Manifest
$ rpki-client -vvf repo-rpki.idnic.net/repo/1d011a1c-a0ad-4d93-86af-3f0aadd9684f/0/FF3F066A5E9AB8F988B8E17C7A56DD2E00A66AD8.mft
File: FF3F066A5E9AB8F988B8E17C7A56DD2E00A66AD8.mft (raw, json)
Hash identifier: ckSDqlKvRI6R+y75WKPJGpBzBmEMmDPzsMoC5LdpvJU=
Subject key identifier: 94:00:24:13:39:2D:4C:E6:EC:3C:94:92:61:75:90:C9:D8:35:9D:10
Authority key identifier: FF:3F:06:6A:5E:9A:B8:F9:88:B8:E1:7C:7A:56:DD:2E:00:A6:6A:D8
Certificate issuer: /CN=FF3F066A5E9AB8F988B8E17C7A56DD2E00A66AD8
Certificate serial: 38B0071A8E29F8B2CED9DA57A84374BAE55333A2
Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/FF3F066A5E9AB8F988B8E17C7A56DD2E00A66AD8.cer
Subject info access: rsync://repo-rpki.idnic.net/repo/1d011a1c-a0ad-4d93-86af-3f0aadd9684f/0/FF3F066A5E9AB8F988B8E17C7A56DD2E00A66AD8.mft
Manifest number: 013B
Signing time: Wed 29 Apr 2026 08:52:38 +0000
Manifest this update: Wed 29 Apr 2026 08:47:38 +0000
Manifest next update: Sat 02 May 2026 15:15:38 +0000
Files and hashes: 1: 3135372e31352e38322e302f32332d3233203d3e20313532333633.roa (hash: tjCEDGhTf9wmSOKlBozB/Eo2tA4qOdCJKD0rSKbbsgo=)
2: FF3F066A5E9AB8F988B8E17C7A56DD2E00A66AD8.crl (hash: Ah02c3re2y4OOyvllv7dtpcoqrfqBYmxJRhOwp18ovI=)
3: 3135372e31352e38322e302f32342d3234203d3e20313532333633.roa (hash: JLWE6h6NXLY9WSoLd4bmAbVPL3LIXrW+e/qj82i23rA=)
4: 3135372e31352e38332e302f32342d3234203d3e20313532333633.roa (hash: aBnBiM/MEhKqQ7n4gX23Mkjy/VKocVmrbAAfq1Psf+A=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
38:b0:07:1a:8e:29:f8:b2:ce:d9:da:57:a8:43:74:ba:e5:53:33:a2
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=FF3F066A5E9AB8F988B8E17C7A56DD2E00A66AD8
Validity
Not Before: Apr 29 08:47:38 2026 GMT
Not After : May 2 15:15:38 2026 GMT
Subject: CN=94002413392D4CE6EC3C9492617590C9D8359D10
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:da:4a:fc:f2:06:6c:a4:3c:72:52:5c:13:46:2c:
37:21:bf:7d:bd:5f:d6:69:c4:5c:a9:ec:7f:07:8f:
49:3f:b0:70:49:77:b2:b8:bc:6d:f7:d4:9c:d6:9a:
3a:38:59:74:e8:0c:86:82:be:eb:8c:c5:f1:aa:05:
bb:fe:c9:f0:88:33:13:ad:98:7f:00:b0:fd:e2:77:
39:74:09:3d:d4:bc:da:db:dc:25:00:0f:e1:aa:b0:
28:e9:6e:de:ad:65:fc:50:33:b6:e2:93:a0:84:e0:
6d:31:fb:e9:8e:3a:de:1b:4e:9a:72:4d:a8:b1:ba:
ec:21:50:b4:f0:06:d2:66:92:91:06:a1:6f:51:e7:
77:ad:ac:86:f8:65:9a:c3:6f:30:46:8c:c0:61:af:
3b:c1:54:1a:2a:94:c0:6c:12:f8:3a:81:c4:c1:9a:
bf:cf:4a:c7:3a:23:71:f6:d5:d0:2f:8a:31:11:ab:
ce:94:1d:eb:1e:b5:89:88:41:11:e3:0d:42:ef:39:
f6:5f:e8:9f:5b:f0:61:c7:2b:cb:1d:eb:75:1e:6b:
a0:71:e5:88:b2:48:ef:cc:0d:21:05:72:a1:c7:e8:
24:13:15:45:c9:d8:d8:b7:07:cd:71:0e:0b:3a:99:
e5:c1:f6:b3:5b:10:29:d8:ea:06:5a:c0:7f:db:95:
6a:fd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
94:00:24:13:39:2D:4C:E6:EC:3C:94:92:61:75:90:C9:D8:35:9D:10
X509v3 Authority Key Identifier:
keyid:FF:3F:06:6A:5E:9A:B8:F9:88:B8:E1:7C:7A:56:DD:2E:00:A6:6A:D8
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://repo-rpki.idnic.net/repo/1d011a1c-a0ad-4d93-86af-3f0aadd9684f/0/FF3F066A5E9AB8F988B8E17C7A56DD2E00A66AD8.crl
Authority Information Access:
CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/FF3F066A5E9AB8F988B8E17C7A56DD2E00A66AD8.cer
Subject Information Access:
Signed Object - URI:rsync://repo-rpki.idnic.net/repo/1d011a1c-a0ad-4d93-86af-3f0aadd9684f/0/FF3F066A5E9AB8F988B8E17C7A56DD2E00A66AD8.mft
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
ab:d7:0b:4d:80:a9:54:2e:d6:92:2f:d7:81:a7:7d:ae:72:7a:
17:a3:e2:40:24:91:e2:0b:ae:72:4a:6f:8c:cb:f5:ee:2b:51:
69:d5:cb:5d:01:94:e4:41:11:d4:d1:7b:a6:e0:3e:f0:5b:d3:
8f:b9:dd:e7:dd:94:15:ea:1f:4a:6b:be:0b:03:d0:05:08:14:
77:5d:6c:b8:b6:f1:0a:7d:83:e2:00:90:ce:33:04:a2:a0:d7:
2a:a0:40:79:82:1c:6f:51:85:91:ed:28:7b:4e:4b:c4:86:8b:
15:de:c0:fd:a7:ad:de:98:71:3f:a4:2a:d0:63:e1:06:b2:b1:
47:04:13:46:cc:3e:7d:44:03:85:3c:45:e4:5b:bb:78:8b:5a:
3a:dc:f4:35:f6:0e:81:3a:4a:ff:f9:fc:85:c0:f6:af:2e:6e:
d0:12:5f:34:71:e4:74:84:9a:1b:d8:12:06:31:4c:f8:84:b9:
71:f9:21:20:fb:5a:53:c9:4e:bb:8f:b0:7a:63:92:87:14:85:
69:85:ab:ab:3f:1b:e9:6f:5b:e7:d3:c4:69:55:bb:4d:a9:90:
35:db:28:b6:02:ae:e8:9c:b9:d0:41:fc:cd:2f:de:aa:b4:bb:
fd:d6:2a:b3:e9:a5:8c:4f:13:d0:e0:62:49:33:02:0a:1f:13:
1c:b6:e7:90
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jun 24 04:16:32 2026 by rpki-client