Manifest
$ rpki-client -vvf repo-rpki.idnic.net/repo/5fb808eb-c98e-4036-be9a-193bbcc64892/0/FC2DAAA409BA60DE33EC91F3A861D1A00719D426.mft
File: FC2DAAA409BA60DE33EC91F3A861D1A00719D426.mft (raw, json)
Hash identifier: 52yju5Sc3PYqkXCS29vnmfeYDdUCoGuYRPWhy79xrnQ=
Subject key identifier: 43:DF:87:CC:02:F1:BE:0A:17:79:87:F8:DB:B7:6F:5D:C3:8B:BC:3F
Authority key identifier: FC:2D:AA:A4:09:BA:60:DE:33:EC:91:F3:A8:61:D1:A0:07:19:D4:26
Certificate issuer: /CN=FC2DAAA409BA60DE33EC91F3A861D1A00719D426
Certificate serial: 7A64B01E8A64207E2F35A41781DA3DD442BF84B5
Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/FC2DAAA409BA60DE33EC91F3A861D1A00719D426.cer
Subject info access: rsync://repo-rpki.idnic.net/repo/5fb808eb-c98e-4036-be9a-193bbcc64892/0/FC2DAAA409BA60DE33EC91F3A861D1A00719D426.mft
Manifest number: 013B
Signing time: Wed 29 Apr 2026 04:41:00 +0000
Manifest this update: Wed 29 Apr 2026 04:36:00 +0000
Manifest next update: Sat 02 May 2026 15:08:00 +0000
Files and hashes: 1: FC2DAAA409BA60DE33EC91F3A861D1A00719D426.crl (hash: 4UnGYMXPBK845KBrxjys8QjzPYB5vbtP1G1r93ButlM=)
2: 3135372e36362e322e302f32332d3234203d3e20313532343430.roa (hash: zcAed+U0LIMKkO2m1wb6BGRlQ4YM9y2CMvt4q2VNLq8=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
7a:64:b0:1e:8a:64:20:7e:2f:35:a4:17:81:da:3d:d4:42:bf:84:b5
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=FC2DAAA409BA60DE33EC91F3A861D1A00719D426
Validity
Not Before: Apr 29 04:36:00 2026 GMT
Not After : May 2 15:08:00 2026 GMT
Subject: CN=43DF87CC02F1BE0A177987F8DBB76F5DC38BBC3F
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c3:2c:ef:60:90:e5:03:be:9e:a6:52:4e:1b:1f:
32:55:d6:8a:a1:14:a8:c0:ef:a0:e7:2b:44:b2:5d:
77:f4:34:76:6f:94:16:0d:0a:ea:1b:04:51:f5:e5:
5f:ca:72:fe:ed:c7:43:1b:cf:22:2d:01:09:3b:46:
9d:ff:94:0c:84:1a:98:fe:fb:34:31:bb:99:e5:89:
ee:c5:cc:36:f8:91:53:80:fb:5a:1e:6d:95:ab:f0:
4c:45:33:50:ef:e6:18:50:e5:66:55:3d:d5:a0:df:
04:88:d7:f7:33:5a:e0:be:48:24:92:79:72:ae:c1:
18:3b:b1:e3:27:8b:f5:70:e0:f9:b7:6a:b4:b8:af:
fa:60:ee:b0:74:d2:6a:08:1e:22:3e:82:09:ae:ef:
09:94:11:ee:21:80:ba:63:75:fa:4a:78:9f:d8:9b:
d4:af:c5:9d:e0:92:3d:57:ef:f6:07:c4:ac:e9:53:
5a:66:93:9f:72:bc:f2:55:cf:e6:c1:df:42:5a:e8:
1f:3d:02:54:3d:84:24:96:1d:6b:8b:95:f0:43:98:
4e:c3:e4:3b:62:96:69:70:02:c8:f2:4a:eb:13:65:
28:94:b2:4c:5a:64:11:2f:f0:fc:c2:98:0a:de:18:
26:d3:64:36:27:94:86:65:90:c3:48:a1:39:d2:9c:
9e:4d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
43:DF:87:CC:02:F1:BE:0A:17:79:87:F8:DB:B7:6F:5D:C3:8B:BC:3F
X509v3 Authority Key Identifier:
keyid:FC:2D:AA:A4:09:BA:60:DE:33:EC:91:F3:A8:61:D1:A0:07:19:D4:26
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://repo-rpki.idnic.net/repo/5fb808eb-c98e-4036-be9a-193bbcc64892/0/FC2DAAA409BA60DE33EC91F3A861D1A00719D426.crl
Authority Information Access:
CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/FC2DAAA409BA60DE33EC91F3A861D1A00719D426.cer
Subject Information Access:
Signed Object - URI:rsync://repo-rpki.idnic.net/repo/5fb808eb-c98e-4036-be9a-193bbcc64892/0/FC2DAAA409BA60DE33EC91F3A861D1A00719D426.mft
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
31:05:36:94:76:13:90:16:47:45:d1:bf:38:55:1b:3c:57:01:
e6:5b:bb:20:43:51:94:98:3f:7f:11:f8:d3:ed:b6:3a:e8:d9:
f9:9b:fd:7f:ae:66:0b:3a:18:b8:13:91:ee:51:94:11:42:1f:
12:ec:1f:94:a5:bb:71:e9:ef:90:93:19:50:c7:2d:41:e4:65:
91:1d:a3:2a:8d:94:0a:76:3b:1c:e9:04:7d:3b:e3:7f:5d:5f:
68:2a:d3:ae:ab:56:bd:ce:5b:2f:1d:93:09:4d:28:d7:b5:05:
88:4c:c1:e6:e4:8c:2a:17:82:a9:a9:22:d0:3b:dd:2b:21:0b:
5d:57:55:df:fb:11:d5:60:c7:18:2a:7f:70:6a:d8:16:a8:32:
01:77:c8:f4:d8:db:91:2c:5a:e0:7c:e0:a0:cb:5e:14:77:36:
f7:ef:67:61:8b:3a:fb:03:73:84:88:9c:25:33:21:b2:0a:9c:
96:32:33:fb:3c:9f:33:72:23:4c:d9:39:d3:91:14:e7:19:9b:
23:b3:a7:5b:71:29:4a:68:b2:84:19:64:04:1f:41:ff:97:f1:
bf:b0:65:6d:d9:03:f8:cd:43:72:30:ee:dd:9b:33:15:7e:7d:
38:e0:c7:d8:89:41:96:30:59:7b:4c:4c:28:59:eb:73:22:3a:
94:7c:fc:e0
-----BEGIN CERTIFICATE-----
MIIFMjCCBBqgAwIBAgIUemSwHopkIH4vNaQXgdo91EK/hLUwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoRkMyREFBQTQwOUJBNjBERTMzRUM5MUYzQTg2MUQxQTAw
NzE5RDQyNjAeFw0yNjA0MjkwNDM2MDBaFw0yNjA1MDIxNTA4MDBaMDMxMTAvBgNV
BAMTKDQzREY4N0NDMDJGMUJFMEExNzc5ODdGOERCQjc2RjVEQzM4QkJDM0YwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDDLO9gkOUDvp6mUk4bHzJV1oqh
FKjA76DnK0SyXXf0NHZvlBYNCuobBFH15V/Kcv7tx0MbzyItAQk7Rp3/lAyEGpj+
+zQxu5nlie7FzDb4kVOA+1oebZWr8ExFM1Dv5hhQ5WZVPdWg3wSI1/czWuC+SCSS
eXKuwRg7seMni/Vw4Pm3arS4r/pg7rB00moIHiI+ggmu7wmUEe4hgLpjdfpKeJ/Y
m9SvxZ3gkj1X7/YHxKzpU1pmk59yvPJVz+bB30Ja6B89AlQ9hCSWHWuLlfBDmE7D
5DtilmlwAsjySusTZSiUskxaZBEv8PzCmAreGCbTZDYnlIZlkMNIoTnSnJ5NAgMB
AAGjggI8MIICODAdBgNVHQ4EFgQUQ9+HzALxvgoXeYf427dvXcOLvD8wHwYDVR0j
BBgwFoAU/C2qpAm6YN4z7JHzqGHRoAcZ1CYwDgYDVR0PAQH/BAQDAgeAMIGFBgNV
HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby81
ZmI4MDhlYi1jOThlLTQwMzYtYmU5YS0xOTNiYmNjNjQ4OTIvMC9GQzJEQUFBNDA5
QkE2MERFMzNFQzkxRjNBODYxRDFBMDA3MTlENDI2LmNybDB0BggrBgEFBQcBAQRo
MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv
L0lETklDLUlELzEvRkMyREFBQTQwOUJBNjBERTMzRUM5MUYzQTg2MUQxQTAwNzE5
RDQyNi5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6
Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vNWZiODA4ZWItYzk4ZS00MDM2LWJl
OWEtMTkzYmJjYzY0ODkyLzAvRkMyREFBQTQwOUJBNjBERTMzRUM5MUYzQTg2MUQx
QTAwNzE5RDQyNi5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF
BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC
BQAwDQYJKoZIhvcNAQELBQADggEBADEFNpR2E5AWR0XRvzhVGzxXAeZbuyBDUZSY
P38R+NPttjro2fmb/X+uZgs6GLgTke5RlBFCHxLsH5Slu3Hp75CTGVDHLUHkZZEd
oyqNlAp2OxzpBH07439dX2gq066rVr3OWy8dkwlNKNe1BYhMwebkjCoXgqmpItA7
3SshC11XVd/7EdVgxxgqf3Bq2BaoMgF3yPTY25EsWuB84KDLXhR3NvfvZ2GLOvsD
c4SInCUzIbIKnJYyM/s8nzNyI0zZOdORFOcZmyOzp1txKUposoQZZAQfQf+X8b+w
ZW3ZA/jNQ3Iw7t2bMxV+fTjgx9iJQZYwWXtMTChZ63MiOpR8/OA=
-----END CERTIFICATE-----
Generated at Wed Jun 24 04:11:51 2026 by rpki-client