=3D20522B51AEAA41F59490E2D55C36DEB6C21C77
Certificate serial: 3902C867172C0DEE2DCDDE588F5EE0D18B210584
Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/3D20522B51AEAA41F59490E2D55C36DEB6C21C77.cer
Subject info access: rsync://repo-rpki.idnic.net/repo/ee61e5ae-e45f-4ee3-8f6b-7cb59d61783b/0/3D20522B51AEAA41F59490E2D55C36DEB6C21C77.mft
Manifest number: 0236
Signing time: Tue 28 Apr 2026 03:21:58 +0000
Manifest this update: Tue 28 Apr 2026 03:16:58 +0000
Manifest next update: Fri 01 May 2026 11:10:58 +0000
Files and hashes: 1: 3130332e33302e3139332e302f32342d3234203d3e20313530323537.roa (hash: GQbGwj8/3pFXSYNr52t6SKb3/O8bij4qIjKoYgJR2e8=)
2: 3130332e33302e3139322e302f32342d3234203d3e20313530323537.roa (hash: ZSgY5OMesKAVjFXk2K7xGan10euYjEFEbhi4eeTqUI4=)
3: 3D20522B51AEAA41F59490E2D55C36DEB6C21C77.crl (hash: aXiouBImYhDcqBtkvNTZtqjoOu2ST3e4+PBT4bCwvCo=)
4: 3130332e33302e3139322e302f32332d3233203d3e20313530323537.roa (hash: ZDbKc+ruTVuJcD/7oHmgIVR/dNEAa6RIgBC5ZgynInI=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
39:02:c8:67:17:2c:0d:ee:2d:cd:de:58:8f:5e:e0:d1:8b:21:05:84
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3D20522B51AEAA41F59490E2D55C36DEB6C21C77
Validity
Not Before: Apr 28 03:16:58 2026 GMT
Not After : May 1 11:10:58 2026 GMT
Subject: CN=EEF7F70EB2BD8CEB4B645181457644C260960292
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a8:eb:03:d8:ff:a4:03:c6:68:05:32:5e:fb:e7:
ca:dd:f7:8f:49:38:4b:c4:be:5b:65:39:72:12:18:
98:8b:c6:57:51:80:b1:29:9a:53:de:33:2f:37:04:
65:d7:ea:55:4b:5b:11:8b:be:2b:cc:2a:9d:09:87:
08:a1:65:f8:1e:bb:25:f3:ad:de:e8:83:c0:0b:f7:
68:ea:fe:86:22:6a:21:69:f6:5a:7b:d9:c3:1f:9c:
46:8b:c6:ec:30:82:fc:f1:24:eb:f5:cd:fa:31:bc:
ed:00:ee:32:18:0e:86:85:f0:b8:53:ec:61:df:f2:
c0:dc:85:ff:c1:a7:3b:d9:ab:ba:2c:f8:c5:15:a5:
74:3c:b2:07:87:85:2a:64:62:fc:be:1b:63:92:76:
cd:32:fb:59:ad:f8:6b:5a:4c:51:f4:5a:97:2f:11:
a6:87:00:77:47:68:06:af:a7:02:cd:38:90:38:6f:
a1:2e:7f:3d:a4:3a:48:6a:6a:05:f3:10:20:24:c4:
55:1f:3d:a9:ba:e7:c0:bd:48:fa:4c:3c:cc:99:30:
84:99:b0:0f:45:65:f6:4d:0d:d3:30:1f:01:10:a4:
12:bd:8f:2e:18:6c:f9:ff:cb:90:6b:96:0f:db:df:
61:d5:04:bc:cf:4f:8d:ac:3e:66:17:e6:ab:ad:b3:
ce:93
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
EE:F7:F7:0E:B2:BD:8C:EB:4B:64:51:81:45:76:44:C2:60:96:02:92
X509v3 Authority Key Identifier:
keyid:3D:20:52:2B:51:AE:AA:41:F5:94:90:E2:D5:5C:36:DE:B6:C2:1C:77
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://repo-rpki.idnic.net/repo/ee61e5ae-e45f-4ee3-8f6b-7cb59d61783b/0/3D20522B51AEAA41F59490E2D55C36DEB6C21C77.crl
Authority Information Access:
CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/3D20522B51AEAA41F59490E2D55C36DEB6C21C77.cer
Subject Information Access:
Signed Object - URI:rsync://repo-rpki.idnic.net/repo/ee61e5ae-e45f-4ee3-8f6b-7cb59d61783b/0/3D20522B51AEAA41F59490E2D55C36DEB6C21C77.mft
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
2a:2f:7c:7c:b5:ef:0b:24:bc:51:90:f6:ed:34:a8:f0:80:4f:
d3:41:87:ae:38:34:27:55:cd:f1:6f:8f:74:1c:4f:cd:35:29:
16:f1:34:a2:8a:20:a3:6a:dd:ab:85:81:e9:c8:2c:e7:eb:10:
00:2e:e8:da:29:58:a6:86:18:97:0b:83:6d:ee:57:05:a3:28:
bb:07:d5:a2:97:cc:e1:9d:dd:a6:56:f8:8e:84:53:59:d2:56:
ba:6b:8f:81:79:b1:1d:a7:2d:a7:64:e3:42:0a:02:43:3a:2d:
3c:1f:53:43:99:a1:3c:81:df:ba:59:dc:88:b4:91:17:08:5b:
8e:2d:45:b5:49:11:78:b0:2e:22:8c:cb:ab:00:43:c1:e7:a1:
7d:a9:e9:22:5e:88:07:68:9f:96:65:13:b5:da:f6:13:9b:c0:
cd:7e:eb:03:72:c2:cd:c5:4f:7b:64:d9:e2:b5:ac:49:0e:1b:
8a:c3:54:e9:30:61:f9:41:47:9a:e0:a9:a5:44:70:6d:f2:01:
5d:93:e6:fb:f6:91:d3:6d:6f:fd:28:b0:fe:a5:3c:c8:0d:bc:
cc:6d:68:d5:bb:6a:bc:21:08:7e:4f:bb:20:f2:a7:d0:f2:2b:
20:1c:ac:2e:ef:11:b9:29:3b:3e:ad:03:99:b9:b8:22:3e:47:
3d:fa:02:a3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jun 3 03:10:47 2026 by rpki-client