
Manifest
$ rpki-client -vvf repo-rpki.idnic.net/repo/ba89b7dd-99a7-450e-be84-b3bfc7340f1f/0/31C2F0F25531E3524E0E0E901310435F2F406AC6.mft
File: 31C2F0F25531E3524E0E0E901310435F2F406AC6.mft (raw, json)
Hash identifier: 1tr4mWzdf8mhnebZImZsagJO00hdCxe/4RZohDwYTm8=
Subject key identifier: D2:9B:DD:D7:82:00:78:60:3D:F0:29:BD:92:AB:56:F4:D0:A0:F9:6E
Authority key identifier: 31:C2:F0:F2:55:31:E3:52:4E:0E:0E:90:13:10:43:5F:2F:40:6A:C6
Certificate issuer: /CN=31C2F0F25531E3524E0E0E901310435F2F406AC6
Certificate serial: 04A365FFFA2F2278DCA1B75321B5366FB0EFDBA2
Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/31C2F0F25531E3524E0E0E901310435F2F406AC6.cer
Subject info access: rsync://repo-rpki.idnic.net/repo/ba89b7dd-99a7-450e-be84-b3bfc7340f1f/0/31C2F0F25531E3524E0E0E901310435F2F406AC6.mft
Manifest number: FD
Signing time: Tue 28 Apr 2026 17:51:36 +0000
Manifest this update: Tue 28 Apr 2026 17:46:36 +0000
Manifest next update: Fri 01 May 2026 20:56:36 +0000
Files and hashes: 1: 31C2F0F25531E3524E0E0E901310435F2F406AC6.crl (hash: t6BbITbf0F86CainKRbD86IcLHXjRLl0qM2xy8Ch4pg=)
2: 3136302e3138372e3134342e302f32332d3233203d3e20313533313231.roa (hash: UX4GTYxgh3sTP6mJveFmG7hH/tpmW/UH4U2z8tOQWto=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
04:a3:65:ff:fa:2f:22:78:dc:a1:b7:53:21:b5:36:6f:b0:ef:db:a2
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=31C2F0F25531E3524E0E0E901310435F2F406AC6
Validity
Not Before: Apr 28 17:46:36 2026 GMT
Not After : May 1 20:56:36 2026 GMT
Subject: CN=D29BDDD7820078603DF029BD92AB56F4D0A0F96E
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d1:fb:f3:6e:e5:4f:22:72:20:17:67:6d:9f:27:
29:4e:82:01:cf:81:77:e8:5c:cd:9f:f0:62:c4:69:
c9:65:5a:a8:d7:64:9b:30:4f:45:86:fa:af:f0:ba:
26:6e:c3:df:d6:fa:d3:30:c3:db:74:e9:32:dc:30:
1c:9f:35:22:e0:f4:51:9d:00:39:b7:53:9e:f8:d0:
66:ca:7b:13:1a:0b:fe:16:15:7c:96:1b:78:8e:9f:
90:bc:e7:7d:4a:9a:78:33:ca:4e:11:9a:c6:11:1d:
ba:30:17:89:90:38:d7:ab:1a:73:22:20:ad:66:99:
a6:59:0c:eb:76:56:bb:8f:68:be:b2:b3:40:cb:ff:
b6:b6:b4:63:48:3b:24:e1:a5:6d:ce:87:5b:07:c8:
04:34:0e:d9:cd:fe:3c:a1:19:c7:6c:9a:21:7a:06:
ab:8d:46:c5:27:ad:2e:30:68:6f:ba:08:a6:53:a8:
54:ef:19:3d:b1:1c:1d:7a:1a:28:d5:8d:28:ea:2a:
84:6d:30:88:77:2c:10:46:9c:28:01:4e:91:87:f0:
c4:a6:e0:a9:67:96:63:40:d7:b1:df:f0:fe:98:c5:
c3:4d:69:49:c2:1e:11:86:91:a6:e3:22:86:5a:4a:
91:05:d9:17:78:27:01:3c:49:c9:dc:9c:91:af:1d:
d8:9d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D2:9B:DD:D7:82:00:78:60:3D:F0:29:BD:92:AB:56:F4:D0:A0:F9:6E
X509v3 Authority Key Identifier:
keyid:31:C2:F0:F2:55:31:E3:52:4E:0E:0E:90:13:10:43:5F:2F:40:6A:C6
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://repo-rpki.idnic.net/repo/ba89b7dd-99a7-450e-be84-b3bfc7340f1f/0/31C2F0F25531E3524E0E0E901310435F2F406AC6.crl
Authority Information Access:
CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/31C2F0F25531E3524E0E0E901310435F2F406AC6.cer
Subject Information Access:
Signed Object - URI:rsync://repo-rpki.idnic.net/repo/ba89b7dd-99a7-450e-be84-b3bfc7340f1f/0/31C2F0F25531E3524E0E0E901310435F2F406AC6.mft
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
03:2c:92:e5:31:e7:d2:f2:bf:d3:1d:9c:d2:2c:0a:5e:00:b4:
e5:c1:a3:aa:e6:ce:b9:89:2d:bd:38:d7:59:aa:3f:9c:20:fb:
60:e7:3c:d5:fe:53:1f:30:6a:dc:a9:ae:02:fb:8e:10:12:da:
fd:62:bb:05:a9:4b:0c:ad:1a:43:49:30:4b:57:b5:34:3a:16:
2e:c4:6b:94:29:5d:db:bf:52:c6:36:b7:b7:04:bc:7d:00:c0:
c8:f5:61:38:8b:be:67:19:0b:68:c9:7a:c1:70:fa:f0:3e:a7:
89:05:95:ec:66:dd:53:a1:d0:45:1b:19:d6:39:48:60:bd:0f:
63:d3:62:9b:1e:4d:1b:f2:e5:15:ed:e2:fb:84:24:0d:7d:f2:
0c:6f:2a:97:37:32:31:1a:fd:dd:e3:f4:00:a8:09:e0:9e:67:
51:bd:fd:1e:85:0c:6e:c3:43:33:44:b7:f3:53:e1:aa:b7:8e:
1d:00:1c:06:28:e8:a1:8c:47:11:53:7e:57:39:17:08:42:1e:
10:fa:84:d2:d4:92:40:4c:f8:c5:1d:2f:45:4b:26:f6:b4:34:
8b:3a:46:67:f7:1f:e8:8e:69:97:9e:50:d5:ad:33:d3:d7:4f:
1d:22:e4:cc:e8:c3:ad:1b:8e:2d:ad:67:f2:df:c8:f3:d1:9e:
56:6a:3c:b7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jun 24 04:16:32 2026 by rpki-client