Manifest
$ rpki-client -vvf repo-rpki.idnic.net/repo/8d8cdf5a-b9a7-4469-a653-c9ff2a003773/0/5AE57F3F97F40888F93913350A218863E705CD34.mft
File: 5AE57F3F97F40888F93913350A218863E705CD34.mft (raw, json)
Hash identifier: kAYnTB3C84qyR+VyTZjLXUPi8cWlHFixWSvq37+o8ds=
Subject key identifier: 04:D9:FF:F7:18:61:D8:57:7D:02:FB:3B:29:65:83:DE:30:3C:16:E0
Authority key identifier: 5A:E5:7F:3F:97:F4:08:88:F9:39:13:35:0A:21:88:63:E7:05:CD:34
Certificate issuer: /CN=5AE57F3F97F40888F93913350A218863E705CD34
Certificate serial: 2FAD52B5EC55DD7A4D916B978A30498D356C2D08
Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/5AE57F3F97F40888F93913350A218863E705CD34.cer
Subject info access: rsync://repo-rpki.idnic.net/repo/8d8cdf5a-b9a7-4469-a653-c9ff2a003773/0/5AE57F3F97F40888F93913350A218863E705CD34.mft
Manifest number: 02A8
Signing time: Tue 28 Apr 2026 14:41:42 +0000
Manifest this update: Tue 28 Apr 2026 14:36:42 +0000
Manifest next update: Fri 01 May 2026 23:42:42 +0000
Files and hashes: 1: 3130332e3138332e31312e302f32342d3234203d3e20313339393637.roa (hash: Aeu4h6nFmtclcSAntQ1D1feUfbui+nbdSHb/VFJyfM0=)
2: 3130332e3138332e31302e302f32342d3234203d3e20313339393637.roa (hash: YGbtlM42GpeXJWwNS5HnaEAi9mnZKsNiOe/sp7sIMh8=)
3: 5AE57F3F97F40888F93913350A218863E705CD34.crl (hash: xiRLQjyGZYwCdf6oLKo4pm9tAmJPyktGsfWnx/d/8J8=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
2f:ad:52:b5:ec:55:dd:7a:4d:91:6b:97:8a:30:49:8d:35:6c:2d:08
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5AE57F3F97F40888F93913350A218863E705CD34
Validity
Not Before: Apr 28 14:36:42 2026 GMT
Not After : May 1 23:42:42 2026 GMT
Subject: CN=04D9FFF71861D8577D02FB3B296583DE303C16E0
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a5:29:ad:05:3d:bd:6c:87:44:99:4b:f2:52:cb:
a9:78:91:c0:35:04:3a:92:15:9a:eb:b1:07:27:40:
26:43:a6:de:3a:c4:29:e9:9b:94:a8:45:bf:4b:fa:
ff:44:3d:b5:9a:57:ab:3f:29:1f:31:5f:3a:ed:a4:
cf:dc:7b:2a:8e:67:7c:57:d8:1c:3a:4c:85:8e:1e:
14:5e:53:08:25:7c:db:c5:d2:9a:9b:39:a4:3e:1d:
3d:e8:72:53:ee:ec:0c:3b:6f:d2:bd:7a:36:af:d5:
64:4f:72:27:1e:f6:56:c5:a3:3b:57:2d:a2:8a:77:
44:7c:70:08:61:e3:41:99:37:ed:1b:36:7c:bb:03:
ac:89:9d:33:dd:93:37:eb:eb:d2:0e:02:ae:8d:de:
48:61:16:c6:63:64:d8:03:23:ee:7b:fe:1f:2c:62:
18:ec:52:8f:5e:c8:3d:63:62:6e:2d:93:cf:6e:02:
95:20:a6:c2:02:2d:c1:a3:3d:af:91:20:c0:66:8b:
a5:77:c2:ba:74:50:8b:e1:82:f8:6a:72:f5:f7:a3:
89:a5:9a:13:aa:dd:bd:3f:05:a0:d0:0d:00:68:f6:
fb:a5:34:a3:19:aa:9f:af:47:45:fb:43:f9:57:81:
1b:fa:2d:d8:ac:cf:ad:85:6a:e9:92:b1:bd:c9:c2:
ad:c9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
04:D9:FF:F7:18:61:D8:57:7D:02:FB:3B:29:65:83:DE:30:3C:16:E0
X509v3 Authority Key Identifier:
keyid:5A:E5:7F:3F:97:F4:08:88:F9:39:13:35:0A:21:88:63:E7:05:CD:34
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://repo-rpki.idnic.net/repo/8d8cdf5a-b9a7-4469-a653-c9ff2a003773/0/5AE57F3F97F40888F93913350A218863E705CD34.crl
Authority Information Access:
CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/5AE57F3F97F40888F93913350A218863E705CD34.cer
Subject Information Access:
Signed Object - URI:rsync://repo-rpki.idnic.net/repo/8d8cdf5a-b9a7-4469-a653-c9ff2a003773/0/5AE57F3F97F40888F93913350A218863E705CD34.mft
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
27:7c:fd:e7:c7:2c:8b:7e:0e:7d:29:54:00:ed:7c:db:05:d6:
0f:8f:6f:fc:1e:0f:85:64:46:b1:ad:91:cc:1c:33:16:80:e1:
61:91:f0:98:94:31:da:c3:3c:13:d6:f6:3b:32:95:90:26:43:
c1:0a:a8:bb:92:c4:b0:2c:bc:dd:bf:ed:1a:6e:48:37:4c:91:
39:5b:20:95:be:02:0f:07:97:0a:67:b0:8e:cd:36:36:08:6a:
4d:9a:5e:3f:7f:0f:8f:fa:56:a1:ef:d8:6e:1a:cc:f7:57:1f:
ff:ec:01:02:9b:11:b4:f2:9f:dc:89:f9:66:65:ef:73:ea:ff:
ff:a2:f3:36:37:8d:36:bc:fd:0b:f3:96:b6:fc:d6:1c:b0:bd:
85:01:fb:0c:07:cc:c9:a0:16:11:b3:83:f4:b6:be:d8:36:13:
da:c1:fe:d4:94:a9:47:de:73:04:9d:fe:aa:8d:51:5a:37:15:
57:d5:71:47:31:f6:b7:7e:d2:b0:c6:c3:ee:41:0c:92:23:cb:
95:1c:1b:28:52:58:84:cb:66:d4:06:35:af:6f:17:58:44:dd:
75:c8:c6:89:da:76:3f:6a:4d:b9:a1:bc:c3:5f:e8:52:1f:f1:
8f:65:32:5e:82:55:47:51:d5:31:97:cf:0e:bc:08:39:d6:d4:
ab:84:b2:77
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jun 3 03:11:18 2026 by rpki-client