Manifest
$ rpki-client -vvf repo-rpki.idnic.net/repo/7d9f98f3-72f0-4006-be99-b9a9e8d9d2bf/0/D3B0DDBB8E07FCD98A399C90C5B3FC32B4FA28F0.mft
File: D3B0DDBB8E07FCD98A399C90C5B3FC32B4FA28F0.mft (raw, json)
Hash identifier: 4dxRNpUZXvt1jfZwZJGqyfrxzfCoQ3uiVnse4fec1Dw=
Subject key identifier: 9F:7E:07:0B:27:C1:8A:5E:FF:03:FA:22:B8:41:DA:E9:CA:7B:61:00
Authority key identifier: D3:B0:DD:BB:8E:07:FC:D9:8A:39:9C:90:C5:B3:FC:32:B4:FA:28:F0
Certificate issuer: /CN=D3B0DDBB8E07FCD98A399C90C5B3FC32B4FA28F0
Certificate serial: 644A0AC5E82C598830BBDF0EF598B4AC5F5EB77C
Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/D3B0DDBB8E07FCD98A399C90C5B3FC32B4FA28F0.cer
Subject info access: rsync://repo-rpki.idnic.net/repo/7d9f98f3-72f0-4006-be99-b9a9e8d9d2bf/0/D3B0DDBB8E07FCD98A399C90C5B3FC32B4FA28F0.mft
Manifest number: EE
Signing time: Mon 27 Apr 2026 15:30:02 +0000
Manifest this update: Mon 27 Apr 2026 15:25:02 +0000
Manifest next update: Thu 30 Apr 2026 23:35:02 +0000
Files and hashes: 1: 3136302e32322e3138372e302f32342d3234203d3e20313532383233.roa (hash: hp0FWXodRjkZ1xCt3tnFlPQ3FclJlDZduoZ/rI+jC6E=)
2: D3B0DDBB8E07FCD98A399C90C5B3FC32B4FA28F0.crl (hash: 22Awc9OTvTWns2NciYX9OLenAQWxOQJ8IzCCYYu2hWM=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
64:4a:0a:c5:e8:2c:59:88:30:bb:df:0e:f5:98:b4:ac:5f:5e:b7:7c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=D3B0DDBB8E07FCD98A399C90C5B3FC32B4FA28F0
Validity
Not Before: Apr 27 15:25:02 2026 GMT
Not After : Apr 30 23:35:02 2026 GMT
Subject: CN=9F7E070B27C18A5EFF03FA22B841DAE9CA7B6100
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e9:1e:b0:3b:0f:e3:23:45:a9:12:2f:5c:dc:07:
ca:68:fc:07:14:12:60:73:af:e7:1a:f2:5e:8b:94:
ef:00:af:d8:64:7d:d8:e1:c5:b6:22:f9:f6:6f:52:
08:0b:5f:e3:4d:be:f4:9a:63:8c:25:73:92:e6:3a:
c0:5c:bb:4f:60:9e:b0:12:29:3c:04:45:18:3b:e6:
bd:f7:b4:78:d6:30:e0:47:2a:c2:d5:38:a5:cb:9c:
7b:2d:95:5c:08:b1:11:c5:c0:05:f5:28:3e:09:3f:
83:14:f2:bb:2c:6d:a0:14:42:c6:59:29:c1:b2:6f:
4a:f2:15:40:52:8d:0c:ab:e6:5a:08:fe:fa:0f:fe:
97:64:9f:46:74:ec:e0:a3:10:d4:c6:ff:72:e6:48:
e7:ca:8b:04:8e:cd:06:3f:6b:25:61:d4:b6:2d:f5:
b6:b0:1d:b0:2f:fd:d7:08:56:01:11:d4:6b:59:0a:
03:58:0f:98:ab:d9:bd:d4:fc:15:f9:36:fa:eb:56:
94:3d:ee:da:1c:ee:e9:59:0c:b0:de:47:e0:b2:1e:
b5:8c:21:5f:ba:ce:8c:93:36:24:7f:13:80:a9:d6:
06:3c:6e:f8:74:89:29:e6:13:54:cd:65:8a:a6:07:
5f:42:39:8b:e6:4e:e4:68:48:c8:1d:11:be:fa:a3:
dc:cd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
9F:7E:07:0B:27:C1:8A:5E:FF:03:FA:22:B8:41:DA:E9:CA:7B:61:00
X509v3 Authority Key Identifier:
keyid:D3:B0:DD:BB:8E:07:FC:D9:8A:39:9C:90:C5:B3:FC:32:B4:FA:28:F0
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://repo-rpki.idnic.net/repo/7d9f98f3-72f0-4006-be99-b9a9e8d9d2bf/0/D3B0DDBB8E07FCD98A399C90C5B3FC32B4FA28F0.crl
Authority Information Access:
CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/D3B0DDBB8E07FCD98A399C90C5B3FC32B4FA28F0.cer
Subject Information Access:
Signed Object - URI:rsync://repo-rpki.idnic.net/repo/7d9f98f3-72f0-4006-be99-b9a9e8d9d2bf/0/D3B0DDBB8E07FCD98A399C90C5B3FC32B4FA28F0.mft
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
08:10:da:03:57:e8:37:73:94:39:6f:15:5f:85:55:46:9e:fe:
14:cf:74:05:50:b6:de:2a:0b:c0:8c:b1:d0:d4:4a:bf:97:0c:
46:ad:4a:b5:d5:7b:a4:75:da:54:82:a6:41:1a:d6:15:1b:d8:
8f:80:4c:33:0f:94:12:5f:14:30:70:c7:25:7e:13:27:57:cc:
93:16:e2:6f:27:5d:ad:43:7b:7d:15:41:a8:0d:26:27:bd:98:
a8:5a:13:5c:5d:c4:f9:61:7d:1c:0c:89:03:59:7e:e3:d3:d9:
9a:b3:1a:ce:77:cc:4c:f3:ac:df:ee:d7:1f:c0:bc:87:82:63:
c0:43:59:0b:93:5a:d9:db:c9:0c:80:48:71:be:0a:53:a0:85:
b1:e4:b5:9f:e8:8c:d7:f6:18:49:6c:c1:6f:57:de:0d:de:bd:
49:d7:dd:62:7b:f6:ad:be:1e:67:af:b5:2b:9e:c0:47:b4:1f:
9f:9a:f9:b9:11:fe:32:9f:0b:8a:fd:b9:c2:cc:03:07:6d:b1:
5c:8c:3f:3c:8a:00:96:4a:05:db:d3:75:17:52:53:03:e4:7d:
84:b3:34:80:6b:39:98:11:bd:2a:21:96:7b:93:0c:a6:30:91:
a1:9c:44:ce:aa:f8:72:d5:24:f2:54:20:e8:b8:72:1f:f6:cb:
ce:75:2e:ed
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jun 24 04:11:04 2026 by rpki-client