
Manifest
$ rpki-client -vvf repo-rpki.idnic.net/repo/32a98c8b-cad9-49e1-b178-1daf3b62ef59/0/F520C5AEC051FBD03954D15F7A52EAB852DC4D63.mft
File: F520C5AEC051FBD03954D15F7A52EAB852DC4D63.mft (raw, json)
Hash identifier: tL3JM7MePMWhhDwVsN14oDoxDKZfuFRHU088g3Ib+xU=
Subject key identifier: A5:47:D8:3F:D1:C3:45:F3:01:99:EE:0D:EE:10:B9:44:35:F5:70:82
Authority key identifier: F5:20:C5:AE:C0:51:FB:D0:39:54:D1:5F:7A:52:EA:B8:52:DC:4D:63
Certificate issuer: /CN=F520C5AEC051FBD03954D15F7A52EAB852DC4D63
Certificate serial: 3DB97839F99121CCAA9E5950AFC14A85F24E15D9
Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/F520C5AEC051FBD03954D15F7A52EAB852DC4D63.cer
Subject info access: rsync://repo-rpki.idnic.net/repo/32a98c8b-cad9-49e1-b178-1daf3b62ef59/0/F520C5AEC051FBD03954D15F7A52EAB852DC4D63.mft
Manifest number: 0569
Signing time: Tue 28 Apr 2026 00:30:54 +0000
Manifest this update: Tue 28 Apr 2026 00:25:54 +0000
Manifest next update: Fri 01 May 2026 05:26:54 +0000
Files and hashes: 1: F520C5AEC051FBD03954D15F7A52EAB852DC4D63.crl (hash: 3rAAozFIE1ERo50iNLKgl7Jg9Yvq/NJDvupbnPrN7H8=)
2: 3130332e3134322e3230302e302f32332d3234203d3e20313339333739.roa (hash: CW38hcQKuGx3OYMIBYq8S0wTy4MYcrKf3ZrGBJO/Jz8=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
3d:b9:78:39:f9:91:21:cc:aa:9e:59:50:af:c1:4a:85:f2:4e:15:d9
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F520C5AEC051FBD03954D15F7A52EAB852DC4D63
Validity
Not Before: Apr 28 00:25:54 2026 GMT
Not After : May 1 05:26:54 2026 GMT
Subject: CN=A547D83FD1C345F30199EE0DEE10B94435F57082
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bf:31:58:96:1c:0d:02:fc:37:8d:68:df:df:5f:
bd:78:0b:71:73:e4:c7:6b:1b:1b:df:3c:1c:55:4a:
b4:ee:bb:6c:39:8e:92:f2:33:29:9e:d7:4d:93:8a:
89:36:83:a2:37:ce:9c:f1:46:a0:c6:e0:31:03:d3:
05:08:6c:37:60:ab:df:d6:cd:4b:15:33:65:d9:51:
48:14:31:89:0c:b0:37:37:a7:98:58:d6:0b:d7:fb:
5f:04:e2:c7:50:38:50:5d:8a:53:e8:e4:14:e2:8a:
91:88:f1:06:aa:cc:9a:ca:71:ee:f6:f2:2c:bb:65:
bc:9c:e8:a0:11:b7:75:62:78:ca:07:3e:bd:ee:7b:
89:2c:9f:f5:bf:7c:95:b7:81:6d:24:79:26:0a:4f:
bb:45:bb:62:42:f3:da:53:70:c7:3a:7d:47:35:a1:
10:bc:ca:06:c4:b5:a9:80:89:7f:14:fb:e5:53:b0:
06:a3:0c:c8:60:9b:c5:fa:41:3e:11:99:f0:69:8f:
7c:f1:89:ed:e6:08:23:1c:8e:98:cd:6c:1c:e2:c8:
7b:e1:dd:26:33:68:c9:69:9d:23:82:84:b2:d3:fd:
8d:53:a4:d9:40:35:e8:44:13:50:81:2f:96:61:0d:
71:4d:77:c0:1d:27:44:05:5b:59:ca:6f:ad:e5:e3:
32:2b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A5:47:D8:3F:D1:C3:45:F3:01:99:EE:0D:EE:10:B9:44:35:F5:70:82
X509v3 Authority Key Identifier:
keyid:F5:20:C5:AE:C0:51:FB:D0:39:54:D1:5F:7A:52:EA:B8:52:DC:4D:63
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://repo-rpki.idnic.net/repo/32a98c8b-cad9-49e1-b178-1daf3b62ef59/0/F520C5AEC051FBD03954D15F7A52EAB852DC4D63.crl
Authority Information Access:
CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/F520C5AEC051FBD03954D15F7A52EAB852DC4D63.cer
Subject Information Access:
Signed Object - URI:rsync://repo-rpki.idnic.net/repo/32a98c8b-cad9-49e1-b178-1daf3b62ef59/0/F520C5AEC051FBD03954D15F7A52EAB852DC4D63.mft
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
a0:1b:c4:05:e2:f6:d6:86:d7:ac:db:e7:a0:d5:70:3b:2e:1d:
5b:14:89:49:6a:b0:13:d5:1f:b5:9a:96:43:1c:19:54:09:71:
6e:a6:ff:ae:77:44:10:7d:a4:3f:3a:51:26:96:fe:f2:0a:5b:
9e:8e:5f:5d:1c:78:3b:8a:fd:96:0f:9d:35:d5:d3:5c:ba:40:
89:d7:f4:79:fd:a2:1d:ca:ac:6e:f9:bd:d0:b6:83:93:7f:00:
c0:95:91:31:0b:b4:38:7c:36:0d:f7:f6:54:5a:47:a3:a3:36:
60:96:aa:3a:23:9b:cb:15:ac:ce:c6:ab:b5:29:a9:6a:55:72:
82:8f:30:b7:48:ce:fb:03:d7:1a:06:f9:da:54:8b:dc:f9:b1:
55:bc:24:87:19:fc:69:f3:2a:ac:cf:d4:18:74:66:6e:22:da:
7b:e6:04:ff:f0:10:47:cc:28:9d:80:06:96:c9:b2:0c:2b:3a:
75:c5:da:a9:58:98:5d:66:1c:8a:94:18:58:6d:bd:56:ba:c3:
fd:71:ba:d1:f2:56:8d:66:dd:9c:22:2d:bc:48:12:15:a8:e6:
17:71:f9:7c:8e:3f:95:16:02:14:39:60:ef:9d:50:d3:26:42:
f0:d2:96:58:a7:e5:c7:12:1a:5d:92:32:e6:9d:ad:25:60:fa:
8a:11:54:d4
-----BEGIN CERTIFICATE-----
MIIFMjCCBBqgAwIBAgIUPbl4OfmRIcyqnllQr8FKhfJOFdkwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoRjUyMEM1QUVDMDUxRkJEMDM5NTREMTVGN0E1MkVBQjg1
MkRDNEQ2MzAeFw0yNjA0MjgwMDI1NTRaFw0yNjA1MDEwNTI2NTRaMDMxMTAvBgNV
BAMTKEE1NDdEODNGRDFDMzQ1RjMwMTk5RUUwREVFMTBCOTQ0MzVGNTcwODIwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC/MViWHA0C/DeNaN/fX714C3Fz
5MdrGxvfPBxVSrTuu2w5jpLyMyme102Tiok2g6I3zpzxRqDG4DED0wUIbDdgq9/W
zUsVM2XZUUgUMYkMsDc3p5hY1gvX+18E4sdQOFBdilPo5BTiipGI8QaqzJrKce72
8iy7Zbyc6KARt3VieMoHPr3ue4ksn/W/fJW3gW0keSYKT7tFu2JC89pTcMc6fUc1
oRC8ygbEtamAiX8U++VTsAajDMhgm8X6QT4RmfBpj3zxie3mCCMcjpjNbBziyHvh
3SYzaMlpnSOChLLT/Y1TpNlANehEE1CBL5ZhDXFNd8AdJ0QFW1nKb63l4zIrAgMB
AAGjggI8MIICODAdBgNVHQ4EFgQUpUfYP9HDRfMBme4N7hC5RDX1cIIwHwYDVR0j
BBgwFoAU9SDFrsBR+9A5VNFfelLquFLcTWMwDgYDVR0PAQH/BAQDAgeAMIGFBgNV
HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby8z
MmE5OGM4Yi1jYWQ5LTQ5ZTEtYjE3OC0xZGFmM2I2MmVmNTkvMC9GNTIwQzVBRUMw
NTFGQkQwMzk1NEQxNUY3QTUyRUFCODUyREM0RDYzLmNybDB0BggrBgEFBQcBAQRo
MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv
L0lETklDLUlELzIvRjUyMEM1QUVDMDUxRkJEMDM5NTREMTVGN0E1MkVBQjg1MkRD
NEQ2My5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6
Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vMzJhOThjOGItY2FkOS00OWUxLWIx
NzgtMWRhZjNiNjJlZjU5LzAvRjUyMEM1QUVDMDUxRkJEMDM5NTREMTVGN0E1MkVB
Qjg1MkRDNEQ2My5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF
BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC
BQAwDQYJKoZIhvcNAQELBQADggEBAKAbxAXi9taG16zb56DVcDsuHVsUiUlqsBPV
H7WalkMcGVQJcW6m/653RBB9pD86USaW/vIKW56OX10ceDuK/ZYPnTXV01y6QInX
9Hn9oh3KrG75vdC2g5N/AMCVkTELtDh8Ng339lRaR6OjNmCWqjojm8sVrM7Gq7Up
qWpVcoKPMLdIzvsD1xoG+dpUi9z5sVW8JIcZ/GnzKqzP1Bh0Zm4i2nvmBP/wEEfM
KJ2ABpbJsgwrOnXF2qlYmF1mHIqUGFhtvVa6w/1xutHyVo1m3ZwiLbxIEhWo5hdx
+XyOP5UWAhQ5YO+dUNMmQvDSllin5ccSGl2SMuadrSVg+ooRVNQ=
-----END CERTIFICATE-----
Generated at Wed Jun 3 03:10:48 2026 by rpki-client