Manifest
$ rpki-client -vvf repo-rpki.idnic.net/repo/2565a1cf-2950-47dc-a212-f653b8c3f5a9/0/AFCF00A90B7E9EA1E30182B0BFF934BE4DC0971C.mft
File: AFCF00A90B7E9EA1E30182B0BFF934BE4DC0971C.mft (raw, json)
Hash identifier: uonL7tjIdMA007DpdYxSNg5nBqFbkceG2yobptOBcJk=
Subject key identifier: F8:B4:58:2D:89:90:DD:6F:97:21:80:7A:88:52:B5:FA:DD:F2:89:E1
Authority key identifier: AF:CF:00:A9:0B:7E:9E:A1:E3:01:82:B0:BF:F9:34:BE:4D:C0:97:1C
Certificate issuer: /CN=AFCF00A90B7E9EA1E30182B0BFF934BE4DC0971C
Certificate serial: 3887682B4F2F7C42A7C0EB5086F8A707A3CE8AE4
Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/AFCF00A90B7E9EA1E30182B0BFF934BE4DC0971C.cer
Subject info access: rsync://repo-rpki.idnic.net/repo/2565a1cf-2950-47dc-a212-f653b8c3f5a9/0/AFCF00A90B7E9EA1E30182B0BFF934BE4DC0971C.mft
Manifest number: 0244
Signing time: Tue 28 Apr 2026 19:20:44 +0000
Manifest this update: Tue 28 Apr 2026 19:15:44 +0000
Manifest next update: Fri 01 May 2026 22:13:44 +0000
Files and hashes: 1: 3130332e33302e3231322e302f32342d3234203d3e20313530313838.roa (hash: zbn7bS7zn2tJjes0380O9wZ4ybsEKzCS4tMfNtC1rmk=)
2: AFCF00A90B7E9EA1E30182B0BFF934BE4DC0971C.crl (hash: c1ap8v6uQmk63J0hbhMVpduT8Wy1rJ60nnm2FOVxgdI=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
38:87:68:2b:4f:2f:7c:42:a7:c0:eb:50:86:f8:a7:07:a3:ce:8a:e4
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=AFCF00A90B7E9EA1E30182B0BFF934BE4DC0971C
Validity
Not Before: Apr 28 19:15:44 2026 GMT
Not After : May 1 22:13:44 2026 GMT
Subject: CN=F8B4582D8990DD6F9721807A8852B5FADDF289E1
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:f1:de:19:4e:04:41:f1:0b:f0:56:ba:02:9b:8b:
8a:96:de:4b:b5:18:ac:89:f6:22:06:e3:9b:fe:d2:
4b:3b:1a:46:05:dd:d3:9b:fe:9a:de:ff:ed:cd:0a:
45:1f:1a:9a:f7:f8:20:fb:a3:69:bc:84:89:53:9f:
58:d2:83:95:6e:b8:e9:2e:20:81:ae:7d:33:18:30:
ad:cb:16:b0:dd:16:41:9b:fa:26:a2:29:88:05:18:
aa:15:26:ab:83:56:15:84:2f:94:06:71:0d:f2:4f:
91:2b:55:0d:f7:d8:53:89:e7:63:45:cd:6c:8a:1c:
6c:4c:e4:25:d3:9e:0c:5c:f2:23:6a:cf:1d:e1:6d:
cb:b3:2f:d4:bd:ee:89:97:8b:03:c0:83:09:50:83:
18:08:5e:24:c0:a8:3c:4b:6e:b5:b4:20:4b:66:0b:
17:8e:04:6f:4c:1d:e3:73:58:f4:c6:5a:1a:a8:a3:
42:7d:76:63:f6:f2:6d:e1:2e:b8:e8:0f:ff:60:d0:
59:1f:07:b8:85:35:d2:5d:8b:17:aa:1e:d6:00:9f:
f4:96:ba:2c:92:64:98:d4:11:3e:73:8e:1f:8d:e6:
81:c2:1c:48:b2:18:56:bb:54:71:ad:62:e8:90:25:
3b:4f:11:be:e8:32:d1:da:05:b7:68:90:71:ed:c6:
2d:9f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F8:B4:58:2D:89:90:DD:6F:97:21:80:7A:88:52:B5:FA:DD:F2:89:E1
X509v3 Authority Key Identifier:
keyid:AF:CF:00:A9:0B:7E:9E:A1:E3:01:82:B0:BF:F9:34:BE:4D:C0:97:1C
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://repo-rpki.idnic.net/repo/2565a1cf-2950-47dc-a212-f653b8c3f5a9/0/AFCF00A90B7E9EA1E30182B0BFF934BE4DC0971C.crl
Authority Information Access:
CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/AFCF00A90B7E9EA1E30182B0BFF934BE4DC0971C.cer
Subject Information Access:
Signed Object - URI:rsync://repo-rpki.idnic.net/repo/2565a1cf-2950-47dc-a212-f653b8c3f5a9/0/AFCF00A90B7E9EA1E30182B0BFF934BE4DC0971C.mft
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
61:45:e7:5d:dc:d7:b3:ba:07:5a:af:59:b8:ef:08:44:ed:19:
88:2a:41:9b:33:5e:1a:3e:26:e8:fb:45:9a:83:c1:47:8d:cb:
99:d7:73:85:8f:7b:67:cf:ca:47:cf:4b:c4:19:cf:24:b3:11:
b7:80:68:cf:48:9d:30:64:d5:d6:96:4a:4d:52:8d:6c:45:35:
b8:b0:a6:d9:de:bf:c8:10:2e:cd:ca:9b:f7:3f:bd:2b:1f:3d:
74:92:05:21:56:d2:80:7d:d2:dc:00:8f:8a:47:14:3a:3b:cd:
46:2a:0c:cb:94:24:6b:0d:aa:fe:bf:39:87:62:f1:d3:00:6a:
f0:0e:5c:2d:e8:db:11:b7:b2:37:16:4f:dd:e5:d1:ce:78:1c:
3b:b1:fe:16:37:bb:a3:0e:91:91:d8:c7:8b:d4:a4:33:f4:53:
5b:a8:9f:b8:fc:82:b6:4d:85:ea:7a:13:d9:31:6f:e5:13:a6:
e3:3b:c8:86:1c:9a:7e:ea:09:5b:ad:3b:5c:36:57:11:c6:31:
5f:e2:16:1b:be:25:c5:18:e3:cd:cf:e0:08:c8:e4:73:ec:b3:
d3:0a:f4:c2:4c:78:9f:01:57:e4:ec:31:27:29:ed:a5:b5:3c:
47:a2:6e:3a:4e:8e:94:6c:c8:96:f7:ca:cc:39:11:d9:36:13:
f2:04:ad:54
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jun 3 03:09:05 2026 by rpki-client