Manifest
$ rpki-client -vvf repo-rpki.idnic.net/repo/3ab8e60f-f993-4534-9da0-f285a8603f69/0/2AAFA81414EDCB1032235F2240FE06773F3E6F16.mft
File: 2AAFA81414EDCB1032235F2240FE06773F3E6F16.mft (raw, json)
Hash identifier: isk7/XvPbrFZrC0un4ZqE2cVPPsAROU4M/rINcAneLA=
Subject key identifier: 0F:14:C8:5A:A0:65:BC:6E:6B:F7:FF:5E:76:4C:15:12:F5:8B:EE:3A
Authority key identifier: 2A:AF:A8:14:14:ED:CB:10:32:23:5F:22:40:FE:06:77:3F:3E:6F:16
Certificate issuer: /CN=2AAFA81414EDCB1032235F2240FE06773F3E6F16
Certificate serial: 3FC1D16B433EB09BF906A69F4B3B7E15A2011B6F
Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/2AAFA81414EDCB1032235F2240FE06773F3E6F16.cer
Subject info access: rsync://repo-rpki.idnic.net/repo/3ab8e60f-f993-4534-9da0-f285a8603f69/0/2AAFA81414EDCB1032235F2240FE06773F3E6F16.mft
Manifest number: 01F5
Signing time: Mon 27 Apr 2026 16:10:47 +0000
Manifest this update: Mon 27 Apr 2026 16:05:47 +0000
Manifest next update: Fri 01 May 2026 02:55:47 +0000
Files and hashes: 1: 3130332e3137372e3231392e302f32342d3234203d3e20313331373639.roa (hash: Er3SZg2wUj/P2Phj94Rs/pKQreK157hBoR/0FApk3DI=)
2: 2AAFA81414EDCB1032235F2240FE06773F3E6F16.crl (hash: 59bN1AdGcPNj9KE58ZYmEYZZaarg7Oa9HIE7c4f3ZIA=)
3: 3130332e3137372e3231382e302f32342d3234203d3e20313331373639.roa (hash: NgiCiwYgDeYQaPatps9fGhPQzocYHvig3vWSvQTITq4=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
3f:c1:d1:6b:43:3e:b0:9b:f9:06:a6:9f:4b:3b:7e:15:a2:01:1b:6f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2AAFA81414EDCB1032235F2240FE06773F3E6F16
Validity
Not Before: Apr 27 16:05:47 2026 GMT
Not After : May 1 02:55:47 2026 GMT
Subject: CN=0F14C85AA065BC6E6BF7FF5E764C1512F58BEE3A
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:de:47:df:19:de:fd:b7:2f:bd:1f:56:e2:86:eb:
4d:88:b9:3d:e7:37:65:88:e5:bb:63:6a:ba:a5:c1:
3f:4c:96:db:66:2f:4c:2c:f7:31:c2:28:49:03:ec:
75:a8:a8:64:72:fe:50:ea:a1:f0:c1:86:1c:0b:0b:
a8:2d:e0:45:ca:e4:ce:5c:e0:d5:6f:f2:6e:5e:92:
53:65:35:88:8f:de:d6:51:63:c0:0e:10:49:ec:43:
ff:e6:79:53:ff:c0:0a:d8:e0:3d:dc:03:f0:69:3c:
37:5f:2c:80:4d:8f:76:5b:d7:33:ba:13:fe:07:55:
8a:91:5f:70:e3:39:ac:53:a7:fa:78:80:12:47:90:
82:19:45:98:cb:35:e7:75:53:38:43:7a:a1:83:54:
5d:16:92:0a:4e:0c:16:10:17:e5:8f:fb:89:24:15:
96:86:32:05:62:23:c8:2e:88:d7:38:98:37:ba:1e:
47:a3:12:61:8b:f6:77:67:25:68:2a:ca:02:ce:7e:
74:ff:8c:b5:66:e3:b2:3e:56:9d:59:b6:42:dc:d6:
7c:62:89:aa:df:8c:91:5e:78:da:2a:88:04:2d:42:
30:eb:fb:df:5a:1a:41:67:bc:91:d0:eb:a7:a6:92:
87:fc:1c:3b:ca:f4:18:b8:1b:27:e3:a8:f4:9e:ed:
0d:fd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
0F:14:C8:5A:A0:65:BC:6E:6B:F7:FF:5E:76:4C:15:12:F5:8B:EE:3A
X509v3 Authority Key Identifier:
keyid:2A:AF:A8:14:14:ED:CB:10:32:23:5F:22:40:FE:06:77:3F:3E:6F:16
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://repo-rpki.idnic.net/repo/3ab8e60f-f993-4534-9da0-f285a8603f69/0/2AAFA81414EDCB1032235F2240FE06773F3E6F16.crl
Authority Information Access:
CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/2AAFA81414EDCB1032235F2240FE06773F3E6F16.cer
Subject Information Access:
Signed Object - URI:rsync://repo-rpki.idnic.net/repo/3ab8e60f-f993-4534-9da0-f285a8603f69/0/2AAFA81414EDCB1032235F2240FE06773F3E6F16.mft
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
24:77:c7:ec:3c:e4:44:bf:98:db:84:41:01:1c:aa:6a:b0:5b:
55:cd:65:55:94:3d:b4:22:da:97:c5:39:15:b6:66:f3:9d:dd:
ec:b5:47:f7:52:db:e5:10:65:69:87:eb:6b:bf:88:f5:6a:f7:
27:d8:1f:c0:4b:9a:e7:83:66:b0:ff:10:a9:ae:53:41:f3:cd:
4b:de:49:c6:ac:06:de:2c:30:38:82:64:8a:ec:39:4d:87:68:
33:3e:4a:f2:ef:a2:9d:ef:f0:f1:73:f7:bf:f7:df:30:1b:a2:
4a:a6:85:80:91:0e:f7:69:a6:e6:a3:25:d7:21:fb:63:d8:60:
c9:af:0d:a5:31:0c:c0:c3:15:5d:a3:9e:60:3e:58:ad:57:c7:
7d:e8:67:80:05:4e:e4:09:45:8a:0c:d3:68:09:f9:08:80:0a:
58:c8:42:8d:81:87:80:8f:84:41:20:f4:cc:59:c0:8a:85:1b:
ee:0f:d2:67:91:dd:ae:20:f1:6d:59:e2:bf:8d:91:26:df:de:
23:ae:ad:d4:22:d4:08:39:43:1a:24:16:c3:78:f3:24:b8:04:
51:18:62:7f:c5:e6:b9:b0:a5:4e:7e:ba:0f:b2:0d:cd:60:94:
9b:81:9a:5a:b8:bd:9a:14:23:73:48:2f:e0:73:f6:b6:25:1e:
44:ba:2f:49
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jul 19 04:59:01 2026 by rpki-client