
$ rpki-client -vvf repo-rpki.idnic.net/repo/96124329-ec20-4460-ac31-9c36cf94f3fb/0/8AFEBB51D00C8E06AAEA842E0C0CFFC2CAB9610F.mft
File: 8AFEBB51D00C8E06AAEA842E0C0CFFC2CAB9610F.mft (raw, json)
Hash identifier: Y9errcyFLTPan0pS/pAu9KgJO7aDiWiKrUByw3XoCQ8=
Subject key identifier: 59:2A:BB:49:E6:DF:72:8A:2B:0D:F8:D1:9F:7F:BE:55:B3:7B:0D:66
Authority key identifier: 8A:FE:BB:51:D0:0C:8E:06:AA:EA:84:2E:0C:0C:FF:C2:CA:B9:61:0F
Certificate issuer: /CN=8AFEBB51D00C8E06AAEA842E0C0CFFC2CAB9610F
Certificate serial: 68E14BF087718ACCC7133BF72C2A090DD08DC8CA
Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/8AFEBB51D00C8E06AAEA842E0C0CFFC2CAB9610F.cer
Subject info access: rsync://repo-rpki.idnic.net/repo/96124329-ec20-4460-ac31-9c36cf94f3fb/0/8AFEBB51D00C8E06AAEA842E0C0CFFC2CAB9610F.mft
Manifest number: 0584
Signing time: Tue 28 Apr 2026 08:03:11 +0000
Manifest this update: Tue 28 Apr 2026 07:58:11 +0000
Manifest next update: Fri 01 May 2026 12:49:11 +0000
Files and hashes: 1: 3231302e3234372e3234332e302f32342d3234203d3e20313331373435.roa (hash: lzhEeQ6DAkKFZoSDXb/ij7h8jtExSjFLGzcvwIopMPE=)
2: 3231302e3234372e3234372e302f32342d3234203d3e20313331373435.roa (hash: exFF47IhXFNrUrw6HPUoTvZWZdOLZc/bApdp77HMNNg=)
3: 3231302e3234372e3234342e302f32342d3234203d3e20313331373435.roa (hash: dBLrElsxS7m32RqtK+bS83Eb5ZTI1r6yldhEY0SWU34=)
4: 323430363a376530303a35393a3a2f34382d3438203d3e20313430343035.roa (hash: Iku7tb8SAQIhEvwkUVsI01KnPzpIZ553w7v11/ErUtM=)
5: 3231302e3234372e3235312e302f32342d3234203d3e20313331373435.roa (hash: P6u7QjpJVBQpJpJ2dL4GKUXqC1XLtlIwog/7NL3QJe0=)
6: 3231302e3234372e3235332e302f32342d3234203d3e20313331373435.roa (hash: SDQ6xpzFoeg0lTwEJkVJ2YC5ntC/O8NvcqwJeEYUXmo=)
7: 3231302e3234372e3234362e302f32342d3234203d3e20313331373435.roa (hash: FN3CKjxRonayrnINYbudYXLP7jZ9/YnqEvFYbd9U1hM=)
8: 3231302e3234372e3235322e302f32342d3234203d3e20313331373435.roa (hash: 0G3umGSNIafLUyMMJjc+XpTQjFcLRIMU7BoomAPsjew=)
9: 3231302e3234372e3235352e302f32342d3234203d3e20313331373435.roa (hash: RS4Z5hPliFofbuZy6siMGSvvq53kTGe3aDopkAMtX7s=)
10: 3231302e3234372e3234312e302f32342d3234203d3e20313430343035.roa (hash: M3nv0mC0g0dVK72c2OJ01BOoKTGk3r0NAIb60MF1lcw=)
11: 3231302e3234372e3234392e302f32342d3234203d3e20313331373435.roa (hash: 4G4aZfFUqaHECTTNNiBKb2BiuB7CRoLOY6G0O5P5Xsk=)
12: 3231302e3234372e3235342e302f32342d3234203d3e20313331373435.roa (hash: 8bH62zhwf0kgF3amh047ZVAlbr2i3orRPBn9qkRCMJk=)
13: 3231302e3234372e3234382e302f32342d3234203d3e20313331373435.roa (hash: fEAII0Y1Y5OrJRrreDOapy9Xzh9eNqz/FB7+aD7tXRA=)
14: 3231302e3234372e3235302e302f32342d3234203d3e20313331373435.roa (hash: UaBtRg3Pe7eF6qAh+L1uU3ib10+G/2GiDGDbWzNrJJQ=)
15: 3231302e3234372e3234302e302f32342d3234203d3e20313331373435.roa (hash: 6Xt6BmWqNlJ2rgGnrh/8HdtB+svaXm043WhGiQr8wxY=)
16: 34392e3132382e3138342e302f32322d3234203d3e20313331373435.roa (hash: b1YIXb394hbQaEvgUpDDWq1EiTyAhc+KvTRls7LdNdE=)
17: 8AFEBB51D00C8E06AAEA842E0C0CFFC2CAB9610F.crl (hash: RdNLyUx+7jmfslZ1blqeOIcoymsqFNloGRahG7jPP+o=)
18: 3231302e3234372e3234322e302f32342d3234203d3e20313331373435.roa (hash: D991UEHbv0mT0xjDcSLCu5iaTm6ib67YwDcjKkL5vPw=)
19: 3231302e3234372e3234352e302f32342d3234203d3e20313331373435.roa (hash: kHHBOgtxtA2O4NSmNMgW2PeMrc26bvv8HtnzwONr0bg=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
68:e1:4b:f0:87:71:8a:cc:c7:13:3b:f7:2c:2a:09:0d:d0:8d:c8:ca
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8AFEBB51D00C8E06AAEA842E0C0CFFC2CAB9610F
Validity
Not Before: Apr 28 07:58:11 2026 GMT
Not After : May 1 12:49:11 2026 GMT
Subject: CN=592ABB49E6DF728A2B0DF8D19F7FBE55B37B0D66
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:aa:78:d2:2c:ce:70:ff:36:c5:ce:6a:ac:35:0c:
cf:dc:34:fe:a0:9d:e3:db:f3:8a:11:4a:e4:8e:cf:
45:ef:bc:d9:d2:7f:2b:1e:0c:7d:23:4a:fc:f8:62:
95:a2:97:f7:e3:fc:ef:df:62:22:f3:6f:8a:0e:e0:
e2:dc:f3:74:6b:24:84:1f:85:ab:bf:79:09:bc:2e:
91:db:1e:05:5e:f6:2c:1a:56:7f:a3:60:51:6d:e7:
ef:0a:9f:70:c1:ba:32:84:87:88:8b:ee:42:4c:c2:
0e:0c:84:8f:82:e9:14:0b:40:e8:40:5c:44:3c:11:
9d:d0:c4:85:73:5e:4a:6f:7f:48:ba:31:14:e0:2f:
31:ad:76:d0:d5:05:70:33:3c:ee:9e:49:aa:46:16:
9b:f6:93:5d:0a:4f:87:6f:33:1a:85:b4:43:56:f7:
40:c9:c5:64:48:81:58:c2:fb:9f:fc:45:08:07:97:
69:9a:9e:68:cf:fe:ae:4c:4e:86:a4:81:2b:a9:da:
e1:04:fe:87:f5:43:ab:d1:3e:19:e9:ee:d1:55:00:
a7:32:a9:b0:79:e9:18:6e:34:96:14:d2:c2:fb:c0:
e4:f9:d7:26:99:7e:f7:41:e6:4f:c1:51:e6:bc:4a:
fd:d1:6a:60:54:f5:5c:12:ae:67:04:03:d2:8d:39:
65:b5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
59:2A:BB:49:E6:DF:72:8A:2B:0D:F8:D1:9F:7F:BE:55:B3:7B:0D:66
X509v3 Authority Key Identifier:
keyid:8A:FE:BB:51:D0:0C:8E:06:AA:EA:84:2E:0C:0C:FF:C2:CA:B9:61:0F
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://repo-rpki.idnic.net/repo/96124329-ec20-4460-ac31-9c36cf94f3fb/0/8AFEBB51D00C8E06AAEA842E0C0CFFC2CAB9610F.crl
Authority Information Access:
CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/8AFEBB51D00C8E06AAEA842E0C0CFFC2CAB9610F.cer
Subject Information Access:
Signed Object - URI:rsync://repo-rpki.idnic.net/repo/96124329-ec20-4460-ac31-9c36cf94f3fb/0/8AFEBB51D00C8E06AAEA842E0C0CFFC2CAB9610F.mft
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
43:ad:e2:73:f8:bd:35:9f:61:bb:e3:7d:ab:7a:01:94:3d:4c:
8c:4f:2b:8d:9a:ba:06:28:5d:ca:eb:b3:ce:fb:3f:41:eb:7d:
a4:9b:8d:1d:b5:5f:18:7b:20:6d:a8:4f:8f:19:44:66:fa:9f:
8a:c6:bc:49:ca:c1:58:e0:5f:1e:d5:60:9c:90:67:60:7c:3f:
9a:17:b9:7e:77:b1:77:94:c0:e6:60:d7:06:19:f7:85:e0:fb:
9b:a2:a5:99:9b:97:2b:c5:9c:c1:25:81:3c:ef:87:a4:f1:03:
bb:1e:61:be:19:d8:1f:35:52:41:68:ed:14:68:80:0a:51:83:
13:83:58:ff:aa:a0:36:03:11:ba:07:cc:74:a4:39:bc:d4:1c:
32:6a:b8:34:ed:71:26:d3:3c:59:5f:fb:de:46:83:40:2b:69:
6a:a2:bc:b5:6e:56:c0:43:62:4e:37:48:e5:ef:7e:4b:60:7a:
2c:7a:d0:47:8e:18:92:fe:c2:f8:bd:92:b4:65:4c:f6:e0:f8:
43:76:d2:f4:28:83:43:1d:32:39:99:2e:5c:1f:40:43:61:a4:
9f:7d:33:ee:f4:c9:b6:3d:e5:59:b6:98:04:9c:fb:7a:40:49:
aa:84:48:e5:20:8d:a5:0b:c1:26:35:37:65:b6:10:67:31:0e:
48:b9:78:0b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jun 3 03:12:05 2026 by rpki-client