Manifest
$ rpki-client -vvf repo-rpki.idnic.net/repo/a4fe1811-c03f-49d8-9217-13ff22a31ebe/0/AFDFD5D1C4B39F2FAABBA5BC15234C2B1243BFFB.mft
File: AFDFD5D1C4B39F2FAABBA5BC15234C2B1243BFFB.mft (raw, json)
Hash identifier: yFQ1O0HCmeLsHfwsstoYswqQev3i4a+ZAzjwPhhF7B8=
Subject key identifier: 65:E5:72:00:FE:8F:6C:48:82:81:D5:0F:10:AF:66:88:C3:23:A8:09
Authority key identifier: AF:DF:D5:D1:C4:B3:9F:2F:AA:BB:A5:BC:15:23:4C:2B:12:43:BF:FB
Certificate issuer: /CN=AFDFD5D1C4B39F2FAABBA5BC15234C2B1243BFFB
Certificate serial: 5F52DB6B569DC68123045BFF790E63CDB1FA09AF
Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/AFDFD5D1C4B39F2FAABBA5BC15234C2B1243BFFB.cer
Subject info access: rsync://repo-rpki.idnic.net/repo/a4fe1811-c03f-49d8-9217-13ff22a31ebe/0/AFDFD5D1C4B39F2FAABBA5BC15234C2B1243BFFB.mft
Manifest number: 041A
Signing time: Tue 28 Apr 2026 22:21:44 +0000
Manifest this update: Tue 28 Apr 2026 22:16:44 +0000
Manifest next update: Fri 01 May 2026 23:57:44 +0000
Files and hashes: 1: AFDFD5D1C4B39F2FAABBA5BC15234C2B1243BFFB.crl (hash: ENwlf8E3dAms3zVGC2wW9Sz8igpdreCmeHkoheWYV3w=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
5f:52:db:6b:56:9d:c6:81:23:04:5b:ff:79:0e:63:cd:b1:fa:09:af
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=AFDFD5D1C4B39F2FAABBA5BC15234C2B1243BFFB
Validity
Not Before: Apr 28 22:16:44 2026 GMT
Not After : May 1 23:57:44 2026 GMT
Subject: CN=65E57200FE8F6C488281D50F10AF6688C323A809
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:95:65:29:a6:f0:51:b7:23:98:03:0d:3c:ef:c6:
87:4c:dc:ed:56:17:b4:fe:73:65:17:e1:07:bd:ac:
c4:2f:2c:d1:9d:22:2f:36:ef:8e:7b:ff:b8:e4:9b:
da:e1:14:1e:23:98:9f:d0:00:f3:69:3c:a4:7f:e1:
47:d5:04:64:23:eb:6f:4e:94:10:dd:d4:27:ee:36:
e5:11:3a:35:fb:e0:25:d6:2a:89:1e:bc:11:42:cb:
2d:be:70:3e:eb:19:dc:34:aa:b4:fa:66:72:e1:5f:
48:b8:b6:c0:3e:d4:6f:5f:5b:94:da:f4:a6:88:1f:
5f:2b:1e:01:ba:74:a6:23:91:3e:3a:be:ac:bd:7d:
08:0a:45:f1:37:cd:29:f3:f8:aa:21:0b:b1:45:37:
af:20:68:78:ce:21:21:bd:91:b4:eb:d4:68:bb:09:
f4:6b:21:b8:58:09:e8:5b:3c:ef:2f:39:5e:ce:a4:
50:2a:97:a4:b8:e3:a4:de:87:5e:11:32:5f:fa:64:
ed:56:de:d4:0b:56:10:f3:fc:01:39:07:33:fa:28:
3a:df:d7:97:6f:ed:aa:55:0f:6f:73:95:6a:0a:b6:
4e:4a:ca:7d:85:ef:6b:49:d5:17:c7:5f:ce:fd:cf:
2b:1c:1c:df:da:85:e9:bb:97:6c:4d:16:79:fa:31:
96:7f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
65:E5:72:00:FE:8F:6C:48:82:81:D5:0F:10:AF:66:88:C3:23:A8:09
X509v3 Authority Key Identifier:
keyid:AF:DF:D5:D1:C4:B3:9F:2F:AA:BB:A5:BC:15:23:4C:2B:12:43:BF:FB
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://repo-rpki.idnic.net/repo/a4fe1811-c03f-49d8-9217-13ff22a31ebe/0/AFDFD5D1C4B39F2FAABBA5BC15234C2B1243BFFB.crl
Authority Information Access:
CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/AFDFD5D1C4B39F2FAABBA5BC15234C2B1243BFFB.cer
Subject Information Access:
Signed Object - URI:rsync://repo-rpki.idnic.net/repo/a4fe1811-c03f-49d8-9217-13ff22a31ebe/0/AFDFD5D1C4B39F2FAABBA5BC15234C2B1243BFFB.mft
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
55:4b:92:a2:f8:df:18:86:81:d5:52:6a:e9:6a:a1:db:55:6f:
fd:fe:52:da:a0:22:aa:8c:10:4d:a9:89:1e:69:2d:66:6a:f3:
b7:e0:58:63:ef:7a:c8:d8:6a:26:12:62:aa:5f:b8:6e:29:e2:
4d:35:09:7d:25:ea:5f:0e:d9:73:bc:37:47:c2:d0:77:fc:fb:
e0:61:30:14:1d:24:e0:f1:de:8b:e4:66:ea:28:1f:ef:92:81:
66:27:aa:6b:04:d9:66:00:5c:11:51:8b:61:7b:ac:99:e3:73:
70:5b:98:ca:95:00:b0:85:05:dd:94:1c:fe:51:d6:f8:a7:98:
16:1c:39:fe:0c:39:97:6c:70:d6:cb:73:97:5b:b3:4e:cb:eb:
fc:3d:e4:a5:4a:a1:32:67:28:e9:17:67:a4:c7:96:a9:90:14:
5a:5e:99:d4:74:f3:3c:ac:9f:e7:b2:7b:a7:c7:07:8f:d3:fe:
36:5b:19:53:dd:bb:4a:15:15:aa:5e:88:27:2a:61:96:f6:12:
42:21:2b:39:4a:12:b1:32:e5:21:20:60:4f:3b:f8:e6:e8:2f:
52:15:42:a4:36:51:74:50:56:ec:34:86:8d:43:e8:32:20:6c:
9d:d7:6d:1b:fb:46:f4:fa:a4:83:0c:b6:cb:14:17:60:0b:f4:
e3:c3:97:53
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jun 3 03:08:49 2026 by rpki-client