
Manifest
$ rpki-client -vvf repo-rpki.idnic.net/repo/69b53420-8c59-49cf-b3b2-f55e9890ddcd/0/3DDCC4CA43B492F40C8CB06E49934EC5F89BAB9A.mft
File: 3DDCC4CA43B492F40C8CB06E49934EC5F89BAB9A.mft (raw, json)
Hash identifier: qSnNYM7wBWzf8EefDoYDgxnQFUuEmMST9UnGdttVW/k=
Subject key identifier: 12:22:CE:6D:49:A0:35:4A:3F:C4:51:D6:AB:A0:68:98:CA:66:0A:6D
Authority key identifier: 3D:DC:C4:CA:43:B4:92:F4:0C:8C:B0:6E:49:93:4E:C5:F8:9B:AB:9A
Certificate issuer: /CN=3DDCC4CA43B492F40C8CB06E49934EC5F89BAB9A
Certificate serial: 2FDF1150920D3ECFA7F7DE2096E8E6968C32F26D
Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/3DDCC4CA43B492F40C8CB06E49934EC5F89BAB9A.cer
Subject info access: rsync://repo-rpki.idnic.net/repo/69b53420-8c59-49cf-b3b2-f55e9890ddcd/0/3DDCC4CA43B492F40C8CB06E49934EC5F89BAB9A.mft
Manifest number: 0121
Signing time: Wed 29 Apr 2026 05:22:42 +0000
Manifest this update: Wed 29 Apr 2026 05:17:42 +0000
Manifest next update: Sat 02 May 2026 05:23:42 +0000
Files and hashes: 1: 3DDCC4CA43B492F40C8CB06E49934EC5F89BAB9A.crl (hash: D+xSOG+ZO8beJ0ALloLX09QfR2pQOCYA0JEUS4/bCEI=)
2: 3136302e32322e3233342e302f32342d3234203d3e20313533303631.roa (hash: NaC6OjHEbkMsjBRQmR8Tqmru4zPhSmsJN/hiJNkC18Y=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
2f:df:11:50:92:0d:3e:cf:a7:f7:de:20:96:e8:e6:96:8c:32:f2:6d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3DDCC4CA43B492F40C8CB06E49934EC5F89BAB9A
Validity
Not Before: Apr 29 05:17:42 2026 GMT
Not After : May 2 05:23:42 2026 GMT
Subject: CN=1222CE6D49A0354A3FC451D6ABA06898CA660A6D
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:be:ab:43:c7:b5:6a:e1:b4:c1:7f:ca:f3:73:d3:
9c:10:52:96:26:08:0d:52:57:84:bb:3c:d4:2a:f3:
46:92:5c:c8:5c:38:3a:3a:64:69:f1:68:5b:63:8a:
24:82:47:9e:cc:43:1b:3c:9d:c2:89:3d:3a:b2:f4:
64:35:28:f5:db:96:65:99:25:b1:5e:63:01:64:f7:
60:01:75:d4:d2:6f:4e:4a:12:ce:f7:16:87:82:ae:
67:fb:26:c3:9e:05:58:22:92:0c:f4:c1:8c:67:2c:
9c:21:4b:2f:fa:bd:e9:0a:88:a5:68:72:3c:07:3f:
bd:e3:e4:d9:f8:4e:5b:37:b3:3c:30:6d:90:91:d2:
8b:29:67:4b:b2:1f:66:8b:3d:02:2f:7f:15:36:83:
ae:d2:b7:3d:0c:32:5e:bd:47:c5:f6:26:8a:2b:ba:
97:5b:5e:d5:3c:43:20:92:48:db:55:26:f0:98:39:
6e:a5:10:29:2a:a3:d5:1b:86:ca:f1:00:d2:df:3f:
a7:c8:83:a8:dd:be:f3:53:69:71:4d:48:66:62:77:
f9:d8:02:95:11:fa:fe:a6:a2:b6:b6:70:81:91:0b:
1f:8c:56:b1:fb:7f:12:37:cd:f0:7f:e4:c8:87:27:
58:0e:3f:3f:28:ac:1b:58:62:6f:79:65:74:5e:83:
7c:e7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
12:22:CE:6D:49:A0:35:4A:3F:C4:51:D6:AB:A0:68:98:CA:66:0A:6D
X509v3 Authority Key Identifier:
keyid:3D:DC:C4:CA:43:B4:92:F4:0C:8C:B0:6E:49:93:4E:C5:F8:9B:AB:9A
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://repo-rpki.idnic.net/repo/69b53420-8c59-49cf-b3b2-f55e9890ddcd/0/3DDCC4CA43B492F40C8CB06E49934EC5F89BAB9A.crl
Authority Information Access:
CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/3DDCC4CA43B492F40C8CB06E49934EC5F89BAB9A.cer
Subject Information Access:
Signed Object - URI:rsync://repo-rpki.idnic.net/repo/69b53420-8c59-49cf-b3b2-f55e9890ddcd/0/3DDCC4CA43B492F40C8CB06E49934EC5F89BAB9A.mft
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
96:fa:1a:ae:5a:42:d6:d9:c9:d1:4c:01:b8:d7:59:10:6d:77:
04:5a:e5:da:bf:8d:1b:8d:85:90:17:2e:a6:49:7c:71:1e:87:
ff:ae:e5:0b:c8:8b:79:a4:e1:73:8a:21:da:a7:f8:0b:14:45:
d1:1b:26:75:c2:66:9b:cb:60:9a:c0:cd:59:fa:4a:c8:1b:36:
4b:fc:7e:d7:90:c7:c5:43:3f:a5:b2:16:06:09:ac:e9:56:47:
bc:60:8d:b7:91:e3:9a:3a:33:ad:24:b2:73:f5:3a:67:8d:ea:
46:b4:1d:4d:5e:1e:a9:ac:37:af:12:ca:4d:ec:2d:06:8c:2a:
67:39:78:56:40:13:36:c0:80:57:09:6b:b5:1f:6f:21:36:df:
e1:58:b2:ee:ac:02:91:69:b6:98:78:23:71:c6:1d:24:ea:99:
05:71:31:d5:0f:27:79:93:59:c8:e6:e2:2c:d8:a0:b6:49:9a:
e9:3a:b4:33:c6:d1:ac:a7:ac:32:e3:ff:db:57:2f:db:35:c2:
fa:17:e5:06:9e:17:74:a0:e1:02:cd:25:0e:4d:8a:98:d0:49:
91:59:fe:17:1c:ab:80:83:bb:a7:3a:88:44:c5:4d:df:33:c6:
0e:83:fb:94:b5:b0:21:be:9b:c1:c5:c4:cb:a3:5c:26:5c:87:
17:af:9d:10
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jun 24 04:15:40 2026 by rpki-client