
Manifest
$ rpki-client -vvf repo-rpki.idnic.net/repo/0e8d58a8-e197-4179-b73c-608e047d09a3/0/04D3D2E060243AD917D4F682922E4A805EDE3300.mft
File: 04D3D2E060243AD917D4F682922E4A805EDE3300.mft (raw, json)
Hash identifier: eoieIAYO6fEDN84Ds0kTWfEnHyv+1gbZNM8yMHin8Ds=
Subject key identifier: B6:DA:80:23:08:56:FA:90:84:BA:A1:92:3D:F5:19:E6:A0:72:45:8F
Authority key identifier: 04:D3:D2:E0:60:24:3A:D9:17:D4:F6:82:92:2E:4A:80:5E:DE:33:00
Certificate issuer: /CN=04D3D2E060243AD917D4F682922E4A805EDE3300
Certificate serial: 608F96F645AF9F00344E941B00E7CF6D7E55614A
Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/04D3D2E060243AD917D4F682922E4A805EDE3300.cer
Subject info access: rsync://repo-rpki.idnic.net/repo/0e8d58a8-e197-4179-b73c-608e047d09a3/0/04D3D2E060243AD917D4F682922E4A805EDE3300.mft
Manifest number: 013D
Signing time: Mon 27 Apr 2026 18:32:11 +0000
Manifest this update: Mon 27 Apr 2026 18:27:11 +0000
Manifest next update: Thu 30 Apr 2026 22:36:11 +0000
Files and hashes: 1: 3135372e32302e3235322e302f32342d3234203d3e20313338303839.roa (hash: tAOR3+qopwEEpOJ1MoufsE4Gb6QgCqX7uwexYPM3lns=)
2: 04D3D2E060243AD917D4F682922E4A805EDE3300.crl (hash: 88M+a1sZRcYlrqjQOTdY4UgTbHo4HlqM76sfQsGom+Q=)
3: 3135372e32302e3235332e302f32342d3234203d3e20313338303839.roa (hash: cVFzdmzLJEI/fSd97t0ozR5701iz99V95s98wkuB7V8=)
4: 3135372e32302e3235322e302f32332d3233203d3e20313338303839.roa (hash: uDBpr7O+iFMubPyltbc8ulM5s/26ABsK5CVCQ3JckaU=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
60:8f:96:f6:45:af:9f:00:34:4e:94:1b:00:e7:cf:6d:7e:55:61:4a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=04D3D2E060243AD917D4F682922E4A805EDE3300
Validity
Not Before: Apr 27 18:27:11 2026 GMT
Not After : Apr 30 22:36:11 2026 GMT
Subject: CN=B6DA80230856FA9084BAA1923DF519E6A072458F
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d9:29:39:d7:d1:19:77:97:a2:3c:f4:e5:5f:f9:
02:90:23:54:56:98:50:71:1d:16:f8:81:1a:d8:87:
c6:53:94:38:3e:b5:44:f9:04:73:f7:f4:12:34:92:
46:cd:97:d6:00:51:2f:9b:4d:c5:ea:83:02:58:2b:
66:43:1e:f6:60:6d:34:a9:ff:89:a4:7e:1c:2c:a5:
3b:9b:90:65:4e:3b:2f:19:82:7c:2f:fb:0d:11:93:
96:b4:a8:cc:d2:ba:31:bd:fb:28:6c:18:1e:78:ce:
0c:35:86:d3:6a:18:39:8d:54:dc:57:9d:d0:dd:01:
20:14:e3:8b:83:45:43:f0:86:91:31:67:af:53:74:
af:d6:c9:87:50:b5:2d:2b:8b:52:a1:95:6c:9a:7e:
5a:6b:bc:a6:bc:48:f7:a9:5b:cb:c8:6a:7c:f4:9c:
e2:72:d4:52:ef:46:33:f9:c8:17:88:fa:bf:06:0a:
75:48:f6:d4:15:28:42:85:2f:28:10:e7:06:f6:14:
64:f5:5a:1c:fd:67:1c:24:0c:9d:ce:cb:78:9d:ea:
aa:3b:d0:47:1c:8b:39:1a:f1:cc:5b:2d:04:5e:0c:
b4:48:ed:59:03:87:96:0f:04:fb:2c:a7:b4:75:23:
05:2e:ac:da:14:a8:fe:b8:3a:31:dd:23:2e:b3:33:
4a:df
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B6:DA:80:23:08:56:FA:90:84:BA:A1:92:3D:F5:19:E6:A0:72:45:8F
X509v3 Authority Key Identifier:
keyid:04:D3:D2:E0:60:24:3A:D9:17:D4:F6:82:92:2E:4A:80:5E:DE:33:00
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://repo-rpki.idnic.net/repo/0e8d58a8-e197-4179-b73c-608e047d09a3/0/04D3D2E060243AD917D4F682922E4A805EDE3300.crl
Authority Information Access:
CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/04D3D2E060243AD917D4F682922E4A805EDE3300.cer
Subject Information Access:
Signed Object - URI:rsync://repo-rpki.idnic.net/repo/0e8d58a8-e197-4179-b73c-608e047d09a3/0/04D3D2E060243AD917D4F682922E4A805EDE3300.mft
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
44:ea:ea:f9:34:76:ae:59:04:5a:1d:7e:12:a1:04:4a:12:5b:
8d:8e:e7:d4:f2:fe:7c:fc:70:de:4d:b1:ef:cb:da:3c:bc:71:
72:3b:a9:cc:67:a1:76:15:41:90:a6:a8:9c:d4:0e:f2:b0:36:
76:99:52:f8:38:ab:6d:1d:dd:d8:dd:64:ac:68:7a:6b:a6:50:
46:ee:bd:91:92:d0:b8:b0:2c:ee:5f:51:5c:82:d4:48:ef:a0:
43:c0:c6:1a:54:d2:7a:96:90:4e:24:f4:f7:dd:8c:c2:f8:33:
92:07:d7:71:ea:9e:15:ff:0f:b9:3a:2d:48:c6:9e:67:f1:f1:
30:53:3b:03:9f:bc:b8:35:64:2e:7d:a3:ef:b7:d6:59:dc:dd:
3d:70:5f:7b:0a:00:56:cf:77:01:87:d6:28:42:9c:05:fe:2a:
25:6d:12:07:ae:24:3e:2f:cf:74:34:b0:58:a2:8c:77:80:47:
d7:3e:21:9a:c0:29:52:89:44:b4:35:3c:53:7d:e9:a6:d0:9e:
72:05:08:7e:50:f5:cd:bd:7e:90:28:0d:8f:c8:76:5d:05:5f:
ed:96:59:0f:60:81:c1:e1:2d:5b:b2:74:28:5a:ac:2e:3c:12:
b2:39:32:fb:95:4b:59:1d:e1:5d:81:b6:a8:aa:9b:9c:1e:e8:
3f:88:76:d0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jun 24 04:12:58 2026 by rpki-client