
Manifest
$ rpki-client -vvf repo-rpki.idnic.net/repo/0588dff7-6a92-4293-8800-b53e2a918aca/0/0EAF2A0CD22523DB087375417038E4165075CA3E.mft
File: 0EAF2A0CD22523DB087375417038E4165075CA3E.mft (raw, json)
Hash identifier: manAIhyGqlg3P3NdXsnOTRnsBIFvg8mRVgxhnfFE7Dg=
Subject key identifier: 38:C0:70:1D:EB:EE:73:C2:AA:35:B1:7F:AB:5C:53:80:F2:34:AA:CC
Authority key identifier: 0E:AF:2A:0C:D2:25:23:DB:08:73:75:41:70:38:E4:16:50:75:CA:3E
Certificate issuer: /CN=0EAF2A0CD22523DB087375417038E4165075CA3E
Certificate serial: 065EC360269ECB0CB771F841EBB5294C6B8826DD
Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/0EAF2A0CD22523DB087375417038E4165075CA3E.cer
Subject info access: rsync://repo-rpki.idnic.net/repo/0588dff7-6a92-4293-8800-b53e2a918aca/0/0EAF2A0CD22523DB087375417038E4165075CA3E.mft
Manifest number: 0146
Signing time: Mon 27 Apr 2026 17:41:15 +0000
Manifest this update: Mon 27 Apr 2026 17:36:15 +0000
Manifest next update: Thu 30 Apr 2026 18:53:15 +0000
Files and hashes: 1: 3135372e32302e34342e302f32342d3234203d3e20313532333932.roa (hash: LQj0jMPge82CwHOWS5fHIk0tBtvaFA1Hv5mniV+5odo=)
2: 3135372e32302e34352e302f32342d3234203d3e20313532333932.roa (hash: O5uJEpO5oilAXqiR31tNYgCroCKbL1/bMOK5Er+Qs0U=)
3: 0EAF2A0CD22523DB087375417038E4165075CA3E.crl (hash: UiYdRWPFNr/I5MTpkMNk9KN9aSwvhFpbIuv1Sjs3W5A=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
06:5e:c3:60:26:9e:cb:0c:b7:71:f8:41:eb:b5:29:4c:6b:88:26:dd
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0EAF2A0CD22523DB087375417038E4165075CA3E
Validity
Not Before: Apr 27 17:36:15 2026 GMT
Not After : Apr 30 18:53:15 2026 GMT
Subject: CN=38C0701DEBEE73C2AA35B17FAB5C5380F234AACC
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:db:9d:72:25:9c:39:f4:1d:49:2b:b2:86:c0:30:
2c:5a:ef:09:03:e3:0a:fd:41:9b:8b:de:9f:36:89:
ac:58:b6:d9:0b:aa:44:e7:47:a8:77:7b:6f:8e:07:
d4:8b:63:12:06:44:bb:12:fc:df:1f:11:10:eb:3c:
d8:7c:e3:48:28:00:c5:b9:9a:4b:2e:03:3f:e2:3b:
59:2c:45:0a:f7:44:fe:29:f0:f6:8d:16:15:34:b3:
8f:0e:be:df:28:b8:c0:31:0a:35:eb:fb:af:01:b5:
0c:45:b4:ed:7b:a5:6f:79:26:be:66:c4:58:b8:cc:
8f:82:5e:1f:90:d8:3a:40:75:a8:2d:b6:f3:41:12:
79:e3:fb:1a:a2:3a:ff:ee:c5:ff:77:bf:e0:75:1f:
49:15:64:7d:e2:9d:2a:cd:8b:8d:56:ad:97:90:8a:
17:dc:49:1c:dc:1c:a1:a5:60:6e:b7:1a:25:7f:69:
d0:8e:18:c8:fd:54:9a:9a:69:ff:93:4c:2d:fa:cf:
66:f7:cb:6a:ff:8c:c6:98:19:2a:7b:fe:39:86:36:
f1:95:cd:a1:6d:e7:83:01:15:cc:84:aa:0f:03:61:
73:cb:ad:3f:5a:90:71:64:9b:6b:14:a2:d2:a3:cb:
a7:cc:b9:5e:35:ca:11:b9:9d:ca:c2:b3:be:5a:97:
21:a9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
38:C0:70:1D:EB:EE:73:C2:AA:35:B1:7F:AB:5C:53:80:F2:34:AA:CC
X509v3 Authority Key Identifier:
keyid:0E:AF:2A:0C:D2:25:23:DB:08:73:75:41:70:38:E4:16:50:75:CA:3E
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://repo-rpki.idnic.net/repo/0588dff7-6a92-4293-8800-b53e2a918aca/0/0EAF2A0CD22523DB087375417038E4165075CA3E.crl
Authority Information Access:
CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/0EAF2A0CD22523DB087375417038E4165075CA3E.cer
Subject Information Access:
Signed Object - URI:rsync://repo-rpki.idnic.net/repo/0588dff7-6a92-4293-8800-b53e2a918aca/0/0EAF2A0CD22523DB087375417038E4165075CA3E.mft
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
85:4d:ec:3b:8b:1b:ef:7b:46:6d:8a:42:0b:4d:e6:a1:d1:1a:
a9:1e:40:d0:9a:a2:b4:f1:87:77:11:24:d7:fc:ed:56:53:b0:
bc:81:3b:b2:52:91:c5:5a:df:1b:5d:c7:66:82:9d:f0:a8:72:
b1:88:af:1a:03:a6:97:cb:78:b8:73:a2:d2:e2:3b:75:49:46:
b5:1f:7a:4b:f9:95:b6:ab:8a:21:ac:59:e3:e1:42:09:29:25:
58:65:75:85:65:aa:59:5b:5d:3e:3f:45:bd:8c:44:b5:52:4f:
47:f7:36:75:d2:e3:8f:58:93:ce:33:15:d0:f5:35:3e:5a:33:
d4:d1:89:22:35:ec:e5:80:f2:c4:e1:48:82:72:3a:b8:1c:ca:
22:e8:00:e2:01:93:0c:6f:2a:cc:ce:05:ee:16:34:c0:42:57:
85:f7:aa:6f:d6:b0:de:bf:97:8f:35:c5:9b:5d:05:c6:ce:d3:
d9:de:dd:1d:f5:f1:7e:74:80:cd:3e:1e:27:05:fb:6d:37:b4:
1c:df:26:8a:e1:19:81:e0:2a:c3:64:50:2e:9c:62:0a:f3:3d:
25:8c:c4:28:d5:b8:2d:4c:e0:ca:9e:e1:39:95:55:58:ad:ee:
26:d8:8a:ee:06:5c:97:28:47:4c:0f:be:9c:52:6c:4c:46:cd:
7c:e3:b5:42
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jun 24 04:15:56 2026 by rpki-client