Manifest
$ rpki-client -vvf repo-rpki.idnic.net/repo/760e6a2d-84dc-48df-9b77-720853f47c6d/0/AF15FD8CB4E452C76B55709743614F9B5448CCDB.mft
File: AF15FD8CB4E452C76B55709743614F9B5448CCDB.mft (raw, json)
Hash identifier: 0EiZy6qwp39ixAV+gRowUsKYyc7whYLo7s1DMRAPRxs=
Subject key identifier: 20:34:2D:33:A7:A7:6E:DE:DC:F1:D4:BC:51:8B:98:17:91:4F:27:7A
Authority key identifier: AF:15:FD:8C:B4:E4:52:C7:6B:55:70:97:43:61:4F:9B:54:48:CC:DB
Certificate issuer: /CN=AF15FD8CB4E452C76B55709743614F9B5448CCDB
Certificate serial: 5F6394EB2AE2A599ACCC8DF7F888B52B7A922225
Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/AF15FD8CB4E452C76B55709743614F9B5448CCDB.cer
Subject info access: rsync://repo-rpki.idnic.net/repo/760e6a2d-84dc-48df-9b77-720853f47c6d/0/AF15FD8CB4E452C76B55709743614F9B5448CCDB.mft
Manifest number: 056A
Signing time: Mon 27 Apr 2026 17:01:21 +0000
Manifest this update: Mon 27 Apr 2026 16:56:21 +0000
Manifest next update: Fri 01 May 2026 04:24:21 +0000
Files and hashes: 1: AF15FD8CB4E452C76B55709743614F9B5448CCDB.crl (hash: Mz6seeRyx6ybAre2QQ4Kn0W9NOfAuOPzrplMsZAwjxY=)
2: 3230322e31342e39322e302f32332d3234203d3e203535363830.roa (hash: Gi5LYrKXPu/4WczeFJhBj073CRr7CsYa/Uq/0cRhCGw=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
5f:63:94:eb:2a:e2:a5:99:ac:cc:8d:f7:f8:88:b5:2b:7a:92:22:25
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=AF15FD8CB4E452C76B55709743614F9B5448CCDB
Validity
Not Before: Apr 27 16:56:21 2026 GMT
Not After : May 1 04:24:21 2026 GMT
Subject: CN=20342D33A7A76EDEDCF1D4BC518B9817914F277A
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:dc:95:72:45:27:4f:02:32:f0:3e:85:7e:d7:55:
07:5a:10:99:45:3a:fe:7a:e2:c8:81:68:e2:11:e5:
5e:fd:d8:ca:1a:fb:87:ee:90:f1:0a:ef:df:86:b6:
b6:3d:4c:e5:05:fb:9b:11:2e:f9:ab:65:07:30:f0:
29:35:92:cc:f0:51:8a:69:04:69:66:c6:51:d3:5c:
4c:82:10:c8:3d:aa:d6:51:42:26:f9:9f:76:27:e1:
9f:b2:d1:b9:42:bf:42:25:3c:a2:a0:fa:03:36:54:
60:40:df:0d:71:7c:81:a6:19:68:95:74:75:06:39:
5e:b5:80:ff:be:0c:eb:f0:06:be:84:0c:d2:03:80:
22:a0:e7:ba:2f:41:40:ef:c5:b3:90:ed:12:9c:ad:
ab:64:1f:90:d4:8d:56:40:82:55:f3:9d:85:b8:5f:
51:73:13:5a:45:4a:0f:c6:5f:a0:b9:d7:92:03:d4:
e1:e6:84:7d:16:86:02:29:29:ac:92:5a:a9:1d:b8:
b5:44:93:4b:f3:df:1a:22:07:99:ab:eb:77:0e:33:
30:fe:25:f5:a2:06:1c:0f:1c:cc:24:b8:d1:14:f7:
58:73:fe:d0:5a:d3:5e:b8:69:8a:3f:2d:23:3e:2d:
00:22:4c:b8:7b:4f:f4:67:3b:10:ae:1b:ee:38:d2:
b0:15
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
20:34:2D:33:A7:A7:6E:DE:DC:F1:D4:BC:51:8B:98:17:91:4F:27:7A
X509v3 Authority Key Identifier:
keyid:AF:15:FD:8C:B4:E4:52:C7:6B:55:70:97:43:61:4F:9B:54:48:CC:DB
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://repo-rpki.idnic.net/repo/760e6a2d-84dc-48df-9b77-720853f47c6d/0/AF15FD8CB4E452C76B55709743614F9B5448CCDB.crl
Authority Information Access:
CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/AF15FD8CB4E452C76B55709743614F9B5448CCDB.cer
Subject Information Access:
Signed Object - URI:rsync://repo-rpki.idnic.net/repo/760e6a2d-84dc-48df-9b77-720853f47c6d/0/AF15FD8CB4E452C76B55709743614F9B5448CCDB.mft
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
63:bb:28:5d:f9:d5:35:82:c4:45:47:92:d0:22:2c:04:84:f5:
68:33:93:dc:b7:ea:be:dd:b1:e7:40:a7:ef:12:25:7d:8b:cb:
c8:f6:55:8a:c6:9f:0e:de:43:e1:55:d1:6b:6c:7f:07:c0:ad:
4c:a5:21:e0:7c:32:10:f7:e5:f7:7d:81:82:1f:f6:97:dd:29:
81:97:aa:cb:b0:b6:09:97:b4:79:9e:cf:ee:a8:3f:20:03:c7:
66:17:2d:f1:e7:7c:80:b8:b5:4a:76:fe:71:7f:4a:0a:93:fe:
28:a0:8c:8b:db:69:89:72:64:d6:71:8f:21:b0:68:60:84:5a:
91:1b:e5:ba:b1:6c:48:3c:cc:39:bb:ac:77:72:6e:ec:a2:04:
3b:62:ac:1b:ca:df:2b:eb:6d:7b:32:c9:70:1d:f2:23:21:d8:
2e:bc:38:91:2b:06:db:db:ea:2a:52:93:56:fe:bd:5c:d2:6e:
1e:3b:65:91:df:49:cd:05:01:2a:e0:39:b5:cb:1b:a3:2a:1b:
44:09:db:08:6e:c4:99:01:e2:d8:96:33:3a:0e:ca:39:a7:64:
a0:66:75:4d:19:d2:46:18:e9:06:3d:d9:65:cd:4a:4f:12:08:
c1:0d:96:3f:69:85:56:e2:71:a0:f1:3c:7e:7f:be:56:d8:c7:
ff:72:c5:56
-----BEGIN CERTIFICATE-----
MIIFMjCCBBqgAwIBAgIUX2OU6yripZmszI33+Ii1K3qSIiUwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoQUYxNUZEOENCNEU0NTJDNzZCNTU3MDk3NDM2MTRGOUI1
NDQ4Q0NEQjAeFw0yNjA0MjcxNjU2MjFaFw0yNjA1MDEwNDI0MjFaMDMxMTAvBgNV
BAMTKDIwMzQyRDMzQTdBNzZFREVEQ0YxRDRCQzUxOEI5ODE3OTE0RjI3N0EwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDclXJFJ08CMvA+hX7XVQdaEJlF
Ov564siBaOIR5V792Moa+4fukPEK79+GtrY9TOUF+5sRLvmrZQcw8Ck1kszwUYpp
BGlmxlHTXEyCEMg9qtZRQib5n3Yn4Z+y0blCv0IlPKKg+gM2VGBA3w1xfIGmGWiV
dHUGOV61gP++DOvwBr6EDNIDgCKg57ovQUDvxbOQ7RKcratkH5DUjVZAglXznYW4
X1FzE1pFSg/GX6C515ID1OHmhH0WhgIpKaySWqkduLVEk0vz3xoiB5mr63cOMzD+
JfWiBhwPHMwkuNEU91hz/tBa0164aYo/LSM+LQAiTLh7T/RnOxCuG+440rAVAgMB
AAGjggI8MIICODAdBgNVHQ4EFgQUIDQtM6enbt7c8dS8UYuYF5FPJ3owHwYDVR0j
BBgwFoAUrxX9jLTkUsdrVXCXQ2FPm1RIzNswDgYDVR0PAQH/BAQDAgeAMIGFBgNV
HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby83
NjBlNmEyZC04NGRjLTQ4ZGYtOWI3Ny03MjA4NTNmNDdjNmQvMC9BRjE1RkQ4Q0I0
RTQ1MkM3NkI1NTcwOTc0MzYxNEY5QjU0NDhDQ0RCLmNybDB0BggrBgEFBQcBAQRo
MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv
L0lETklDLUlELzIvQUYxNUZEOENCNEU0NTJDNzZCNTU3MDk3NDM2MTRGOUI1NDQ4
Q0NEQi5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6
Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vNzYwZTZhMmQtODRkYy00OGRmLTli
NzctNzIwODUzZjQ3YzZkLzAvQUYxNUZEOENCNEU0NTJDNzZCNTU3MDk3NDM2MTRG
OUI1NDQ4Q0NEQi5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF
BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC
BQAwDQYJKoZIhvcNAQELBQADggEBAGO7KF351TWCxEVHktAiLASE9Wgzk9y36r7d
sedAp+8SJX2Ly8j2VYrGnw7eQ+FV0WtsfwfArUylIeB8MhD35fd9gYIf9pfdKYGX
qsuwtgmXtHmez+6oPyADx2YXLfHnfIC4tUp2/nF/SgqT/iigjIvbaYlyZNZxjyGw
aGCEWpEb5bqxbEg8zDm7rHdybuyiBDtirBvK3yvrbXsyyXAd8iMh2C68OJErBtvb
6ipSk1b+vVzSbh47ZZHfSc0FASrgObXLG6MqG0QJ2whuxJkB4tiWMzoOyjmnZKBm
dU0Z0kYY6QY92WXNSk8SCMENlj9phVbicaDxPH5/vlbYx/9yxVY=
-----END CERTIFICATE-----
Generated at Wed Jun 3 03:07:58 2026 by rpki-client