Manifest
$ rpki-client -vvf repo-rpki.idnic.net/repo/8d46a9ca-1096-4fe4-8993-d0be97b54a76/0/35AF7B054A8CC95835EC5A2F9275004D39521553.mft
File: 35AF7B054A8CC95835EC5A2F9275004D39521553.mft (raw, json)
Hash identifier: kdj8tDM3eSTUBzW+1U0pnleIokyyV5oSCf9GAgqLu/M=
Subject key identifier: 86:03:26:C1:5F:DF:DB:06:F5:BA:EF:A8:4D:D1:17:E6:5D:48:06:9C
Authority key identifier: 35:AF:7B:05:4A:8C:C9:58:35:EC:5A:2F:92:75:00:4D:39:52:15:53
Certificate issuer: /CN=35AF7B054A8CC95835EC5A2F9275004D39521553
Certificate serial: 23F4F5EDF5863F178FFC1FFA7D8CFCB6305727E4
Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/35AF7B054A8CC95835EC5A2F9275004D39521553.cer
Subject info access: rsync://repo-rpki.idnic.net/repo/8d46a9ca-1096-4fe4-8993-d0be97b54a76/0/35AF7B054A8CC95835EC5A2F9275004D39521553.mft
Manifest number: 01F5
Signing time: Mon 27 Apr 2026 21:01:56 +0000
Manifest this update: Mon 27 Apr 2026 20:56:56 +0000
Manifest next update: Fri 01 May 2026 07:50:56 +0000
Files and hashes: 1: 35AF7B054A8CC95835EC5A2F9275004D39521553.crl (hash: BAzUgHUmsAqFOSp8vZ/2agCj1tjQVYwETndKTclTkSc=)
2: 3130332e3137332e3136342e302f32342d3234203d3e20313437303831.roa (hash: G5wKKP5D5NKHHIZXwfrSRRWwdWFA64K8RR4eUb7olLQ=)
3: 3130332e3137332e3136352e302f32342d3234203d3e20313437303831.roa (hash: YPnyu3J46S+PNDfPl4x2HfdMro8qcwKYQIJNOuw7SNM=)
4: 3130332e3137332e3136342e302f32332d3233203d3e20313437303831.roa (hash: Sa1fK6pgYDElHHofY035RXNXkmiq5pXQ+mZ92ple4FU=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
23:f4:f5:ed:f5:86:3f:17:8f:fc:1f:fa:7d:8c:fc:b6:30:57:27:e4
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=35AF7B054A8CC95835EC5A2F9275004D39521553
Validity
Not Before: Apr 27 20:56:56 2026 GMT
Not After : May 1 07:50:56 2026 GMT
Subject: CN=860326C15FDFDB06F5BAEFA84DD117E65D48069C
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:f2:9d:8d:29:5a:87:a0:5f:48:38:6f:e2:b4:16:
24:20:64:a6:99:2f:7d:35:16:56:92:08:f4:ce:32:
f1:e7:ac:29:b3:81:db:4b:5a:2f:40:65:64:0c:b9:
23:ae:99:3f:12:16:5d:5d:05:8d:6b:01:1d:cc:0c:
44:e6:14:3a:19:c2:0c:d3:b0:68:31:d9:2b:33:62:
f7:8d:d5:0e:20:01:38:93:93:53:9d:95:70:64:95:
7a:e9:4e:df:12:e0:f1:5e:5e:18:90:a3:33:bd:61:
06:b5:3e:dd:3c:d4:ec:4d:a5:b1:86:d5:ed:9e:2b:
e6:07:56:5a:26:b5:85:67:81:2e:ef:06:ce:1f:e5:
9d:6f:46:09:b7:6a:32:23:23:88:59:69:f5:30:1c:
78:da:9e:1f:80:f7:22:df:51:b2:9f:38:15:f8:c6:
88:56:5e:32:24:03:fd:6d:d9:82:ea:4b:00:d2:8d:
3c:d5:4f:f8:f5:25:4e:ba:30:91:96:cf:a5:b9:bb:
60:65:38:de:21:7c:10:39:02:f8:ff:31:8b:f7:2e:
ed:d1:a7:78:a8:c7:91:6a:b4:84:70:b0:c6:92:e0:
c4:d2:f6:ee:98:66:4b:ce:58:1c:cc:14:17:8d:e2:
ff:35:0e:8e:12:64:3a:17:d5:d1:75:2f:cc:4c:d6:
5e:93
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
86:03:26:C1:5F:DF:DB:06:F5:BA:EF:A8:4D:D1:17:E6:5D:48:06:9C
X509v3 Authority Key Identifier:
keyid:35:AF:7B:05:4A:8C:C9:58:35:EC:5A:2F:92:75:00:4D:39:52:15:53
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://repo-rpki.idnic.net/repo/8d46a9ca-1096-4fe4-8993-d0be97b54a76/0/35AF7B054A8CC95835EC5A2F9275004D39521553.crl
Authority Information Access:
CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/35AF7B054A8CC95835EC5A2F9275004D39521553.cer
Subject Information Access:
Signed Object - URI:rsync://repo-rpki.idnic.net/repo/8d46a9ca-1096-4fe4-8993-d0be97b54a76/0/35AF7B054A8CC95835EC5A2F9275004D39521553.mft
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
c1:14:eb:b0:f0:22:ac:dc:2d:31:34:c4:2d:3a:c7:bb:c4:cd:
5c:38:5c:f4:a1:21:f6:e8:28:c1:07:4e:c0:31:68:f0:80:25:
4e:49:f5:19:03:45:06:09:c6:34:c7:54:14:58:13:0e:2f:8b:
d4:aa:02:e4:1f:b9:3e:75:6e:29:90:ad:00:b7:ac:2e:9b:af:
c7:85:33:c1:aa:62:ab:d2:8a:42:13:35:7a:ef:2a:8b:7e:dc:
e7:4a:eb:23:53:ba:58:03:d8:f5:d5:ce:d4:ff:b4:50:00:77:
38:3f:c9:4b:f1:b0:ab:e4:1b:88:1e:b0:60:e2:26:98:be:d5:
ab:75:88:1b:c7:2f:b6:26:e7:8e:d0:55:5e:4c:f2:7c:3c:13:
48:9e:11:71:eb:2a:cf:db:90:e7:3e:e9:9c:ba:ff:a8:e4:c6:
8d:f6:25:72:8c:8d:c4:53:16:1e:1e:4f:89:1b:1f:c4:f2:73:
03:59:c6:ee:bd:a2:c0:cc:4c:d4:9a:2e:62:02:62:45:eb:12:
29:e5:67:fc:a8:c8:5b:ac:dc:f7:c3:2d:45:cd:40:1e:39:89:
e0:7c:61:66:db:0c:61:a7:f6:fa:78:74:5e:89:7b:23:d3:b0:
73:0f:35:91:cc:d9:58:25:38:88:5d:31:eb:00:b4:96:8d:3f:
c6:00:67:ca
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jun 3 03:37:23 2026 by rpki-client