Manifest
$ rpki-client -vvf repo-rpki.idnic.net/repo/947c6ecb-0bae-45c3-aada-43a6a171c046/0/0AFD8F6B02405F4DE9A946840CC5AE2E6AC8E40C.mft
File: 0AFD8F6B02405F4DE9A946840CC5AE2E6AC8E40C.mft (raw, json)
Hash identifier: gls8mrxQ6HrsK6PJzY618FH65skpTuk/4d331Boems0=
Subject key identifier: B5:59:0F:60:91:BD:B8:17:B1:48:61:FB:8B:55:7B:CE:1D:60:E2:CB
Authority key identifier: 0A:FD:8F:6B:02:40:5F:4D:E9:A9:46:84:0C:C5:AE:2E:6A:C8:E4:0C
Certificate issuer: /CN=0AFD8F6B02405F4DE9A946840CC5AE2E6AC8E40C
Certificate serial: 74A7628AC16472B5804B9B5192A1A277B2C1FE01
Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/0AFD8F6B02405F4DE9A946840CC5AE2E6AC8E40C.cer
Subject info access: rsync://repo-rpki.idnic.net/repo/947c6ecb-0bae-45c3-aada-43a6a171c046/0/0AFD8F6B02405F4DE9A946840CC5AE2E6AC8E40C.mft
Manifest number: 04C9
Signing time: Tue 28 Apr 2026 09:20:03 +0000
Manifest this update: Tue 28 Apr 2026 09:15:03 +0000
Manifest next update: Fri 01 May 2026 21:03:03 +0000
Files and hashes: 1: 0AFD8F6B02405F4DE9A946840CC5AE2E6AC8E40C.crl (hash: Dc/oWea/WW4d2RDd6oa9hX+Kz+96VMJvlH6YQbZBjs8=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
74:a7:62:8a:c1:64:72:b5:80:4b:9b:51:92:a1:a2:77:b2:c1:fe:01
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0AFD8F6B02405F4DE9A946840CC5AE2E6AC8E40C
Validity
Not Before: Apr 28 09:15:03 2026 GMT
Not After : May 1 21:03:03 2026 GMT
Subject: CN=B5590F6091BDB817B14861FB8B557BCE1D60E2CB
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d9:43:6c:56:71:e3:44:57:bf:b1:a3:50:31:f7:
31:22:4e:a3:3d:6b:7d:e0:e8:b4:30:3d:8f:ef:aa:
9d:81:eb:09:a7:0c:6e:a1:98:a5:ff:36:83:41:8c:
f2:fc:bc:ea:d2:e4:40:e0:69:3b:b4:98:8b:68:05:
c1:6b:b3:06:3d:90:bb:b9:bc:7c:6e:fa:4c:9a:9c:
4d:dd:2f:1e:c5:40:82:22:2c:79:00:55:01:f2:41:
80:53:e7:81:f2:af:df:4e:04:9a:05:fc:3d:16:59:
da:0f:e4:db:a5:30:f6:47:38:53:7b:f4:a6:fa:97:
61:de:e4:ee:58:a6:fe:f4:11:1a:eb:7e:f1:b4:db:
71:94:76:c7:d4:e3:c4:e5:5d:b0:1b:e2:6d:0b:6a:
4e:c1:c0:09:01:af:aa:71:68:f4:c5:46:90:92:c4:
bd:72:f9:cc:3f:e6:b2:e7:2b:35:32:5d:f9:3a:9e:
55:6c:fe:dd:bb:bb:1a:e7:21:f2:14:d0:ca:3c:a3:
83:5d:6f:d4:f7:60:46:5c:5c:79:eb:9f:5c:12:8f:
f7:bd:fb:22:06:5d:50:fa:ef:4c:b5:06:55:b1:55:
6c:48:bc:09:0e:d4:6a:d6:e9:0e:58:07:c1:af:35:
7a:5b:47:dc:d1:49:d1:0c:c6:a8:4d:22:ad:b8:ad:
c1:c7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B5:59:0F:60:91:BD:B8:17:B1:48:61:FB:8B:55:7B:CE:1D:60:E2:CB
X509v3 Authority Key Identifier:
keyid:0A:FD:8F:6B:02:40:5F:4D:E9:A9:46:84:0C:C5:AE:2E:6A:C8:E4:0C
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://repo-rpki.idnic.net/repo/947c6ecb-0bae-45c3-aada-43a6a171c046/0/0AFD8F6B02405F4DE9A946840CC5AE2E6AC8E40C.crl
Authority Information Access:
CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/0AFD8F6B02405F4DE9A946840CC5AE2E6AC8E40C.cer
Subject Information Access:
Signed Object - URI:rsync://repo-rpki.idnic.net/repo/947c6ecb-0bae-45c3-aada-43a6a171c046/0/0AFD8F6B02405F4DE9A946840CC5AE2E6AC8E40C.mft
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
3e:74:04:6f:89:a5:06:3d:e6:4a:ef:15:9b:e5:26:fb:ee:51:
03:a7:59:87:c1:48:5f:4b:78:cd:df:f7:6a:37:7d:f0:fe:9f:
60:73:3c:2b:7b:95:69:98:24:ef:ea:dd:7c:90:6c:78:a4:27:
4d:03:08:75:1c:13:bd:b6:e4:00:97:d1:9f:53:ac:59:75:2a:
df:1e:41:45:50:bd:a1:52:59:d0:21:8b:f3:c5:a7:a1:4f:c8:
ea:0b:53:5b:49:a3:7d:79:0d:f5:94:a0:b3:6a:0b:c0:10:4f:
07:a3:da:ca:3c:a1:1e:36:45:20:f9:2d:38:95:7d:c7:43:7d:
c0:bc:c7:8c:7d:c0:5f:0e:b5:a6:45:a2:c3:ca:7d:27:91:25:
2a:e1:1e:23:f4:9a:88:d5:1b:ad:fe:21:ed:92:2b:93:13:61:
e5:41:b3:0d:53:9e:32:1f:ff:43:c3:11:25:77:f9:11:ff:f1:
f5:9f:c7:93:2f:6c:bf:ca:51:13:7d:37:49:18:ac:84:91:64:
74:c1:e2:6d:39:d5:71:4e:c8:f7:ad:2f:8e:08:48:de:1f:e0:
42:8f:e8:a9:87:d1:67:43:9b:14:fd:eb:75:e6:ba:33:72:dc:
86:e5:76:62:17:70:b4:3d:a3:9d:d1:03:10:fa:64:ad:cc:15:
2d:1b:89:28
-----BEGIN CERTIFICATE-----
MIIFMjCCBBqgAwIBAgIUdKdiisFkcrWAS5tRkqGid7LB/gEwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoMEFGRDhGNkIwMjQwNUY0REU5QTk0Njg0MENDNUFFMkU2
QUM4RTQwQzAeFw0yNjA0MjgwOTE1MDNaFw0yNjA1MDEyMTAzMDNaMDMxMTAvBgNV
BAMTKEI1NTkwRjYwOTFCREI4MTdCMTQ4NjFGQjhCNTU3QkNFMUQ2MEUyQ0IwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDZQ2xWceNEV7+xo1Ax9zEiTqM9
a33g6LQwPY/vqp2B6wmnDG6hmKX/NoNBjPL8vOrS5EDgaTu0mItoBcFrswY9kLu5
vHxu+kyanE3dLx7FQIIiLHkAVQHyQYBT54Hyr99OBJoF/D0WWdoP5NulMPZHOFN7
9Kb6l2He5O5Ypv70ERrrfvG023GUdsfU48TlXbAb4m0Lak7BwAkBr6pxaPTFRpCS
xL1y+cw/5rLnKzUyXfk6nlVs/t27uxrnIfIU0Mo8o4Ndb9T3YEZcXHnrn1wSj/e9
+yIGXVD670y1BlWxVWxIvAkO1GrW6Q5YB8GvNXpbR9zRSdEMxqhNIq24rcHHAgMB
AAGjggI8MIICODAdBgNVHQ4EFgQUtVkPYJG9uBexSGH7i1V7zh1g4sswHwYDVR0j
BBgwFoAUCv2PawJAX03pqUaEDMWuLmrI5AwwDgYDVR0PAQH/BAQDAgeAMIGFBgNV
HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby85
NDdjNmVjYi0wYmFlLTQ1YzMtYWFkYS00M2E2YTE3MWMwNDYvMC8wQUZEOEY2QjAy
NDA1RjRERTlBOTQ2ODQwQ0M1QUUyRTZBQzhFNDBDLmNybDB0BggrBgEFBQcBAQRo
MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv
L0lETklDLUlELzIvMEFGRDhGNkIwMjQwNUY0REU5QTk0Njg0MENDNUFFMkU2QUM4
RTQwQy5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6
Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vOTQ3YzZlY2ItMGJhZS00NWMzLWFh
ZGEtNDNhNmExNzFjMDQ2LzAvMEFGRDhGNkIwMjQwNUY0REU5QTk0Njg0MENDNUFF
MkU2QUM4RTQwQy5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF
BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC
BQAwDQYJKoZIhvcNAQELBQADggEBAD50BG+JpQY95krvFZvlJvvuUQOnWYfBSF9L
eM3f92o3ffD+n2BzPCt7lWmYJO/q3XyQbHikJ00DCHUcE7225ACX0Z9TrFl1Kt8e
QUVQvaFSWdAhi/PFp6FPyOoLU1tJo315DfWUoLNqC8AQTwej2so8oR42RSD5LTiV
fcdDfcC8x4x9wF8OtaZFosPKfSeRJSrhHiP0mojVG63+Ie2SK5MTYeVBsw1TnjIf
/0PDESV3+RH/8fWfx5MvbL/KURN9N0kYrISRZHTB4m051XFOyPetL44ISN4f4EKP
6KmH0WdDmxT963XmujNy3IbldmIXcLQ9o53RAxD6ZK3MFS0biSg=
-----END CERTIFICATE-----
Generated at Wed Jun 3 03:08:35 2026 by rpki-client