Manifest
$ rpki-client -vvf repo-rpki.idnic.net/repo/2d78b50b-449c-454b-850d-f20803789b58/1/885B7C008CE44036CA0659FD8E1379321C0AB5F2.mft
File: 885B7C008CE44036CA0659FD8E1379321C0AB5F2.mft (raw, json)
Hash identifier: 1lheoEEkFH6+ppH9NyzkDzPigMzqeCQ/p/NWlZTztOI=
Subject key identifier: 84:59:E2:5F:2D:FB:35:72:F4:28:6B:5C:AA:51:97:C4:CB:C6:20:15
Authority key identifier: 88:5B:7C:00:8C:E4:40:36:CA:06:59:FD:8E:13:79:32:1C:0A:B5:F2
Certificate issuer: /CN=885B7C008CE44036CA0659FD8E1379321C0AB5F2
Certificate serial: 3C72BE50D2AA6E59B855E33AD098A07B4EAFDC3B
Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/885B7C008CE44036CA0659FD8E1379321C0AB5F2.cer
Subject info access: rsync://repo-rpki.idnic.net/repo/2d78b50b-449c-454b-850d-f20803789b58/1/885B7C008CE44036CA0659FD8E1379321C0AB5F2.mft
Manifest number: 35
Signing time: Mon 27 Apr 2026 14:30:03 +0000
Manifest this update: Mon 27 Apr 2026 14:25:03 +0000
Manifest next update: Thu 30 Apr 2026 15:39:03 +0000
Files and hashes: 1: 3133382e3235322e3133392e302f32342d3234203d3e20313534333837.roa (hash: qprBpEFsUmfzT7L8DfRHRiIYOBmZH2oG8ByFHZ6SCUo=)
2: 885B7C008CE44036CA0659FD8E1379321C0AB5F2.crl (hash: pbU/REPiXuwFKAtF6b1103MoPek0DzV1+ZAGbnhmBPE=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
3c:72:be:50:d2:aa:6e:59:b8:55:e3:3a:d0:98:a0:7b:4e:af:dc:3b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=885B7C008CE44036CA0659FD8E1379321C0AB5F2
Validity
Not Before: Apr 27 14:25:03 2026 GMT
Not After : Apr 30 15:39:03 2026 GMT
Subject: CN=8459E25F2DFB3572F4286B5CAA5197C4CBC62015
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a0:39:11:72:1c:51:00:fa:26:a3:94:22:db:c2:
bd:4f:a8:a5:49:dd:51:f8:80:59:27:9c:fd:59:43:
7e:3e:7a:58:79:ec:97:45:df:7f:33:e4:5c:8a:b1:
8a:c5:65:28:a6:72:5a:9a:61:ba:88:e0:1b:d3:04:
e3:a8:0f:16:c7:eb:02:86:18:e7:d2:c1:43:ce:35:
eb:62:86:89:67:d1:dd:c3:42:5a:60:69:d1:53:79:
8b:67:ce:3c:04:0f:9b:02:a8:0b:df:24:60:08:81:
71:5d:65:1b:2a:9a:a6:6e:22:62:f4:94:6c:33:84:
18:17:fd:94:3a:2c:7a:23:03:9d:08:ae:0b:27:97:
e3:62:c9:d0:49:cf:3e:ce:bd:a2:23:7c:e4:70:e1:
b1:d3:18:fb:87:34:42:51:b0:9e:4f:e4:1a:18:91:
70:cb:8b:94:af:75:52:ee:b6:24:dd:ad:92:0e:e5:
51:fb:53:b6:3c:9f:14:d8:06:55:c8:a7:33:77:34:
dc:4f:2b:78:72:f1:78:c0:fe:16:b3:6e:12:44:f0:
d9:44:5b:cc:24:88:90:65:d7:56:12:7c:6e:d5:e8:
50:f8:1e:eb:bb:a6:10:dd:ce:4b:1b:31:30:d4:32:
ce:1c:95:91:f1:22:76:30:b7:a2:d3:87:2a:27:b7:
59:5b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
84:59:E2:5F:2D:FB:35:72:F4:28:6B:5C:AA:51:97:C4:CB:C6:20:15
X509v3 Authority Key Identifier:
keyid:88:5B:7C:00:8C:E4:40:36:CA:06:59:FD:8E:13:79:32:1C:0A:B5:F2
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://repo-rpki.idnic.net/repo/2d78b50b-449c-454b-850d-f20803789b58/1/885B7C008CE44036CA0659FD8E1379321C0AB5F2.crl
Authority Information Access:
CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/885B7C008CE44036CA0659FD8E1379321C0AB5F2.cer
Subject Information Access:
Signed Object - URI:rsync://repo-rpki.idnic.net/repo/2d78b50b-449c-454b-850d-f20803789b58/1/885B7C008CE44036CA0659FD8E1379321C0AB5F2.mft
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
a9:fd:cd:bf:6a:9b:53:71:f9:00:2e:47:49:b1:43:7f:d7:85:
10:94:16:e0:0c:a4:d5:7e:48:1a:f2:02:eb:d2:1c:26:69:c2:
4b:5e:ee:10:48:0f:45:fc:1e:9b:4d:f0:08:01:fd:bd:77:31:
4e:25:8e:20:ef:39:ab:bb:f9:7c:92:f9:7b:d6:1f:56:ea:d3:
87:38:f6:20:24:f5:8d:24:98:6c:63:c4:08:15:15:a2:fc:b5:
7a:20:09:63:1f:16:2d:3d:f6:41:fd:5a:e0:f0:8c:12:14:d6:
74:9f:9b:1d:0b:92:8c:74:5b:40:b3:01:b5:78:f9:f9:33:6f:
d2:23:67:c0:80:14:6e:57:cd:74:46:d2:c4:92:e8:6a:23:7d:
62:50:09:20:8e:b2:14:03:8c:ff:cb:a1:22:3a:b0:6b:bf:b7:
01:9f:27:82:cb:b7:55:a8:60:07:b9:5b:22:cf:5c:c4:75:dc:
ce:8b:60:a6:e4:8d:06:da:f5:4e:bc:69:a7:a5:58:87:c6:e4:
36:0b:2c:a0:d4:bb:36:b1:9d:a4:96:f3:c8:9b:1e:2d:3f:16:
1b:c3:ce:06:06:63:d4:82:a7:2a:8e:a2:83:bf:76:c4:ce:78:
0e:c8:71:2e:eb:c2:ab:fb:af:17:37:75:95:00:e3:64:5c:33:
e7:de:05:a1
-----BEGIN CERTIFICATE-----
MIIFMjCCBBqgAwIBAgIUPHK+UNKqblm4VeM60Jige06v3DswDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoODg1QjdDMDA4Q0U0NDAzNkNBMDY1OUZEOEUxMzc5MzIx
QzBBQjVGMjAeFw0yNjA0MjcxNDI1MDNaFw0yNjA0MzAxNTM5MDNaMDMxMTAvBgNV
BAMTKDg0NTlFMjVGMkRGQjM1NzJGNDI4NkI1Q0FBNTE5N0M0Q0JDNjIwMTUwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCgORFyHFEA+iajlCLbwr1PqKVJ
3VH4gFknnP1ZQ34+elh57JdF338z5FyKsYrFZSimclqaYbqI4BvTBOOoDxbH6wKG
GOfSwUPONetiholn0d3DQlpgadFTeYtnzjwED5sCqAvfJGAIgXFdZRsqmqZuImL0
lGwzhBgX/ZQ6LHojA50Irgsnl+NiydBJzz7OvaIjfORw4bHTGPuHNEJRsJ5P5BoY
kXDLi5SvdVLutiTdrZIO5VH7U7Y8nxTYBlXIpzN3NNxPK3hy8XjA/hazbhJE8NlE
W8wkiJBl11YSfG7V6FD4Huu7phDdzksbMTDUMs4clZHxInYwt6LThyont1lbAgMB
AAGjggI8MIICODAdBgNVHQ4EFgQUhFniXy37NXL0KGtcqlGXxMvGIBUwHwYDVR0j
BBgwFoAUiFt8AIzkQDbKBln9jhN5MhwKtfIwDgYDVR0PAQH/BAQDAgeAMIGFBgNV
HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby8y
ZDc4YjUwYi00NDljLTQ1NGItODUwZC1mMjA4MDM3ODliNTgvMS84ODVCN0MwMDhD
RTQ0MDM2Q0EwNjU5RkQ4RTEzNzkzMjFDMEFCNUYyLmNybDB0BggrBgEFBQcBAQRo
MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv
L0lETklDLUlELzEvODg1QjdDMDA4Q0U0NDAzNkNBMDY1OUZEOEUxMzc5MzIxQzBB
QjVGMi5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6
Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vMmQ3OGI1MGItNDQ5Yy00NTRiLTg1
MGQtZjIwODAzNzg5YjU4LzEvODg1QjdDMDA4Q0U0NDAzNkNBMDY1OUZEOEUxMzc5
MzIxQzBBQjVGMi5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF
BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC
BQAwDQYJKoZIhvcNAQELBQADggEBAKn9zb9qm1Nx+QAuR0mxQ3/XhRCUFuAMpNV+
SBryAuvSHCZpwkte7hBID0X8HptN8AgB/b13MU4ljiDvOau7+XyS+XvWH1bq04c4
9iAk9Y0kmGxjxAgVFaL8tXogCWMfFi099kH9WuDwjBIU1nSfmx0Lkox0W0CzAbV4
+fkzb9IjZ8CAFG5XzXRG0sSS6GojfWJQCSCOshQDjP/LoSI6sGu/twGfJ4LLt1Wo
YAe5WyLPXMR13M6LYKbkjQba9U68aaelWIfG5DYLLKDUuzaxnaSW88ibHi0/FhvD
zgYGY9SCpyqOooO/dsTOeA7IcS7rwqv7rxc3dZUA42RcM+feBaE=
-----END CERTIFICATE-----
Generated at Wed Jun 24 04:17:52 2026 by rpki-client