Manifest
$ rpki-client -vvf repo-rpki.idnic.net/repo/3521e5ee-5882-4943-b408-43c37582fb0b/0/9AF96929E0E99A4F2539BB15137093D976C714CB.mft
File: 9AF96929E0E99A4F2539BB15137093D976C714CB.mft (raw, json)
Hash identifier: Pa9RMG83m98cmWPYcC5Fk+z8sYllbXFegRCYLFJKt6c=
Subject key identifier: 09:99:84:CD:A3:7B:BF:05:2F:4E:10:E0:D2:B4:A9:6B:AB:C4:48:58
Authority key identifier: 9A:F9:69:29:E0:E9:9A:4F:25:39:BB:15:13:70:93:D9:76:C7:14:CB
Certificate issuer: /CN=9AF96929E0E99A4F2539BB15137093D976C714CB
Certificate serial: 5A6015F222390FDABAE0E2F8C3EF58828C19225F
Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/9AF96929E0E99A4F2539BB15137093D976C714CB.cer
Subject info access: rsync://repo-rpki.idnic.net/repo/3521e5ee-5882-4943-b408-43c37582fb0b/0/9AF96929E0E99A4F2539BB15137093D976C714CB.mft
Manifest number: 0131
Signing time: Mon 27 Apr 2026 16:01:39 +0000
Manifest this update: Mon 27 Apr 2026 15:56:39 +0000
Manifest next update: Thu 30 Apr 2026 22:11:39 +0000
Files and hashes: 1: 9AF96929E0E99A4F2539BB15137093D976C714CB.crl (hash: 4dNZq6LdwJjriATSzthx6durLM8FfbEJcBnoMKc6PmA=)
2: 323030313a6466323a376663303a3a2f34382d3438203d3e20313530323432.roa (hash: PKj0WK8pf4QdFJ+CkI5GYHiybnyFECrITFlLo832xp0=)
3: 3130332e37362e39312e302f32342d3234203d3e20313530323432.roa (hash: wM8ptEx5VzpJAkgomjWfqQCemS5MC3YGyuW+QXx91Cw=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
5a:60:15:f2:22:39:0f:da:ba:e0:e2:f8:c3:ef:58:82:8c:19:22:5f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=9AF96929E0E99A4F2539BB15137093D976C714CB
Validity
Not Before: Apr 27 15:56:39 2026 GMT
Not After : Apr 30 22:11:39 2026 GMT
Subject: CN=099984CDA37BBF052F4E10E0D2B4A96BABC44858
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d4:eb:97:8a:8d:c6:14:cb:6e:5d:b4:23:b5:99:
f6:2b:3b:0c:ae:13:9d:d1:70:48:7c:e1:93:b1:54:
87:52:d3:a6:90:51:a4:1a:b9:03:03:1f:4e:cc:b2:
55:f9:03:22:54:30:29:9e:23:49:a5:96:0e:40:f6:
95:79:0a:27:b1:f3:94:4d:6e:38:75:24:a2:73:24:
40:e8:16:b7:31:fe:e4:54:91:f1:22:d1:d1:e1:c3:
0b:15:f5:d9:4c:c6:a7:12:03:ea:b9:c7:5e:5c:77:
06:27:a7:ac:01:65:c9:8a:50:38:12:21:c2:3d:a0:
99:e6:56:7c:93:dc:79:c7:78:8d:05:45:4d:76:73:
b7:fd:95:1c:5d:3e:c7:1c:4c:aa:6d:17:e2:13:ba:
31:ef:fa:80:85:9b:38:56:b4:b5:6a:00:e5:34:4c:
3d:64:5a:78:d7:81:29:3a:ac:74:71:0f:67:c9:29:
3c:3e:bd:30:d1:8a:d5:f3:b0:f1:2e:88:40:a2:f7:
8b:a7:7a:e1:4c:94:2f:6c:f6:d0:37:d9:65:31:16:
f7:37:a2:40:56:58:14:0e:4e:08:09:1b:49:5a:7e:
44:35:8c:09:c7:59:2e:b8:a9:ec:c7:38:61:5b:8f:
b1:75:a1:98:14:ec:e3:12:54:03:7b:51:23:52:4f:
3a:05
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
09:99:84:CD:A3:7B:BF:05:2F:4E:10:E0:D2:B4:A9:6B:AB:C4:48:58
X509v3 Authority Key Identifier:
keyid:9A:F9:69:29:E0:E9:9A:4F:25:39:BB:15:13:70:93:D9:76:C7:14:CB
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://repo-rpki.idnic.net/repo/3521e5ee-5882-4943-b408-43c37582fb0b/0/9AF96929E0E99A4F2539BB15137093D976C714CB.crl
Authority Information Access:
CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/9AF96929E0E99A4F2539BB15137093D976C714CB.cer
Subject Information Access:
Signed Object - URI:rsync://repo-rpki.idnic.net/repo/3521e5ee-5882-4943-b408-43c37582fb0b/0/9AF96929E0E99A4F2539BB15137093D976C714CB.mft
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
8a:b0:68:be:f9:1b:4a:09:fc:8a:27:0c:46:ef:19:1f:12:b6:
57:23:86:c9:78:73:2c:e8:64:e6:b1:77:f8:66:dd:16:86:70:
32:4b:c7:87:a1:41:f6:c3:f7:0c:0d:7d:5e:b0:6e:91:b9:43:
c5:17:a8:da:e8:d9:92:f7:91:f2:08:54:f9:69:0c:0b:72:0b:
05:fb:c3:6c:cb:3a:02:61:31:26:d2:ff:33:82:93:18:ae:b3:
45:71:87:4d:a6:3d:86:84:b9:9d:76:c1:d1:f5:ee:94:ea:41:
30:0b:99:bb:c7:07:d6:50:69:06:ef:99:7d:db:6d:0e:b3:91:
54:69:69:7f:4a:fa:7f:db:18:b9:3e:45:64:9c:e8:0d:67:9c:
bb:2c:1a:a5:d3:a0:5f:68:8c:4e:f6:0e:d8:56:04:01:51:12:
b6:79:36:8b:13:35:07:26:5f:27:be:4a:d4:5f:e4:d6:c4:57:
f5:46:a5:46:93:c9:77:bc:f4:fc:7b:d0:0d:cc:47:ca:8d:44:
ce:7a:4b:a5:d4:68:ed:72:bc:79:8b:6c:bb:d6:b4:01:ea:f1:
a0:46:9a:02:00:5e:5e:5f:9f:70:c5:a9:c5:c8:c1:b4:a4:d2:
a9:8f:3d:34:94:93:e0:e1:4e:0a:77:bb:d9:d8:53:a4:60:88:
28:1a:fa:55
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jun 3 03:09:10 2026 by rpki-client