Manifest
$ rpki-client -vvf repo-rpki.idnic.net/repo/aa417608-16b8-4497-81e3-947d78dbcf11/0/2098B3BD046CFFF28B48954F288A333FADDD1DE9.mft
File: 2098B3BD046CFFF28B48954F288A333FADDD1DE9.mft (raw, json)
Hash identifier: MMrPdsO/xONJy7z6lLNSlCOzeVBwxEAwLzNfyDJirI4=
Subject key identifier: BC:72:BF:F9:B4:86:D7:F9:87:9A:26:67:D0:F0:8C:0D:8D:BA:24:A5
Authority key identifier: 20:98:B3:BD:04:6C:FF:F2:8B:48:95:4F:28:8A:33:3F:AD:DD:1D:E9
Certificate issuer: /CN=2098B3BD046CFFF28B48954F288A333FADDD1DE9
Certificate serial: 4940C659AC1581ABEFB97875A2AC6B7497B6BBD5
Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/2098B3BD046CFFF28B48954F288A333FADDD1DE9.cer
Subject info access: rsync://repo-rpki.idnic.net/repo/aa417608-16b8-4497-81e3-947d78dbcf11/0/2098B3BD046CFFF28B48954F288A333FADDD1DE9.mft
Manifest number: FE
Signing time: Tue 28 Apr 2026 06:30:45 +0000
Manifest this update: Tue 28 Apr 2026 06:25:45 +0000
Manifest next update: Fri 01 May 2026 13:00:45 +0000
Files and hashes: 1: 3136302e32352e3232392e302f32342d3234203d3e20313533313036.roa (hash: ZsjBtNoWEJx2NTRYL99sTUHqHLXTfuWH/2StZO9wGXM=)
2: 2098B3BD046CFFF28B48954F288A333FADDD1DE9.crl (hash: PAgRXnyURH66GA0zv7hD6S9SGduXJP48rCNyo6/36dM=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
49:40:c6:59:ac:15:81:ab:ef:b9:78:75:a2:ac:6b:74:97:b6:bb:d5
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2098B3BD046CFFF28B48954F288A333FADDD1DE9
Validity
Not Before: Apr 28 06:25:45 2026 GMT
Not After : May 1 13:00:45 2026 GMT
Subject: CN=BC72BFF9B486D7F9879A2667D0F08C0D8DBA24A5
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a7:e5:e4:29:2f:de:5c:cb:c4:06:2c:c6:00:d1:
9d:5f:cd:9b:2a:ee:8a:08:3a:f4:f9:f0:05:41:5e:
de:57:6a:75:68:65:0c:7b:b8:91:47:15:85:9a:28:
39:78:9e:60:b7:6a:e8:b1:b1:48:d2:b5:38:30:a2:
e1:57:e4:f0:ae:2e:f2:c1:0b:70:4a:a9:89:1a:18:
6f:4e:bd:55:ec:65:08:5a:63:a1:6c:43:35:dc:12:
4b:a1:81:b9:7e:cd:06:8b:7d:73:80:fa:a4:95:0e:
c9:ce:b7:e3:09:af:1f:ed:8e:88:68:65:66:0f:f0:
a0:02:09:6a:63:76:54:59:58:a1:aa:dc:f0:99:72:
a7:57:6e:dd:dc:92:5d:86:09:42:f4:fd:15:51:0b:
7f:09:44:3d:a1:81:45:f3:64:55:30:ad:92:b8:2a:
11:c5:63:e5:2b:39:77:f2:c0:b7:20:78:e9:0c:5c:
84:4e:47:f7:b0:d5:ae:3d:d2:79:da:39:dc:b1:75:
03:61:22:b8:71:6c:21:00:e0:6b:08:3c:77:e9:41:
46:00:e9:96:27:6c:43:5c:63:66:db:1d:77:49:25:
78:08:ab:89:35:ad:0b:52:14:18:ad:23:aa:22:c9:
67:dd:b5:ab:cd:67:63:e8:93:f2:d2:ab:16:c5:61:
94:ab
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
BC:72:BF:F9:B4:86:D7:F9:87:9A:26:67:D0:F0:8C:0D:8D:BA:24:A5
X509v3 Authority Key Identifier:
keyid:20:98:B3:BD:04:6C:FF:F2:8B:48:95:4F:28:8A:33:3F:AD:DD:1D:E9
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://repo-rpki.idnic.net/repo/aa417608-16b8-4497-81e3-947d78dbcf11/0/2098B3BD046CFFF28B48954F288A333FADDD1DE9.crl
Authority Information Access:
CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/2098B3BD046CFFF28B48954F288A333FADDD1DE9.cer
Subject Information Access:
Signed Object - URI:rsync://repo-rpki.idnic.net/repo/aa417608-16b8-4497-81e3-947d78dbcf11/0/2098B3BD046CFFF28B48954F288A333FADDD1DE9.mft
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
23:0e:bc:37:47:6b:9b:cd:7f:df:b0:15:c4:e7:29:7e:2b:e3:
a0:bd:56:a7:a1:38:34:e1:fa:6c:05:28:3d:22:39:08:25:7d:
33:d9:ff:a4:48:39:b0:36:3b:57:bd:6c:50:ec:f7:59:da:cb:
dc:09:1a:e9:b0:94:ba:0d:45:c8:43:37:7c:20:32:7c:98:cf:
b5:f8:1b:ab:52:d5:35:92:ec:0e:f8:f4:3a:dd:65:4b:6d:88:
e8:78:f7:b6:44:50:a0:66:da:29:68:7f:cd:10:64:a0:19:a0:
76:f8:ea:7f:46:ea:7c:49:64:d0:59:e7:8a:c1:fc:19:11:4b:
77:ac:7d:9b:fd:88:97:a6:04:c7:41:13:80:f2:a0:c2:f5:40:
2b:ce:c7:30:78:87:68:a4:4f:42:c6:9c:11:13:32:32:10:76:
93:a1:4b:30:37:c3:68:2e:b1:10:a8:d5:1c:0f:4c:bf:45:65:
3c:b5:6f:09:27:e7:cb:92:34:52:49:0b:4e:b7:47:52:16:64:
b4:2a:06:39:22:61:75:e1:43:11:75:40:30:e0:12:28:8e:5e:
75:0a:c9:e6:c7:35:9f:cd:0f:3b:ef:f6:dd:9d:d9:a8:25:9b:
24:72:b5:5d:be:e5:7a:41:39:18:c5:46:c7:28:24:f8:2d:e3:
e2:f7:81:8e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jun 24 04:17:22 2026 by rpki-client