Manifest
$ rpki-client -vvf repo-rpki.idnic.net/repo/1bdff819-2bad-483d-9fa8-b6ebc484031a/0/917A9D24BF1EAD6FA4A1F8FD81D53137EF52E784.mft
File: 917A9D24BF1EAD6FA4A1F8FD81D53137EF52E784.mft (raw, json)
Hash identifier: tVynHhLjC7pRBCXY9Qaa2bk6aU5jFfvN47CkoXvTnB8=
Subject key identifier: 12:20:43:FD:70:DF:0D:5E:B3:1F:89:6D:40:57:A2:27:DF:CD:FB:4E
Authority key identifier: 91:7A:9D:24:BF:1E:AD:6F:A4:A1:F8:FD:81:D5:31:37:EF:52:E7:84
Certificate issuer: /CN=917A9D24BF1EAD6FA4A1F8FD81D53137EF52E784
Certificate serial: 3A647A36C1B691F37D7072ED3C1AE2740B0B886C
Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/917A9D24BF1EAD6FA4A1F8FD81D53137EF52E784.cer
Subject info access: rsync://repo-rpki.idnic.net/repo/1bdff819-2bad-483d-9fa8-b6ebc484031a/0/917A9D24BF1EAD6FA4A1F8FD81D53137EF52E784.mft
Manifest number: 02AF
Signing time: Mon 27 Apr 2026 02:50:46 +0000
Manifest this update: Mon 27 Apr 2026 02:45:46 +0000
Manifest next update: Thu 30 Apr 2026 12:22:46 +0000
Files and hashes: 1: 917A9D24BF1EAD6FA4A1F8FD81D53137EF52E784.crl (hash: pnQsBA8AZLOleAy0CesxXUOor1NlBt3gDJMqrtOiIuQ=)
2: 323430303a346265303a3a2f33322d3438203d3e20313431383938.roa (hash: cViD++tff+X7xq1z33jmPNpr3W6MqEIUFSVqOeIQ0V4=)
3: 3130332e3136342e31322e302f32332d3234203d3e20313431383938.roa (hash: +et6XAZaJYtUR6Dc2zidlhc9nlrgtLBlWzalZZGRqM4=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
3a:64:7a:36:c1:b6:91:f3:7d:70:72:ed:3c:1a:e2:74:0b:0b:88:6c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=917A9D24BF1EAD6FA4A1F8FD81D53137EF52E784
Validity
Not Before: Apr 27 02:45:46 2026 GMT
Not After : Apr 30 12:22:46 2026 GMT
Subject: CN=122043FD70DF0D5EB31F896D4057A227DFCDFB4E
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a1:52:df:21:33:2a:49:a7:1c:ba:1b:ff:af:51:
70:08:14:82:d1:67:c9:eb:19:08:1c:cb:93:ec:b9:
6e:15:57:9b:61:6d:2c:5a:2b:2b:2a:f7:85:f0:b4:
bc:65:d6:49:90:ae:3e:96:70:7c:3d:b3:df:94:c8:
b8:1b:ae:a1:fe:50:7c:74:28:6f:85:83:2e:83:38:
19:4e:30:ca:89:11:d5:3b:e6:1b:63:bb:6b:4f:27:
3a:55:42:1d:08:7b:68:25:cd:67:a4:2d:3e:97:29:
33:2d:15:21:3c:0d:c4:f0:4d:ef:7f:f2:fe:70:a4:
69:91:32:e0:fd:6d:2f:20:40:37:5b:a8:31:20:c9:
07:57:c9:82:6b:41:3e:dc:b8:78:a4:18:59:64:62:
02:28:1d:53:a6:a3:a5:8f:eb:4d:48:10:dd:f8:fb:
fa:26:fe:fe:a1:a2:d4:50:2a:76:d7:13:9f:44:44:
5a:a9:e5:f0:95:51:00:49:6c:cf:4c:1d:fa:8c:2f:
ca:2d:b4:a1:ac:5b:8d:53:28:3c:51:c7:54:4b:d0:
d4:dd:bc:45:00:65:f9:6f:91:98:3f:73:93:47:35:
5d:03:3d:cb:db:90:55:0c:bb:c7:ad:bb:65:46:a9:
c1:e1:52:9c:00:f4:67:01:31:08:5e:76:59:c8:88:
5e:37
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
12:20:43:FD:70:DF:0D:5E:B3:1F:89:6D:40:57:A2:27:DF:CD:FB:4E
X509v3 Authority Key Identifier:
keyid:91:7A:9D:24:BF:1E:AD:6F:A4:A1:F8:FD:81:D5:31:37:EF:52:E7:84
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://repo-rpki.idnic.net/repo/1bdff819-2bad-483d-9fa8-b6ebc484031a/0/917A9D24BF1EAD6FA4A1F8FD81D53137EF52E784.crl
Authority Information Access:
CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/917A9D24BF1EAD6FA4A1F8FD81D53137EF52E784.cer
Subject Information Access:
Signed Object - URI:rsync://repo-rpki.idnic.net/repo/1bdff819-2bad-483d-9fa8-b6ebc484031a/0/917A9D24BF1EAD6FA4A1F8FD81D53137EF52E784.mft
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
8a:11:30:32:b5:c4:41:1a:c4:bb:64:21:14:ca:20:21:19:10:
ad:46:d0:17:c8:32:80:4b:34:d8:c5:74:b8:47:67:9d:a6:33:
a5:a1:22:64:5c:28:0e:3a:80:23:28:22:c7:48:5e:de:5c:19:
8f:a0:3d:16:82:46:73:6b:df:bd:b3:ab:3f:90:1f:12:a1:58:
f8:a0:88:2b:18:5c:72:0f:76:8b:24:07:2e:5c:b1:42:26:92:
33:58:1f:80:3f:95:bf:d6:c0:44:d7:8b:51:c8:9e:6c:8d:7a:
09:03:81:36:dc:f3:52:83:ac:96:67:63:ec:5f:b0:97:53:f3:
f1:77:77:ba:9e:3a:a5:14:f2:0a:4d:77:d2:69:34:7a:80:90:
cd:25:dc:97:57:06:b2:7f:04:a5:56:56:c1:9a:ee:04:93:a0:
0c:8c:1c:47:9f:e7:ee:3b:f8:eb:36:b9:b7:ff:32:c2:1d:62:
87:33:d4:a4:94:ba:1b:e4:a1:25:31:1a:0d:1f:98:db:42:36:
aa:30:e2:f5:87:25:eb:4e:75:84:b5:5b:6b:a8:4d:0f:ce:97:
58:06:62:f9:02:e7:aa:65:2b:89:11:12:77:66:26:7b:eb:9b:
fc:0b:12:3f:cd:94:b5:cd:dc:6e:d0:df:77:92:41:97:02:25:
a3:58:1e:dd
-----BEGIN CERTIFICATE-----
MIIFMjCCBBqgAwIBAgIUOmR6NsG2kfN9cHLtPBridAsLiGwwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoOTE3QTlEMjRCRjFFQUQ2RkE0QTFGOEZEODFENTMxMzdF
RjUyRTc4NDAeFw0yNjA0MjcwMjQ1NDZaFw0yNjA0MzAxMjIyNDZaMDMxMTAvBgNV
BAMTKDEyMjA0M0ZENzBERjBENUVCMzFGODk2RDQwNTdBMjI3REZDREZCNEUwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQChUt8hMypJpxy6G/+vUXAIFILR
Z8nrGQgcy5PsuW4VV5thbSxaKysq94XwtLxl1kmQrj6WcHw9s9+UyLgbrqH+UHx0
KG+Fgy6DOBlOMMqJEdU75htju2tPJzpVQh0Ie2glzWekLT6XKTMtFSE8DcTwTe9/
8v5wpGmRMuD9bS8gQDdbqDEgyQdXyYJrQT7cuHikGFlkYgIoHVOmo6WP601IEN34
+/om/v6hotRQKnbXE59ERFqp5fCVUQBJbM9MHfqML8ottKGsW41TKDxRx1RL0NTd
vEUAZflvkZg/c5NHNV0DPcvbkFUMu8etu2VGqcHhUpwA9GcBMQhedlnIiF43AgMB
AAGjggI8MIICODAdBgNVHQ4EFgQUEiBD/XDfDV6zH4ltQFeiJ9/N+04wHwYDVR0j
BBgwFoAUkXqdJL8erW+kofj9gdUxN+9S54QwDgYDVR0PAQH/BAQDAgeAMIGFBgNV
HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby8x
YmRmZjgxOS0yYmFkLTQ4M2QtOWZhOC1iNmViYzQ4NDAzMWEvMC85MTdBOUQyNEJG
MUVBRDZGQTRBMUY4RkQ4MUQ1MzEzN0VGNTJFNzg0LmNybDB0BggrBgEFBQcBAQRo
MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv
L0lETklDLUlELzIvOTE3QTlEMjRCRjFFQUQ2RkE0QTFGOEZEODFENTMxMzdFRjUy
RTc4NC5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6
Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vMWJkZmY4MTktMmJhZC00ODNkLTlm
YTgtYjZlYmM0ODQwMzFhLzAvOTE3QTlEMjRCRjFFQUQ2RkE0QTFGOEZEODFENTMx
MzdFRjUyRTc4NC5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF
BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC
BQAwDQYJKoZIhvcNAQELBQADggEBAIoRMDK1xEEaxLtkIRTKICEZEK1G0BfIMoBL
NNjFdLhHZ52mM6WhImRcKA46gCMoIsdIXt5cGY+gPRaCRnNr372zqz+QHxKhWPig
iCsYXHIPdoskBy5csUImkjNYH4A/lb/WwETXi1HInmyNegkDgTbc81KDrJZnY+xf
sJdT8/F3d7qeOqUU8gpNd9JpNHqAkM0l3JdXBrJ/BKVWVsGa7gSToAyMHEef5+47
+Os2ubf/MsIdYocz1KSUuhvkoSUxGg0fmNtCNqow4vWHJetOdYS1W2uoTQ/Ol1gG
YvkC56plK4kREndmJnvrm/wLEj/NlLXN3G7Q33eSQZcCJaNYHt0=
-----END CERTIFICATE-----
Generated at Wed Jun 3 03:22:36 2026 by rpki-client